This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/FnCe4GQUHfME91aEBmjNKoeoN3E.roa File: FnCe4GQUHfME91aEBmjNKoeoN3E.roa (raw, json) Hash identifier: 2f0BNR92jRHqrOKp3b4PoOH7gnturQoCE8376hKSgYc= Subject key identifier: 16:70:9E:E0:64:14:1D:F3:04:F7:56:84:06:68:CD:2A:87:A8:37:71 Certificate issuer: /CN=79935964da17038e23d3a48909a13a25fb0e58eb Certificate serial: 019B7F85478343D315221B8D4A9042A68C57 Authority key identifier: 79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/FnCe4GQUHfME91aEBmjNKoeoN3E.roa Signing time: Fri 02 Jan 2026 16:23:19 +0000 ROA not before: Fri 02 Jan 2026 16:23:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204297 IP address blocks: 185.253.180.0/22 maxlen: 22 188.64.136.0/24 maxlen: 24 188.240.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:47:83:43:d3:15:22:1b:8d:4a:90:42:a6:8c:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79935964da17038e23d3a48909a13a25fb0e58eb Validity Not Before: Jan 2 16:23:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16709ee064141df304f756840668cd2a87a83771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3f:de:55:14:98:45:83:53:1d:b3:3e:64:7a: 83:6e:0e:7d:bd:98:b3:8c:0c:99:a0:a2:90:06:a3: 63:72:9e:d9:83:fa:c9:02:49:61:ae:b6:4d:98:c2: bc:88:d2:30:48:6c:ed:6e:2a:a8:e3:a9:1e:1e:6d: 41:b1:6e:6c:bb:a7:69:c8:0d:64:1d:5b:ae:c4:9f: 11:a2:c8:33:a5:23:0a:fc:15:35:f0:f3:7e:27:eb: 39:ba:50:a7:a1:47:b2:b3:82:c6:cd:b8:7d:88:fa: 23:bc:04:f4:ec:24:75:71:7f:5c:0b:2d:f7:da:16: 06:1e:6a:2e:aa:2f:5c:16:6d:36:8e:5f:e6:53:72: f1:3a:45:99:2e:2a:50:b1:21:5b:f3:48:54:eb:33: 27:7a:bf:93:66:53:f4:6d:50:56:b7:60:10:8f:e2: e2:56:8f:50:42:0e:a0:62:30:b6:a0:ac:c7:87:89: 34:dc:ac:ca:c2:66:7a:b4:5d:00:70:a5:76:a3:4f: 5d:6d:06:62:81:4f:a0:87:1a:9c:c1:38:5b:b1:dc: 81:80:b8:83:ec:03:13:4a:0f:77:71:87:d0:03:26: c5:9f:a1:6f:44:64:0b:c9:8d:97:59:d2:1e:4b:60: 96:0c:ee:5b:fe:ec:a8:27:08:ad:f6:c3:32:77:de: e6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:70:9E:E0:64:14:1D:F3:04:F7:56:84:06:68:CD:2A:87:A8:37:71 X509v3 Authority Key Identifier: keyid:79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/FnCe4GQUHfME91aEBmjNKoeoN3E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.253.180.0/22 188.64.136.0/24 188.240.17.0/24 Signature Algorithm: sha256WithRSAEncryption 15:9a:c7:e8:b4:c2:ef:e9:4d:47:6f:64:9f:0b:d6:7b:33:7a: 19:49:87:23:4b:1f:7e:02:19:69:1e:e6:5e:b1:be:1d:a3:5f: e3:c9:ae:f4:a1:b2:81:ec:08:cb:13:1d:b1:c1:c8:f3:9c:aa: 5b:84:9d:3f:26:ad:99:d5:b8:d3:3f:82:ad:1a:22:88:8c:c9: 96:f6:02:ee:d9:c2:2e:ef:3d:75:a7:02:30:e7:99:28:76:e7: 85:49:e1:06:a9:30:3b:bd:26:75:07:53:e2:a7:f1:27:a1:48: e2:39:07:77:ba:a9:9b:15:e5:d2:02:91:45:1a:53:63:a7:b2: 46:00:f3:99:ee:6b:08:83:fd:88:a7:4b:22:15:e5:e0:3c:b2: 2a:a4:30:89:15:78:d4:46:c0:c1:53:81:ec:9c:94:2b:f6:bc: ef:f2:60:19:8b:c2:4f:ef:d3:9a:20:c8:30:e4:bf:9c:90:f0: 25:49:26:ba:e7:63:32:50:3c:cd:50:27:5e:8b:04:ef:b3:9c: 19:94:05:6c:63:c4:d0:b9:3d:b3:d3:a1:86:4d:1d:e2:66:58: a2:27:bf:b7:94:03:68:a6:3d:fb:a7:ff:e8:33:d7:60:3c:85: 8b:e7:e1:43:d9:ad:b6:b8:27:85:be:89:ef:9a:36:e3:ec:d4: b5:aa:9d:fd -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hUeDQ9MVIhuNSpBCpoxXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5OTM1OTY0ZGExNzAzOGUyM2QzYTQ4OTA5YTEzYTI1ZmIw ZTU4ZWIwHhcNMjYwMTAyMTYyMzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjcwOWVlMDY0MTQxZGYzMDRmNzU2ODQwNjY4Y2QyYTg3YTgzNzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz/eVRSYRYNTHbM+ZHqDbg59vZiz jAyZoKKQBqNjcp7Zg/rJAklhrrZNmMK8iNIwSGztbiqo46keHm1BsW5su6dpyA1k HVuuxJ8RosgzpSMK/BU18PN+J+s5ulCnoUeys4LGzbh9iPojvAT07CR1cX9cCy33 2hYGHmouqi9cFm02jl/mU3LxOkWZLipQsSFb80hU6zMner+TZlP0bVBWt2AQj+Li Vo9QQg6gYjC2oKzHh4k03KzKwmZ6tF0AcKV2o09dbQZigU+ghxqcwThbsdyBgLiD 7AMTSg93cYfQAybFn6FvRGQLyY2XWdIeS2CWDO5b/uyoJwit9sMyd97mjQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBZwnuBkFB3zBPdWhAZozSqHqDdxMB8GA1UdIwQY MBaAFHmTWWTaFwOOI9OkiQmhOiX7DljrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVpOWlpOb1hBNDRqMDZTSkNhRTZKZnNPV09zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9lODFkMDEtMTY3Yi00NTI4LWIzYWEt OWZlNDljYzRkZjJhLzEvRm5DZTRHUVVIZk1FOTFhRUJtak5Lb2VvTjNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9lODFkMDEtMTY3Yi00NTI4LWIzYWEtOWZlNDljYzRkZjJh LzEvZVpOWlpOb1hBNDRqMDZTSkNhRTZKZnNPV09zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuf20AwQA vECIAwQAvPARMA0GCSqGSIb3DQEBCwUAA4IBAQAVmsfotMLv6U1Hb2SfC9Z7M3oZ SYcjSx9+AhlpHuZesb4do1/jya70obKB7AjLEx2xwcjznKpbhJ0/Jq2Z1bjTP4Kt GiKIjMmW9gLu2cIu7z11pwIw55kodueFSeEGqTA7vSZ1B1Pip/EnoUjiOQd3uqmb FeXSApFFGlNjp7JGAPOZ7msIg/2Ip0siFeXgPLIqpDCJFXjURsDBU4HsnJQr9rzv 8mAZi8JP79OaIMgw5L+ckPAlSSa652MyUDzNUCdeiwTvs5wZlAVsY8TQuT2z06GG TR3iZliiJ7+3lANopj37p//oM9dgPIWL5+FD2a22uCeFvonvmjbj7NS1qp39 -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:21 2026 by rpki-client