This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/FerkNmRdMMqBAxxCWnxbdwDF0fM.roa File: FerkNmRdMMqBAxxCWnxbdwDF0fM.roa (raw, json) Hash identifier: X4J4aibstvyyZ1dw044vF6xHdgTuovNe6IxPq/bGSrQ= Subject key identifier: 15:EA:E4:36:64:5D:30:CA:81:03:1C:42:5A:7C:5B:77:00:C5:D1:F3 Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 019B7AC7EAB1DA5DC726091A1DD96A414BEA Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/FerkNmRdMMqBAxxCWnxbdwDF0fM.roa Signing time: Thu 01 Jan 2026 18:18:00 +0000 ROA not before: Thu 01 Jan 2026 18:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152179 IP address blocks: 80.174.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 05:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ea:b1:da:5d:c7:26:09:1a:1d:d9:6a:41:4b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Jan 1 18:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15eae436645d30ca81031c425a7c5b7700c5d1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8a:ea:32:c4:fb:90:37:de:51:0a:db:98:69: 49:59:b6:3d:d7:a1:aa:60:b9:3c:60:86:1b:76:01: ae:e5:db:68:62:f8:cd:9c:bd:45:e0:ce:7c:89:d2: f9:f1:cf:39:1d:49:91:dc:fc:6c:bf:4b:1d:12:cb: b5:8e:5f:f1:c4:64:9a:e5:ff:dc:55:92:cb:48:c8: 98:23:28:a7:45:b1:75:e4:f1:dd:ef:99:e6:16:41: 96:7f:db:52:85:f9:a8:e9:d5:db:bb:e5:31:a2:c2: 77:56:b3:89:a3:91:85:59:d6:90:c9:49:0f:bc:01: 9f:c9:a0:39:47:38:0f:56:79:64:be:ce:bf:ac:d9: 65:d9:a7:cc:96:81:1a:84:6b:94:b0:50:66:fa:c5: b5:10:8e:6e:e2:bf:0e:ce:30:68:98:2e:63:03:26: 48:50:fa:6d:e1:44:ed:fb:5e:f0:98:6a:36:59:29: 88:62:c6:22:1e:8f:4e:8f:47:c8:5f:9c:6c:da:2f: c2:49:19:3d:bb:8b:25:26:67:82:d2:9b:1a:cc:01: 2d:1a:4a:21:f1:1d:85:09:ac:d5:be:5a:ff:bb:2d: 1a:42:33:b8:d5:da:19:07:51:ff:10:6e:76:70:01: bb:f0:6e:4c:dc:7d:e1:e9:a5:5f:da:ff:cf:05:24: d2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:EA:E4:36:64:5D:30:CA:81:03:1C:42:5A:7C:5B:77:00:C5:D1:F3 X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/FerkNmRdMMqBAxxCWnxbdwDF0fM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.174.110.0/23 Signature Algorithm: sha256WithRSAEncryption 36:59:57:1e:9c:af:b5:a8:3a:ba:00:fe:2e:81:60:f8:bc:8b: 36:be:0b:6e:f8:b8:82:e4:a2:4f:b8:2f:a0:23:f6:f9:91:a6: f0:e3:0f:7a:1e:c4:dc:bd:6f:d0:32:b2:e4:f5:43:9c:f6:fe: 73:c9:9a:2c:e8:c4:05:8d:d7:13:8a:59:ce:79:98:01:2b:83: 34:1d:eb:2e:cc:6c:d8:7d:cb:52:57:76:8d:37:cb:fa:50:47: 4b:f0:1a:11:52:b4:6f:7a:54:45:37:ab:df:46:9f:c2:36:b9: 64:05:c6:0b:1f:ad:88:c4:d6:99:de:1f:dd:89:96:f1:95:39: 57:e0:1a:a7:3f:1f:24:37:30:4e:44:48:f0:54:38:00:24:db: 48:52:4e:4f:9e:ab:ea:8a:e1:f3:28:3f:fb:73:62:90:2a:2e: e1:d7:ff:b7:1a:72:31:8a:2b:a2:48:06:bc:f4:a0:5c:b4:0e: 4e:76:b2:cd:bb:dd:c4:85:78:ca:c0:21:e8:c7:ac:f4:d2:c2: 32:5d:19:78:52:21:11:96:d8:ef:c5:d4:0f:d1:28:63:a3:17: 27:a7:73:34:06:44:db:6f:bc:d4:e0:bf:27:c8:98:a1:1f:0f: c6:bf:f5:1e:e5:80:62:b6:ca:9d:45:cf:a1:41:20:ab:1b:9b: f1:f8:f7:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x+qx2l3HJgkaHdlqQUvqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjYwMTAxMTgxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWVhZTQzNjY0NWQzMGNhODEwMzFjNDI1YTdjNWI3NzAwYzVkMWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0orqMsT7kDfeUQrbmGlJWbY916Gq YLk8YIYbdgGu5dtoYvjNnL1F4M58idL58c85HUmR3Pxsv0sdEsu1jl/xxGSa5f/c VZLLSMiYIyinRbF15PHd75nmFkGWf9tShfmo6dXbu+UxosJ3VrOJo5GFWdaQyUkP vAGfyaA5RzgPVnlkvs6/rNll2afMloEahGuUsFBm+sW1EI5u4r8OzjBomC5jAyZI UPpt4UTt+17wmGo2WSmIYsYiHo9Oj0fIX5xs2i/CSRk9u4slJmeC0psazAEtGkoh 8R2FCazVvlr/uy0aQjO41doZB1H/EG52cAG78G5M3H3h6aVf2v/PBSTS6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBXq5DZkXTDKgQMcQlp8W3cAxdHzMB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEvRmVya05tUmRNTXFCQXh4Q1dueGJkd0RGMGZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUK5uMA0G CSqGSIb3DQEBCwUAA4IBAQA2WVcenK+1qDq6AP4ugWD4vIs2vgtu+LiC5KJPuC+g I/b5kabw4w96HsTcvW/QMrLk9UOc9v5zyZos6MQFjdcTilnOeZgBK4M0HesuzGzY fctSV3aNN8v6UEdL8BoRUrRvelRFN6vfRp/CNrlkBcYLH62IxNaZ3h/diZbxlTlX 4BqnPx8kNzBOREjwVDgAJNtIUk5PnqvqiuHzKD/7c2KQKi7h1/+3GnIxiiuiSAa8 9KBctA5OdrLNu93EhXjKwCHox6z00sIyXRl4UiERltjvxdQP0Shjoxcnp3M0BkTb b7zU4L8nyJihHw/Gv/Ue5YBitsqdRc+hQSCrG5vx+Pev -----END CERTIFICATE-----Generated at Mon Jan 19 11:17:16 2026 by rpki-client