This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/FMGWqh434U4Wl-h9zxOIUfhFFh0.roa File: FMGWqh434U4Wl-h9zxOIUfhFFh0.roa (raw, json) Hash identifier: 1B3UBPSlhdGSCsHwbRLbxDHeRCnBCSFAh3REZmVbN7Y= Subject key identifier: 14:C1:96:AA:1E:37:E1:4E:16:97:E8:7D:CF:13:88:51:F8:45:16:1D Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019B7DC8AC248EB96F2CD65286CDFF775561 Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/FMGWqh434U4Wl-h9zxOIUfhFFh0.roa Signing time: Fri 02 Jan 2026 08:17:41 +0000 ROA not before: Fri 02 Jan 2026 08:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 213.137.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:ac:24:8e:b9:6f:2c:d6:52:86:cd:ff:77:55:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Jan 2 08:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14c196aa1e37e14e1697e87dcf138851f845161d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d6:e2:74:f4:fd:93:02:4a:91:af:57:ec:4d: 03:1b:93:b9:60:ad:7e:1c:0e:7a:95:29:03:d8:9b: 0c:a4:55:b5:3c:a0:cd:4b:c4:fa:8f:2b:39:35:37: bd:7d:c9:e2:86:c0:3c:eb:5c:92:4c:9c:2c:c1:60: a4:5e:b8:f2:c7:a7:f3:8f:c0:76:5e:fe:0b:ff:5a: 44:99:99:d7:64:8d:5a:59:3f:6b:85:6b:0c:da:20: 20:bb:41:32:88:9e:49:2a:34:07:40:89:41:10:68: 34:5a:f6:c6:0f:93:12:2e:45:df:26:48:24:44:db: fd:46:9d:80:2f:93:ac:7a:81:bf:b3:8e:7a:dd:f1: 73:43:5f:85:fe:3b:49:3b:37:7c:d6:79:8e:11:f1: e3:f4:82:1d:fd:db:49:d3:7c:ad:a7:18:ef:2c:8e: a1:15:87:d7:ee:3a:6d:6f:18:8e:b0:38:ea:f4:ec: 13:62:e4:b9:8d:5e:23:6a:8d:93:61:5d:ee:cf:72: c9:65:96:93:77:1a:9b:7f:b0:2d:01:b7:1b:ee:af: de:ac:90:02:59:33:bf:28:4d:87:26:0f:07:3b:8a: fa:3e:23:ff:5a:c7:9a:e6:9e:7a:06:30:1b:49:83: 40:a6:58:c2:18:30:99:3b:80:0f:d4:2b:85:3c:8d: e9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C1:96:AA:1E:37:E1:4E:16:97:E8:7D:CF:13:88:51:F8:45:16:1D X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/FMGWqh434U4Wl-h9zxOIUfhFFh0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.137.90.0/24 Signature Algorithm: sha256WithRSAEncryption 16:1f:bf:c1:31:a2:85:6b:4b:ae:09:ae:22:a3:55:1f:83:ca: dc:e5:ca:10:b1:fa:f7:62:d5:54:b0:04:a9:f8:f5:f7:6e:10: 05:50:95:9c:3c:2d:3b:bc:2d:d3:d2:15:3c:60:cf:59:e1:46: ee:47:ff:05:85:c6:51:c1:57:14:6f:4e:33:4b:64:47:4c:bc: 70:de:d9:a0:12:f4:f9:fa:03:3a:ae:9f:96:2f:56:88:5a:06: 81:3e:6b:d9:e0:9c:3a:cf:e7:fd:38:ca:b7:74:58:18:58:45: 79:d8:9f:8c:43:2c:5c:39:1a:ef:17:58:85:0f:19:e6:6f:7c: b4:c8:87:5a:82:a1:aa:fb:05:ea:24:60:a6:91:30:84:d4:80: 6e:57:5d:21:29:8a:e3:25:4f:10:d2:89:40:af:39:58:4a:c5: bd:ca:53:77:22:18:7b:cc:6c:e7:76:80:67:61:4d:0f:89:7d: c2:3d:b6:36:23:5f:c4:41:14:4a:d3:7a:46:16:54:a5:87:bb: 96:40:dd:52:d1:46:e3:05:b0:60:02:4a:54:ca:39:b7:05:48: 78:63:c4:bc:db:9d:05:15:35:52:a9:d1:94:a1:f6:62:9e:ff: ac:37:86:56:a0:22:17:72:8c:e6:d4:3e:0f:e2:9c:11:ba:37: a8:40:72:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yKwkjrlvLNZShs3/d1VhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYwMTAyMDgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGMxOTZhYTFlMzdlMTRlMTY5N2U4N2RjZjEzODg1MWY4NDUxNjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tbidPT9kwJKka9X7E0DG5O5YK1+ HA56lSkD2JsMpFW1PKDNS8T6jys5NTe9fcnihsA861ySTJwswWCkXrjyx6fzj8B2 Xv4L/1pEmZnXZI1aWT9rhWsM2iAgu0EyiJ5JKjQHQIlBEGg0WvbGD5MSLkXfJkgk RNv9Rp2AL5OseoG/s4563fFzQ1+F/jtJOzd81nmOEfHj9IId/dtJ03ytpxjvLI6h FYfX7jptbxiOsDjq9OwTYuS5jV4jao2TYV3uz3LJZZaTdxqbf7AtAbcb7q/erJAC WTO/KE2HJg8HO4r6PiP/Wsea5p56BjAbSYNApljCGDCZO4AP1CuFPI3pCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBTBlqoeN+FOFpfofc8TiFH4RRYdMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvRk1HV3FoNDM0VTRXbC1oOXp4T0lVZmhGRmgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YlaMA0G CSqGSIb3DQEBCwUAA4IBAQAWH7/BMaKFa0uuCa4io1Ufg8rc5coQsfr3YtVUsASp +PX3bhAFUJWcPC07vC3T0hU8YM9Z4UbuR/8FhcZRwVcUb04zS2RHTLxw3tmgEvT5 +gM6rp+WL1aIWgaBPmvZ4Jw6z+f9OMq3dFgYWEV52J+MQyxcORrvF1iFDxnmb3y0 yIdagqGq+wXqJGCmkTCE1IBuV10hKYrjJU8Q0olArzlYSsW9ylN3Ihh7zGzndoBn YU0PiX3CPbY2I1/EQRRK03pGFlSlh7uWQN1S0UbjBbBgAkpUyjm3BUh4Y8S8250F FTVSqdGUofZinv+sN4ZWoCIXcozm1D4P4pwRujeoQHLf -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:07 2026 by rpki-client