This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/FKX17PHtkRiTG0VO4fdkemmP9q0.roa File: FKX17PHtkRiTG0VO4fdkemmP9q0.roa (raw, json) Hash identifier: 46njTd7Whv8oDcKQQcq166dpo8DO+HMFvA14eGT2kvA= Subject key identifier: 14:A5:F5:EC:F1:ED:91:18:93:1B:45:4E:E1:F7:64:7A:69:8F:F6:AD Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16 Certificate serial: 019B7F82FE6A76BE98A663286F63B5EEAB8D Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/FKX17PHtkRiTG0VO4fdkemmP9q0.roa Signing time: Fri 02 Jan 2026 16:20:49 +0000 ROA not before: Fri 02 Jan 2026 16:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48095 IP address blocks: 91.132.248.0/23 maxlen: 23 91.132.250.0/23 maxlen: 23 91.197.36.0/22 maxlen: 22 109.196.168.0/23 maxlen: 23 109.196.170.0/23 maxlen: 23 185.245.245.0/24 maxlen: 24 185.249.0.0/22 maxlen: 22 192.144.24.0/23 maxlen: 23 192.144.26.0/23 maxlen: 23 193.39.88.0/22 maxlen: 22 193.228.12.0/22 maxlen: 22 194.76.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:fe:6a:76:be:98:a6:63:28:6f:63:b5:ee:ab:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16 Validity Not Before: Jan 2 16:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14a5f5ecf1ed9118931b454ee1f7647a698ff6ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:64:f5:96:f1:cc:24:5e:38:a9:f1:23:95:2c: d8:57:d9:e9:83:88:ad:48:b9:87:22:0e:e7:20:31: c2:6d:50:44:02:4d:f6:3d:64:e7:45:f6:8e:f7:3d: 70:2d:c9:04:fb:dc:36:5c:a3:2f:46:d0:7f:6c:af: 1e:16:08:c4:50:8a:fe:24:a9:b1:d0:25:ab:3e:93: 41:3b:f8:da:80:85:9c:22:0c:3b:be:57:76:c6:63: 35:8b:aa:4c:61:9e:1d:07:96:fc:83:42:e7:ef:9a: a4:4e:1e:da:c2:49:48:ae:39:f9:a2:da:39:a8:72: 6f:4e:c2:af:2f:39:05:45:c3:93:bf:47:aa:c1:03: 9a:c6:db:11:d0:cd:4b:ab:5e:a4:ae:fb:25:ab:c9: 9b:45:75:6e:28:c4:14:48:45:55:39:7b:80:d8:dc: f5:6f:45:9e:9c:4e:1c:26:a7:67:6f:c6:c3:09:ad: 7a:b2:40:da:f0:a8:cd:23:b7:67:39:ac:b6:36:76: 74:22:7f:a7:c9:90:e1:1b:d1:21:b7:92:40:1e:f9: a5:92:a5:13:9d:c3:a3:0a:61:29:c8:90:8e:39:56: 0b:b5:02:9d:ad:cf:22:35:cd:a3:d5:23:35:94:35: f0:db:dc:f6:15:11:a8:a5:ac:3d:59:e1:1c:6f:7b: e7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A5:F5:EC:F1:ED:91:18:93:1B:45:4E:E1:F7:64:7A:69:8F:F6:AD X509v3 Authority Key Identifier: keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/FKX17PHtkRiTG0VO4fdkemmP9q0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.248.0/22 91.197.36.0/22 109.196.168.0/22 185.245.245.0/24 185.249.0.0/22 192.144.24.0/22 193.39.88.0/22 193.228.12.0/22 194.76.32.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:6b:08:50:49:5f:5c:47:b4:f5:18:08:de:9c:89:72:66:3f: 01:6a:ed:03:d8:4c:11:d1:c6:2b:de:08:f6:d4:e8:7a:6d:13: 0d:9e:0d:d9:1f:f9:6f:8b:df:2c:4f:92:ce:20:68:03:fc:9c: e3:3c:5d:4b:5a:d9:d3:6e:29:2c:47:63:be:af:0b:ad:d2:83: 81:d2:3e:cc:52:41:cd:80:49:60:1a:88:3a:56:da:44:18:cb: 27:1b:8e:54:b4:5f:94:c6:96:f9:32:d8:6c:b1:cb:71:59:b4: 05:8d:d6:10:23:22:f0:b9:b0:64:28:3d:9f:f3:cb:e9:6f:70: 20:94:10:62:a7:fc:17:63:b0:57:c6:a1:b8:93:83:59:e6:04: 81:b6:11:f9:92:96:f3:e5:66:bb:1b:37:69:a2:ae:9b:61:1d: a2:cc:39:1b:ed:f7:33:9c:50:49:9b:b0:cd:8a:42:2b:b8:ca: f9:91:58:fb:d3:51:b4:35:09:e5:e9:fd:a1:61:64:a4:2f:08: 78:9e:46:af:7e:78:60:88:89:0b:eb:74:bb:6f:e6:f2:0d:1f: 67:3a:26:c3:9d:5c:85:46:07:c2:82:7b:30:c9:70:e1:5a:5f: cb:49:af:95:da:32:75:67:e9:36:d6:18:57:f4:3d:67:94:20: bb:2e:70:8b -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt/gv5qdr6YpmMob2O17quNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZTg4OGE3NmU5OTg1MWIwMWZiODZjZWM1MzdkNGQ4ZTYx MGRlMTYwHhcNMjYwMTAyMTYyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGE1ZjVlY2YxZWQ5MTE4OTMxYjQ1NGVlMWY3NjQ3YTY5OGZmNmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGT1lvHMJF44qfEjlSzYV9npg4it SLmHIg7nIDHCbVBEAk32PWTnRfaO9z1wLckE+9w2XKMvRtB/bK8eFgjEUIr+JKmx 0CWrPpNBO/jagIWcIgw7vld2xmM1i6pMYZ4dB5b8g0Ln75qkTh7awklIrjn5oto5 qHJvTsKvLzkFRcOTv0eqwQOaxtsR0M1Lq16krvslq8mbRXVuKMQUSEVVOXuA2Nz1 b0WenE4cJqdnb8bDCa16skDa8KjNI7dnOay2NnZ0In+nyZDhG9Eht5JAHvmlkqUT ncOjCmEpyJCOOVYLtQKdrc8iNc2j1SM1lDXw29z2FRGopaw9WeEcb3vnVQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFBSl9ezx7ZEYkxtFTuH3ZHppj/atMB8GA1UdIwQY MBaAFEToiKdumYUbAfuGzsU31NjmEN4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84MmUyYmEtNDQyYy00MmIwLTkzMTUt YmMwZGJhOTMyYjM1LzEvRktYMTdQSHRrUmlURzBWTzRmZGtlbW1QOXEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS84MmUyYmEtNDQyYy00MmIwLTkzMTUtYmMwZGJhOTMyYjM1 LzEvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCW4T4AwQC W8UkAwQCbcSoAwQAufX1AwQCufkAAwQCwJAYAwQCwSdYAwQCweQMAwQCwkwgMA0G CSqGSIb3DQEBCwUAA4IBAQAqawhQSV9cR7T1GAjenIlyZj8Bau0D2EwR0cYr3gj2 1Oh6bRMNng3ZH/lvi98sT5LOIGgD/JzjPF1LWtnTbiksR2O+rwut0oOB0j7MUkHN gElgGog6VtpEGMsnG45UtF+Uxpb5MthssctxWbQFjdYQIyLwubBkKD2f88vpb3Ag lBBip/wXY7BXxqG4k4NZ5gSBthH5kpbz5Wa7Gzdpoq6bYR2izDkb7fcznFBJm7DN ikIruMr5kVj701G0NQnl6f2hYWSkLwh4nkavfnhgiIkL63S7b+byDR9nOibDnVyF RgfCgnswyXDhWl/LSa+V2jJ1Z+k21hhX9D1nlCC7LnCL -----END CERTIFICATE-----Generated at Mon Jan 26 16:57:07 2026 by rpki-client