This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/FE3eLed23bz8IL9m2AkFvRX-OPc.roa File: FE3eLed23bz8IL9m2AkFvRX-OPc.roa (raw, json) Hash identifier: kULP38YSVGQm8oMYJwQ0Aqxr+gfWJ74XOmes3IIB/+M= Subject key identifier: 14:4D:DE:2D:E7:76:DD:BC:FC:20:BF:66:D8:09:05:BD:15:FE:38:F7 Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA74E6693E2AA6497F0750C1B476458 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/FE3eLed23bz8IL9m2AkFvRX-OPc.roa Signing time: Fri 02 Jan 2026 12:20:52 +0000 ROA not before: Fri 02 Jan 2026 12:20:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59570 IP address blocks: 185.197.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:4e:66:93:e2:aa:64:97:f0:75:0c:1b:47:64:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=144dde2de776ddbcfc20bf66d80905bd15fe38f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:30:a5:3f:48:e0:3f:6e:a9:7a:42:c5:7d:a7: ed:cb:4a:03:78:1d:c2:20:c4:fb:da:65:74:ac:42: 4f:3f:39:e8:b1:60:cc:ea:b8:5d:e7:33:83:4c:cc: 27:ad:95:b7:6a:ec:b1:44:ba:fb:62:a5:7d:86:f6: b0:24:09:8c:9a:39:15:fc:61:5d:66:33:cf:57:25: 26:87:ca:c4:e9:bc:37:cb:4d:a8:b3:a5:e7:a0:c6: 79:ea:d7:04:e4:55:36:3c:d5:78:cb:55:de:af:75: af:fa:d7:e8:31:05:df:62:c4:12:d7:f6:17:d6:68: 5e:53:0c:3d:7a:93:ab:de:1a:46:e2:ea:87:b9:ba: b1:9f:75:00:cd:ea:a3:2b:d6:4f:18:5b:c7:e2:d2: 01:16:ab:dd:42:e6:be:6a:64:e8:a4:85:cf:90:71: 6c:02:b0:dc:c7:a0:6f:d3:b5:8d:25:a4:49:a2:63: 1e:58:cd:c8:25:5f:f3:ee:9b:d8:f7:a3:8b:2d:4e: ef:d7:60:d6:f9:d4:6b:a3:a7:c2:22:03:ca:c0:68: 5e:c4:04:9d:ea:d8:37:00:3d:c5:1c:d5:dc:01:19: 42:80:62:6e:6d:c2:a9:97:88:37:9e:d3:17:33:ff: ba:1a:eb:6d:79:f6:76:b9:a8:d3:8a:9c:4f:0d:76: 4d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4D:DE:2D:E7:76:DD:BC:FC:20:BF:66:D8:09:05:BD:15:FE:38:F7 X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/FE3eLed23bz8IL9m2AkFvRX-OPc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.197.133.0/24 Signature Algorithm: sha256WithRSAEncryption 31:17:75:e3:49:2a:99:54:c5:97:46:44:28:50:5f:0d:ae:c1: b9:1e:66:1a:7f:0a:ba:ec:ac:5b:ba:66:b8:49:47:d4:35:46: 66:3e:37:b5:d9:db:20:a4:92:e7:1f:e7:2c:10:a9:88:ec:ca: 98:4f:8d:8e:96:6b:9a:68:81:ca:c5:c4:ce:d4:0e:1b:d5:56: 5c:03:82:76:20:ce:b1:8c:4c:f2:54:48:f8:f9:44:6e:26:9c: df:f5:ff:69:5a:49:20:4a:56:0f:51:7a:5f:88:b9:4e:64:21: c5:f1:23:6e:94:f3:ec:ee:0d:15:8f:d2:5a:8a:c9:aa:7c:f8: d9:54:1d:54:7f:d5:ba:b6:ee:a4:94:b7:40:60:32:f4:a4:71: 4d:69:31:2d:9e:f6:64:7e:f2:a5:8b:0b:a2:85:37:e4:42:a4: 3d:7d:8f:b5:5f:71:92:29:cd:e2:d6:02:29:f9:75:1a:1f:fe: 26:02:52:8a:fe:b4:d9:2e:01:2d:86:ba:13:f4:32:d1:4a:93: 46:7f:c6:3e:03:de:b7:5f:d3:c2:c2:62:32:17:ce:50:b2:4c: 1d:78:07:ef:54:1f:6c:1f:8a:a6:db:d8:3d:62:23:82:63:f0: 90:ed:d6:72:06:50:d1:4b:57:4c:3a:f0:0e:ba:b6:d9:b7:ac: fa:cc:15:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p05mk+KqZJfwdQwbR2RYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDRkZGUyZGU3NzZkZGJjZmMyMGJmNjZkODA5MDViZDE1ZmUzOGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzClP0jgP26pekLFfafty0oDeB3C IMT72mV0rEJPPznosWDM6rhd5zODTMwnrZW3auyxRLr7YqV9hvawJAmMmjkV/GFd ZjPPVyUmh8rE6bw3y02os6XnoMZ56tcE5FU2PNV4y1Xer3Wv+tfoMQXfYsQS1/YX 1mheUww9epOr3hpG4uqHubqxn3UAzeqjK9ZPGFvH4tIBFqvdQua+amTopIXPkHFs ArDcx6Bv07WNJaRJomMeWM3IJV/z7pvY96OLLU7v12DW+dRro6fCIgPKwGhexASd 6tg3AD3FHNXcARlCgGJubcKpl4g3ntMXM/+6GuttefZ2uajTipxPDXZNyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBRN3i3ndt28/CC/ZtgJBb0V/jj3MB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvRkUzZUxlZDIzYno4SUw5bTJBa0Z2UlgtT1BjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucWFMA0G CSqGSIb3DQEBCwUAA4IBAQAxF3XjSSqZVMWXRkQoUF8NrsG5HmYafwq67Kxbuma4 SUfUNUZmPje12dsgpJLnH+csEKmI7MqYT42OlmuaaIHKxcTO1A4b1VZcA4J2IM6x jEzyVEj4+URuJpzf9f9pWkkgSlYPUXpfiLlOZCHF8SNulPPs7g0Vj9JaismqfPjZ VB1Uf9W6tu6klLdAYDL0pHFNaTEtnvZkfvKliwuihTfkQqQ9fY+1X3GSKc3i1gIp +XUaH/4mAlKK/rTZLgEthroT9DLRSpNGf8Y+A963X9PCwmIyF85QskwdeAfvVB9s H4qm29g9YiOCY/CQ7dZyBlDRS1dMOvAOurbZt6z6zBXE -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:41 2026 by rpki-client