This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/Fq9xTbJtwVAtCUczHqUqNnrTedI.roa File: Fq9xTbJtwVAtCUczHqUqNnrTedI.roa (raw, json) Hash identifier: 3b8qrDVQ2Nx+qFo5YhHUGqlMlouA6w7aD5kO327P+jw= Subject key identifier: 16:AF:71:4D:B2:6D:C1:50:2D:09:47:33:1E:A5:2A:36:7A:D3:79:D2 Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa Certificate serial: 019B76EADE8453F980B854807A5C7CC1C4AF Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/Fq9xTbJtwVAtCUczHqUqNnrTedI.roa Signing time: Thu 01 Jan 2026 00:17:42 +0000 ROA not before: Thu 01 Jan 2026 00:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3223 IP address blocks: 185.68.44.0/22 maxlen: 24 185.68.44.0/24 maxlen: 24 185.68.45.0/24 maxlen: 24 185.161.232.0/22 maxlen: 24 185.161.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:de:84:53:f9:80:b8:54:80:7a:5c:7c:c1:c4:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa Validity Not Before: Jan 1 00:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16af714db26dc1502d0947331ea52a367ad379d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1d:d4:b3:2c:7b:f6:2c:9c:4a:01:82:a1:ae: 66:ac:e6:a9:25:6f:04:5e:f8:d4:7f:f9:67:52:d0: d5:1a:f2:85:fa:63:64:f5:6d:b1:02:fd:6c:2a:bc: 71:7f:50:af:68:a7:b9:50:a5:89:48:07:c9:c3:07: af:03:08:d1:d6:9b:7a:d0:56:a1:60:c6:33:00:fa: 11:f4:a3:d9:b6:44:44:a1:4e:06:f4:c8:2e:f4:e8: c5:89:77:43:c3:5c:d3:6d:bf:d2:9f:9b:4c:3a:56: 0a:9c:79:55:b4:84:a2:6a:89:e8:33:51:ce:f5:a2: d3:e7:8a:d7:74:8b:01:2a:0b:fb:11:bb:b6:14:3a: a6:fa:5d:3e:c0:fe:3c:30:c8:6b:50:43:79:4c:09: 42:e0:ff:45:27:09:a2:0e:40:e6:c2:dd:f2:16:6a: 43:93:a5:ea:e1:8f:41:15:92:3c:3a:8a:2b:6c:19: 5d:d7:40:9b:1e:66:58:ae:6c:15:b0:17:26:9c:9e: 86:4a:3d:43:b9:05:56:67:1a:2b:d3:33:13:4d:d9: 9a:e9:69:ab:a5:11:ae:e1:ab:7f:0c:2d:ff:e6:71: bd:08:30:89:88:09:ce:11:fa:d0:38:f2:73:05:40: ad:2f:4b:39:5a:62:ad:c4:36:21:da:2f:dc:fc:60: 96:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AF:71:4D:B2:6D:C1:50:2D:09:47:33:1E:A5:2A:36:7A:D3:79:D2 X509v3 Authority Key Identifier: keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/Fq9xTbJtwVAtCUczHqUqNnrTedI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.68.44.0/22 185.161.232.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:e0:f5:31:88:b9:56:03:99:b0:ec:d4:3f:c0:80:fa:8c:da: 59:42:d3:5f:72:e6:60:9a:59:62:cc:80:44:49:ae:0f:d3:bc: 82:37:f2:2b:2f:45:24:e8:93:0e:43:9f:7e:c3:47:16:b5:1b: b7:cf:c8:f8:e1:f9:ff:42:0d:e9:87:11:37:53:0a:69:a1:c4: 31:07:e9:d5:9c:00:de:e2:12:40:11:9e:f8:95:2b:67:22:59: f4:fc:40:e8:93:ca:fc:d9:a6:01:77:d9:73:fe:6d:94:58:a4: e5:cd:5d:f3:7a:84:8e:27:6d:cb:7d:2f:1a:9d:8c:4d:c5:cb: 39:77:41:43:29:3f:9f:02:92:16:fc:f0:8e:dd:ef:1c:8a:6d: 3b:c2:60:89:bf:88:4a:45:bc:c1:4c:2d:d1:1e:01:f9:03:80: 78:c3:e5:85:e3:ce:af:a6:7a:5f:d7:5d:4f:77:8d:33:00:51: 9b:da:06:f1:79:41:5f:89:a5:da:11:66:76:37:b5:c1:bf:60: 80:75:f2:a3:27:ed:03:4b:bc:25:3c:8f:8e:f6:8c:84:3a:b4: bc:e4:52:c3:df:b4:3d:9a:fc:ee:82:a5:6d:ed:f4:f2:a4:28: 7d:71:d8:fc:b3:c9:67:16:2c:1a:2f:46:c6:53:22:07:a9:10: ad:d7:78:ed -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26t6EU/mAuFSAelx8wcSvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NzQyMTBjMjg0MTNlMjYyODQ4MjJhYmU4M2FkNmQ3YzBm NzY0ZmEwHhcNMjYwMTAxMDAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmFmNzE0ZGIyNmRjMTUwMmQwOTQ3MzMxZWE1MmEzNjdhZDM3OWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox3Usyx79iycSgGCoa5mrOapJW8E XvjUf/lnUtDVGvKF+mNk9W2xAv1sKrxxf1CvaKe5UKWJSAfJwwevAwjR1pt60Fah YMYzAPoR9KPZtkREoU4G9Mgu9OjFiXdDw1zTbb/Sn5tMOlYKnHlVtISiaonoM1HO 9aLT54rXdIsBKgv7Ebu2FDqm+l0+wP48MMhrUEN5TAlC4P9FJwmiDkDmwt3yFmpD k6Xq4Y9BFZI8OoorbBld10CbHmZYrmwVsBcmnJ6GSj1DuQVWZxor0zMTTdma6Wmr pRGu4at/DC3/5nG9CDCJiAnOEfrQOPJzBUCtL0s5WmKtxDYh2i/c/GCWeQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBavcU2ybcFQLQlHMx6lKjZ603nSMB8GA1UdIwQY MBaAFDR0IQwoQT4mKEgiq+g61tfA92T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5Yzkt YjBjNzRiNzZlMTgyLzEvRnE5eFRiSnR3VkF0Q1VjekhxVXFObnJUZWRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5YzktYjBjNzRiNzZlMTgy LzEvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuUQsAwQC uaHoMA0GCSqGSIb3DQEBCwUAA4IBAQBv4PUxiLlWA5mw7NQ/wID6jNpZQtNfcuZg mllizIBESa4P07yCN/IrL0Uk6JMOQ59+w0cWtRu3z8j44fn/Qg3phxE3UwppocQx B+nVnADe4hJAEZ74lStnIln0/EDok8r82aYBd9lz/m2UWKTlzV3zeoSOJ23LfS8a nYxNxcs5d0FDKT+fApIW/PCO3e8cim07wmCJv4hKRbzBTC3RHgH5A4B4w+WF486v pnpf111Pd40zAFGb2gbxeUFfiaXaEWZ2N7XBv2CAdfKjJ+0DS7wlPI+O9oyEOrS8 5FLD37Q9mvzugqVt7fTypCh9cdj8s8lnFiwaL0bGUyIHqRCt13jt -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:55 2026 by rpki-client