This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/FBhDmdYEI1srtuu7JrFgr66x8ew.roa File: FBhDmdYEI1srtuu7JrFgr66x8ew.roa (raw, json) Hash identifier: R2ovnBFrcn5EnM6GfbKn3aVU8U4YfuAvDOw4VakEfcE= Subject key identifier: 14:18:43:99:D6:04:23:5B:2B:B6:EB:BB:26:B1:60:AF:AE:B1:F1:EC Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58 Certificate serial: 019B7E3842C9A896B13A8BCDEFF5C5AD18F7 Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/FBhDmdYEI1srtuu7JrFgr66x8ew.roa Signing time: Fri 02 Jan 2026 10:19:34 +0000 ROA not before: Fri 02 Jan 2026 10:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.176.100.0/24 maxlen: 24 185.176.101.0/24 maxlen: 24 185.176.102.0/24 maxlen: 24 185.176.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:42:c9:a8:96:b1:3a:8b:cd:ef:f5:c5:ad:18:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58 Validity Not Before: Jan 2 10:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14184399d604235b2bb6ebbb26b160afaeb1f1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fd:09:7c:da:5f:33:11:a3:13:f0:f0:32:61: af:d9:78:27:1d:8b:e8:df:0d:70:23:27:aa:10:ba: 14:a9:a9:64:73:d3:25:fd:98:65:61:1e:3e:64:9f: 97:69:44:01:4b:61:06:22:80:3d:e6:84:d5:bf:5f: 16:b2:9d:29:1d:90:17:71:3b:32:42:43:49:c7:a4: 8e:22:99:6f:f8:f6:06:67:04:28:17:c9:41:f4:62: 76:4d:20:fa:55:9e:8e:61:48:1e:f2:b6:f4:5d:cc: ad:ec:8e:58:ee:1f:e9:cb:a2:47:c8:7a:40:3c:9a: 4f:20:09:59:bb:55:23:51:29:f0:b5:ea:df:97:3f: 46:04:27:d1:a3:51:e4:6b:0d:13:64:4d:f8:d3:a9: f3:27:e2:08:b5:2a:c3:77:5a:da:c2:34:53:8e:bb: 0b:6c:ff:6d:a9:57:a2:c4:ae:ac:29:80:31:83:c4: ff:de:70:10:10:e9:c3:31:4f:41:45:19:55:ce:df: 3c:55:be:62:6e:8a:22:98:f1:05:d9:83:2f:0f:0e: 4a:4d:2a:24:9f:5f:d0:b4:2e:12:72:49:2c:d8:9d: ed:9b:fb:39:bc:69:b9:09:48:90:8a:02:c7:3d:08: 4c:e8:de:b9:cc:1b:dd:e7:b0:06:78:3a:e9:e1:b5: fe:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:18:43:99:D6:04:23:5B:2B:B6:EB:BB:26:B1:60:AF:AE:B1:F1:EC X509v3 Authority Key Identifier: keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/FBhDmdYEI1srtuu7JrFgr66x8ew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.176.100.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:60:f8:52:11:42:f6:d8:4e:05:82:b3:bd:06:86:0b:7d:a7: 13:37:cc:9f:1a:2c:c9:09:95:3d:04:9a:51:e0:b4:89:82:84: 81:a5:9a:9b:a8:9d:95:a8:04:db:59:36:6c:73:01:6f:6b:8f: 37:65:3b:9d:55:43:fd:43:f3:fb:5a:64:82:0e:22:0b:91:cd: 5f:d7:da:73:76:e2:3f:1e:68:78:0f:c6:43:84:ec:fd:69:8e: d3:59:d1:bd:96:64:c8:09:04:15:63:8d:b5:e8:d1:7d:cf:15: 67:fb:81:b5:50:2f:b8:37:79:77:a8:02:c1:7b:3a:72:16:64: 8a:13:97:45:87:0c:b6:0a:53:39:ec:d8:59:3d:2c:78:15:80: bc:c7:66:ae:02:15:a6:0e:c7:0f:0e:fe:61:23:11:1e:b3:07: c2:95:9c:42:56:3a:4c:9e:36:2b:94:6b:1a:d4:25:e0:b4:9d: 44:ee:3b:8d:7c:9b:13:52:aa:2d:21:43:90:12:1f:d0:59:7a: 89:d2:2a:47:20:51:5e:a7:ab:c6:d2:dd:38:5b:2a:25:0c:4b: f0:e3:93:b7:b4:9a:cd:c5:de:38:c4:db:9f:2c:2c:c6:af:af: 42:5a:e1:42:78:24:ff:fe:f7:4b:b7:1c:a4:a1:2e:f2:3e:8a: 5c:01:cc:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OELJqJaxOovN7/XFrRj3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMDFlYTA1OTYzYzk3NTZmMjhlZTJlOThiOGYzY2M0Nzlk YzlmNTgwHhcNMjYwMTAyMTAxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDE4NDM5OWQ2MDQyMzViMmJiNmViYmIyNmIxNjBhZmFlYjFmMWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv0JfNpfMxGjE/DwMmGv2XgnHYvo 3w1wIyeqELoUqalkc9Ml/ZhlYR4+ZJ+XaUQBS2EGIoA95oTVv18Wsp0pHZAXcTsy QkNJx6SOIplv+PYGZwQoF8lB9GJ2TSD6VZ6OYUge8rb0Xcyt7I5Y7h/py6JHyHpA PJpPIAlZu1UjUSnwterflz9GBCfRo1Hkaw0TZE3406nzJ+IItSrDd1rawjRTjrsL bP9tqVeixK6sKYAxg8T/3nAQEOnDMU9BRRlVzt88Vb5ibooimPEF2YMvDw5KTSok n1/QtC4Sckks2J3tm/s5vGm5CUiQigLHPQhM6N65zBvd57AGeDrp4bX+OwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBQYQ5nWBCNbK7bruyaxYK+usfHsMB8GA1UdIwQY MBaAFJMB6gWWPJdW8o7i6YuPPMR53J9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lYmY2Y2ItYTc3OS00NjRmLThiZWUt OGYwOGUwMjcyZGY4LzEvRkJoRG1kWUVJMXNydHV1N0pyRmdyNjZ4OGV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9lYmY2Y2ItYTc3OS00NjRmLThiZWUtOGYwOGUwMjcyZGY4 LzEva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubBkMA0G CSqGSIb3DQEBCwUAA4IBAQBKYPhSEUL22E4FgrO9BoYLfacTN8yfGizJCZU9BJpR 4LSJgoSBpZqbqJ2VqATbWTZscwFva483ZTudVUP9Q/P7WmSCDiILkc1f19pzduI/ Hmh4D8ZDhOz9aY7TWdG9lmTICQQVY4216NF9zxVn+4G1UC+4N3l3qALBezpyFmSK E5dFhwy2ClM57NhZPSx4FYC8x2auAhWmDscPDv5hIxEeswfClZxCVjpMnjYrlGsa 1CXgtJ1E7juNfJsTUqotIUOQEh/QWXqJ0ipHIFFep6vG0t04WyolDEvw45O3tJrN xd44xNufLCzGr69CWuFCeCT//vdLtxykoS7yPopcAczN -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:53 2026 by rpki-client