This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/FLZ-Ru2iNd6gqOkkRx5wlCvBsGA.roa File: FLZ-Ru2iNd6gqOkkRx5wlCvBsGA.roa (raw, json) Hash identifier: JDEk7hQ+ZYy6zSUR+b4fXbYegAkzPFSJE3A4CIklsFU= Subject key identifier: 14:B6:7E:46:ED:A2:35:DE:A0:A8:E9:24:47:1E:70:94:2B:C1:B0:60 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B211458ED2D56B48CB1C9E299D4A09D90 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/FLZ-Ru2iNd6gqOkkRx5wlCvBsGA.roa Signing time: Mon 15 Dec 2025 08:15:40 +0000 ROA not before: Mon 15 Dec 2025 08:15:40 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 18978 IP address blocks: 5.180.25.0/24 maxlen: 24 5.180.26.0/24 maxlen: 24 5.180.28.0/24 maxlen: 24 5.180.41.0/24 maxlen: 24 5.180.44.0/24 maxlen: 24 5.180.53.0/24 maxlen: 24 5.180.144.0/24 maxlen: 24 5.180.146.0/24 maxlen: 24 45.66.156.0/22 maxlen: 24 45.128.61.0/24 maxlen: 24 45.128.62.0/23 maxlen: 23 45.136.112.0/23 maxlen: 23 45.136.118.0/23 maxlen: 24 45.136.130.0/23 maxlen: 23 45.136.148.0/24 maxlen: 24 45.136.150.0/23 maxlen: 24 85.208.111.0/24 maxlen: 24 85.208.116.0/23 maxlen: 24 85.208.118.0/24 maxlen: 24 85.209.152.0/24 maxlen: 24 85.209.192.0/23 maxlen: 23 194.59.220.0/24 maxlen: 24 194.124.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:14:58:ed:2d:56:b4:8c:b1:c9:e2:99:d4:a0:9d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Dec 15 08:15:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=14b67e46eda235dea0a8e924471e70942bc1b060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:44:da:12:bd:9a:28:a7:d0:55:b1:c4:b3:50: 68:c0:d8:c6:18:21:67:5d:24:6e:04:85:d4:71:d4: b4:d4:a9:85:d6:b8:e5:4e:ae:2d:09:63:df:f9:99: 00:06:32:d1:c3:6b:5b:57:38:5c:d5:27:ab:28:4d: d3:53:b5:87:7d:2d:52:58:ee:aa:ad:07:b0:1e:cf: 27:c9:b1:fc:34:98:1d:cc:e3:f3:3a:c9:59:c9:1a: db:cb:ff:06:10:f9:1a:aa:f5:87:65:f0:c0:2b:f6: 78:5c:0e:84:ad:30:a1:bd:00:12:fa:17:56:23:0c: e2:cb:ec:01:97:46:cf:80:61:f5:e7:24:82:e1:08: 70:12:94:34:0e:f2:4e:e2:5f:58:66:c0:9a:d1:72: d0:fc:28:e3:bc:77:16:85:05:b8:3e:09:a1:16:9c: e4:40:d2:29:97:9f:c5:e3:9f:80:19:b4:8f:ef:a4: 22:8a:e7:0e:75:a7:5c:14:25:5f:9a:3e:76:4b:59: 47:8a:96:a9:75:4b:0a:83:e8:6f:14:a5:11:e8:9c: 33:9d:30:6a:24:8c:22:4f:75:9d:be:9d:ae:2c:4f: 7b:cc:da:31:90:19:84:40:04:0c:4e:28:93:92:ff: fe:31:db:89:6d:74:5d:ba:75:a4:2d:3d:dd:1d:77: 82:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B6:7E:46:ED:A2:35:DE:A0:A8:E9:24:47:1E:70:94:2B:C1:B0:60 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/FLZ-Ru2iNd6gqOkkRx5wlCvBsGA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.25.0-5.180.26.255 5.180.28.0/24 5.180.41.0/24 5.180.44.0/24 5.180.53.0/24 5.180.144.0/24 5.180.146.0/24 45.66.156.0/22 45.128.61.0-45.128.63.255 45.136.112.0/23 45.136.118.0/23 45.136.130.0/23 45.136.148.0/24 45.136.150.0/23 85.208.111.0/24 85.208.116.0-85.208.118.255 85.209.152.0/24 85.209.192.0/23 194.59.220.0/24 194.124.244.0/23 Signature Algorithm: sha256WithRSAEncryption a9:fe:c0:9a:88:32:c3:de:dd:8f:a1:7c:ac:c1:c0:f2:9c:cf: bb:f8:e4:31:32:8f:94:87:6d:a3:0a:27:30:74:0b:46:4c:cf: 56:d6:66:f6:df:cb:4e:db:83:2e:cf:f8:5f:d5:c5:46:2b:91: 83:a6:fc:70:9c:88:93:f6:69:57:ee:dc:37:1d:fc:2a:e4:f5: be:6d:3e:44:32:dd:4f:7b:68:ad:91:86:59:fc:8a:dd:47:15: 78:a8:26:f3:e4:97:c9:41:62:e3:54:c9:cb:ed:75:ab:b5:34: e1:a9:70:08:a2:fd:c8:99:6b:5a:78:ee:36:c6:12:9f:02:55: 3a:dd:5e:88:dd:cc:3b:8d:df:9f:2c:df:4a:43:0c:ac:b3:ec: 56:d9:d5:b5:3f:fe:36:2c:4e:59:a8:57:f4:f0:2a:df:ce:71: 0b:84:fe:88:d6:5a:e6:48:92:7f:72:e3:e4:fb:96:b5:be:8e: 11:dd:8f:7b:2c:7f:6e:4a:1c:17:0c:77:9d:6d:7f:a7:2e:6e: ef:55:ed:2f:f0:d0:ed:db:a1:eb:bb:c9:15:31:c7:3d:82:4a: 17:b6:d6:1c:f1:be:c2:29:74:c1:4f:b8:f5:8b:78:49:7c:c5: 19:93:47:5c:09:19:82:6a:b7:6f:58:ec:b9:6f:f4:40:56:31: f4:a9:3b:c7 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgISAZshFFjtLVa0jLHJ4pnUoJ2QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjUxMjE1MDgxNTQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGI2N2U0NmVkYTIzNWRlYTBhOGU5MjQ0NzFlNzA5NDJiYzFiMDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUTaEr2aKKfQVbHEs1BowNjGGCFn XSRuBIXUcdS01KmF1rjlTq4tCWPf+ZkABjLRw2tbVzhc1SerKE3TU7WHfS1SWO6q rQewHs8nybH8NJgdzOPzOslZyRrby/8GEPkaqvWHZfDAK/Z4XA6ErTChvQAS+hdW Iwziy+wBl0bPgGH15ySC4QhwEpQ0DvJO4l9YZsCa0XLQ/CjjvHcWhQW4PgmhFpzk QNIpl5/F45+AGbSP76QiiucOdadcFCVfmj52S1lHipapdUsKg+hvFKUR6JwznTBq JIwiT3Wdvp2uLE97zNoxkBmEQAQMTiiTkv/+MduJbXRdunWkLT3dHXeCtQIDAQAB o4ICmDCCApQwHQYDVR0OBBYEFBS2fkbtojXeoKjpJEcecJQrwbBgMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvRkxaLVJ1MmlOZDZncU9ra1J4NXdsQ3ZCc0dBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZAwDAME AAW0GQMEAAW0GgMEAAW0HAMEAAW0KQMEAAW0LAMEAAW0NQMEAAW0kAMEAAW0kgME Ai1CnDAMAwQALYA9AwQGLYAAAwQBLYhwAwQBLYh2AwQBLYiCAwQALYiUAwQBLYiW AwQAVdBvMAwDBAJV0HQDBABV0HYDBABV0ZgDBAFV0cADBADCO9wDBAHCfPQwDQYJ KoZIhvcNAQELBQADggEBAKn+wJqIMsPe3Y+hfKzBwPKcz7v45DEyj5SHbaMKJzB0 C0ZMz1bWZvbfy07bgy7P+F/VxUYrkYOm/HCciJP2aVfu3Dcd/Crk9b5tPkQy3U97 aK2Rhln8it1HFXioJvPkl8lBYuNUycvtdau1NOGpcAii/ciZa1p47jbGEp8CVTrd XojdzDuN358s30pDDKyz7FbZ1bU//jYsTlmoV/TwKt/OcQuE/ojWWuZIkn9y4+T7 lrW+jhHdj3ssf25KHBcMd51tf6cubu9V7S/w0O3boeu7yRUxxz2CShe21hzxvsIp dMFPuPWLeEl8xRmTR1wJGYJqt29Y7Llv9EBWMfSpO8c= -----END CERTIFICATE-----Generated at Fri Dec 19 09:39:53 2025 by rpki-client