This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/F4NVtkunXAmQFQS2ZL2xSpqi3Gk.roa File: F4NVtkunXAmQFQS2ZL2xSpqi3Gk.roa (raw, json) Hash identifier: /tbUTyFNIIuITC34A226x/NRmgskkK26DecRkd3Y8Mc= Subject key identifier: 17:83:55:B6:4B:A7:5C:09:90:15:04:B6:64:BD:B1:4A:9A:A2:DC:69 Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8 Certificate serial: 019B7F816EE7A29BD256D9FF51BF2141C1FF Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/F4NVtkunXAmQFQS2ZL2xSpqi3Gk.roa Signing time: Fri 02 Jan 2026 16:19:07 +0000 ROA not before: Fri 02 Jan 2026 16:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 168.199.236.0/22 maxlen: 24 168.199.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 13:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:6e:e7:a2:9b:d2:56:d9:ff:51:bf:21:41:c1:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8 Validity Not Before: Jan 2 16:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=178355b64ba75c09901504b664bdb14a9aa2dc69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ba:38:a5:62:de:47:96:93:75:e2:49:be:a1: 20:ea:61:74:2d:50:b6:2f:9d:19:4c:30:b7:08:0c: 02:94:b1:41:9b:a7:d6:dd:0b:78:14:17:47:1c:88: 68:b8:33:8f:5e:35:56:14:16:dd:59:51:bc:4a:c1: 99:c9:99:bc:01:89:77:40:3e:60:d2:0a:dd:cf:40: 72:74:02:f5:03:4f:a2:30:b4:de:ed:f8:9b:fe:08: 83:df:7d:e1:db:bc:ce:62:8d:f7:9a:92:ca:f7:e5: e4:16:c9:83:d9:4d:dc:67:b6:ba:90:95:da:81:fc: ba:d0:91:90:f1:52:00:1f:40:6c:8d:b9:71:52:65: 3d:ea:21:c4:e3:d1:f1:6a:5c:c0:a0:93:0a:f4:7e: af:9e:2e:48:6e:1c:a0:59:0e:75:14:c0:6b:2f:7d: 6e:ff:97:fa:9f:20:ae:21:af:5d:bc:01:d8:ec:0f: c6:7d:98:cc:27:26:ed:30:4d:a8:2f:1d:95:02:52: c7:6a:c5:75:16:28:59:2e:47:18:55:32:1f:47:72: a0:ca:90:59:05:f6:a6:d9:cd:74:cb:bf:56:90:2d: 35:63:a3:30:5c:ff:34:7a:07:bd:58:68:c2:3d:76: ad:3d:03:20:b6:17:15:d3:23:33:68:c5:1e:91:8c: bc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:83:55:B6:4B:A7:5C:09:90:15:04:B6:64:BD:B1:4A:9A:A2:DC:69 X509v3 Authority Key Identifier: keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/F4NVtkunXAmQFQS2ZL2xSpqi3Gk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.199.236.0/22 168.199.248.0/22 Signature Algorithm: sha256WithRSAEncryption 62:89:1a:ff:49:19:d6:ce:cb:c2:d3:dd:a9:14:c7:70:8d:e2: 81:ca:51:91:af:d0:67:49:cb:0c:72:ac:1b:5d:e3:25:3b:5f: 29:dd:f9:08:d0:dc:1a:66:66:36:1a:1d:8c:ee:19:b6:4d:e3: 6d:93:4b:27:5d:b0:b6:1b:2c:09:28:cb:c3:fa:e7:e0:e4:a2: f7:21:42:e6:20:86:a5:04:d8:a7:96:e9:84:a0:87:7f:70:1a: bc:a0:47:5d:d9:e0:b3:1e:03:a7:19:74:11:45:8e:09:73:f6: 42:8e:84:c8:4a:61:85:89:5f:33:56:5c:c7:97:62:95:7e:eb: 05:87:41:ae:07:95:9c:fc:56:2c:c9:79:33:6b:dc:d9:a1:99: a5:d2:8a:bf:da:2f:72:30:ae:9d:a2:08:a5:66:c5:d7:2a:eb: 2a:97:e1:51:77:76:42:e4:b6:37:1b:83:35:c5:ac:20:25:7f: 5e:6a:33:ba:7e:45:35:b7:a5:3f:1e:98:d1:0c:7e:f1:d6:75: 8d:d1:d7:58:15:84:5b:6b:a1:c7:ed:02:0d:1d:1b:38:c2:3a: 11:ed:bb:f9:d4:59:e6:94:9c:bb:d1:a9:17:06:95:62:ec:18: a0:f9:4a:67:09:f4:09:3e:86:35:4c:01:eb:a3:75:69:37:99: fe:95:bb:49 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/gW7nopvSVtn/Ub8hQcH/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4 ODE3ZDgwHhcNMjYwMTAyMTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzgzNTViNjRiYTc1YzA5OTAxNTA0YjY2NGJkYjE0YTlhYTJkYzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Lo4pWLeR5aTdeJJvqEg6mF0LVC2 L50ZTDC3CAwClLFBm6fW3Qt4FBdHHIhouDOPXjVWFBbdWVG8SsGZyZm8AYl3QD5g 0grdz0BydAL1A0+iMLTe7fib/giD333h27zOYo33mpLK9+XkFsmD2U3cZ7a6kJXa gfy60JGQ8VIAH0BsjblxUmU96iHE49HxalzAoJMK9H6vni5IbhygWQ51FMBrL31u /5f6nyCuIa9dvAHY7A/GfZjMJybtME2oLx2VAlLHasV1FihZLkcYVTIfR3KgypBZ Bfam2c10y79WkC01Y6MwXP80ege9WGjCPXatPQMgthcV0yMzaMUekYy8BwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBeDVbZLp1wJkBUEtmS9sUqaotxpMB8GA1UdIwQY MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt MmQxOTE4YmExYzBlLzEvRjROVnRrdW5YQW1RRlFTMlpMMnhTcHFpM0drLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCqMfsAwQC qMf4MA0GCSqGSIb3DQEBCwUAA4IBAQBiiRr/SRnWzsvC092pFMdwjeKBylGRr9Bn ScsMcqwbXeMlO18p3fkI0NwaZmY2Gh2M7hm2TeNtk0snXbC2GywJKMvD+ufg5KL3 IULmIIalBNinlumEoId/cBq8oEdd2eCzHgOnGXQRRY4Jc/ZCjoTISmGFiV8zVlzH l2KVfusFh0GuB5Wc/FYsyXkza9zZoZml0oq/2i9yMK6dogilZsXXKusql+FRd3ZC 5LY3G4M1xawgJX9eajO6fkU1t6U/HpjRDH7x1nWN0ddYFYRba6HH7QINHRs4wjoR 7bv51FnmlJy70akXBpVi7Big+UpnCfQJPoY1TAHro3VpN5n+lbtJ -----END CERTIFICATE-----Generated at Thu Jan 8 00:16:42 2026 by rpki-client