This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/Fzbx011u7RVOot7S1xohG9qyhz8.roa File: Fzbx011u7RVOot7S1xohG9qyhz8.roa (raw, json) Hash identifier: d3cH8nlBzo4ygFaoC3yncTUnU72/qEe1SfOmm7ZS+sU= Subject key identifier: 17:36:F1:D3:5D:6E:ED:15:4E:A2:DE:D2:D7:1A:21:1B:DA:B2:87:3F Certificate issuer: /CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72 Certificate serial: 019B7E373812ADBD74D61B0A07021F42B619 Authority key identifier: FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/Fzbx011u7RVOot7S1xohG9qyhz8.roa Signing time: Fri 02 Jan 2026 10:18:26 +0000 ROA not before: Fri 02 Jan 2026 10:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57704 IP address blocks: 45.130.96.0/24 maxlen: 24 45.130.97.0/24 maxlen: 24 45.130.98.0/24 maxlen: 24 45.130.99.0/24 maxlen: 24 45.158.156.0/24 maxlen: 24 45.158.157.0/24 maxlen: 24 45.158.158.0/24 maxlen: 24 45.158.159.0/24 maxlen: 24 152.89.40.0/24 maxlen: 24 152.89.41.0/24 maxlen: 24 152.89.42.0/24 maxlen: 24 152.89.43.0/24 maxlen: 24 176.106.40.0/21 maxlen: 24 185.5.220.0/22 maxlen: 22 185.5.220.0/24 maxlen: 24 185.5.221.0/24 maxlen: 24 185.5.222.0/24 maxlen: 24 185.5.223.0/24 maxlen: 24 192.145.120.0/22 maxlen: 22 192.145.120.0/24 maxlen: 24 192.145.121.0/24 maxlen: 24 192.145.122.0/24 maxlen: 24 192.145.123.0/24 maxlen: 24 2a03:7c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:38:12:ad:bd:74:d6:1b:0a:07:02:1f:42:b6:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72 Validity Not Before: Jan 2 10:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1736f1d35d6eed154ea2ded2d71a211bdab2873f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ef:c9:e3:98:a7:06:aa:16:a9:9c:bd:fe:0e: f3:66:23:4d:bc:03:45:a3:fb:84:a7:4d:a4:8b:79: 8c:4b:3b:73:e3:a3:20:06:42:2e:18:15:e1:0c:42: 92:27:0a:15:0a:ec:02:7b:80:12:d5:c1:24:6d:29: c1:d0:ba:ff:f0:8f:cf:53:a2:14:c3:6b:28:65:67: 0f:74:c3:4b:35:43:2a:55:af:99:87:67:ea:c1:2c: f6:cd:0c:8b:89:0c:ff:87:d1:6e:94:c8:8a:6f:9f: 94:4d:18:97:92:ee:2c:18:95:95:e3:de:e8:30:2b: ea:0a:87:af:61:30:72:a6:41:c7:1f:e3:b4:d4:27: 6e:cc:02:33:ad:9b:ce:7c:27:c8:63:a7:ce:a9:2d: 5c:0f:0a:91:0e:13:13:45:b6:5a:f6:57:48:ce:6f: 66:14:0f:08:13:45:07:45:c0:57:c3:57:86:66:b6: 03:d8:c0:46:d4:28:14:3c:22:5e:ca:a8:3c:72:59: 67:3f:67:a9:d7:80:5b:8c:bc:4c:f6:2b:4b:d9:11: 9b:0a:64:5a:a8:07:0f:c3:b9:bb:7c:fa:eb:f0:e0: f1:28:9c:0f:bd:27:69:40:6a:29:af:5f:39:9a:e2: 3d:24:d2:23:34:9e:cc:cc:35:db:10:25:e3:65:b6: 0f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:36:F1:D3:5D:6E:ED:15:4E:A2:DE:D2:D7:1A:21:1B:DA:B2:87:3F X509v3 Authority Key Identifier: keyid:FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/Fzbx011u7RVOot7S1xohG9qyhz8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.96.0/22 45.158.156.0/22 152.89.40.0/22 176.106.40.0/21 185.5.220.0/22 192.145.120.0/22 IPv6: 2a03:7c0::/32 Signature Algorithm: sha256WithRSAEncryption 46:00:61:c5:50:6a:9a:83:f9:76:1d:c0:98:85:bb:c9:5d:23: 8b:bd:21:1c:de:61:31:01:60:cf:06:bf:3e:d7:cc:16:01:60: 41:00:49:50:24:e7:71:3c:28:d4:ef:3b:18:c2:bd:79:8d:2f: 57:fc:82:0d:3d:fa:36:04:63:c3:8f:8d:03:d1:0e:5b:94:bd: 67:14:da:88:47:e7:92:77:7f:af:37:f5:79:a8:76:12:3b:04: cb:74:27:1e:24:34:78:51:92:f0:f6:83:5a:5c:19:ea:93:f0: 5a:ec:65:48:a8:3a:23:16:1f:77:d3:1d:8c:2a:59:d4:03:fe: f2:24:a1:de:5f:6c:b9:18:ec:e2:5e:ef:c5:27:7a:d5:97:e9: fd:11:c5:63:20:a8:54:a2:df:cf:ab:74:8b:87:b1:9b:79:11: 5b:e1:f0:fe:41:ae:2a:37:72:4a:14:95:f0:9a:65:33:2d:cb: 7e:15:ba:5a:16:e6:eb:99:a1:f4:95:40:cc:a9:3e:6b:4c:ba: 45:6a:a2:7b:d8:eb:73:24:82:43:03:3a:cd:5c:38:6d:0b:37: 3a:8c:7c:09:9e:c6:b4:f5:32:c1:23:4f:09:bf:dd:26:d8:fd: f7:6e:bf:cb:02:c6:6d:d7:e5:2d:4d:7d:3f:2d:83:fc:8c:7d: 66:44:cc:a6 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt+NzgSrb101hsKBwIfQrYZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNTZjN2U2NjBiMWM3NGUzYjAzMThiMTQzMzhjM2YwMGRk N2JjNzIwHhcNMjYwMTAyMTAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzM2ZjFkMzVkNmVlZDE1NGVhMmRlZDJkNzFhMjExYmRhYjI4NzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+/J45inBqoWqZy9/g7zZiNNvANF o/uEp02ki3mMSztz46MgBkIuGBXhDEKSJwoVCuwCe4AS1cEkbSnB0Lr/8I/PU6IU w2soZWcPdMNLNUMqVa+Zh2fqwSz2zQyLiQz/h9FulMiKb5+UTRiXku4sGJWV497o MCvqCoevYTBypkHHH+O01CduzAIzrZvOfCfIY6fOqS1cDwqRDhMTRbZa9ldIzm9m FA8IE0UHRcBXw1eGZrYD2MBG1CgUPCJeyqg8cllnP2ep14BbjLxM9itL2RGbCmRa qAcPw7m7fPrr8ODxKJwPvSdpQGopr185muI9JNIjNJ7MzDXbECXjZbYPkwIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFBc28dNdbu0VTqLe0tcaIRvasoc/MB8GA1UdIwQY MBaAFPpWx+ZgscdOOwMYsUM4w/AN17xyMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1sYkg1bUN4eDA0N0F4aXhRempEOEEzWHZISS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvMjc2YzI0LTJhN2YtNDcyNi04ZDlm LThiZjRmZTRjNzczMi8xL0Z6YngwMTF1N1JWT290N1MxeG9oRzlxeWh6OC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODIvMjc2YzI0LTJhN2YtNDcyNi04ZDlmLThiZjRmZTRjNzcz Mi8xLzEtbGJINW1DeHgwNDdBeGl4UXpqRDhBM1h2SEkuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwTAYIKwYBBQUHAQcBAf8EPTA7MCoEAgABMCQDBAItgmAD BAItnpwDBAKYWSgDBAOwaigDBAK5BdwDBALAkXgwDQQCAAIwBwMFACoDB8AwDQYJ KoZIhvcNAQELBQADggEBAEYAYcVQapqD+XYdwJiFu8ldI4u9IRzeYTEBYM8Gvz7X zBYBYEEASVAk53E8KNTvOxjCvXmNL1f8gg09+jYEY8OPjQPRDluUvWcU2ohH55J3 f6839XmodhI7BMt0Jx4kNHhRkvD2g1pcGeqT8FrsZUioOiMWH3fTHYwqWdQD/vIk od5fbLkY7OJe78UnetWX6f0RxWMgqFSi38+rdIuHsZt5EVvh8P5Brio3ckoUlfCa ZTMty34VuloW5uuZofSVQMypPmtMukVqonvY63MkgkMDOs1cOG0LNzqMfAmexrT1 MsEjTwm/3SbY/fduv8sCxm3X5S1NfT8tg/yMfWZEzKY= -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:05 2026 by rpki-client