This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/FLemcIiElnlySDQ8j4MbhOGXKNY.roa File: FLemcIiElnlySDQ8j4MbhOGXKNY.roa (raw, json) Hash identifier: +hFqqy7o9aLIrhPQ+Vl9O2F3JN7zKRwx0wl2/DYV2As= Subject key identifier: 14:B7:A6:70:88:84:96:79:72:48:34:3C:8F:83:1B:84:E1:97:28:D6 Certificate issuer: /CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9 Certificate serial: 019B7BA32C944B3F992202818F811981D4C2 Authority key identifier: 8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/FLemcIiElnlySDQ8j4MbhOGXKNY.roa Signing time: Thu 01 Jan 2026 22:17:29 +0000 ROA not before: Thu 01 Jan 2026 22:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 45.92.118.0/24 maxlen: 24 194.28.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:2c:94:4b:3f:99:22:02:81:8f:81:19:81:d4:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9 Validity Not Before: Jan 1 22:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14b7a670888496797248343c8f831b84e19728d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d5:df:d4:db:a0:0b:f2:58:13:23:93:d6:36: fa:6a:01:72:85:aa:da:00:f6:cd:71:7b:40:43:9c: 90:a3:d4:ad:76:48:c0:28:e3:39:1c:95:d9:e8:e7: 86:33:8b:8b:20:c0:fa:d5:f3:45:cd:dc:b3:d4:a8: c6:4f:08:d6:e7:05:ff:f5:ce:86:0f:f2:3e:c5:71: 1a:1b:eb:ac:60:3b:d0:fc:34:48:b2:c3:b8:28:33: ff:f2:64:ee:c6:8a:19:76:18:16:77:6a:05:ce:e4: 5a:9f:05:a9:b3:19:c7:dc:3b:10:83:6a:5a:6f:a7: e5:a6:fe:52:f7:29:69:4c:1b:ba:6b:ef:7b:23:c8: be:69:87:89:01:5d:c4:05:28:79:8a:0c:1d:65:bf: 48:a3:fc:af:75:c2:cf:af:54:04:4a:84:f1:13:cf: 7e:46:99:9c:0a:02:c2:99:01:86:01:22:41:8f:9d: 2f:cd:10:b4:09:b8:c4:85:94:4f:5c:74:c3:b9:05: c6:d1:95:72:80:2b:f5:48:06:f9:68:6d:f6:c8:0c: ab:d4:32:4d:b4:8c:af:63:18:a0:10:16:29:1c:24: b2:d0:b2:b5:45:6f:e6:38:f6:f2:68:62:6c:20:b7: 83:2e:87:a4:4f:a5:96:64:3c:1d:55:8d:95:f7:f9: 09:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B7:A6:70:88:84:96:79:72:48:34:3C:8F:83:1B:84:E1:97:28:D6 X509v3 Authority Key Identifier: keyid:8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/FLemcIiElnlySDQ8j4MbhOGXKNY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.118.0/24 194.28.46.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:a2:12:c4:1e:77:7b:15:c9:a4:61:b3:e4:4d:25:33:2e:c5: 18:e8:82:63:77:10:fe:6f:32:5e:0a:35:52:a9:5e:73:16:d3: 35:7b:1b:f0:91:98:e2:bf:c9:91:30:1e:67:b1:66:93:25:f6: 07:b3:88:5c:89:93:32:7e:99:be:28:a7:e3:04:4b:3e:f9:f6: b1:d4:06:ad:73:eb:6b:43:c9:e1:c7:26:4c:39:9b:d1:94:8c: fc:37:69:7d:e4:d1:53:9f:55:f1:af:29:c0:cd:d2:2f:17:ca: d6:c0:64:e2:a1:d9:15:73:58:18:f5:52:dd:5c:13:ce:5c:de: e3:61:33:33:92:ac:eb:3b:92:de:4f:40:af:2a:08:f6:9f:63: 82:3e:24:30:28:31:e8:71:fb:bf:d2:35:bf:d5:94:f1:ac:07: b2:80:bc:71:ff:45:79:73:c1:6b:a3:92:19:ae:14:16:4e:a6: 2e:30:90:a9:84:24:43:0c:7b:13:86:34:e9:bc:06:f8:8b:0e: 32:f8:a1:04:09:22:25:f4:0a:76:b2:9c:75:ac:22:ee:0d:bf: 29:09:60:ac:bf:a8:ad:37:c1:72:20:5e:ba:a7:22:09:6e:c6: be:3b:ab:dd:72:ae:35:45:fb:3e:ea:f9:7e:76:93:50:12:58: 33:96:bf:d5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7oyyUSz+ZIgKBj4EZgdTCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOTFlMGExMDRiNWIzZGRmMWY1ZDA4ZTdhY2IyYjc5ZTBk NTY2ZjkwHhcNMjYwMTAxMjIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGI3YTY3MDg4ODQ5Njc5NzI0ODM0M2M4ZjgzMWI4NGUxOTcyOGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdXf1NugC/JYEyOT1jb6agFyhara APbNcXtAQ5yQo9StdkjAKOM5HJXZ6OeGM4uLIMD61fNFzdyz1KjGTwjW5wX/9c6G D/I+xXEaG+usYDvQ/DRIssO4KDP/8mTuxooZdhgWd2oFzuRanwWpsxnH3DsQg2pa b6flpv5S9ylpTBu6a+97I8i+aYeJAV3EBSh5igwdZb9Io/yvdcLPr1QESoTxE89+ RpmcCgLCmQGGASJBj50vzRC0CbjEhZRPXHTDuQXG0ZVygCv1SAb5aG32yAyr1DJN tIyvYxigEBYpHCSy0LK1RW/mOPbyaGJsILeDLoekT6WWZDwdVY2V9/kJlQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBS3pnCIhJZ5ckg0PI+DG4ThlyjWMB8GA1UdIwQY MBaAFIuR4KEEtbPd8fXQjnrLK3ng1Wb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTVIZ29RUzFzOTN4OWRDT2Vzc3JlZURWWnZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9kZmJmYzQtY2MzZi00NzdjLThkNzYt YThjNTc2MjI0YmEyLzEvRkxlbWNJaUVsbmx5U0RROGo0TWJoT0dYS05ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9kZmJmYzQtY2MzZi00NzdjLThkNzYtYThjNTc2MjI0YmEy LzEvaTVIZ29RUzFzOTN4OWRDT2Vzc3JlZURWWnZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVx2AwQB whwuMA0GCSqGSIb3DQEBCwUAA4IBAQAMohLEHnd7FcmkYbPkTSUzLsUY6IJjdxD+ bzJeCjVSqV5zFtM1exvwkZjiv8mRMB5nsWaTJfYHs4hciZMyfpm+KKfjBEs++fax 1Aatc+trQ8nhxyZMOZvRlIz8N2l95NFTn1XxrynAzdIvF8rWwGTiodkVc1gY9VLd XBPOXN7jYTMzkqzrO5LeT0CvKgj2n2OCPiQwKDHocfu/0jW/1ZTxrAeygLxx/0V5 c8Fro5IZrhQWTqYuMJCphCRDDHsThjTpvAb4iw4y+KEECSIl9Ap2spx1rCLuDb8p CWCsv6itN8FyIF66pyIJbsa+O6vdcq41Rfs+6vl+dpNQElgzlr/V -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:40 2026 by rpki-client