This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FMALNbL8120naXjFafTvYgHrfTQ.roa File: FMALNbL8120naXjFafTvYgHrfTQ.roa (raw, json) Hash identifier: lUDk/PGBW3acWjI5AQwV4nY2giRygUgiRlER2G7cbWs= Subject key identifier: 14:C0:0B:35:B2:FC:D7:6D:27:69:78:C5:69:F4:EF:62:01:EB:7D:34 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB348157C5A6D28E1D0E4EC3231565 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FMALNbL8120naXjFafTvYgHrfTQ.roa Signing time: Fri 02 Jan 2026 08:20:27 +0000 ROA not before: Fri 02 Jan 2026 08:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49592 IP address blocks: 151.241.17.0/24 maxlen: 24 151.242.111.0/24 maxlen: 24 151.243.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:34:81:57:c5:a6:d2:8e:1d:0e:4e:c3:23:15:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14c00b35b2fcd76d276978c569f4ef6201eb7d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0f:8e:1c:4b:28:48:b2:62:4a:f7:02:c1:60: 26:cb:d9:c1:71:66:a2:51:d2:01:23:c0:97:4b:5a: d4:e2:88:fc:89:46:2f:a4:53:49:de:d1:6f:4d:1c: 4f:7d:8c:d4:6b:2a:ee:0a:e1:26:df:6f:a7:41:ee: c3:05:9b:aa:6e:43:2b:29:09:5c:87:2d:02:db:61: be:19:9e:95:6c:65:00:f8:91:a5:d4:cd:ed:c9:97: 2b:b0:de:af:2e:d3:34:ab:94:f1:ce:48:df:64:e6: ca:4a:c3:71:1a:f9:84:ff:b3:f1:73:df:c7:55:2d: b7:eb:8c:0d:a4:f2:7b:1d:d3:b7:da:ff:6b:8f:f2: b7:ac:3a:9a:19:b4:f9:d4:5c:81:48:69:46:54:17: 37:9c:ef:b5:41:e0:a1:41:62:32:da:a4:f4:29:7b: 8a:f2:de:77:31:f7:a5:00:69:ed:a0:dd:22:02:e5: e8:a4:9c:10:55:34:59:e5:b8:fc:1c:6d:f6:0a:aa: 64:cc:fe:ab:96:ba:89:d8:7e:de:e2:56:8b:d3:00: 3a:1b:d7:02:e4:bd:9b:6d:17:dd:f2:4b:db:ee:fc: 95:93:63:26:63:23:64:7f:a7:9d:3f:b2:72:b0:ab: 93:79:11:d9:9a:83:80:c3:c7:a3:62:4f:26:d7:46: 86:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C0:0B:35:B2:FC:D7:6D:27:69:78:C5:69:F4:EF:62:01:EB:7D:34 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FMALNbL8120naXjFafTvYgHrfTQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.17.0/24 151.242.111.0/24 151.243.253.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:c9:1e:b3:61:f4:f7:5c:76:52:3c:0d:23:22:cb:7e:22:64: c6:e4:75:d9:bc:7c:e8:77:84:22:13:ab:f6:04:28:70:cc:d8: 21:2e:bb:5e:13:cd:f8:6d:de:d8:f4:75:40:5e:90:bb:4d:16: fc:0e:23:8d:c3:45:1f:b6:fa:08:31:91:83:32:59:dc:7a:ab: c4:08:43:09:0a:1d:96:ef:7c:31:5f:4d:d1:18:6a:90:04:fa: 8a:b0:7a:38:11:99:d2:99:91:1b:ce:14:be:df:68:77:e1:2b: da:54:ec:63:4a:b6:3b:75:be:1d:44:5c:49:ed:87:c8:06:11: 09:c6:83:5b:85:e4:69:41:17:c1:f1:e7:bc:38:0b:5a:56:b8: 4b:fe:af:f8:e0:e6:a2:03:e0:0e:17:76:19:d8:88:fc:82:09: a8:35:2e:bd:cf:55:71:23:c9:56:ce:48:60:b4:95:be:cc:ae: 28:ab:9a:a6:2c:1a:42:24:75:ca:7d:5e:14:bf:d1:62:84:53: f5:b4:9c:13:fe:d7:9f:02:99:e2:c4:43:d9:1f:85:a9:46:2a: f5:b7:8f:55:dd:1e:4a:d8:f3:c6:a7:66:e4:8e:2b:46:ab:7a: f2:08:1b:cc:ba:60:fe:c0:93:fc:09:bd:2f:0f:79:63:e5:72: c7:af:80:08 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9yzSBV8Wm0o4dDk7DIxVlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGMwMGIzNWIyZmNkNzZkMjc2OTc4YzU2OWY0ZWY2MjAxZWI3ZDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw+OHEsoSLJiSvcCwWAmy9nBcWai UdIBI8CXS1rU4oj8iUYvpFNJ3tFvTRxPfYzUayruCuEm32+nQe7DBZuqbkMrKQlc hy0C22G+GZ6VbGUA+JGl1M3tyZcrsN6vLtM0q5TxzkjfZObKSsNxGvmE/7Pxc9/H VS2364wNpPJ7HdO32v9rj/K3rDqaGbT51FyBSGlGVBc3nO+1QeChQWIy2qT0KXuK 8t53MfelAGntoN0iAuXopJwQVTRZ5bj8HG32CqpkzP6rlrqJ2H7e4laL0wA6G9cC 5L2bbRfd8kvb7vyVk2MmYyNkf6edP7JysKuTeRHZmoOAw8ejYk8m10aGKwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBTACzWy/NdtJ2l4xWn072IB6300MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvRk1BTE5iTDgxMjBuYVhqRmFmVHZZZ0hyZlRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/ERAwQA l/JvAwQAl/P9MA0GCSqGSIb3DQEBCwUAA4IBAQCOyR6zYfT3XHZSPA0jIst+ImTG 5HXZvHzod4QiE6v2BChwzNghLrteE834bd7Y9HVAXpC7TRb8DiONw0UftvoIMZGD MlnceqvECEMJCh2W73wxX03RGGqQBPqKsHo4EZnSmZEbzhS+32h34SvaVOxjSrY7 db4dRFxJ7YfIBhEJxoNbheRpQRfB8ee8OAtaVrhL/q/44OaiA+AOF3YZ2Ij8ggmo NS69z1VxI8lWzkhgtJW+zK4oq5qmLBpCJHXKfV4Uv9FihFP1tJwT/tefApnixEPZ H4WpRir1t49V3R5K2PPGp2bkjitGq3ryCBvMumD+wJP8Cb0vD3lj5XLHr4AI -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:38 2026 by rpki-client