This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/FmIK1Qc2QaDRNlz8gildmkToH9A.roa File: FmIK1Qc2QaDRNlz8gildmkToH9A.roa (raw, json) Hash identifier: fo6Q7kFWvThKvMfrJRB3ZlJagYVX1dK3daLVzThP1u8= Subject key identifier: 16:62:0A:D5:07:36:41:A0:D1:36:5C:FC:82:29:5D:9A:44:E8:1F:D0 Certificate issuer: /CN=ba274155104e43328c3bfa2ad6ac6719766f1325 Certificate serial: 019B7E38DB569B9BA865E37020A255960399 Authority key identifier: BA:27:41:55:10:4E:43:32:8C:3B:FA:2A:D6:AC:67:19:76:6F:13:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/FmIK1Qc2QaDRNlz8gildmkToH9A.roa Signing time: Fri 02 Jan 2026 10:20:13 +0000 ROA not before: Fri 02 Jan 2026 10:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49487 IP address blocks: 188.94.240.0/24 maxlen: 24 188.94.241.0/24 maxlen: 24 188.94.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:db:56:9b:9b:a8:65:e3:70:20:a2:55:96:03:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba274155104e43328c3bfa2ad6ac6719766f1325 Validity Not Before: Jan 2 10:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16620ad5073641a0d1365cfc82295d9a44e81fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f1:ee:c9:1b:a4:77:9a:6e:e8:b2:5c:9e:9d: 03:60:24:f3:3b:4f:77:66:1d:17:bc:9c:70:a4:78: a5:79:94:e2:20:3f:6e:49:81:3e:50:8d:60:6c:92: a8:5c:cf:f4:b7:74:05:07:c6:19:32:fe:7d:12:06: 8b:9c:2d:bd:52:1d:2d:9e:5a:95:14:3a:00:2e:be: 44:24:d6:9e:6b:af:16:99:e1:ed:a4:2f:5d:c9:94: d8:1c:73:53:05:11:af:1b:fb:22:74:76:7d:5e:d8: 01:57:4c:57:e0:25:2f:96:e4:85:c6:cf:d1:10:a1: 76:c3:a5:d5:58:62:22:df:b9:d3:38:6b:fe:11:a3: eb:90:91:06:46:4b:56:3a:fb:74:43:47:85:9d:1a: c4:16:e7:bd:a0:e5:5b:6f:18:b9:10:fd:de:83:57: d2:da:c2:6e:45:fd:9a:8c:21:89:c3:a0:ea:b0:54: 6a:5b:32:7e:64:cd:66:ec:6e:3c:c4:7f:d8:bf:e7: 31:79:5e:ed:e6:3f:32:39:ae:ab:b7:84:3b:12:84: ce:2d:4d:0c:23:d7:94:41:70:c0:2a:cf:67:08:39: f1:39:5e:59:a2:6f:be:e8:46:e2:cd:de:8a:bf:f0: f8:d6:12:08:c4:c4:2c:a0:5a:7d:43:90:39:1d:ae: e9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:62:0A:D5:07:36:41:A0:D1:36:5C:FC:82:29:5D:9A:44:E8:1F:D0 X509v3 Authority Key Identifier: keyid:BA:27:41:55:10:4E:43:32:8C:3B:FA:2A:D6:AC:67:19:76:6F:13:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/FmIK1Qc2QaDRNlz8gildmkToH9A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.94.240.0-188.94.242.255 Signature Algorithm: sha256WithRSAEncryption 1d:36:ae:c8:c3:02:78:74:da:91:2c:25:f2:2b:89:2a:2b:67: 2e:ca:05:99:b4:10:3a:d1:f9:a7:30:7b:0c:de:37:05:1b:cd: ea:49:59:7a:35:07:f7:ec:3a:bc:dc:27:89:18:56:a4:41:f7: b5:10:2b:a8:7b:73:d1:03:38:f9:b2:b5:a1:f3:b1:56:a6:80: cc:d9:3e:eb:34:5c:eb:80:4d:ea:23:47:7a:76:7b:2d:b1:ac: f5:99:11:c0:a0:f7:50:59:fd:4e:d1:ac:3d:e9:03:7d:80:de: 9e:96:54:14:be:33:5c:01:71:e6:75:eb:62:06:bd:e4:a6:c3: d8:fe:9b:9a:1b:c7:08:aa:a2:86:69:56:05:6b:df:d7:fe:90: 77:27:c7:1a:96:09:93:58:c4:3b:46:3d:db:c9:9d:d2:41:19: 52:9d:a3:3f:31:da:45:7c:ed:18:a1:02:54:5f:bd:81:2a:9a: 61:56:6e:5c:12:64:31:dd:6e:96:af:5f:f5:41:b8:59:bc:f3: 55:11:a4:2c:4e:62:ca:df:8f:d3:39:af:a6:94:b7:d2:8c:a1: cf:c3:52:cb:48:23:ee:cd:4a:db:33:38:0a:ed:d3:a5:99:03: 1c:aa:b8:b8:ac:74:5c:93:5e:22:39:5b:1f:d3:b0:92:2a:91: 1e:25:0b:89 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+ONtWm5uoZeNwIKJVlgOZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMjc0MTU1MTA0ZTQzMzI4YzNiZmEyYWQ2YWM2NzE5NzY2 ZjEzMjUwHhcNMjYwMTAyMTAyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjYyMGFkNTA3MzY0MWEwZDEzNjVjZmM4MjI5NWQ5YTQ0ZTgxZmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPHuyRukd5pu6LJcnp0DYCTzO093 Zh0XvJxwpHileZTiID9uSYE+UI1gbJKoXM/0t3QFB8YZMv59EgaLnC29Uh0tnlqV FDoALr5EJNaea68WmeHtpC9dyZTYHHNTBRGvG/sidHZ9XtgBV0xX4CUvluSFxs/R EKF2w6XVWGIi37nTOGv+EaPrkJEGRktWOvt0Q0eFnRrEFue9oOVbbxi5EP3eg1fS 2sJuRf2ajCGJw6DqsFRqWzJ+ZM1m7G48xH/Yv+cxeV7t5j8yOa6rt4Q7EoTOLU0M I9eUQXDAKs9nCDnxOV5Zom++6Ebizd6Kv/D41hIIxMQsoFp9Q5A5Ha7pGwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFBZiCtUHNkGg0TZc/IIpXZpE6B/QMB8GA1UdIwQY MBaAFLonQVUQTkMyjDv6KtasZxl2bxMlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWlkQlZSQk9RektNT19vcTFxeG5HWFp2RXlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9jNjllZWYtNWFjMi00NzY4LTgzYjct ZWNkZjJhOTA2YjRjLzEvRm1JSzFRYzJRYURSTmx6OGdpbGRta1RvSDlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9jNjllZWYtNWFjMi00NzY4LTgzYjctZWNkZjJhOTA2YjRj LzEvdWlkQlZSQk9RektNT19vcTFxeG5HWFp2RXlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAS8XvAD BAC8XvIwDQYJKoZIhvcNAQELBQADggEBAB02rsjDAnh02pEsJfIriSorZy7KBZm0 EDrR+acwewzeNwUbzepJWXo1B/fsOrzcJ4kYVqRB97UQK6h7c9EDOPmytaHzsVam gMzZPus0XOuATeojR3p2ey2xrPWZEcCg91BZ/U7RrD3pA32A3p6WVBS+M1wBceZ1 62IGveSmw9j+m5obxwiqooZpVgVr39f+kHcnxxqWCZNYxDtGPdvJndJBGVKdoz8x 2kV87RihAlRfvYEqmmFWblwSZDHdbpavX/VBuFm881URpCxOYsrfj9M5r6aUt9KM oc/DUstII+7NStszOArt06WZAxyquLisdFyTXiI5Wx/TsJIqkR4lC4k= -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:42 2026 by rpki-client