This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/Fmn_d_Mky7sAyYX6SnAgjbHa1Cc.roa File: Fmn_d_Mky7sAyYX6SnAgjbHa1Cc.roa (raw, json) Hash identifier: FmLoKPhtszPmnHtcY6zDJ3BsNEoID8FJ22Wnnvq62SY= Subject key identifier: 16:69:FF:77:F3:24:CB:BB:00:C9:85:FA:4A:70:20:8D:B1:DA:D4:27 Certificate issuer: /CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f Certificate serial: 019B78A2BDD770985A44A5396BCF6461D373 Authority key identifier: B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/Fmn_d_Mky7sAyYX6SnAgjbHa1Cc.roa Signing time: Thu 01 Jan 2026 08:18:09 +0000 ROA not before: Thu 01 Jan 2026 08:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8511 IP address blocks: 195.38.160.0/19 maxlen: 19 195.38.179.0/24 maxlen: 24 2a11:a380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:bd:d7:70:98:5a:44:a5:39:6b:cf:64:61:d3:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f Validity Not Before: Jan 1 08:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1669ff77f324cbbb00c985fa4a70208db1dad427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b7:d7:5b:d5:30:92:4e:c8:90:7c:08:aa:1e: bc:1b:3a:8c:aa:5f:84:d5:20:bd:e0:f2:0e:63:cd: d9:53:ac:b3:c6:96:4d:08:cb:35:3b:9e:63:ae:1b: b7:b1:21:79:8c:a4:c3:35:95:73:11:58:e6:de:ef: ff:a5:9f:b9:36:a9:f3:40:75:05:12:12:b2:b0:0a: e1:4a:f4:ff:53:d5:33:b6:de:6c:13:29:f3:a5:2a: 59:64:1d:29:e8:db:5e:f7:8b:f9:7d:9a:54:e9:8a: d1:d7:08:5f:9e:4c:97:51:38:ef:88:5c:ef:e5:2e: 53:2e:8e:cd:d4:7d:39:4a:f5:68:19:6e:20:79:99: f2:48:12:1b:c2:6e:51:c5:bd:5b:ea:a8:6a:39:62: 58:43:21:66:df:49:3e:b6:4c:96:fe:37:27:91:01: 4f:74:56:07:76:0e:37:9c:88:bc:49:48:f5:fc:2d: e6:1b:e5:42:49:56:6e:c5:48:90:b4:62:3d:bf:0c: c7:5c:28:0f:be:c8:86:4b:bc:81:42:f5:6d:1f:29: 59:c1:d6:ed:06:48:6b:03:d8:84:11:62:99:ac:6d: c3:5d:10:4e:ab:61:59:f2:a8:0e:56:96:1c:91:96: 10:2e:ad:d1:53:21:c6:65:2f:a5:7d:df:df:07:a2: 4f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:69:FF:77:F3:24:CB:BB:00:C9:85:FA:4A:70:20:8D:B1:DA:D4:27 X509v3 Authority Key Identifier: keyid:B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/Fmn_d_Mky7sAyYX6SnAgjbHa1Cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.38.160.0/19 IPv6: 2a11:a380::/29 Signature Algorithm: sha256WithRSAEncryption 3c:91:2f:fa:5d:e8:d8:c2:bc:8d:e0:4a:33:67:61:97:6f:f0: 30:e7:4e:cf:fe:df:8e:ff:74:c5:dd:82:4d:07:09:49:f2:0c: 7d:33:5f:f5:f5:d8:dd:e1:c1:d5:96:67:2f:44:b9:e7:00:8b: b0:84:9f:5c:c4:dc:9b:64:99:11:00:10:db:51:67:f3:3b:61: 6f:7b:4e:c6:f5:04:e9:78:58:f3:6d:8e:18:aa:c4:e8:9c:0a: 62:e4:9d:ec:2c:dd:5c:1f:0c:25:1f:b9:e4:6e:81:bf:12:9a: b2:9b:9c:47:01:f4:94:1e:53:5e:29:b4:fa:9e:ea:af:d3:4b: 01:ec:42:89:f8:41:ad:4f:ef:7f:b9:9b:25:fc:bc:2a:5a:4d: 18:03:91:eb:19:15:09:bd:7d:8e:75:94:b2:af:28:25:58:b6: be:99:50:44:6e:54:7b:54:eb:18:3f:5d:08:af:65:4c:fa:ca: ae:fd:af:03:5b:27:72:6b:49:cb:f6:48:d7:38:35:9a:03:d5: f9:ed:13:9e:c6:57:1d:f9:fc:c5:01:b2:f1:26:e5:d4:57:c9: 2b:eb:2d:ca:15:bc:94:ed:3a:dd:3f:b5:81:bc:ac:ac:de:f4: 57:89:a1:00:f3:e7:1b:60:ad:54:50:d4:84:9b:6d:cf:f6:03: 60:4e:b6:f3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4or3XcJhaRKU5a89kYdNzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZjMzZjZmZDI5YmFmMDNjYzRkNDg1YWY1ZjZiNzBkYTZi MDA5OWYwHhcNMjYwMTAxMDgxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjY5ZmY3N2YzMjRjYmJiMDBjOTg1ZmE0YTcwMjA4ZGIxZGFkNDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7fXW9Uwkk7IkHwIqh68GzqMql+E 1SC94PIOY83ZU6yzxpZNCMs1O55jrhu3sSF5jKTDNZVzEVjm3u//pZ+5NqnzQHUF EhKysArhSvT/U9Uztt5sEynzpSpZZB0p6Nte94v5fZpU6YrR1whfnkyXUTjviFzv 5S5TLo7N1H05SvVoGW4geZnySBIbwm5Rxb1b6qhqOWJYQyFm30k+tkyW/jcnkQFP dFYHdg43nIi8SUj1/C3mG+VCSVZuxUiQtGI9vwzHXCgPvsiGS7yBQvVtHylZwdbt BkhrA9iEEWKZrG3DXRBOq2FZ8qgOVpYckZYQLq3RUyHGZS+lfd/fB6JP2QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBZp/3fzJMu7AMmF+kpwII2x2tQnMB8GA1UdIwQY MBaAFLTzP2/Sm68DzE1IWvX2tw2msAmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFBNX2I5S2Jyd1BNVFVoYTlmYTNEYWF3Q1o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85MGE1Y2YtZTQ4NC00YmIyLWEyODUt NmE0OWI1YTMxMjk0LzEvRm1uX2RfTWt5N3NBeVlYNlNuQWdqYkhhMUNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC85MGE1Y2YtZTQ4NC00YmIyLWEyODUtNmE0OWI1YTMxMjk0 LzEvdFBNX2I5S2Jyd1BNVFVoYTlmYTNEYWF3Q1o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFwyagMA0E AgACMAcDBQMqEaOAMA0GCSqGSIb3DQEBCwUAA4IBAQA8kS/6XejYwryN4EozZ2GX b/Aw507P/t+O/3TF3YJNBwlJ8gx9M1/19djd4cHVlmcvRLnnAIuwhJ9cxNybZJkR ABDbUWfzO2Fve07G9QTpeFjzbY4YqsTonApi5J3sLN1cHwwlH7nkboG/Epqym5xH AfSUHlNeKbT6nuqv00sB7EKJ+EGtT+9/uZsl/LwqWk0YA5HrGRUJvX2OdZSyrygl WLa+mVBEblR7VOsYP10Ir2VM+squ/a8DWydya0nL9kjXODWaA9X57ROexlcd+fzF AbLxJuXUV8kr6y3KFbyU7TrdP7WBvKys3vRXiaEA8+cbYK1UUNSEm23P9gNgTrbz -----END CERTIFICATE-----Generated at Mon Feb 9 22:14:59 2026 by rpki-client