This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/FGVsTKcXFHABDa_e0HM9Faa7r2M.roa File: FGVsTKcXFHABDa_e0HM9Faa7r2M.roa (raw, json) Hash identifier: 2Iqm//83hIlnGhnfsyksmZkIg0tX+MTyrQg6DXUyYdQ= Subject key identifier: 14:65:6C:4C:A7:17:14:70:01:0D:AF:DE:D0:73:3D:15:A6:BB:AF:63 Certificate issuer: /CN=a3f1b22b2054502bfd3889138291103d83b6a50e Certificate serial: 019B7D5C9E32444A2A06D96961D6C8C4ABFA Authority key identifier: A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/FGVsTKcXFHABDa_e0HM9Faa7r2M.roa Signing time: Fri 02 Jan 2026 06:19:40 +0000 ROA not before: Fri 02 Jan 2026 06:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56582 IP address blocks: 46.235.14.0/24 maxlen: 24 178.210.180.0/24 maxlen: 24 217.70.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:9e:32:44:4a:2a:06:d9:69:61:d6:c8:c4:ab:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3f1b22b2054502bfd3889138291103d83b6a50e Validity Not Before: Jan 2 06:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14656c4ca7171470010dafded0733d15a6bbaf63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:0c:3e:a0:ee:c7:8d:92:c0:c1:91:7d:34:11: cc:d9:51:24:98:6f:0c:8d:0b:78:57:e0:ba:55:65: 1c:2a:68:bb:44:44:d6:18:72:bb:ff:6d:d6:b3:13: b8:94:2a:40:d0:49:eb:5e:1f:ea:1c:b5:4b:b8:11: 83:40:d1:9a:0b:0d:ce:f1:e8:d0:5c:86:2f:c3:11: 49:24:7f:38:29:ac:f7:90:c8:93:4e:76:c2:49:ab: 99:2f:61:49:bd:c0:82:b1:28:6b:21:66:40:aa:d1: 78:5d:5d:59:1f:ca:75:73:18:74:d0:a5:27:44:16: 7d:d9:7a:64:8d:b3:13:3d:a3:a1:7b:fb:3c:b0:11: 97:26:84:3a:9b:66:e3:70:ca:7d:be:0e:fd:20:06: da:39:08:5d:af:b6:b3:a7:7c:39:a3:54:6c:97:1b: 71:bd:4d:d4:d7:52:55:a5:9b:c9:6d:c2:91:cb:fc: 03:14:13:5b:d6:16:ab:2a:cd:e5:05:c0:13:83:17: 0b:1d:bc:53:86:19:c0:9f:ed:f3:91:b7:35:19:c2: 23:9b:50:64:70:97:53:93:d1:91:18:23:6d:57:77: f3:f5:b7:c8:ca:85:67:12:48:db:12:8d:cb:70:93: c0:7d:67:45:f1:12:ca:81:dc:66:df:c7:66:27:a9: ba:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:65:6C:4C:A7:17:14:70:01:0D:AF:DE:D0:73:3D:15:A6:BB:AF:63 X509v3 Authority Key Identifier: keyid:A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/FGVsTKcXFHABDa_e0HM9Faa7r2M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.14.0/24 178.210.180.0/24 217.70.11.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:5c:8e:1e:c7:19:b7:91:f8:c0:94:40:ca:8b:2c:0c:c1:49: e8:94:61:1b:1e:67:b6:64:8f:66:0e:2e:d9:c5:9a:1a:90:a6: c9:e1:3b:d8:bc:68:fa:d4:45:c6:d2:88:e7:ef:4f:b7:08:f2: cd:b0:14:05:63:80:be:95:0b:6b:b7:bb:36:65:8a:32:3a:5e: a5:e2:01:45:ff:6d:0d:00:b7:ef:72:a1:6c:77:54:9e:2c:95: b6:0e:b7:4b:3d:bc:25:a7:eb:4b:99:f4:0e:f4:56:d8:f8:d2: b5:ed:4a:b2:1e:52:16:79:e8:e7:b8:ad:31:cb:3e:f7:60:e7: 34:cb:35:ee:4e:2f:e7:a5:cf:72:46:63:5c:e2:e0:58:b7:31: 80:3f:c2:2a:59:13:5b:77:ec:f9:67:d3:0f:d5:ee:71:5d:06: b8:3a:ba:e5:ee:71:11:62:64:aa:05:37:71:7e:c3:33:88:fb: f2:d9:8f:6d:f4:5f:57:c9:7e:f1:64:22:74:a8:e7:a0:e8:c2: 48:30:26:ae:70:cc:d0:6f:91:ce:5a:88:f2:f6:36:50:5f:2e: 6a:c4:28:03:0b:2a:b1:ee:6d:17:0d:b1:11:50:88:7c:b7:3e: ab:0f:03:62:73:8e:cd:52:35:f4:ce:f5:21:a3:b6:79:ae:99: bc:6d:d2:9b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XJ4yREoqBtlpYdbIxKv6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZjFiMjJiMjA1NDUwMmJmZDM4ODkxMzgyOTExMDNkODNi NmE1MGUwHhcNMjYwMTAyMDYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDY1NmM0Y2E3MTcxNDcwMDEwZGFmZGVkMDczM2QxNWE2YmJhZjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Qw+oO7HjZLAwZF9NBHM2VEkmG8M jQt4V+C6VWUcKmi7RETWGHK7/23WsxO4lCpA0EnrXh/qHLVLuBGDQNGaCw3O8ejQ XIYvwxFJJH84Kaz3kMiTTnbCSauZL2FJvcCCsShrIWZAqtF4XV1ZH8p1cxh00KUn RBZ92XpkjbMTPaOhe/s8sBGXJoQ6m2bjcMp9vg79IAbaOQhdr7azp3w5o1Rslxtx vU3U11JVpZvJbcKRy/wDFBNb1harKs3lBcATgxcLHbxThhnAn+3zkbc1GcIjm1Bk cJdTk9GRGCNtV3fz9bfIyoVnEkjbEo3LcJPAfWdF8RLKgdxm38dmJ6m69wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBRlbEynFxRwAQ2v3tBzPRWmu69jMB8GA1UdIwQY MBaAFKPxsisgVFAr/TiJE4KRED2DtqUOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb19HeUt5QlVVQ3Y5T0lrVGdwRVFQWU8ycFE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9hOGFhZmYtMTJhMS00NjQxLThiOWQt MjRkMjcyY2UxMWUzLzEvRkdWc1RLY1hGSEFCRGFfZTBITTlGYWE3cjJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9hOGFhZmYtMTJhMS00NjQxLThiOWQtMjRkMjcyY2UxMWUz LzEvb19HeUt5QlVVQ3Y5T0lrVGdwRVFQWU8ycFE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALusOAwQA stK0AwQA2UYLMA0GCSqGSIb3DQEBCwUAA4IBAQBPXI4exxm3kfjAlEDKiywMwUno lGEbHme2ZI9mDi7ZxZoakKbJ4TvYvGj61EXG0ojn70+3CPLNsBQFY4C+lQtrt7s2 ZYoyOl6l4gFF/20NALfvcqFsd1SeLJW2DrdLPbwlp+tLmfQO9FbY+NK17UqyHlIW eejnuK0xyz73YOc0yzXuTi/npc9yRmNc4uBYtzGAP8IqWRNbd+z5Z9MP1e5xXQa4 Orrl7nERYmSqBTdxfsMziPvy2Y9t9F9XyX7xZCJ0qOeg6MJIMCaucMzQb5HOWojy 9jZQXy5qxCgDCyqx7m0XDbERUIh8tz6rDwNic47NUjX0zvUho7Z5rpm8bdKb -----END CERTIFICATE-----Generated at Mon Jan 26 14:11:51 2026 by rpki-client