This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/FmbJHLicsAmHpEbjvujEn2HOV3Y.roa File: FmbJHLicsAmHpEbjvujEn2HOV3Y.roa (raw, json) Hash identifier: mljbMsuIaVUTs05lmzHAA0bs6fKmFG4cLrVWq0mgVgs= Subject key identifier: 16:66:C9:1C:B8:9C:B0:09:87:A4:46:E3:BE:E8:C4:9F:61:CE:57:76 Certificate issuer: /CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf Certificate serial: 019B76EB5F0E5A0A9F1378D08A488F82C68A Authority key identifier: 5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/FmbJHLicsAmHpEbjvujEn2HOV3Y.roa Signing time: Thu 01 Jan 2026 00:18:15 +0000 ROA not before: Thu 01 Jan 2026 00:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16027 IP address blocks: 193.168.160.0/22 maxlen: 22 193.168.161.0/24 maxlen: 24 217.71.64.0/20 maxlen: 20 217.71.65.0/24 maxlen: 24 217.71.67.0/24 maxlen: 24 217.71.68.0/24 maxlen: 24 217.71.69.0/24 maxlen: 24 217.71.70.0/24 maxlen: 24 217.71.73.0/24 maxlen: 24 217.71.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:5f:0e:5a:0a:9f:13:78:d0:8a:48:8f:82:c6:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf Validity Not Before: Jan 1 00:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1666c91cb89cb00987a446e3bee8c49f61ce5776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7e:96:ba:7d:b8:ac:94:c4:ad:6b:dd:c0:d6: ff:cf:0c:51:04:85:f6:e1:6c:a7:86:91:02:60:55: 1f:e7:bf:bd:09:55:f7:9d:f8:fd:ed:d9:ab:63:84: 4c:4c:12:4f:42:5d:dd:34:c2:4b:4e:db:9d:f2:44: 2c:8b:21:92:64:ea:aa:02:7a:71:f7:a0:cc:66:38: e3:b6:38:cc:1f:f3:e7:5a:64:0d:94:84:24:2c:39: 50:9f:e0:40:11:51:92:a9:1d:6e:2c:ac:66:72:bb: 63:e9:a2:48:75:48:4b:76:b0:7d:69:e8:16:dd:24: ac:f5:49:56:d0:00:24:08:50:a3:8c:ed:22:c3:85: 58:1e:8a:36:c8:31:de:1e:0d:ac:bc:a8:23:20:5d: 9a:62:7e:c7:cf:41:fa:15:5f:ea:ea:6a:12:c2:df: 59:64:0a:5f:87:61:46:23:aa:cf:f2:68:34:39:75: 47:29:36:d2:d7:dd:59:3a:ae:e3:90:ec:27:41:fc: 54:45:e7:f5:11:07:ac:f5:ef:85:be:ca:15:94:cb: bd:26:2b:e6:8b:20:72:ba:70:90:bd:15:a9:00:94: db:06:16:98:b9:13:de:b0:6f:09:f8:3f:93:c4:d1: 15:1d:08:b1:93:8c:5a:a7:b9:22:f2:66:cd:c6:19: 04:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:66:C9:1C:B8:9C:B0:09:87:A4:46:E3:BE:E8:C4:9F:61:CE:57:76 X509v3 Authority Key Identifier: keyid:5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/FmbJHLicsAmHpEbjvujEn2HOV3Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.168.160.0/22 217.71.64.0/20 Signature Algorithm: sha256WithRSAEncryption 3a:76:fb:4f:b7:9d:7f:50:90:ff:28:89:c4:b2:3b:3b:5c:7f: f6:5c:a7:6d:4f:f8:11:88:21:44:f7:78:3e:07:3a:14:b7:d6: 61:e0:f4:00:79:49:9b:22:5e:5e:72:34:64:bd:30:74:de:90: a8:a9:7f:f8:b2:96:fa:7a:85:e4:10:dd:cc:05:78:af:c1:ab: 43:17:55:1f:37:c4:b7:07:fb:44:38:28:af:f7:49:47:b4:66: fc:54:2e:a5:dc:9b:04:23:8b:b9:d4:3c:53:91:b4:53:fe:87: 00:b2:f8:49:5a:b0:50:7c:59:b2:55:3f:07:74:2c:65:d9:eb: 71:ec:ee:ca:b6:86:c5:5f:c9:97:b0:b7:25:40:ff:eb:b0:49: e4:d1:43:a1:f6:1a:30:07:f2:02:fa:ce:3b:9e:a3:a2:b9:08: 1e:82:96:76:74:e7:31:9b:c1:c8:51:c6:d3:d7:20:0c:86:e8: 09:8c:a1:ce:42:df:ae:cf:16:ed:fe:52:28:ac:34:3b:14:f1: f4:04:bd:9b:91:b5:d4:b6:70:be:c5:5f:90:af:75:0a:2b:63: 97:1e:8b:a8:e2:63:a3:92:2f:a9:31:63:16:13:7b:a5:69:33: 7c:76:d3:94:47:85:c1:85:bf:3a:f5:80:07:f4:8d:e4:10:4b: fb:0d:db:d3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt2618OWgqfE3jQikiPgsaKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYmE1N2UxNzA3ZTQzYjJmYTk3ZmNlYjA3OGE1ZDQ2MGU1 NmMxYmYwHhcNMjYwMTAxMDAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjY2YzkxY2I4OWNiMDA5ODdhNDQ2ZTNiZWU4YzQ5ZjYxY2U1Nzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0H6Wun24rJTErWvdwNb/zwxRBIX2 4WynhpECYFUf57+9CVX3nfj97dmrY4RMTBJPQl3dNMJLTtud8kQsiyGSZOqqAnpx 96DMZjjjtjjMH/PnWmQNlIQkLDlQn+BAEVGSqR1uLKxmcrtj6aJIdUhLdrB9aegW 3SSs9UlW0AAkCFCjjO0iw4VYHoo2yDHeHg2svKgjIF2aYn7Hz0H6FV/q6moSwt9Z ZApfh2FGI6rP8mg0OXVHKTbS191ZOq7jkOwnQfxURef1EQes9e+FvsoVlMu9Jivm iyByunCQvRWpAJTbBhaYuRPesG8J+D+TxNEVHQixk4xap7ki8mbNxhkEfQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBZmyRy4nLAJh6RG477oxJ9hzld2MB8GA1UdIwQY MBaAFF66V+FwfkOy+pf86weKXUYOVsG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHJwWDRYQi1RN0w2bF96ckI0cGRSZzVXd2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jYmNhYzYtYWJlYi00YTM4LThjY2Mt YjU5NzI3MDliYjAyLzEvRm1iSkhMaWNzQW1IcEVianZ1akVuMkhPVjNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9jYmNhYzYtYWJlYi00YTM4LThjY2MtYjU5NzI3MDliYjAy LzEvWHJwWDRYQi1RN0w2bF96ckI0cGRSZzVXd2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwaigAwQE 2UdAMA0GCSqGSIb3DQEBCwUAA4IBAQA6dvtPt51/UJD/KInEsjs7XH/2XKdtT/gR iCFE93g+BzoUt9Zh4PQAeUmbIl5ecjRkvTB03pCoqX/4spb6eoXkEN3MBXivwatD F1UfN8S3B/tEOCiv90lHtGb8VC6l3JsEI4u51DxTkbRT/ocAsvhJWrBQfFmyVT8H dCxl2etx7O7KtobFX8mXsLclQP/rsEnk0UOh9howB/IC+s47nqOiuQgegpZ2dOcx m8HIUcbT1yAMhugJjKHOQt+uzxbt/lIorDQ7FPH0BL2bkbXUtnC+xV+Qr3UKK2OX Houo4mOjki+pMWMWE3ulaTN8dtOUR4XBhb869YAH9I3kEEv7DdvT -----END CERTIFICATE-----Generated at Tue Feb 10 04:48:59 2026 by rpki-client