This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/FXAzI68zn2MhAmyLaAVs5acySp8.roa File: FXAzI68zn2MhAmyLaAVs5acySp8.roa (raw, json) Hash identifier: 0tRXxkEiNEXv52H1UOhctD+Lw3+UX2F5o1ZQoQd1xvE= Subject key identifier: 15:70:33:23:AF:33:9F:63:21:02:6C:8B:68:05:6C:E5:A7:32:4A:9F Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Certificate serial: 019B7C8081DFF0100A48A81C4F54B0C18E81 Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/FXAzI68zn2MhAmyLaAVs5acySp8.roa Signing time: Fri 02 Jan 2026 02:19:15 +0000 ROA not before: Fri 02 Jan 2026 02:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207743 IP address blocks: 188.74.140.0/22 maxlen: 22 188.74.240.0/22 maxlen: 24 188.119.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:81:df:f0:10:0a:48:a8:1c:4f:54:b0:c1:8e:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Validity Not Before: Jan 2 02:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15703323af339f6321026c8b68056ce5a7324a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ab:93:ea:b2:fb:07:8c:79:29:72:94:1c:f2: 9f:30:92:a3:3c:33:06:a3:0b:ef:8a:c5:fe:02:3a: 5a:58:3a:e1:cd:3d:9d:a5:19:8f:7b:93:de:ac:29: c4:c6:22:55:ce:d4:18:a3:9c:48:16:ed:7e:20:b4: fd:7e:59:92:4d:77:96:0a:47:7d:6f:8d:88:19:4c: 15:7e:44:9c:9e:1f:da:de:14:a0:55:be:18:38:21: 36:ab:46:45:37:24:ea:6c:70:9e:70:57:e2:56:73: af:f9:25:9e:21:75:a5:ad:61:9e:48:03:d9:bb:f2: d3:a3:3a:35:48:b7:5e:6a:ad:63:d4:60:f5:29:d6: 57:07:46:3b:af:57:76:a7:55:78:85:17:dc:3e:b0: 78:be:b3:b7:70:a7:03:72:e2:e0:b1:fa:eb:f5:76: b4:d9:79:0b:89:45:37:b4:08:1b:10:8f:08:a7:8c: af:24:e6:2f:6b:e9:bc:46:00:a7:0b:cb:9e:78:8c: 53:aa:9e:1c:1a:52:d4:d7:50:f5:87:2d:88:28:89: 77:71:c5:f3:4b:c5:c0:d8:3a:fb:91:e4:4a:2d:97: 8c:93:74:c9:2b:b5:d6:e7:c0:86:af:9e:5a:bc:15: f5:10:b0:84:5e:0d:5c:14:d1:83:27:e2:ac:36:6f: 1c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:70:33:23:AF:33:9F:63:21:02:6C:8B:68:05:6C:E5:A7:32:4A:9F X509v3 Authority Key Identifier: keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/FXAzI68zn2MhAmyLaAVs5acySp8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.74.140.0/22 188.74.240.0/22 188.119.156.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:7e:bb:30:88:d2:17:07:f5:ea:9b:17:22:4c:b5:5e:4a:78: f6:2b:6c:cb:87:32:03:52:3c:eb:78:43:7e:68:ba:0d:78:0d: 9a:95:91:54:1e:d0:01:e0:a2:b2:2b:c1:94:ca:ab:09:8c:17: 70:3c:5d:9d:82:a8:a2:a3:a0:b6:75:62:72:74:6e:90:9e:d0: 82:ce:ea:1d:05:79:2c:50:16:cc:86:58:d5:53:76:3b:5c:0d: f2:e1:5c:44:ad:6a:80:81:9a:18:e8:28:c9:48:aa:bb:ff:df: b7:a8:8d:e9:2e:69:81:e0:75:a2:73:02:db:4b:36:b0:2e:b5: 8a:38:d2:83:cf:1d:95:64:75:35:73:57:75:13:c1:82:58:6f: e1:35:7d:18:b6:b3:b3:44:fd:38:8a:0e:f9:00:fb:8c:c3:ec: 46:17:55:6a:a3:4c:b7:48:90:7d:0b:8a:f5:1d:33:a8:e2:ba: 03:c2:44:48:42:59:76:54:a6:99:29:2b:89:63:78:20:90:fa: 50:88:3c:85:88:5a:ae:19:83:2b:5f:92:e8:be:7d:04:17:3b: 72:23:8d:10:a6:49:3d:73:d3:37:be:a5:84:30:62:66:77:91: 38:2b:a0:0b:e9:35:85:55:78:8e:a6:ed:27:46:0e:c2:34:43: 92:7e:f5:74 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gIHf8BAKSKgcT1SwwY6BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4 ZDFkMjYwHhcNMjYwMTAyMDIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTcwMzMyM2FmMzM5ZjYzMjEwMjZjOGI2ODA1NmNlNWE3MzI0YTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9KuT6rL7B4x5KXKUHPKfMJKjPDMG owvvisX+AjpaWDrhzT2dpRmPe5PerCnExiJVztQYo5xIFu1+ILT9flmSTXeWCkd9 b42IGUwVfkScnh/a3hSgVb4YOCE2q0ZFNyTqbHCecFfiVnOv+SWeIXWlrWGeSAPZ u/LTozo1SLdeaq1j1GD1KdZXB0Y7r1d2p1V4hRfcPrB4vrO3cKcDcuLgsfrr9Xa0 2XkLiUU3tAgbEI8Ip4yvJOYva+m8RgCnC8ueeIxTqp4cGlLU11D1hy2IKIl3ccXz S8XA2Dr7keRKLZeMk3TJK7XW58CGr55avBX1ELCEXg1cFNGDJ+KsNm8cGQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBVwMyOvM59jIQJsi2gFbOWnMkqfMB8GA1UdIwQY MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt ZmE5Y2I1MWNkMGYxLzEvRlhBekk2OHpuMk1oQW15TGFBVnM1YWN5U3A4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCvEqMAwQC vErwAwQBvHecMA0GCSqGSIb3DQEBCwUAA4IBAQBtfrswiNIXB/XqmxciTLVeSnj2 K2zLhzIDUjzreEN+aLoNeA2alZFUHtAB4KKyK8GUyqsJjBdwPF2dgqiio6C2dWJy dG6QntCCzuodBXksUBbMhljVU3Y7XA3y4VxErWqAgZoY6CjJSKq7/9+3qI3pLmmB 4HWicwLbSzawLrWKONKDzx2VZHU1c1d1E8GCWG/hNX0YtrOzRP04ig75APuMw+xG F1Vqo0y3SJB9C4r1HTOo4roDwkRIQll2VKaZKSuJY3ggkPpQiDyFiFquGYMrX5Lo vn0EFztyI40Qpkk9c9M3vqWEMGJmd5E4K6AL6TWFVXiOpu0nRg7CNEOSfvV0 -----END CERTIFICATE-----Generated at Mon Jan 19 20:34:52 2026 by rpki-client