This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/FxPKGQRkI4Z0HF-Lcs2UJHERalY.roa File: FxPKGQRkI4Z0HF-Lcs2UJHERalY.roa (raw, json) Hash identifier: 0hkKz00zuubRCI+lPV1/MleMyhatkwQjieKQtq52rFU= Subject key identifier: 17:13:CA:19:04:64:23:86:74:1C:5F:8B:72:CD:94:24:71:11:6A:56 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37D11923043CE33A2A2D6EB57C0303 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/FxPKGQRkI4Z0HF-Lcs2UJHERalY.roa Signing time: Fri 02 Jan 2026 10:19:05 +0000 ROA not before: Fri 02 Jan 2026 10:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401776 IP address blocks: 158.173.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:d1:19:23:04:3c:e3:3a:2a:2d:6e:b5:7c:03:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1713ca1904642386741c5f8b72cd942471116a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bb:a0:d1:a9:24:f8:50:5a:40:fb:c2:bc:4d: ac:4e:dc:cf:98:92:cd:69:87:50:81:2d:b6:bc:ab: c3:83:30:a5:f3:a4:f3:17:a2:f9:12:74:57:b0:b1: b9:6c:2f:f3:5d:81:d0:bf:a4:19:69:3d:53:50:a8: 44:d7:85:59:23:b9:4d:92:f1:43:4e:a5:14:68:2a: ed:02:f1:23:7e:cf:74:d3:e4:1a:4b:9a:aa:95:a4: ec:f8:b1:d4:91:44:33:1d:d7:d3:e5:26:c9:ae:c6: 9b:2b:de:50:ff:58:ce:0b:8c:9d:30:a0:e0:ff:c5: 69:99:01:ff:27:3d:04:31:75:0d:95:72:0e:e4:a0: a3:ce:e8:9f:9f:47:49:70:4e:6f:98:57:71:10:38: 8d:39:8a:59:33:4b:39:f5:59:c4:a7:d6:97:6e:5e: d1:de:ae:76:26:41:2a:7a:94:d0:8d:44:37:a5:61: e2:e4:5c:34:9e:ad:3a:65:b9:d6:67:8d:49:dd:a0: 94:63:39:78:be:b8:a3:30:ef:b7:2c:1c:02:05:54: 01:c1:b2:9a:0f:02:50:26:05:c3:06:0c:9f:d8:99: 42:ad:0f:e2:d3:04:d0:8a:6d:4e:69:f2:1c:ea:43: 0e:51:2a:02:ab:5e:f3:a7:58:27:41:12:f0:70:8d: 0e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:13:CA:19:04:64:23:86:74:1C:5F:8B:72:CD:94:24:71:11:6A:56 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/FxPKGQRkI4Z0HF-Lcs2UJHERalY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.173.227.0/24 Signature Algorithm: sha256WithRSAEncryption 17:8a:17:21:14:8b:bd:dd:5d:67:45:d0:90:eb:2e:14:a6:f1: 46:cc:3a:b3:69:be:c0:5e:ba:bb:da:83:b5:a1:f2:c2:e4:e2: 94:09:aa:9c:f7:4a:1f:07:e4:4e:d0:ac:d3:24:1c:40:4a:3f: 3d:84:24:68:03:7e:50:17:75:c9:ed:57:3e:08:81:f6:e6:93: da:9d:e4:0a:84:e5:7e:71:eb:9d:b5:e2:65:65:d6:71:3a:e4: 86:a6:8a:53:39:29:6e:38:5e:de:4b:ab:94:f3:13:69:1d:ff: 09:9f:ff:49:3a:f1:f2:9a:69:63:ac:3e:ee:b6:17:13:9b:5e: e0:9f:17:df:13:d1:08:b1:0b:6c:0d:f8:0b:90:62:ba:08:35: 47:97:e5:8e:d4:7e:71:2d:0a:f6:fe:e3:f2:8d:89:8c:f3:03: ed:3b:ed:38:dc:6e:e3:e5:23:69:bf:e5:ca:29:dd:bf:ba:c1: 4a:d0:27:cf:cc:e0:c7:d6:06:e6:95:67:87:46:a5:e7:e0:80: b9:d7:9c:b6:5a:46:29:de:61:0f:eb:ba:4f:fb:88:f7:38:6e: 92:c5:a9:f7:90:a1:40:cd:c3:ec:99:b4:61:d8:67:64:28:b7: 74:19:92:ca:59:ea:05:c9:a9:a2:07:4a:49:f1:6a:65:63:ea: 8f:83:ed:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N9EZIwQ84zoqLW61fAMDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzEzY2ExOTA0NjQyMzg2NzQxYzVmOGI3MmNkOTQyNDcxMTE2YTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbug0akk+FBaQPvCvE2sTtzPmJLN aYdQgS22vKvDgzCl86TzF6L5EnRXsLG5bC/zXYHQv6QZaT1TUKhE14VZI7lNkvFD TqUUaCrtAvEjfs900+QaS5qqlaTs+LHUkUQzHdfT5SbJrsabK95Q/1jOC4ydMKDg /8VpmQH/Jz0EMXUNlXIO5KCjzuifn0dJcE5vmFdxEDiNOYpZM0s59VnEp9aXbl7R 3q52JkEqepTQjUQ3pWHi5Fw0nq06ZbnWZ41J3aCUYzl4vrijMO+3LBwCBVQBwbKa DwJQJgXDBgyf2JlCrQ/i0wTQim1OafIc6kMOUSoCq17zp1gnQRLwcI0OIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBcTyhkEZCOGdBxfi3LNlCRxEWpWMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvRnhQS0dRUmtJNFowSEYtTGNzMlVKSEVSYWxZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnq3jMA0G CSqGSIb3DQEBCwUAA4IBAQAXihchFIu93V1nRdCQ6y4UpvFGzDqzab7AXrq72oO1 ofLC5OKUCaqc90ofB+RO0KzTJBxASj89hCRoA35QF3XJ7Vc+CIH25pPaneQKhOV+ ceudteJlZdZxOuSGpopTOSluOF7eS6uU8xNpHf8Jn/9JOvHymmljrD7uthcTm17g nxffE9EIsQtsDfgLkGK6CDVHl+WO1H5xLQr2/uPyjYmM8wPtO+043G7j5SNpv+XK Kd2/usFK0CfPzODH1gbmlWeHRqXn4IC515y2WkYp3mEP67pP+4j3OG6Sxan3kKFA zcPsmbRh2GdkKLd0GZLKWeoFyamiB0pJ8WplY+qPg+0c -----END CERTIFICATE-----Generated at Tue Jan 20 22:19:38 2026 by rpki-client