This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/fmkJzH3NkUCcJph7bWlPwTvK1as.roa File: fmkJzH3NkUCcJph7bWlPwTvK1as.roa (raw, json) Hash identifier: 5sVDquLqlQZjsrPg0UHa9viYVxRAjcZdLVAKXAnlaOQ= Subject key identifier: 7E:69:09:CC:7D:CD:91:40:9C:26:98:7B:6D:69:4F:C1:3B:CA:D5:AB Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Certificate serial: 019B76EB86D96ACC3483257B3EDFC36F49FE Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/fmkJzH3NkUCcJph7bWlPwTvK1as.roa Signing time: Thu 01 Jan 2026 00:18:25 +0000 ROA not before: Thu 01 Jan 2026 00:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213323 IP address blocks: 89.42.132.0/24 maxlen: 24 89.42.135.0/24 maxlen: 24 93.174.166.0/24 maxlen: 24 185.248.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:86:d9:6a:cc:34:83:25:7b:3e:df:c3:6f:49:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Validity Not Before: Jan 1 00:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e6909cc7dcd91409c26987b6d694fc13bcad5ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:80:d7:65:16:db:ce:58:29:15:03:3e:7c:7a: e1:84:ee:a0:af:f8:79:d8:8f:b1:11:eb:79:b0:22: 3b:b4:0d:fc:90:59:40:48:12:f8:2c:ab:1b:85:c9: 1c:8f:b1:55:8c:1e:12:88:ab:ff:19:eb:7a:57:df: 38:75:4c:94:52:46:de:64:52:8c:18:9c:08:2d:4e: 08:f6:34:72:2c:c8:47:03:67:a5:91:26:3b:c6:fe: 5e:cf:e0:fa:3d:5b:0b:07:e1:63:43:60:ca:ef:6e: 5e:e3:6c:45:75:cc:4d:de:77:83:24:62:db:02:79: 0c:5c:98:64:cf:58:f1:b5:3c:67:92:87:b9:8f:6d: 85:b1:1b:e9:f6:0a:4e:03:1e:a3:69:a4:a2:d9:f2: 6e:b3:5e:f2:34:ab:80:1a:85:ff:32:c3:f9:85:a3: 06:e1:3f:02:00:fb:e1:8b:b8:12:2f:26:9a:d0:05: 85:29:48:ac:49:99:e3:a8:e3:be:bd:ff:41:c1:cc: 1b:78:bf:68:6c:03:2d:f4:00:5b:b0:3c:49:ec:5b: 44:0a:72:90:d2:35:db:dd:5d:3a:c5:a3:09:c1:79: 8e:af:c7:8c:2a:7d:bd:29:dd:1a:5a:15:77:77:cc: 9a:93:ce:ba:de:4e:21:5f:92:4e:db:c6:9e:f6:80: c4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:69:09:CC:7D:CD:91:40:9C:26:98:7B:6D:69:4F:C1:3B:CA:D5:AB X509v3 Authority Key Identifier: keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/fmkJzH3NkUCcJph7bWlPwTvK1as.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.42.132.0/24 89.42.135.0/24 93.174.166.0/24 185.248.138.0/24 Signature Algorithm: sha256WithRSAEncryption de:1a:25:66:e5:af:ff:e9:38:69:84:5d:08:77:a5:8f:89:71: f0:42:3b:41:03:f0:9d:06:ee:e8:b6:5b:8c:95:af:99:ca:15: e9:aa:a0:88:84:ef:30:44:ee:87:6d:02:93:3a:35:8f:ba:30: 52:cf:32:40:ae:7a:90:6c:d6:ee:df:bf:fa:a0:82:00:08:9d: 9b:ab:83:b2:97:d7:6c:d5:4b:05:90:22:e9:d9:9b:18:a5:e5: 01:42:0e:aa:00:db:9e:21:5f:38:50:cb:b4:16:f1:f6:6f:10: 7c:43:70:ee:d3:f9:8a:81:67:43:86:ab:8a:f2:24:fa:70:55: f8:d7:73:f7:5a:bb:8c:6e:d2:e4:ab:b5:e1:52:33:36:67:e0: 55:b2:f1:4d:d3:a3:ea:ee:23:04:ba:25:e5:f5:6a:f7:bb:5c: d3:45:af:3f:c9:05:83:a0:ff:73:d8:f5:3a:f8:4a:f5:73:89: b1:db:81:8c:7f:ff:c0:cd:0e:41:6c:98:12:18:b8:1b:41:21: 80:20:36:93:67:c1:4c:91:d8:c1:a1:96:de:3d:3f:76:06:09: a0:93:d3:39:dd:80:e5:c9:a3:b3:f4:e6:28:3a:9c:63:65:18: af:ef:61:74:74:6b:6a:40:ee:58:78:cc:95:aa:2c:3c:ed:7c: 4f:67:3e:99 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt264bZasw0gyV7Pt/Db0n+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3 YjQ1ODkwHhcNMjYwMTAxMDAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTY5MDljYzdkY2Q5MTQwOWMyNjk4N2I2ZDY5NGZjMTNiY2FkNWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoDXZRbbzlgpFQM+fHrhhO6gr/h5 2I+xEet5sCI7tA38kFlASBL4LKsbhckcj7FVjB4SiKv/Get6V984dUyUUkbeZFKM GJwILU4I9jRyLMhHA2elkSY7xv5ez+D6PVsLB+FjQ2DK725e42xFdcxN3neDJGLb AnkMXJhkz1jxtTxnkoe5j22FsRvp9gpOAx6jaaSi2fJus17yNKuAGoX/MsP5haMG 4T8CAPvhi7gSLyaa0AWFKUisSZnjqOO+vf9BwcwbeL9obAMt9ABbsDxJ7FtECnKQ 0jXb3V06xaMJwXmOr8eMKn29Kd0aWhV3d8yak8663k4hX5JO28ae9oDEAQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFH5pCcx9zZFAnCaYe21pT8E7ytWrMB8GA1UdIwQY MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt MmVjZTA0ZTE4NWMyLzEvZm1rSnpIM05rVUNjSnBoN2JXbFB3VHZLMWFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWSqEAwQA WSqHAwQAXa6mAwQAufiKMA0GCSqGSIb3DQEBCwUAA4IBAQDeGiVm5a//6ThphF0I d6WPiXHwQjtBA/CdBu7otluMla+ZyhXpqqCIhO8wRO6HbQKTOjWPujBSzzJArnqQ bNbu37/6oIIACJ2bq4Oyl9ds1UsFkCLp2ZsYpeUBQg6qANueIV84UMu0FvH2bxB8 Q3Du0/mKgWdDhquK8iT6cFX413P3WruMbtLkq7XhUjM2Z+BVsvFN06Pq7iMEuiXl 9Wr3u1zTRa8/yQWDoP9z2PU6+Er1c4mx24GMf//AzQ5BbJgSGLgbQSGAIDaTZ8FM kdjBoZbePT92Bgmgk9M53YDlyaOz9OYoOpxjZRiv72F0dGtqQO5YeMyVqiw87XxP Zz6Z -----END CERTIFICATE-----Generated at Wed Jan 21 11:08:18 2026 by rpki-client