This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/Flz_OFQsmX-w-Rd12UyQRHMKatw.roa File: Flz_OFQsmX-w-Rd12UyQRHMKatw.roa (raw, json) Hash identifier: JA3smf8ytCG+n6SIrvOZ9o06IVKgViJsuYy9wwAuvgw= Subject key identifier: 16:5C:FF:38:54:2C:99:7F:B0:F9:17:75:D9:4C:90:44:73:0A:6A:DC Certificate issuer: /CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125 Certificate serial: 019B7E38F0DD3CD3E8D4946A933FE09048C2 Authority key identifier: BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/Flz_OFQsmX-w-Rd12UyQRHMKatw.roa Signing time: Fri 02 Jan 2026 10:20:19 +0000 ROA not before: Fri 02 Jan 2026 10:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50673 IP address blocks: 185.192.144.0/24 maxlen: 24 185.192.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 01:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f0:dd:3c:d3:e8:d4:94:6a:93:3f:e0:90:48:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125 Validity Not Before: Jan 2 10:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=165cff38542c997fb0f91775d94c9044730a6adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:15:b1:ff:ea:59:38:92:d5:11:5f:f3:bd:65: 21:aa:c3:5a:cb:4c:1a:1d:2a:51:c1:2d:24:d4:7f: aa:92:02:d7:44:79:18:67:b9:9a:ff:f2:27:ef:e7: 78:65:f4:a1:5f:90:65:38:ca:f5:2e:33:f3:83:c1: 46:93:37:55:bf:a9:ff:a6:8b:95:4d:38:c7:b2:55: 45:ef:c0:15:85:c5:86:7c:f6:6b:dd:58:6d:ef:02: f6:d4:0b:5a:b0:2a:b1:cb:1e:df:91:1d:3c:b0:ca: 1b:32:53:fd:ec:5c:fc:a9:ed:5e:ac:c2:a8:05:37: db:e6:f1:cc:fd:a3:3b:dd:c9:aa:37:26:87:37:27: 0c:5a:b3:72:48:a7:ac:3a:45:30:22:9f:0f:0a:7d: 1b:57:41:17:5e:aa:86:18:4c:07:00:64:61:c3:f5: f0:ba:5c:eb:5d:4c:f6:a4:89:6c:a6:a4:16:20:4e: bb:bc:58:e5:12:75:4e:e8:9d:f3:00:d3:88:e3:60: e2:20:6b:f5:d5:b4:57:ec:fd:45:6d:e3:28:37:53: 8a:d6:78:18:af:8b:51:8e:d9:aa:72:3b:ef:7c:1f: ee:cf:d5:11:6a:0e:fc:a4:d7:70:c2:41:17:5d:0f: 68:00:5f:54:2c:81:9b:61:90:2b:31:cd:4b:52:53: 72:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:5C:FF:38:54:2C:99:7F:B0:F9:17:75:D9:4C:90:44:73:0A:6A:DC X509v3 Authority Key Identifier: keyid:BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/Flz_OFQsmX-w-Rd12UyQRHMKatw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.192.144.0/23 Signature Algorithm: sha256WithRSAEncryption 38:75:99:37:d2:15:20:03:82:6b:5c:3d:43:ae:53:5b:5d:f5: 84:61:3d:27:7a:29:60:8e:28:3f:b1:ec:ef:0e:45:eb:e5:67: a1:56:d2:dc:31:08:96:d5:b0:cc:8f:e5:ad:54:ea:f6:25:99: ff:39:e4:a4:81:be:7e:95:b8:f1:4e:6d:1a:fb:8a:32:c4:7e: 5e:8b:db:01:18:90:a9:08:0b:8e:e0:15:f7:d6:40:79:a9:ad: ca:a9:d8:4f:6c:d6:71:45:4e:04:94:ab:e1:56:e4:58:a8:22: 20:3a:86:3b:47:66:e9:61:88:3e:79:79:ed:2c:4d:ce:f8:22: 78:60:f5:8c:52:b2:b1:69:f2:1b:a9:05:b3:23:38:90:76:9a: 7f:a7:72:e1:4c:5b:03:35:4e:8d:35:da:90:15:49:9a:a8:37: fc:92:9f:a1:63:65:da:55:f8:3b:f8:45:7d:81:7f:b2:3a:17: bc:e2:5a:ff:05:50:be:64:24:a5:39:5a:b3:ee:ad:d1:f1:41: 3d:26:de:a3:1c:ff:1f:5d:b4:2d:c5:29:24:b4:e3:7e:ef:6f: 57:e4:5f:21:db:58:12:a0:6b:47:0b:8f:e8:c4:1b:11:6f:83: 81:c2:04:7e:ab:5e:2e:c6:f1:80:95:98:e0:16:d9:b0:f2:53: 42:dd:53:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OPDdPNPo1JRqkz/gkEjCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYzQ3MGU5YjU4ZTU1N2VhOGMxZGJlZGFlYjljNmE1ZmM0 NTUxMjUwHhcNMjYwMTAyMTAyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjVjZmYzODU0MmM5OTdmYjBmOTE3NzVkOTRjOTA0NDczMGE2YWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBWx/+pZOJLVEV/zvWUhqsNay0wa HSpRwS0k1H+qkgLXRHkYZ7ma//In7+d4ZfShX5BlOMr1LjPzg8FGkzdVv6n/pouV TTjHslVF78AVhcWGfPZr3Vht7wL21AtasCqxyx7fkR08sMobMlP97Fz8qe1erMKo BTfb5vHM/aM73cmqNyaHNycMWrNySKesOkUwIp8PCn0bV0EXXqqGGEwHAGRhw/Xw ulzrXUz2pIlspqQWIE67vFjlEnVO6J3zANOI42DiIGv11bRX7P1FbeMoN1OK1ngY r4tRjtmqcjvvfB/uz9URag78pNdwwkEXXQ9oAF9ULIGbYZArMc1LUlNyTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBZc/zhULJl/sPkXddlMkERzCmrcMB8GA1UdIwQY MBaAFL/EcOm1jlV+qMHb7a65xqX8RVElMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yN2IzOWItMDQ0OS00YzY0LWJhNzkt YTJhYTY1NDBmODc1LzEvRmx6X09GUXNtWC13LVJkMTJVeVFSSE1LYXR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8yN2IzOWItMDQ0OS00YzY0LWJhNzktYTJhYTY1NDBmODc1 LzEvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBucCQMA0G CSqGSIb3DQEBCwUAA4IBAQA4dZk30hUgA4JrXD1DrlNbXfWEYT0neilgjig/sezv DkXr5WehVtLcMQiW1bDMj+WtVOr2JZn/OeSkgb5+lbjxTm0a+4oyxH5ei9sBGJCp CAuO4BX31kB5qa3KqdhPbNZxRU4ElKvhVuRYqCIgOoY7R2bpYYg+eXntLE3O+CJ4 YPWMUrKxafIbqQWzIziQdpp/p3LhTFsDNU6NNdqQFUmaqDf8kp+hY2XaVfg7+EV9 gX+yOhe84lr/BVC+ZCSlOVqz7q3R8UE9Jt6jHP8fXbQtxSkktON+729X5F8h21gS oGtHC4/oxBsRb4OBwgR+q14uxvGAlZjgFtmw8lNC3VOb -----END CERTIFICATE-----Generated at Sun Jan 11 11:45:39 2026 by rpki-client