This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/FXTyPwjMGAiU5KxW_Bfbg2AROHw.roa File: FXTyPwjMGAiU5KxW_Bfbg2AROHw.roa (raw, json) Hash identifier: OnE+aJgFklXNXWETHHDMbnfVlcK0uF/bBVveHl9Em7A= Subject key identifier: 15:74:F2:3F:08:CC:18:08:94:E4:AC:56:FC:17:DB:83:60:11:38:7C Certificate issuer: /CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438 Certificate serial: 019BDB9608B632A695CF3325FB7C48D806EC Authority key identifier: C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/FXTyPwjMGAiU5KxW_Bfbg2AROHw.roa Signing time: Tue 20 Jan 2026 13:26:41 +0000 ROA not before: Tue 20 Jan 2026 13:26:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204433 IP address blocks: 209.162.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:96:08:b6:32:a6:95:cf:33:25:fb:7c:48:d8:06:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438 Validity Not Before: Jan 20 13:26:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1574f23f08cc180894e4ac56fc17db836011387c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6a:7d:8c:97:fc:5d:4f:39:98:1c:b9:5b:61: fd:91:93:aa:d6:83:72:85:e9:ae:bf:ae:43:ae:5d: d2:6e:02:9b:7e:d1:8c:36:7e:71:57:d0:38:7a:82: 47:8d:27:40:e3:a4:b4:42:00:61:0d:3f:06:86:1b: 7f:dd:87:94:c2:e0:d3:b6:23:c0:24:9b:15:8f:70: d0:a7:52:81:46:7e:9e:b1:53:97:dd:2a:a8:d3:ea: 25:b9:77:c1:f2:45:63:a4:0a:62:99:02:35:fb:31: e5:e2:f8:19:d3:f6:85:33:b4:83:69:5c:f7:fe:d3: 49:cf:65:ca:41:c6:b1:48:35:14:c3:58:3b:50:16: 66:b4:7b:3c:fb:c7:cd:01:3f:1a:e5:7f:e6:61:6f: 80:0b:6b:2b:22:d0:3c:2e:bc:bc:30:04:00:90:fd: 6c:7e:8d:23:26:fe:ac:82:65:ab:ea:ab:3d:48:70: 05:57:e7:ca:45:fb:cd:2b:02:ff:87:fa:e6:ef:ba: a7:7b:f3:b1:68:8f:e4:21:a2:40:0e:79:10:90:33: 4e:e1:ae:d7:1a:d5:cb:71:bb:7c:3e:b3:03:c0:db: 51:51:e8:33:23:64:e6:26:81:38:d6:7d:88:4a:5b: 94:47:1b:df:f0:da:3a:4e:ad:db:2a:04:36:4f:50: 28:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:74:F2:3F:08:CC:18:08:94:E4:AC:56:FC:17:DB:83:60:11:38:7C X509v3 Authority Key Identifier: keyid:C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/FXTyPwjMGAiU5KxW_Bfbg2AROHw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.162.200.0/24 Signature Algorithm: sha256WithRSAEncryption ac:c9:b3:27:76:6d:93:31:c6:43:4b:6d:82:69:49:0b:85:86: cc:9c:e8:a2:2c:0c:67:2f:e9:67:56:63:c3:c3:80:75:ed:65: 16:9e:3e:b5:85:2f:fb:fc:67:fa:ed:26:66:94:b7:20:83:cf: 56:99:53:dc:3d:d5:73:e4:70:67:92:85:73:01:90:14:fa:bb: e5:1a:2a:3a:74:0a:df:79:cd:89:46:83:54:fd:e1:f4:81:f2: 9b:99:1a:e5:91:8f:10:f9:49:b0:03:fe:c4:6e:ea:2a:c1:7f: ee:77:d0:12:a3:2c:11:dd:d4:53:a6:eb:37:bf:c5:3c:30:f4: 62:fb:b1:72:4a:3e:1f:45:98:27:78:43:7e:8e:1b:60:60:4a: db:a0:c9:2f:26:a9:8e:8c:4c:f4:61:d6:99:e3:d1:37:17:1e: d5:b9:42:5e:c9:d0:9c:ab:d5:06:14:36:db:52:bf:2c:a6:d6: 69:09:f7:84:d3:e3:48:eb:a4:ed:66:55:1c:c5:59:27:2f:5d: 7a:df:b6:3d:1f:10:2f:0f:16:71:01:16:a0:8f:46:f2:4b:04: c3:28:e3:0d:d5:10:2c:aa:91:4d:c9:7c:ac:58:d7:14:3d:a7: 73:17:f2:e4:c0:fd:af:a8:15:5e:18:59:e2:2a:a6:5e:89:d5: 2d:64:f6:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvblgi2MqaVzzMl+3xI2AbsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YTRkMmY2ODkxM2VhY2U2YzlmNTA5MmJkYzdkZDIwZjU3 NGY0MzgwHhcNMjYwMTIwMTMyNjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTc0ZjIzZjA4Y2MxODA4OTRlNGFjNTZmYzE3ZGI4MzYwMTEzODdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmp9jJf8XU85mBy5W2H9kZOq1oNy hemuv65Drl3SbgKbftGMNn5xV9A4eoJHjSdA46S0QgBhDT8Ghht/3YeUwuDTtiPA JJsVj3DQp1KBRn6esVOX3Sqo0+oluXfB8kVjpApimQI1+zHl4vgZ0/aFM7SDaVz3 /tNJz2XKQcaxSDUUw1g7UBZmtHs8+8fNAT8a5X/mYW+AC2srItA8Lry8MAQAkP1s fo0jJv6sgmWr6qs9SHAFV+fKRfvNKwL/h/rm77qne/OxaI/kIaJADnkQkDNO4a7X GtXLcbt8PrMDwNtRUegzI2TmJoE41n2ISluURxvf8No6Tq3bKgQ2T1Ao1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBV08j8IzBgIlOSsVvwX24NgETh8MB8GA1UdIwQY MBaAFMek0vaJE+rObJ9Qkr3H3SD1dPQ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDZUUzlva1Q2czVzbjFDU3ZjZmRJUFYwOURnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9mMDNjYTEtNzI2Yi00ZGU5LWI0MTkt ZjlhMWJiYzM2ODQ1LzEvRlhUeVB3ak1HQWlVNUt4V19CZmJnMkFST0h3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9mMDNjYTEtNzI2Yi00ZGU5LWI0MTktZjlhMWJiYzM2ODQ1 LzEveDZUUzlva1Q2czVzbjFDU3ZjZmRJUFYwOURnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aLIMA0G CSqGSIb3DQEBCwUAA4IBAQCsybMndm2TMcZDS22CaUkLhYbMnOiiLAxnL+lnVmPD w4B17WUWnj61hS/7/Gf67SZmlLcgg89WmVPcPdVz5HBnkoVzAZAU+rvlGio6dArf ec2JRoNU/eH0gfKbmRrlkY8Q+UmwA/7EbuoqwX/ud9ASoywR3dRTpus3v8U8MPRi +7FySj4fRZgneEN+jhtgYErboMkvJqmOjEz0YdaZ49E3Fx7VuUJeydCcq9UGFDbb Ur8sptZpCfeE0+NI66TtZlUcxVknL11637Y9HxAvDxZxARagj0bySwTDKOMN1RAs qpFNyXysWNcUPadzF/LkwP2vqBVeGFniKqZeidUtZPa6 -----END CERTIFICATE-----Generated at Mon Feb 2 09:41:29 2026 by rpki-client