This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/FyoBSzsu3AEspQ8gNao5uNadIZI.roa File: FyoBSzsu3AEspQ8gNao5uNadIZI.roa (raw, json) Hash identifier: zGRU/uV+JjFR+4PQQsHLeqPX3jRtUeV1goXtigjNlCM= Subject key identifier: 17:2A:01:4B:3B:2E:DC:01:2C:A5:0F:20:35:AA:39:B8:D6:9D:21:92 Certificate issuer: /CN=167d54d8cb6a8309c512605657c2563e3a1aaa69 Certificate serial: 019B79ED643539C43123B83E8A5E6E554271 Authority key identifier: 16:7D:54:D8:CB:6A:83:09:C5:12:60:56:57:C2:56:3E:3A:1A:AA:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/FyoBSzsu3AEspQ8gNao5uNadIZI.roa Signing time: Thu 01 Jan 2026 14:19:19 +0000 ROA not before: Thu 01 Jan 2026 14:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203503 IP address blocks: 185.132.88.0/24 maxlen: 24 185.132.89.0/24 maxlen: 24 185.132.91.0/24 maxlen: 24 2a06:e140::/29 maxlen: 29 2a06:e140::/30 maxlen: 30 2a06:e144::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.crl rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:64:35:39:c4:31:23:b8:3e:8a:5e:6e:55:42:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=167d54d8cb6a8309c512605657c2563e3a1aaa69 Validity Not Before: Jan 1 14:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=172a014b3b2edc012ca50f2035aa39b8d69d2192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:70:98:ba:2f:69:3e:64:84:a2:b1:1d:f8:04: 3f:8b:94:ce:a4:29:07:59:8d:f8:d7:a4:3b:25:d9: 98:b9:c0:ee:40:6d:84:53:cc:6a:52:ae:66:79:af: ee:a3:c0:51:a7:f6:b8:17:07:37:e3:e2:38:1b:07: 07:04:92:b2:08:7c:a2:2c:9a:ce:1c:96:5c:8f:6b: da:51:50:b3:b0:5f:43:a5:44:3d:b8:eb:61:ab:e7: a0:b9:18:a2:77:17:0a:b7:cd:dc:a3:8f:90:18:ce: b1:b7:da:a2:4f:02:89:ae:b0:47:c3:e3:e7:dc:2e: 47:32:41:74:6d:47:58:f3:3c:65:85:ef:6c:70:ac: f8:50:36:18:93:2a:09:56:67:04:fa:0d:69:1a:f3: 62:57:f4:07:c3:9f:e6:52:a6:66:92:59:43:31:02: e3:c4:db:93:e1:30:03:fd:3c:68:3f:aa:65:7b:b3: f0:85:54:ac:ae:c5:06:79:48:e5:44:43:24:03:a9: 78:12:99:e6:cd:b7:e7:53:c1:44:00:28:18:4e:b8: b0:78:1c:9e:6a:ef:bc:6e:d4:9d:e5:39:64:b6:5f: 23:9a:46:25:ce:a1:b9:3f:68:e0:2f:f5:e5:d2:86: 72:44:b1:52:96:f0:37:80:1c:f5:35:f4:0c:d4:4f: f8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:2A:01:4B:3B:2E:DC:01:2C:A5:0F:20:35:AA:39:B8:D6:9D:21:92 X509v3 Authority Key Identifier: keyid:16:7D:54:D8:CB:6A:83:09:C5:12:60:56:57:C2:56:3E:3A:1A:AA:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/FyoBSzsu3AEspQ8gNao5uNadIZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.132.88.0/23 185.132.91.0/24 IPv6: 2a06:e140::/29 Signature Algorithm: sha256WithRSAEncryption 77:64:33:5e:d7:1a:fa:4b:9b:48:cf:0b:31:14:a1:cf:f6:d8: ea:5e:61:8c:76:ae:fc:fb:e8:99:99:83:32:a9:2d:b6:d6:aa: 03:e6:44:33:2e:cc:d4:d5:7f:af:d7:2e:2b:ec:fd:ef:15:e4: 70:b4:6f:e0:18:48:98:dc:3a:5e:83:86:84:09:9e:77:4b:2f: df:02:74:6f:b5:01:7e:9e:6b:76:b8:af:89:13:41:2d:b0:67: 36:6d:fd:de:32:fa:5e:14:94:a8:7b:f2:7d:76:f3:3f:ee:27: 9e:fa:f9:ca:33:61:d1:c2:87:86:f2:30:a3:ef:bd:27:ae:55: 8c:42:a3:12:19:25:06:32:a5:df:51:89:f3:9b:13:9c:52:ab: cb:eb:aa:4a:fe:df:24:87:3c:0d:ed:05:dc:3c:95:d4:52:f3: ec:6d:6d:9e:ed:54:34:1f:17:7c:f8:b8:79:50:ef:8e:a2:c2: 3d:6d:96:67:44:03:d8:64:c5:a6:43:1a:34:7c:e4:63:c6:f6: 92:07:59:8a:2f:d7:30:39:b0:a7:fe:e6:5d:9d:28:64:9c:a4: 48:47:e2:52:da:1d:cf:dd:d3:d7:e0:66:df:3c:7b:7e:de:e4: 1d:03:08:10:32:63:cf:95:1c:b8:9b:68:e0:e8:31:59:f2:dc: e7:c2:40:46 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57WQ1OcQxI7g+il5uVUJxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2N2Q1NGQ4Y2I2YTgzMDljNTEyNjA1NjU3YzI1NjNlM2Ex YWFhNjkwHhcNMjYwMTAxMTQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzJhMDE0YjNiMmVkYzAxMmNhNTBmMjAzNWFhMzliOGQ2OWQyMTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnCYui9pPmSEorEd+AQ/i5TOpCkH WY3416Q7JdmYucDuQG2EU8xqUq5mea/uo8BRp/a4Fwc34+I4GwcHBJKyCHyiLJrO HJZcj2vaUVCzsF9DpUQ9uOthq+eguRiidxcKt83co4+QGM6xt9qiTwKJrrBHw+Pn 3C5HMkF0bUdY8zxlhe9scKz4UDYYkyoJVmcE+g1pGvNiV/QHw5/mUqZmkllDMQLj xNuT4TAD/TxoP6ple7PwhVSsrsUGeUjlREMkA6l4EpnmzbfnU8FEACgYTriweBye au+8btSd5Tlktl8jmkYlzqG5P2jgL/Xl0oZyRLFSlvA3gBz1NfQM1E/40QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBcqAUs7LtwBLKUPIDWqObjWnSGSMB8GA1UdIwQY MBaAFBZ9VNjLaoMJxRJgVlfCVj46GqppMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm4xVTJNdHFnd25GRW1CV1Y4SldQam9hcW1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTk2MzQtOTIzZC00Zjk4LTgzOGEt N2UzOGRiZDU2NjRmLzEvRnlvQlN6c3UzQUVzcFE4Z05hbzV1TmFkSVpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81MTk2MzQtOTIzZC00Zjk4LTgzOGEtN2UzOGRiZDU2NjRm LzEvRm4xVTJNdHFnd25GRW1CV1Y4SldQam9hcW1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBuYRYAwQA uYRbMA0EAgACMAcDBQMqBuFAMA0GCSqGSIb3DQEBCwUAA4IBAQB3ZDNe1xr6S5tI zwsxFKHP9tjqXmGMdq78++iZmYMyqS221qoD5kQzLszU1X+v1y4r7P3vFeRwtG/g GEiY3Dpeg4aECZ53Sy/fAnRvtQF+nmt2uK+JE0EtsGc2bf3eMvpeFJSoe/J9dvM/ 7iee+vnKM2HRwoeG8jCj770nrlWMQqMSGSUGMqXfUYnzmxOcUqvL66pK/t8khzwN 7QXcPJXUUvPsbW2e7VQ0Hxd8+Lh5UO+OosI9bZZnRAPYZMWmQxo0fORjxvaSB1mK L9cwObCn/uZdnShknKRIR+JS2h3P3dPX4GbfPHt+3uQdAwgQMmPPlRy4m2jg6DFZ 8tznwkBG -----END CERTIFICATE-----Generated at Mon Feb 9 22:58:16 2026 by rpki-client