This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/FArXL1JBxBIhbGVrwaflCucFOq8.roa File: FArXL1JBxBIhbGVrwaflCucFOq8.roa (raw, json) Hash identifier: AOe3tdekyCDra8yyNdQxen9Bx4xuh6A4UvlcGwvAu1A= Subject key identifier: 14:0A:D7:2F:52:41:C4:12:21:6C:65:6B:C1:A7:E5:0A:E7:05:3A:AF Certificate issuer: /CN=736d724e239efb7f2f7bea526a9e0c5e7fc89bbe Certificate serial: 019B76EB1AB2CAEFAD07CDAB649E13165E59 Authority key identifier: 73:6D:72:4E:23:9E:FB:7F:2F:7B:EA:52:6A:9E:0C:5E:7F:C8:9B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/FArXL1JBxBIhbGVrwaflCucFOq8.roa Signing time: Thu 01 Jan 2026 00:17:57 +0000 ROA not before: Thu 01 Jan 2026 00:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42072 IP address blocks: 45.154.74.0/23 maxlen: 24 2a0f:b300:2000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.crl rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1a:b2:ca:ef:ad:07:cd:ab:64:9e:13:16:5e:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=736d724e239efb7f2f7bea526a9e0c5e7fc89bbe Validity Not Before: Jan 1 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=140ad72f5241c412216c656bc1a7e50ae7053aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f3:bb:ad:96:37:b6:0f:4c:5f:24:9b:55:fe: 30:3e:e1:ca:84:17:cd:d7:27:31:69:34:01:e6:92: 60:84:70:8d:68:b7:17:5c:60:20:ef:82:9d:ca:3a: de:d1:d2:df:85:34:8d:33:3b:92:69:eb:bf:f9:8d: 1a:47:94:22:c6:bd:f1:7c:4a:40:47:c0:82:29:89: 2a:b7:c9:02:f4:3e:98:75:58:3f:41:89:40:74:f8: 14:43:e2:f1:bc:6b:a6:d5:e5:e9:04:8a:9b:0b:61: 78:e6:b7:e0:8f:1e:6d:89:bb:b5:b2:36:96:61:c4: 85:c2:e6:62:59:04:0c:09:ae:41:0e:75:d7:8d:17: 90:b2:f1:02:ef:7d:aa:79:d3:ce:fa:08:39:29:71: ff:4f:00:32:e6:d7:35:0b:fb:09:9c:c7:6d:c5:46: 98:4c:93:08:d9:dd:dc:e3:e4:38:26:58:ff:f8:2b: 15:81:8f:3f:06:ef:39:d6:c5:83:3e:21:e4:72:ad: 49:87:9a:49:2f:84:47:d1:f6:87:62:b6:78:a5:9c: f7:85:0b:bf:de:07:00:8d:e3:a2:8b:83:86:f4:f9: 29:1d:58:ba:83:32:21:3f:0e:bd:ef:25:38:4d:7f: 4b:51:8d:f4:7f:54:4e:c1:6a:69:cb:f8:ac:37:0b: 1c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0A:D7:2F:52:41:C4:12:21:6C:65:6B:C1:A7:E5:0A:E7:05:3A:AF X509v3 Authority Key Identifier: keyid:73:6D:72:4E:23:9E:FB:7F:2F:7B:EA:52:6A:9E:0C:5E:7F:C8:9B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/FArXL1JBxBIhbGVrwaflCucFOq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.74.0/23 IPv6: 2a0f:b300:2000::/36 Signature Algorithm: sha256WithRSAEncryption 32:19:84:82:67:0e:2e:b2:26:1e:b0:4a:7f:cf:a0:88:51:90: 7b:de:01:82:66:7e:c1:78:4b:e7:1e:ad:1d:9c:4e:a4:5b:f6: 31:b4:2c:f9:e5:20:d5:65:61:d0:59:ad:af:da:6e:cb:4f:48: dc:cc:b2:1f:fc:f7:e5:1e:b6:f4:8d:af:ba:3b:ec:e0:64:ab: 0f:08:42:24:2f:52:6b:05:b4:ef:bf:fb:ca:41:fd:51:9b:0f: ce:34:ab:56:9f:f6:a5:fc:fc:dd:95:08:5d:d7:a9:c1:42:d5: f7:54:90:32:58:35:36:79:14:a3:e7:bd:8f:de:3b:42:58:78: f6:df:b1:94:47:85:22:ce:e0:ec:76:93:96:b6:3a:42:84:69: f3:58:89:be:b8:08:2b:1f:2a:62:1e:b5:74:2c:01:d7:bc:4a: 64:a4:72:41:d4:a9:fe:3f:fe:b5:6e:49:7c:ed:1d:e0:9e:7c: 59:bb:69:2e:42:6e:7e:b0:bf:2f:1b:55:62:e2:a4:38:d4:8c: dd:82:3b:6e:93:47:78:83:2e:d1:e4:be:18:7d:91:7d:b8:16: 29:0a:f7:21:5d:70:72:5f:a0:df:58:21:75:54:4e:d8:11:b0: 89:80:75:b4:21:e9:27:be:9d:d1:21:fb:9d:80:a3:b3:1d:d5: 8b:19:9a:85 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt26xqyyu+tB82rZJ4TFl5ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNmQ3MjRlMjM5ZWZiN2YyZjdiZWE1MjZhOWUwYzVlN2Zj ODliYmUwHhcNMjYwMTAxMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDBhZDcyZjUyNDFjNDEyMjE2YzY1NmJjMWE3ZTUwYWU3MDUzYWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvO7rZY3tg9MXySbVf4wPuHKhBfN 1ycxaTQB5pJghHCNaLcXXGAg74Kdyjre0dLfhTSNMzuSaeu/+Y0aR5Qixr3xfEpA R8CCKYkqt8kC9D6YdVg/QYlAdPgUQ+LxvGum1eXpBIqbC2F45rfgjx5tibu1sjaW YcSFwuZiWQQMCa5BDnXXjReQsvEC732qedPO+gg5KXH/TwAy5tc1C/sJnMdtxUaY TJMI2d3c4+Q4Jlj/+CsVgY8/Bu851sWDPiHkcq1Jh5pJL4RH0faHYrZ4pZz3hQu/ 3gcAjeOii4OG9PkpHVi6gzIhPw697yU4TX9LUY30f1ROwWppy/isNwscbQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFBQK1y9SQcQSIWxla8Gn5QrnBTqvMB8GA1UdIwQY MBaAFHNtck4jnvt/L3vqUmqeDF5/yJu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzIxeVRpT2UtMzh2ZS1wU2FwNE1Ybl9JbTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kZmMxMTAtNzkyNC00OWE5LTg1NjQt MGJlYmZjYmRlMWYzLzEvRkFyWEwxSkJ4QkloYkdWcndhZmxDdWNGT3E4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9kZmMxMTAtNzkyNC00OWE5LTg1NjQtMGJlYmZjYmRlMWYz LzEvYzIxeVRpT2UtMzh2ZS1wU2FwNE1Ybl9JbTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBLZpKMA4E AgACMAgDBgQqD7MAIDANBgkqhkiG9w0BAQsFAAOCAQEAMhmEgmcOLrImHrBKf8+g iFGQe94BgmZ+wXhL5x6tHZxOpFv2MbQs+eUg1WVh0Fmtr9puy09I3MyyH/z35R62 9I2vujvs4GSrDwhCJC9SawW077/7ykH9UZsPzjSrVp/2pfz83ZUIXdepwULV91SQ Mlg1NnkUo+e9j947Qlh49t+xlEeFIs7g7HaTlrY6QoRp81iJvrgIKx8qYh61dCwB 17xKZKRyQdSp/j/+tW5JfO0d4J58WbtpLkJufrC/LxtVYuKkONSM3YI7bpNHeIMu 0eS+GH2RfbgWKQr3IV1wcl+g31ghdVRO2BGwiYB1tCHpJ76d0SH7nYCjsx3Vixma hQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:38:02 2026 by rpki-client