This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/Fym1WDAWGgMSosv4mRAOR2Zd1uc.roa File: Fym1WDAWGgMSosv4mRAOR2Zd1uc.roa (raw, json) Hash identifier: vZJwqpl7spZp55ORY+9XKXnqFR+l7MtH4O4BrsC2PHQ= Subject key identifier: 17:29:B5:58:30:16:1A:03:12:A2:CB:F8:99:10:0E:47:66:5D:D6:E7 Certificate issuer: /CN=487689024f16e7bc2e909706c06d91903c5c7dac Certificate serial: 019B7DCA8CAB8D428903C9496DAFAF27D0E9 Authority key identifier: 48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/Fym1WDAWGgMSosv4mRAOR2Zd1uc.roa Signing time: Fri 02 Jan 2026 08:19:44 +0000 ROA not before: Fri 02 Jan 2026 08:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208015 IP address blocks: 45.92.112.0/22 maxlen: 22 2a0e:20c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:8c:ab:8d:42:89:03:c9:49:6d:af:af:27:d0:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=487689024f16e7bc2e909706c06d91903c5c7dac Validity Not Before: Jan 2 08:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1729b55830161a0312a2cbf899100e47665dd6e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4a:9f:5e:98:cf:94:8a:90:44:5e:c8:09:4a: 07:a2:7a:63:d0:57:b8:30:de:62:88:4f:7b:49:59: d7:4c:37:2c:a4:2c:03:53:28:37:3b:3a:d8:ac:9e: 8b:a3:f8:ab:af:4a:31:16:46:ab:d3:75:ba:ce:0f: ab:fc:85:df:80:ae:b4:d9:51:20:61:26:c1:88:34: 9b:4f:b2:62:81:7d:e6:9e:71:a2:22:87:c0:17:cd: 52:74:66:6a:c1:f9:f2:f1:c2:ef:f1:5e:3c:d4:8d: 0e:13:22:5a:48:bf:83:2f:df:92:9e:a0:56:a6:5e: b0:88:d9:45:b6:69:b2:76:10:34:3d:e0:a4:61:8d: fa:59:25:59:48:34:90:99:12:d2:db:f2:14:ff:6a: 2d:de:85:87:20:c1:28:6b:47:b4:d6:82:9e:e5:fb: ca:2a:85:7b:b6:58:d4:5e:2e:ff:4a:0f:52:d4:a3: b5:33:c3:07:b8:81:e4:ba:ef:de:6c:51:41:73:04: a0:37:ba:aa:45:46:73:e6:13:99:98:58:cc:7b:8d: 3a:f0:b2:f1:02:f2:c4:d1:8b:bd:20:df:40:5f:ce: ac:88:1a:a1:c6:12:1f:92:2e:01:b0:92:4d:61:0d: 16:b9:5b:d8:9f:f6:e7:8a:9d:73:cd:cd:86:ae:43: e4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:29:B5:58:30:16:1A:03:12:A2:CB:F8:99:10:0E:47:66:5D:D6:E7 X509v3 Authority Key Identifier: keyid:48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/Fym1WDAWGgMSosv4mRAOR2Zd1uc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.112.0/22 IPv6: 2a0e:20c0::/29 Signature Algorithm: sha256WithRSAEncryption 9a:66:96:2e:dd:55:b6:5f:de:31:38:a2:4f:8e:80:2d:68:d4: 2c:df:da:87:d4:08:18:cf:89:ae:c0:f8:29:98:94:fd:1a:fe: e8:f4:e8:52:53:6b:ba:c8:b5:da:a2:b1:8e:b0:e3:0e:63:9b: 4d:6a:47:d9:a7:db:9f:59:e9:d7:2a:bd:c1:f1:60:f9:89:e5: 0a:d8:cb:12:2d:d1:64:7a:de:6e:26:7e:2b:a6:5c:cb:a1:80: 70:29:52:39:d5:a4:79:ff:c1:6d:d4:c7:65:d2:dc:66:21:2a: 4d:fb:1a:d1:c6:e4:af:4d:2c:e7:29:aa:07:19:4f:eb:e5:91: 71:9d:32:5a:7c:ab:ba:99:34:34:5c:25:3f:06:a5:ce:04:ff: 65:28:13:94:7f:97:74:e1:de:fe:ad:83:0f:33:f6:05:92:14: a7:ac:25:2f:90:e0:9a:d3:7e:58:95:8e:19:fe:14:22:8d:95: 39:b0:ab:0b:8e:e1:61:f5:b8:10:07:19:39:be:af:d9:9d:43: f3:4d:51:e8:95:ed:b3:2f:90:14:b5:f5:22:14:e2:63:e9:3a: 21:5a:7e:c3:1d:3d:ab:61:48:03:da:8b:0c:1d:98:c8:3a:0c: 1a:1a:1a:f0:9e:b5:71:3a:e9:bc:dc:bd:26:67:9a:03:5f:63: 73:9c:0f:a0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yoyrjUKJA8lJba+vJ9DpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NzY4OTAyNGYxNmU3YmMyZTkwOTcwNmMwNmQ5MTkwM2M1 YzdkYWMwHhcNMjYwMTAyMDgxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzI5YjU1ODMwMTYxYTAzMTJhMmNiZjg5OTEwMGU0NzY2NWRkNmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkqfXpjPlIqQRF7ICUoHonpj0Fe4 MN5iiE97SVnXTDcspCwDUyg3OzrYrJ6Lo/irr0oxFkar03W6zg+r/IXfgK602VEg YSbBiDSbT7JigX3mnnGiIofAF81SdGZqwfny8cLv8V481I0OEyJaSL+DL9+SnqBW pl6wiNlFtmmydhA0PeCkYY36WSVZSDSQmRLS2/IU/2ot3oWHIMEoa0e01oKe5fvK KoV7tljUXi7/Sg9S1KO1M8MHuIHkuu/ebFFBcwSgN7qqRUZz5hOZmFjMe4068LLx AvLE0Yu9IN9AX86siBqhxhIfki4BsJJNYQ0WuVvYn/bnip1zzc2GrkPkXwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBcptVgwFhoDEqLL+JkQDkdmXdbnMB8GA1UdIwQY MBaAFEh2iQJPFue8LpCXBsBtkZA8XH2sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0hhSkFrOFc1N3d1a0pjR3dHMlJrRHhjZmF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jN2FmYjEtZjAwZi00OWQ3LTlmMTEt NmU2MzYxYmVhOTg5LzEvRnltMVdEQVdHZ01Tb3N2NG1SQU9SMlpkMXVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9jN2FmYjEtZjAwZi00OWQ3LTlmMTEtNmU2MzYxYmVhOTg5 LzEvU0hhSkFrOFc1N3d1a0pjR3dHMlJrRHhjZmF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVxwMA0E AgACMAcDBQMqDiDAMA0GCSqGSIb3DQEBCwUAA4IBAQCaZpYu3VW2X94xOKJPjoAt aNQs39qH1AgYz4muwPgpmJT9Gv7o9OhSU2u6yLXaorGOsOMOY5tNakfZp9ufWenX Kr3B8WD5ieUK2MsSLdFket5uJn4rplzLoYBwKVI51aR5/8Ft1Mdl0txmISpN+xrR xuSvTSznKaoHGU/r5ZFxnTJafKu6mTQ0XCU/BqXOBP9lKBOUf5d04d7+rYMPM/YF khSnrCUvkOCa035YlY4Z/hQijZU5sKsLjuFh9bgQBxk5vq/ZnUPzTVHole2zL5AU tfUiFOJj6TohWn7DHT2rYUgD2osMHZjIOgwaGhrwnrVxOum83L0mZ5oDX2NznA+g -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:46 2026 by rpki-client