This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Fm8UQDDxRj3AapGVONseve1Vu_c.roa File: Fm8UQDDxRj3AapGVONseve1Vu_c.roa (raw, json) Hash identifier: /MMrY/Cw2vuv3Ihg0AIYNFIDKJbp4cDD3gVv3uf72Gk= Subject key identifier: 16:6F:14:40:30:F1:46:3D:C0:6A:91:95:38:DB:1E:BD:ED:55:BB:F7 Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Certificate serial: 019B7AC9030AFD19D050F2DACFA3BD1EA008 Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Fm8UQDDxRj3AapGVONseve1Vu_c.roa Signing time: Thu 01 Jan 2026 18:19:12 +0000 ROA not before: Thu 01 Jan 2026 18:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41789 IP address blocks: 31.129.0.0/20 maxlen: 24 31.129.16.0/24 maxlen: 24 31.129.17.0/24 maxlen: 24 31.129.18.0/24 maxlen: 24 31.129.19.0/24 maxlen: 24 31.129.20.0/24 maxlen: 24 31.129.23.0/24 maxlen: 24 31.129.24.0/24 maxlen: 24 31.129.25.0/24 maxlen: 24 31.129.26.0/24 maxlen: 24 31.129.27.0/24 maxlen: 24 31.129.28.0/24 maxlen: 24 31.129.29.0/24 maxlen: 24 31.129.31.0/24 maxlen: 24 46.19.64.0/22 maxlen: 24 81.200.144.0/21 maxlen: 24 94.198.216.0/22 maxlen: 24 141.98.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:03:0a:fd:19:d0:50:f2:da:cf:a3:bd:1e:a0:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Validity Not Before: Jan 1 18:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=166f144030f1463dc06a919538db1ebded55bbf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c6:2c:fc:cc:40:09:64:bb:5c:d4:4c:38:90: c1:41:d9:20:91:13:a6:99:7f:bd:6c:07:bd:39:c6: 65:ea:e7:a6:bc:e8:dd:05:9e:eb:7d:dc:88:19:44: bf:79:36:87:38:bc:ed:96:77:1b:ac:e4:90:ff:04: e9:70:71:3a:69:95:76:e1:8d:d3:a2:be:da:0b:a7: 04:c8:30:d9:63:8b:bb:3d:1e:2e:fc:82:0e:2f:85: 02:3b:bd:09:12:e6:6d:1f:e3:89:34:49:a7:4d:ee: 03:3f:d8:67:fb:a2:a5:ac:ce:52:cf:e9:78:bd:d1: 7c:0a:eb:4c:da:3e:62:bc:f1:2e:f1:8f:28:9f:3c: 0e:38:c3:01:d6:dc:39:25:21:0e:e5:ef:76:85:fd: 47:09:2d:6f:23:49:ce:69:4f:6d:91:ae:e0:42:fc: 42:cd:3d:46:fe:5e:2a:d6:56:12:cc:04:d0:6c:7c: 74:70:09:c1:82:2e:22:80:18:7d:34:3d:54:93:5a: 5a:38:23:0d:d7:45:86:08:3b:ec:36:5c:f7:3d:e6: 2f:d7:db:84:54:51:aa:c0:5b:5c:3e:5a:19:81:ca: 8d:53:80:46:7c:de:65:fd:c3:57:41:da:6c:4b:24: e6:c0:80:b3:96:d6:c4:59:84:4d:fa:e4:b8:70:35: 43:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6F:14:40:30:F1:46:3D:C0:6A:91:95:38:DB:1E:BD:ED:55:BB:F7 X509v3 Authority Key Identifier: keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Fm8UQDDxRj3AapGVONseve1Vu_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.129.0.0-31.129.20.255 31.129.23.0-31.129.29.255 31.129.31.0/24 46.19.64.0/22 81.200.144.0/21 94.198.216.0/22 141.98.234.0/24 Signature Algorithm: sha256WithRSAEncryption 73:11:9a:f8:67:02:83:3e:75:d5:75:7d:4f:1f:ae:36:3f:7f: 11:8e:cd:72:fb:24:cc:58:7c:03:02:52:5d:6a:01:01:b0:e5: 5a:dc:a2:f3:71:0c:a4:9c:2d:93:d5:e0:46:39:48:8c:10:87: 23:55:fe:84:a7:8f:6c:6d:dd:c4:41:e0:44:8b:32:88:67:f0: 74:be:b8:a1:57:4d:c5:23:62:f9:3a:a1:6a:07:a2:3b:94:e4: 61:77:cf:cb:b0:7c:72:a1:50:ad:dc:3a:ba:e0:6f:d7:f0:88: 60:3e:f9:28:bb:75:8a:3d:e3:e4:30:80:4b:ae:52:4e:a5:52: bb:ae:e3:c6:bc:8b:fe:69:c8:45:f4:f0:d4:7f:10:80:6a:ca: 35:4a:16:37:56:03:d5:5d:f2:1b:d8:40:c2:2f:6c:08:48:de: 3f:77:c4:7e:66:bd:29:6f:be:f3:b9:53:02:ff:67:c5:50:63: 0e:cb:4f:26:b8:98:9b:08:2a:69:7c:7f:e3:f5:01:1d:3d:44: 71:ce:6a:6f:f2:65:99:c3:ea:fa:8a:c5:7c:f5:5a:1c:ab:00: 83:49:38:6c:3f:bc:fc:a7:e6:ff:76:4a:49:d8:d1:78:a5:1b: 4a:4c:86:8c:19:f5:3d:fc:73:15:1c:d2:df:06:3b:9e:b1:ab: d1:e1:6f:4a -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt6yQMK/RnQUPLaz6O9HqAIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2 NGIyMGYwHhcNMjYwMTAxMTgxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjZmMTQ0MDMwZjE0NjNkYzA2YTkxOTUzOGRiMWViZGVkNTViYmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8Ys/MxACWS7XNRMOJDBQdkgkROm mX+9bAe9OcZl6uemvOjdBZ7rfdyIGUS/eTaHOLztlncbrOSQ/wTpcHE6aZV24Y3T or7aC6cEyDDZY4u7PR4u/IIOL4UCO70JEuZtH+OJNEmnTe4DP9hn+6KlrM5Sz+l4 vdF8CutM2j5ivPEu8Y8onzwOOMMB1tw5JSEO5e92hf1HCS1vI0nOaU9tka7gQvxC zT1G/l4q1lYSzATQbHx0cAnBgi4igBh9ND1Uk1paOCMN10WGCDvsNlz3PeYv19uE VFGqwFtcPloZgcqNU4BGfN5l/cNXQdpsSyTmwICzltbEWYRN+uS4cDVDLwIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFBZvFEAw8UY9wGqRlTjbHr3tVbv3MB8GA1UdIwQY MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct NDkwNTI0M2JjODI4LzEvRm04VVFERHhSajNBYXBHVk9Oc2V2ZTFWdV9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4 LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTA/BAIAATA5MAsDAwAfgQME AB+BFDAMAwQAH4EXAwQBH4EcAwQAH4EfAwQCLhNAAwQDUciQAwQCXsbYAwQAjWLq MA0GCSqGSIb3DQEBCwUAA4IBAQBzEZr4ZwKDPnXVdX1PH642P38Rjs1y+yTMWHwD AlJdagEBsOVa3KLzcQyknC2T1eBGOUiMEIcjVf6Ep49sbd3EQeBEizKIZ/B0vrih V03FI2L5OqFqB6I7lORhd8/LsHxyoVCt3Dq64G/X8IhgPvkou3WKPePkMIBLrlJO pVK7ruPGvIv+achF9PDUfxCAaso1ShY3VgPVXfIb2EDCL2wISN4/d8R+Zr0pb77z uVMC/2fFUGMOy08muJibCCppfH/j9QEdPURxzmpv8mWZw+r6isV89VocqwCDSThs P7z8p+b/dkpJ2NF4pRtKTIaMGfU9/HMVHNLfBjuesavR4W9K -----END CERTIFICATE-----Generated at Wed Jan 21 14:11:04 2026 by rpki-client