This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/FxDYh-H5vzMGkKOjAtjIRk5b_E8.roa File: FxDYh-H5vzMGkKOjAtjIRk5b_E8.roa (raw, json) Hash identifier: r/kaZb9DIyXkcq115EsvWd63BomYksvgYorP1CzK3Ow= Subject key identifier: 17:10:D8:87:E1:F9:BF:33:06:90:A3:A3:02:D8:C8:46:4E:5B:FC:4F Certificate issuer: /CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49 Certificate serial: 019B775949C23D12D7CAA7B8791248663C90 Authority key identifier: D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/FxDYh-H5vzMGkKOjAtjIRk5b_E8.roa Signing time: Thu 01 Jan 2026 02:18:18 +0000 ROA not before: Thu 01 Jan 2026 02:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207948 IP address blocks: 185.1.149.0/24 maxlen: 24 2001:7f8:e3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:49:c2:3d:12:d7:ca:a7:b8:79:12:48:66:3c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49 Validity Not Before: Jan 1 02:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1710d887e1f9bf330690a3a302d8c8464e5bfc4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c8:0f:6e:e1:9e:17:0a:5f:66:98:bf:a4:12: 34:79:30:d5:55:c7:c1:55:a5:16:85:fd:17:17:f7: 2f:cd:a8:e7:8f:1e:d2:09:80:e5:19:72:83:99:18: 6c:8b:92:6a:af:07:a4:74:89:f1:48:ae:6c:e6:ba: 49:08:13:d8:63:bc:17:d6:5b:49:9b:67:b5:88:9b: 0b:8c:85:57:e2:48:f7:c4:f2:44:12:60:b8:f2:20: 0d:82:99:b7:8e:87:4d:bd:54:6a:94:5c:7e:74:87: e5:c0:eb:98:70:ff:f6:fd:f9:e6:0e:40:e4:e8:06: 8e:a2:5f:fa:b4:46:25:4e:25:38:64:a8:38:60:79: 23:32:2c:90:d8:47:31:7f:db:9c:d5:ae:e7:1d:b2: b9:0a:d5:c5:63:22:0b:f6:02:62:85:18:0d:5c:9d: 27:6e:82:28:e2:9c:c0:53:9c:c7:09:e3:ca:05:d8: 89:ed:03:28:9d:d4:7a:02:0f:9e:8c:31:d6:59:8f: 0b:40:63:17:b3:00:80:2c:b6:21:11:29:29:20:5c: e8:1a:cb:77:59:be:87:a7:f4:96:df:73:f7:00:97: 77:cb:8d:45:ec:b3:15:6d:54:18:3a:2b:2e:f6:0f: 69:ba:e5:ab:e1:d9:87:e0:39:54:ca:95:c0:9b:37: 91:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:10:D8:87:E1:F9:BF:33:06:90:A3:A3:02:D8:C8:46:4E:5B:FC:4F X509v3 Authority Key Identifier: keyid:D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/FxDYh-H5vzMGkKOjAtjIRk5b_E8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.149.0/24 IPv6: 2001:7f8:e3::/48 Signature Algorithm: sha256WithRSAEncryption 07:11:0f:54:ca:d1:a0:06:47:73:3d:73:37:44:67:a0:fe:3b: 4b:f7:96:56:16:d3:05:bd:fc:e8:13:eb:a0:83:de:06:a2:45: 42:de:38:3f:ba:cf:5d:ea:55:ca:e9:75:2b:ca:61:ff:a8:a1: 94:a9:e4:01:fe:8b:4d:03:2d:e1:72:a8:9c:f4:9b:9a:2f:d1: c8:2c:76:69:c1:6e:76:f7:35:4c:3a:ec:d3:c9:15:1b:eb:88: 08:3c:82:05:4e:87:96:32:6c:ae:bc:ea:17:6e:09:13:0a:b6: 46:86:b5:c9:49:c8:f9:22:34:ee:90:51:c6:8d:77:26:59:e9: 84:d7:e0:f8:ec:a7:e0:50:26:7e:96:6a:59:46:01:5a:97:37: f9:da:52:77:5d:69:2b:60:dd:99:8f:87:48:ff:4a:df:6d:8e: cc:9e:ee:22:3c:dd:cd:8d:bd:ef:70:fc:3c:17:d6:30:ac:67: 23:d2:be:47:06:86:3e:16:cc:83:c5:52:41:f0:8a:68:8d:71: 38:36:98:13:27:10:4c:b5:24:e4:17:ce:13:bb:64:96:d3:23: 28:18:03:93:7f:c7:f5:fb:9c:ee:38:95:52:ec:77:8f:8e:c0: a2:0a:51:bb:e4:c0:b2:e8:bb:e8:78:b9:c0:88:08:5d:20:5e: 64:51:cf:72 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3WUnCPRLXyqe4eRJIZjyQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YjIzMmFhMjQzMWNhNGRlNWQ4MjUyYTNjOWNjNmJiNjMw ZDFkNDkwHhcNMjYwMTAxMDIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzEwZDg4N2UxZjliZjMzMDY5MGEzYTMwMmQ4Yzg0NjRlNWJmYzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMgPbuGeFwpfZpi/pBI0eTDVVcfB VaUWhf0XF/cvzajnjx7SCYDlGXKDmRhsi5JqrwekdInxSK5s5rpJCBPYY7wX1ltJ m2e1iJsLjIVX4kj3xPJEEmC48iANgpm3jodNvVRqlFx+dIflwOuYcP/2/fnmDkDk 6AaOol/6tEYlTiU4ZKg4YHkjMiyQ2Ecxf9uc1a7nHbK5CtXFYyIL9gJihRgNXJ0n boIo4pzAU5zHCePKBdiJ7QMondR6Ag+ejDHWWY8LQGMXswCALLYhESkpIFzoGst3 Wb6Hp/SW33P3AJd3y41F7LMVbVQYOisu9g9puuWr4dmH4DlUypXAmzeRPQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBcQ2Ifh+b8zBpCjowLYyEZOW/xPMB8GA1UdIwQY MBaAFNWyMqokMcpN5dglKjycxrtjDR1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWJJeXFpUXh5azNsMkNVcVBKekd1Mk1OSFVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yZmY4Y2MtMzMxNS00M2VlLWI4OTgt N2VhNTkyZjliMjllLzEvRnhEWWgtSDV2ek1Ha0tPakF0aklSazViX0U4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yZmY4Y2MtMzMxNS00M2VlLWI4OTgtN2VhNTkyZjliMjll LzEvMWJJeXFpUXh5azNsMkNVcVBKekd1Mk1OSFVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQGVMA8E AgACMAkDBwAgAQf4AOMwDQYJKoZIhvcNAQELBQADggEBAAcRD1TK0aAGR3M9czdE Z6D+O0v3llYW0wW9/OgT66CD3gaiRULeOD+6z13qVcrpdSvKYf+ooZSp5AH+i00D LeFyqJz0m5ov0cgsdmnBbnb3NUw67NPJFRvriAg8ggVOh5YybK686hduCRMKtkaG tclJyPkiNO6QUcaNdyZZ6YTX4Pjsp+BQJn6WallGAVqXN/naUnddaStg3ZmPh0j/ St9tjsye7iI83c2Nve9w/DwX1jCsZyPSvkcGhj4WzIPFUkHwimiNcTg2mBMnEEy1 JOQXzhO7ZJbTIygYA5N/x/X7nO44lVLsd4+OwKIKUbvkwLLou+h4ucCICF0gXmRR z3I= -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:14 2026 by rpki-client