This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/_kGEBUGq7kLWBkMzztsmxUt8Yac.roa File: _kGEBUGq7kLWBkMzztsmxUt8Yac.roa (raw, json) Hash identifier: aHzwke5AaVNef0xFHBn6zKYduyTSoACw0f4GdOnv2LA= Subject key identifier: FE:41:84:05:41:AA:EE:42:D6:06:43:33:CE:DB:26:C5:4B:7C:61:A7 Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019BF558694698FEA6E198D50902D18DBE7D Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/_kGEBUGq7kLWBkMzztsmxUt8Yac.roa Signing time: Sun 25 Jan 2026 13:29:30 +0000 ROA not before: Sun 25 Jan 2026 13:29:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395793 IP address blocks: 144.56.8.0/24 maxlen: 24 144.56.10.0/24 maxlen: 24 144.56.11.0/24 maxlen: 24 144.56.18.0/24 maxlen: 24 144.56.19.0/24 maxlen: 24 144.56.25.0/24 maxlen: 24 144.56.26.0/24 maxlen: 24 144.56.30.0/24 maxlen: 24 144.56.32.0/24 maxlen: 24 144.56.54.0/24 maxlen: 24 144.56.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:58:69:46:98:fe:a6:e1:98:d5:09:02:d1:8d:be:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Jan 25 13:29:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe41840541aaee42d6064333cedb26c54b7c61a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e5:56:bc:af:a4:b2:59:63:f1:85:85:cb:5b: 97:ac:d3:91:45:ff:dd:af:00:f1:4d:c6:16:e9:2a: 36:cf:56:42:35:4b:9b:b7:55:fa:e9:94:2e:7b:8c: 7a:85:e2:0d:1b:e5:c5:9a:ce:73:40:1b:5b:05:6e: b4:a1:25:d5:fa:50:b7:bf:9a:e9:6b:a4:7e:71:17: 87:7d:e1:e3:0a:0e:83:60:34:26:ba:1f:99:62:6b: 78:15:d8:94:5b:ec:3a:34:3f:6b:91:be:d1:53:64: 41:d7:b0:22:b0:90:66:f9:af:22:8c:80:aa:19:d3: 37:43:48:8a:f1:5b:10:f9:38:57:93:25:29:f6:af: 05:09:40:a3:3d:49:58:da:d9:ba:a4:06:46:c4:af: 49:38:22:a3:8f:f1:8f:60:10:ab:eb:84:eb:4e:ee: 51:30:2f:a5:8c:cb:a3:f9:87:4a:2d:86:35:57:dc: 2f:87:be:0f:1b:cc:bf:98:c8:56:22:e7:18:67:4d: 45:66:29:27:6a:cd:04:df:86:ee:7b:aa:80:f6:b8: 29:f9:22:f8:6c:bb:c2:9e:fc:69:02:42:fd:b1:48: c0:06:61:13:b2:f5:0c:c5:4a:d0:4e:68:2b:3c:83: 38:ca:47:69:36:f7:ca:a4:e2:a5:be:e5:40:55:1a: b1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:41:84:05:41:AA:EE:42:D6:06:43:33:CE:DB:26:C5:4B:7C:61:A7 X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/_kGEBUGq7kLWBkMzztsmxUt8Yac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.8.0/24 144.56.10.0/23 144.56.18.0/23 144.56.25.0-144.56.26.255 144.56.30.0/24 144.56.32.0/24 144.56.54.0/24 144.56.74.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:f1:f0:95:1e:82:00:29:51:6a:d7:3a:06:19:34:06:60:d1: 72:16:83:4e:ad:c5:a3:03:87:d7:5d:a9:a9:ce:10:e6:7f:b4: 9d:3a:68:4e:e5:67:f7:dd:4a:13:1f:ce:7e:89:e4:88:77:75: 2b:b4:70:fa:11:2e:7d:ef:a5:5d:f5:38:c4:05:1f:de:ac:7b: 92:25:e1:e2:ef:7b:3e:29:b9:38:1b:fc:c1:52:7c:f7:90:84: 1d:96:f2:ce:4f:e4:b8:42:58:b5:7d:c4:fe:03:fa:14:91:89: e0:2c:94:55:90:87:c9:d8:cf:bc:a2:3d:58:77:da:1e:72:83: f8:fb:5c:60:3a:bc:3f:7e:e3:56:93:62:3e:33:06:88:82:a9: ec:64:e6:9b:fa:aa:98:e5:61:fc:80:da:29:2a:3f:f0:ef:bd: 7c:a3:0f:f2:70:8e:0b:37:6e:34:4b:82:f8:4c:f4:ea:2b:09: d5:20:a7:8c:ff:6e:89:c9:13:02:e6:89:f3:dd:7b:46:16:24: 87:f0:ce:1b:36:e1:7e:88:8f:46:a9:9a:3b:0f:d5:54:89:be: eb:69:ea:41:53:c1:85:fb:c7:35:9b:83:f9:ef:bb:5e:1d:6e: 4b:f3:83:d0:bc:c6:19:33:1c:14:bb:ba:b1:ee:46:b7:fa:bb: fd:9e:b5:e0 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZv1WGlGmP6m4ZjVCQLRjb59MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjYwMTI1MTMyOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTQxODQwNTQxYWFlZTQyZDYwNjQzMzNjZWRiMjZjNTRiN2M2MWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+VWvK+ksllj8YWFy1uXrNORRf/d rwDxTcYW6So2z1ZCNUubt1X66ZQue4x6heING+XFms5zQBtbBW60oSXV+lC3v5rp a6R+cReHfeHjCg6DYDQmuh+ZYmt4FdiUW+w6ND9rkb7RU2RB17AisJBm+a8ijICq GdM3Q0iK8VsQ+ThXkyUp9q8FCUCjPUlY2tm6pAZGxK9JOCKjj/GPYBCr64TrTu5R MC+ljMuj+YdKLYY1V9wvh74PG8y/mMhWIucYZ01FZiknas0E34bue6qA9rgp+SL4 bLvCnvxpAkL9sUjABmETsvUMxUrQTmgrPIM4ykdpNvfKpOKlvuVAVRqxfwIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFP5BhAVBqu5C1gZDM87bJsVLfGGnMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvX2tHRUJVR3E3a0xXQmtNenp0c214VXQ4WWFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAkDgIAwQB kDgKAwQBkDgSMAwDBACQOBkDBACQOBoDBACQOB4DBACQOCADBACQODYDBACQOEow DQYJKoZIhvcNAQELBQADggEBAHrx8JUeggApUWrXOgYZNAZg0XIWg06txaMDh9dd qanOEOZ/tJ06aE7lZ/fdShMfzn6J5Ih3dSu0cPoRLn3vpV31OMQFH96se5Il4eLv ez4puTgb/MFSfPeQhB2W8s5P5LhCWLV9xP4D+hSRieAslFWQh8nYz7yiPVh32h5y g/j7XGA6vD9+41aTYj4zBoiCqexk5pv6qpjlYfyA2ikqP/DvvXyjD/Jwjgs3bjRL gvhM9OorCdUgp4z/bonJEwLmifPde0YWJIfwzhs24X6Ij0apmjsP1VSJvutp6kFT wYX7xzWbg/nvu14dbkvzg9C8xhkzHBS7urHuRrf6u/2eteA= -----END CERTIFICATE-----Generated at Tue Feb 10 01:49:08 2026 by rpki-client