This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/FwHHGDuiIFa52ARkZ9ESZ3au7NI.roa File: FwHHGDuiIFa52ARkZ9ESZ3au7NI.roa (raw, json) Hash identifier: 3HUhYNCu5qpy7dP4zYZjir8YCzM2yFohiBtl0jP26zw= Subject key identifier: 17:01:C7:18:3B:A2:20:56:B9:D8:04:64:67:D1:12:67:76:AE:EC:D2 Certificate issuer: /CN=965135dd42519fdda3dd3fdaa9db3357815fad75 Certificate serial: 019B7CEE01097897A07090A66ACCF971C58C Authority key identifier: 96:51:35:DD:42:51:9F:DD:A3:DD:3F:DA:A9:DB:33:57:81:5F:AD:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/FwHHGDuiIFa52ARkZ9ESZ3au7NI.roa Signing time: Fri 02 Jan 2026 04:18:51 +0000 ROA not before: Fri 02 Jan 2026 04:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212549 IP address blocks: 185.203.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:01:09:78:97:a0:70:90:a6:6a:cc:f9:71:c5:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=965135dd42519fdda3dd3fdaa9db3357815fad75 Validity Not Before: Jan 2 04:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1701c7183ba22056b9d8046467d1126776aeecd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bc:ff:ca:a8:d5:04:f3:1a:b6:52:7d:da:80: d2:7b:41:52:ef:97:c6:21:2c:9c:d1:5b:67:f8:0a: e6:79:a4:99:3f:fc:aa:5a:4f:78:75:ea:bf:ab:b0: a6:bf:97:a3:c3:5d:3b:36:a0:15:bb:e5:56:03:d1: 05:be:11:e6:29:6c:ef:09:4f:31:13:95:61:81:79: 54:b4:11:2d:18:28:3b:15:5f:32:0d:21:91:3a:66: 96:a3:dc:79:b9:55:14:45:7b:29:b3:0b:73:21:ab: 4f:77:17:65:4e:c0:a3:48:36:2a:75:c3:31:d1:41: 55:3f:95:ad:38:4f:1b:4d:28:bb:db:12:e7:ad:3f: f5:5f:b8:94:22:2d:f6:eb:dc:56:02:66:eb:57:cd: 1e:3a:db:88:8a:ab:ee:85:65:e8:20:9c:46:75:ab: 26:66:cc:17:9f:0b:f1:9c:65:0e:0d:74:6c:42:45: 8e:fe:0f:11:ec:7a:53:30:31:49:6d:fe:43:e7:e1: 40:8e:99:d5:ec:46:0f:b0:38:8e:f9:b7:88:15:46: 5a:bd:56:7d:21:86:27:33:9b:64:f2:ed:3b:fc:db: 7e:2b:5e:e1:c8:31:e0:8c:e7:47:38:46:34:d0:5e: 0a:8a:25:17:47:5a:d0:d8:90:95:84:8a:e8:67:ba: 90:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:01:C7:18:3B:A2:20:56:B9:D8:04:64:67:D1:12:67:76:AE:EC:D2 X509v3 Authority Key Identifier: keyid:96:51:35:DD:42:51:9F:DD:A3:DD:3F:DA:A9:DB:33:57:81:5F:AD:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/FwHHGDuiIFa52ARkZ9ESZ3au7NI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.203.89.0/24 Signature Algorithm: sha256WithRSAEncryption 75:a6:5e:5e:ff:26:b1:66:48:4c:3d:ee:7a:e4:46:8b:c7:2a: 0a:19:b2:dc:14:09:db:67:15:dc:54:02:d4:d6:d9:4b:6b:a3: f3:78:93:7d:1d:55:2a:08:84:17:61:e1:27:45:f8:6f:10:8e: 7d:0d:42:94:b1:e7:62:19:ad:c9:94:f3:e4:e9:9a:85:7a:33: 4d:94:94:b0:58:c3:06:6e:0b:37:7c:f8:e3:74:a1:8d:0c:73: 37:23:c8:40:b6:f4:8c:0b:dc:8a:47:56:f5:75:65:dd:0c:47: 1f:48:bc:d4:37:9d:52:fb:b9:2f:cd:99:b7:a2:be:5d:63:af: 4c:aa:c5:c5:e3:53:63:cc:d6:6a:4b:8b:49:b4:a7:00:e0:70: a9:51:b6:03:46:77:0e:d4:d3:1a:17:ef:3b:c3:69:79:50:fd: 0e:e9:aa:f4:63:a3:95:ee:b3:29:49:83:91:b5:ee:49:7f:b8: b4:94:51:5d:29:69:38:da:ea:0d:b0:7a:5b:15:2f:0f:c1:77: cc:2a:52:c4:58:6c:14:f6:71:d7:18:a6:a6:28:27:d5:45:00: 0f:ec:41:2f:13:9c:c4:60:da:55:40:8d:97:de:47:3e:f2:ab: cb:4c:9b:c5:6c:eb:bf:61:ab:9f:96:2d:af:e4:3d:ec:34:5c: 49:59:76:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87gEJeJegcJCmasz5ccWMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NTEzNWRkNDI1MTlmZGRhM2RkM2ZkYWE5ZGIzMzU3ODE1 ZmFkNzUwHhcNMjYwMTAyMDQxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzAxYzcxODNiYTIyMDU2YjlkODA0NjQ2N2QxMTI2Nzc2YWVlY2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7z/yqjVBPMatlJ92oDSe0FS75fG ISyc0Vtn+ArmeaSZP/yqWk94deq/q7Cmv5ejw107NqAVu+VWA9EFvhHmKWzvCU8x E5VhgXlUtBEtGCg7FV8yDSGROmaWo9x5uVUURXspswtzIatPdxdlTsCjSDYqdcMx 0UFVP5WtOE8bTSi72xLnrT/1X7iUIi3269xWAmbrV80eOtuIiqvuhWXoIJxGdasm ZswXnwvxnGUODXRsQkWO/g8R7HpTMDFJbf5D5+FAjpnV7EYPsDiO+beIFUZavVZ9 IYYnM5tk8u07/Nt+K17hyDHgjOdHOEY00F4KiiUXR1rQ2JCVhIroZ7qQIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBcBxxg7oiBWudgEZGfREmd2ruzSMB8GA1UdIwQY MBaAFJZRNd1CUZ/do90/2qnbM1eBX611MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGxFMTNVSlJuOTJqM1RfYXFkc3pWNEZmclhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80NmQ5MDMtYWZkYS00MjFiLThhNjEt MDdlZTI0MmUxMzZkLzEvRndISEdEdWlJRmE1MkFSa1o5RVNaM2F1N05JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS80NmQ5MDMtYWZkYS00MjFiLThhNjEtMDdlZTI0MmUxMzZk LzEvbGxFMTNVSlJuOTJqM1RfYXFkc3pWNEZmclhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuctZMA0G CSqGSIb3DQEBCwUAA4IBAQB1pl5e/yaxZkhMPe565EaLxyoKGbLcFAnbZxXcVALU 1tlLa6PzeJN9HVUqCIQXYeEnRfhvEI59DUKUsediGa3JlPPk6ZqFejNNlJSwWMMG bgs3fPjjdKGNDHM3I8hAtvSMC9yKR1b1dWXdDEcfSLzUN51S+7kvzZm3or5dY69M qsXF41NjzNZqS4tJtKcA4HCpUbYDRncO1NMaF+87w2l5UP0O6ar0Y6OV7rMpSYOR te5Jf7i0lFFdKWk42uoNsHpbFS8PwXfMKlLEWGwU9nHXGKamKCfVRQAP7EEvE5zE YNpVQI2X3kc+8qvLTJvFbOu/Yaufli2v5D3sNFxJWXbW -----END CERTIFICATE-----Generated at Mon Jan 26 19:33:36 2026 by rpki-client