This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/FBci10I6aG73ENuNfx7xpq1wj1I.roa File: FBci10I6aG73ENuNfx7xpq1wj1I.roa (raw, json) Hash identifier: 7Qx3boAf1NH/EWgy4dJq6Se8FRdBuYw6f3pqwBtRiL0= Subject key identifier: 14:17:22:D7:42:3A:68:6E:F7:10:DB:8D:7F:1E:F1:A6:AD:70:8F:52 Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Certificate serial: 019B7C807CCC9CDE348764EFED6F0BF54FE7 Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/FBci10I6aG73ENuNfx7xpq1wj1I.roa Signing time: Fri 02 Jan 2026 02:19:13 +0000 ROA not before: Fri 02 Jan 2026 02:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49687 IP address blocks: 5.157.136.0/21 maxlen: 21 5.157.137.0/24 maxlen: 24 5.157.138.0/24 maxlen: 24 5.157.140.0/22 maxlen: 22 5.157.144.0/21 maxlen: 21 5.157.224.0/22 maxlen: 22 37.35.44.0/22 maxlen: 22 146.66.216.0/23 maxlen: 23 178.157.127.0/24 maxlen: 24 188.74.170.0/24 maxlen: 24 188.119.176.0/22 maxlen: 22 2a03:8800::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:7c:cc:9c:de:34:87:64:ef:ed:6f:0b:f5:4f:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Validity Not Before: Jan 2 02:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=141722d7423a686ef710db8d7f1ef1a6ad708f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d8:05:8e:11:00:7d:6c:92:b3:13:42:ed:ec: cc:db:81:5e:71:0e:a6:89:53:5f:68:7e:83:f5:f6: cb:86:d1:ea:66:64:82:51:73:a5:c9:59:67:8d:f9: df:00:ce:30:a5:74:cb:aa:b6:29:03:2d:da:41:c6: 6f:c0:55:b0:15:dd:8a:26:bc:03:14:bb:07:e9:a6: d4:c6:fb:f3:e1:e3:ee:a7:2a:2a:c3:e5:60:7a:42: 98:73:e4:7c:4b:02:2a:a0:62:5b:f3:5e:f3:4f:e1: 64:bc:23:0f:c9:72:ba:e5:1a:a1:01:d9:d9:e2:d4: 13:de:a1:e1:f9:c6:5b:e6:9c:3b:f1:e4:28:ff:b7: 15:62:e7:79:34:48:1c:48:67:52:4c:42:90:aa:5e: c9:84:6c:8b:62:e2:5a:f4:98:34:d4:0f:64:41:be: 6c:e9:2a:c3:09:84:d7:c9:96:33:74:54:f5:c5:9d: 53:96:56:ed:60:0f:48:00:ab:31:20:36:9f:da:40: f3:3c:c8:8b:e0:b5:6e:6c:ff:83:c8:bf:a5:0b:b7: 9a:f8:dc:1a:a5:ed:d1:49:aa:c8:42:ae:fa:09:e0: 30:ba:87:b9:67:66:1e:fa:7c:7c:41:ea:db:a5:42: 3b:21:7d:99:58:21:ac:8f:d2:f7:95:84:6e:79:eb: 1f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:17:22:D7:42:3A:68:6E:F7:10:DB:8D:7F:1E:F1:A6:AD:70:8F:52 X509v3 Authority Key Identifier: keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/FBci10I6aG73ENuNfx7xpq1wj1I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.157.136.0-5.157.151.255 5.157.224.0/22 37.35.44.0/22 146.66.216.0/23 178.157.127.0/24 188.74.170.0/24 188.119.176.0/22 IPv6: 2a03:8800::/32 Signature Algorithm: sha256WithRSAEncryption 1d:75:f0:ff:60:53:88:0f:fd:0a:54:ce:d9:23:9f:6d:fc:57: 5a:4d:20:7f:47:cb:1c:ff:3a:a5:67:ef:56:58:cd:e9:10:76: 08:9e:a0:8a:ef:7c:85:ba:b1:8f:04:49:42:3c:46:39:e7:17: b0:02:cf:31:f7:6f:ca:31:ad:33:e0:60:a8:e6:02:3a:87:12: e7:ac:ba:ba:8f:67:66:c9:e9:46:e4:26:77:a3:94:b7:cd:67: 8e:9a:0d:2b:06:5c:2e:5d:c6:24:13:93:b2:db:0e:1d:48:73: d3:d1:e9:07:9f:56:ca:43:9e:09:94:85:9e:dc:0c:51:2c:fe: 04:ca:eb:a5:33:b3:0f:fb:3e:cc:eb:aa:05:81:cb:b2:ce:8e: 98:0e:71:b5:a3:1e:a9:10:cf:d3:1b:53:25:53:07:7f:53:67: c3:e8:59:49:27:17:5f:10:9b:53:a3:58:4c:4d:77:59:91:54: a1:2a:be:58:37:03:4e:a5:a1:d5:22:57:35:6a:e5:da:25:c9: 2a:d7:cc:16:36:67:82:1c:1c:76:db:0f:03:b9:af:bb:b3:bd: 8f:49:ea:23:e8:e5:f0:a1:78:80:94:66:93:6f:0f:dc:54:b8: 52:46:64:a5:99:20:47:ac:7b:3b:c1:c3:43:0f:6c:cb:76:c1: 1f:26:84:4a -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgISAZt8gHzMnN40h2Tv7W8L9U/nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4 ZDFkMjYwHhcNMjYwMTAyMDIxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDE3MjJkNzQyM2E2ODZlZjcxMGRiOGQ3ZjFlZjFhNmFkNzA4ZjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9gFjhEAfWySsxNC7ezM24FecQ6m iVNfaH6D9fbLhtHqZmSCUXOlyVlnjfnfAM4wpXTLqrYpAy3aQcZvwFWwFd2KJrwD FLsH6abUxvvz4ePupyoqw+VgekKYc+R8SwIqoGJb817zT+FkvCMPyXK65RqhAdnZ 4tQT3qHh+cZb5pw78eQo/7cVYud5NEgcSGdSTEKQql7JhGyLYuJa9Jg01A9kQb5s 6SrDCYTXyZYzdFT1xZ1TllbtYA9IAKsxIDaf2kDzPMiL4LVubP+DyL+lC7ea+Nwa pe3RSarIQq76CeAwuoe5Z2Ye+nx8QerbpUI7IX2ZWCGsj9L3lYRueesfrQIDAQAB o4ICRDCCAkAwHQYDVR0OBBYEFBQXItdCOmhu9xDbjX8e8aatcI9SMB8GA1UdIwQY MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt ZmE5Y2I1MWNkMGYxLzEvRkJjaTEwSTZhRzczRU51TmZ4N3hwcTF3ajFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTA4BAIAATAyMAwDBAMFnYgD BAMFnZADBAIFneADBAIlIywDBAGSQtgDBACynX8DBAC8SqoDBAK8d7AwDQQCAAIw BwMFACoDiAAwDQYJKoZIhvcNAQELBQADggEBAB118P9gU4gP/QpUztkjn238V1pN IH9Hyxz/OqVn71ZYzekQdgieoIrvfIW6sY8ESUI8RjnnF7ACzzH3b8oxrTPgYKjm AjqHEuesurqPZ2bJ6UbkJnejlLfNZ46aDSsGXC5dxiQTk7LbDh1Ic9PR6QefVspD ngmUhZ7cDFEs/gTK66Uzsw/7PszrqgWBy7LOjpgOcbWjHqkQz9MbUyVTB39TZ8Po WUknF18Qm1OjWExNd1mRVKEqvlg3A06lodUiVzVq5dolySrXzBY2Z4IcHHbbDwO5 r7uzvY9J6iPo5fCheICUZpNvD9xUuFJGZKWZIEesezvBw0MPbMt2wR8mhEo= -----END CERTIFICATE-----Generated at Mon Jan 19 20:34:55 2026 by rpki-client