This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/fBEXs-dTnmKjIiNwEfni1rhj8-0.roa File: fBEXs-dTnmKjIiNwEfni1rhj8-0.roa (raw, json) Hash identifier: tYbmFJdA3qGjmuXRVTxySeGXojO7ROAd1nbv5cqUyhg= Subject key identifier: 7C:11:17:B3:E7:53:9E:62:A3:22:23:70:11:F9:E2:D6:B8:63:F3:ED Certificate issuer: /CN=37431f1be9fdc2419098479cde457bbf79571759 Certificate serial: 019B7A5B086D96A96993FAC33F5472083EA4 Authority key identifier: 37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/fBEXs-dTnmKjIiNwEfni1rhj8-0.roa Signing time: Thu 01 Jan 2026 16:19:04 +0000 ROA not before: Thu 01 Jan 2026 16:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 18186 IP address blocks: 185.211.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:08:6d:96:a9:69:93:fa:c3:3f:54:72:08:3e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37431f1be9fdc2419098479cde457bbf79571759 Validity Not Before: Jan 1 16:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c1117b3e7539e62a322237011f9e2d6b863f3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:de:47:8d:ce:30:8b:58:cf:6a:91:a2:31:10: dd:9f:e4:c4:d0:46:00:1f:c6:9c:1f:83:2f:63:74: 56:6f:5d:96:ca:d8:77:91:d4:4a:02:d1:1a:09:86: 1e:6b:62:d4:38:d9:c5:83:91:3e:58:59:e1:8f:00: c6:d7:a0:5b:5d:bd:c7:53:b1:54:2a:88:81:9e:86: 4c:b9:17:75:96:22:08:3d:a4:02:e0:85:59:2f:14: d2:36:1f:3b:00:c8:20:00:bf:13:d6:bf:c5:bd:7c: 3d:0a:dd:9a:c7:2f:d0:f1:77:31:c4:a7:8b:64:6e: e8:66:c5:91:69:86:e2:4c:54:bb:8d:f2:87:be:8d: 7b:a9:ac:84:7a:ac:9f:cb:a7:db:14:05:c1:99:24: ef:07:65:35:1e:87:8a:3c:25:f7:b7:8f:96:0b:12: 10:bf:aa:63:34:a8:f9:df:b4:d9:9b:32:a3:2b:5c: f4:7e:fc:d4:3e:8f:e9:d8:58:98:8e:bd:be:c2:1a: 7a:fc:02:94:ac:a2:31:01:a3:e9:f4:7d:0c:61:e1: 94:54:57:6d:e5:8e:f3:f1:d5:59:6a:ef:cf:32:e6: 5b:03:54:cc:ab:ee:b0:42:22:67:7d:43:ea:59:00: b3:0a:f4:23:45:1b:3b:7e:44:c2:2c:06:55:f3:9e: 38:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:11:17:B3:E7:53:9E:62:A3:22:23:70:11:F9:E2:D6:B8:63:F3:ED X509v3 Authority Key Identifier: keyid:37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/fBEXs-dTnmKjIiNwEfni1rhj8-0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.134.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:c5:78:b3:71:63:e1:22:08:14:ed:0b:4d:6f:d9:6a:a5:44: f3:d0:1c:8c:ce:88:b6:a2:43:5d:63:77:e8:a0:c1:67:98:20: d9:35:cf:b4:a6:7b:67:9c:69:a7:cc:2d:08:09:ee:b6:42:d3: b6:4f:d4:65:fa:a2:31:68:6c:48:b7:c0:48:cd:8b:26:fc:27: 15:d9:f5:cc:79:c6:2f:0a:4b:79:d3:75:3f:c6:c0:f6:ec:c2: 12:d5:5c:f5:b5:d9:59:03:b5:46:e1:cb:a6:6a:b9:7c:66:11: 61:25:36:c5:e5:ae:47:71:4c:60:5b:4f:4d:b1:7f:34:da:aa: ec:be:3a:2d:60:13:f7:d1:42:d4:e0:00:e5:be:fc:5a:21:80: ae:c7:46:54:dc:03:cf:28:57:31:26:b2:e4:69:70:15:a6:9e: 27:9c:c1:bb:92:47:4f:dc:66:6d:e8:2a:d3:23:27:dd:01:28: 63:2b:99:46:a2:3a:54:11:43:1f:89:6b:9f:7d:c5:7d:f5:06: 58:c1:76:61:f6:e7:89:d2:05:41:97:9d:da:0d:ef:41:6c:87: a8:e9:42:51:27:ce:1b:4e:9c:2d:1e:4f:86:81:73:4f:92:fd: 74:0e:7a:d9:16:ec:73:e3:e4:19:51:40:b2:36:e5:54:cc:83: b6:be:ac:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wwhtlqlpk/rDP1RyCD6kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NDMxZjFiZTlmZGMyNDE5MDk4NDc5Y2RlNDU3YmJmNzk1 NzE3NTkwHhcNMjYwMTAxMTYxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzExMTdiM2U3NTM5ZTYyYTMyMjIzNzAxMWY5ZTJkNmI4NjNmM2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl95Hjc4wi1jPapGiMRDdn+TE0EYA H8acH4MvY3RWb12Wyth3kdRKAtEaCYYea2LUONnFg5E+WFnhjwDG16BbXb3HU7FU KoiBnoZMuRd1liIIPaQC4IVZLxTSNh87AMggAL8T1r/FvXw9Ct2axy/Q8XcxxKeL ZG7oZsWRaYbiTFS7jfKHvo17qayEeqyfy6fbFAXBmSTvB2U1HoeKPCX3t4+WCxIQ v6pjNKj537TZmzKjK1z0fvzUPo/p2FiYjr2+whp6/AKUrKIxAaPp9H0MYeGUVFdt 5Y7z8dVZau/PMuZbA1TMq+6wQiJnfUPqWQCzCvQjRRs7fkTCLAZV85447QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHwRF7PnU55ioyIjcBH54ta4Y/PtMB8GA1UdIwQY MBaAFDdDHxvp/cJBkJhHnN5Fe795VxdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjBNZkctbjl3a0dRbUVlYzNrVjd2M2xYRjFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iNTM1NDctZDM0MC00MzkyLWFmNDYt NjE1OTYxMzEyYjUyLzEvZkJFWHMtZFRubUtqSWlOd0VmbmkxcmhqOC0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9iNTM1NDctZDM0MC00MzkyLWFmNDYtNjE1OTYxMzEyYjUy LzEvTjBNZkctbjl3a0dRbUVlYzNrVjd2M2xYRjFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudOGMA0G CSqGSIb3DQEBCwUAA4IBAQArxXizcWPhIggU7QtNb9lqpUTz0ByMzoi2okNdY3fo oMFnmCDZNc+0pntnnGmnzC0ICe62QtO2T9Rl+qIxaGxIt8BIzYsm/CcV2fXMecYv Ckt503U/xsD27MIS1Vz1tdlZA7VG4cumarl8ZhFhJTbF5a5HcUxgW09NsX802qrs vjotYBP30ULU4ADlvvxaIYCux0ZU3APPKFcxJrLkaXAVpp4nnMG7kkdP3GZt6CrT IyfdAShjK5lGojpUEUMfiWuffcV99QZYwXZh9ueJ0gVBl53aDe9BbIeo6UJRJ84b TpwtHk+GgXNPkv10DnrZFuxz4+QZUUCyNuVUzIO2vqx9 -----END CERTIFICATE-----Generated at Mon Jan 19 11:51:32 2026 by rpki-client