This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/FFyVQHxfxA2JYXv-nY54g1GYtro.roa File: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (raw, json) Hash identifier: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM= Subject key identifier: 14:5C:95:40:7C:5F:C4:0D:89:61:7B:FE:9D:8E:78:83:51:98:B6:BA Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Certificate serial: 019B7A5B52F75D8CA01F112AEAC0616DDDCF Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/FFyVQHxfxA2JYXv-nY54g1GYtro.roa Signing time: Thu 01 Jan 2026 16:19:23 +0000 ROA not before: Thu 01 Jan 2026 16:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212603 IP address blocks: 185.60.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 23:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:52:f7:5d:8c:a0:1f:11:2a:ea:c0:61:6d:dd:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Validity Not Before: Jan 1 16:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=145c95407c5fc40d89617bfe9d8e78835198b6ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:23:a5:b6:8f:33:d6:91:4e:29:42:fa:19:19: 6d:76:cf:f0:e5:bd:ab:ba:f5:f3:cd:c3:6a:e4:50: 5d:a4:30:13:5f:ef:9a:26:95:97:a2:b9:dc:1a:f0: 91:45:b3:83:cd:01:cb:21:13:96:6f:b3:f6:42:b9: 10:c5:81:53:41:00:7b:c4:e6:5b:0a:ae:48:95:68: 2a:0e:c4:40:37:22:1a:b8:ea:ab:7a:c9:38:b8:a1: 39:41:0d:ae:81:4d:be:b4:7e:83:7d:67:a0:f6:54: 64:a6:a6:0c:06:4f:1b:5b:31:08:2f:27:a9:c6:ec: 11:12:95:ae:e9:91:dd:45:ec:09:c3:e7:1a:fa:0a: dc:9e:3e:8e:8c:9b:c8:77:eb:47:e6:76:5d:a3:ad: d8:fd:1b:d3:26:78:f2:30:d9:ff:f1:38:66:cd:0d: 50:ab:49:3c:24:2e:cd:e7:33:b3:77:7a:c8:27:b5: d2:98:43:8d:70:4a:ad:c0:d8:74:3c:92:ce:14:d2: f5:5a:1d:ae:79:25:27:2c:08:5e:35:8a:00:0b:47: fc:bc:ce:61:27:51:67:2f:91:09:c6:76:ee:de:77: 32:35:b4:24:52:f4:98:ac:7e:62:15:a8:b9:14:8e: 0b:5f:8c:b1:73:47:2e:52:c0:71:9e:0e:22:d5:87: 6a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:5C:95:40:7C:5F:C4:0D:89:61:7B:FE:9D:8E:78:83:51:98:B6:BA X509v3 Authority Key Identifier: keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/FFyVQHxfxA2JYXv-nY54g1GYtro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.20.0/24 Signature Algorithm: sha256WithRSAEncryption 99:0f:fb:5c:90:50:98:10:1d:db:cb:46:ab:76:c0:05:50:2c: 50:78:15:71:43:1c:13:d8:f3:4a:53:e3:36:f6:dc:49:64:2b: c1:d1:83:8b:09:68:42:62:c2:38:4a:56:35:f7:c8:ed:4e:2e: 65:d9:73:5d:bf:78:05:88:e2:34:41:2a:0f:b7:9a:06:73:91: 8d:92:b8:63:2c:a0:40:fc:6f:40:2d:79:b9:c4:fd:fc:c5:0f: a7:b0:48:1b:81:0a:ec:f4:82:3d:9b:9e:55:b1:af:03:18:e0: bc:55:1a:78:fb:d1:65:3b:ec:c0:a3:63:61:ea:33:41:f2:6e: 2e:f6:97:ae:f0:3f:cd:2e:1c:9a:aa:a2:f2:15:01:da:01:de: 4b:9f:76:2c:54:82:4c:45:ce:a4:87:54:3d:ee:6c:64:e2:8a: 1c:0f:a1:73:70:c3:4e:c7:39:b3:05:a9:6c:a0:a1:dd:7f:bd: 6b:99:b1:44:39:ad:c5:35:bc:07:58:b9:e3:fc:c8:75:02:e2: 7d:37:2c:81:31:34:76:a6:2b:63:71:52:64:06:36:cc:2f:c9: 29:f7:11:b9:b7:1b:72:96:ae:bf:6b:22:63:ff:55:e1:52:74: af:8b:5c:09:85:ee:9b:a0:1e:90:41:66:44:0e:cd:76:7e:0d: bb:e9:e1:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W1L3XYygHxEq6sBhbd3PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz MGFlMzkwHhcNMjYwMTAxMTYxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDVjOTU0MDdjNWZjNDBkODk2MTdiZmU5ZDhlNzg4MzUxOThiNmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCOlto8z1pFOKUL6GRltds/w5b2r uvXzzcNq5FBdpDATX++aJpWXorncGvCRRbODzQHLIROWb7P2QrkQxYFTQQB7xOZb Cq5IlWgqDsRANyIauOqresk4uKE5QQ2ugU2+tH6DfWeg9lRkpqYMBk8bWzEILyep xuwREpWu6ZHdRewJw+ca+grcnj6OjJvId+tH5nZdo63Y/RvTJnjyMNn/8ThmzQ1Q q0k8JC7N5zOzd3rIJ7XSmEONcEqtwNh0PJLOFNL1Wh2ueSUnLAheNYoAC0f8vM5h J1FnL5EJxnbu3ncyNbQkUvSYrH5iFai5FI4LX4yxc0cuUsBxng4i1Ydq+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBRclUB8X8QNiWF7/p2OeINRmLa6MB8GA1UdIwQY MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt YzZiODRjYzU4NjEwLzEvRkZ5VlFIeGZ4QTJKWVh2LW5ZNTRnMUdZdHJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTwUMA0G CSqGSIb3DQEBCwUAA4IBAQCZD/tckFCYEB3by0ardsAFUCxQeBVxQxwT2PNKU+M2 9txJZCvB0YOLCWhCYsI4SlY198jtTi5l2XNdv3gFiOI0QSoPt5oGc5GNkrhjLKBA /G9ALXm5xP38xQ+nsEgbgQrs9II9m55Vsa8DGOC8VRp4+9FlO+zAo2Nh6jNB8m4u 9peu8D/NLhyaqqLyFQHaAd5Ln3YsVIJMRc6kh1Q97mxk4oocD6FzcMNOxzmzBals oKHdf71rmbFEOa3FNbwHWLnj/Mh1AuJ9NyyBMTR2pitjcVJkBjbML8kp9xG5txty lq6/ayJj/1XhUnSvi1wJhe6boB6QQWZEDs12fg276eEw -----END CERTIFICATE-----Generated at Mon Jan 5 05:01:07 2026 by rpki-client