This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/Fq4x87XmupBOAkCisYEcN7XqoZE.roa File: Fq4x87XmupBOAkCisYEcN7XqoZE.roa (raw, json) Hash identifier: xhD7nGAh96AYY5dfhK9D1eKT7BFTs6JVCiD3DWI5RbU= Subject key identifier: 16:AE:31:F3:B5:E6:BA:90:4E:02:40:A2:B1:81:1C:37:B5:EA:A1:91 Certificate issuer: /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300 Certificate serial: 019B7B35CD821C2CE917F3E80B78668A7909 Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/Fq4x87XmupBOAkCisYEcN7XqoZE.roa Signing time: Thu 01 Jan 2026 20:18:02 +0000 ROA not before: Thu 01 Jan 2026 20:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210976 IP address blocks: 185.171.80.0/24 maxlen: 24 185.171.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:cd:82:1c:2c:e9:17:f3:e8:0b:78:66:8a:79:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300 Validity Not Before: Jan 1 20:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16ae31f3b5e6ba904e0240a2b1811c37b5eaa191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b6:40:a6:dd:48:32:74:19:28:d3:2c:51:0f: 06:7c:a4:d2:93:13:83:b4:ef:ff:3f:fe:98:1a:9d: d3:75:b8:f3:09:c3:48:9b:e8:8d:6c:8d:e7:ea:09: 32:02:b7:4d:04:38:e6:ef:36:08:a1:97:87:04:f4: a4:72:6e:51:35:11:e7:d0:16:54:4f:4e:8c:c0:7e: 59:42:db:22:24:0e:4f:8d:3a:99:e7:37:24:8d:53: 04:48:b8:2d:7c:b8:c8:13:6e:1f:c5:8c:61:05:9f: e9:8a:97:1a:b2:4f:b7:44:91:1e:00:f2:b0:6b:cd: 2e:e0:e7:30:a2:06:67:2f:79:11:2f:d2:e4:85:b2: 6f:25:f8:1d:7b:e0:1b:c8:14:3e:5c:0a:f7:70:cc: 36:d6:fc:37:f0:f8:0c:fd:62:5f:d5:ec:d7:df:3d: 59:59:25:66:aa:b0:d8:7d:ba:73:6c:59:ae:40:27: a8:21:34:f1:a2:98:7f:6b:69:a5:87:e1:0e:2a:1b: b3:41:b2:5b:0c:58:55:19:c7:5b:22:7e:33:d2:2b: 26:94:ec:80:e2:83:51:ef:e2:74:b3:ac:55:d5:1b: 27:3e:36:ba:41:31:58:cc:12:de:f0:ef:89:2a:14: 0c:3c:14:53:ee:8d:59:c5:d0:79:4d:b5:8b:e6:22: 01:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AE:31:F3:B5:E6:BA:90:4E:02:40:A2:B1:81:1C:37:B5:EA:A1:91 X509v3 Authority Key Identifier: keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/Fq4x87XmupBOAkCisYEcN7XqoZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.171.80.0/24 185.171.83.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:98:4e:f6:95:5c:41:e7:e7:43:23:26:6d:18:4a:cc:c7:7f: da:a4:29:fb:03:8e:a4:64:63:0e:15:7a:d2:d6:ec:c3:27:e9: 7e:f6:1a:3b:88:71:a6:e8:ba:38:c9:ad:6a:e6:e1:12:c2:36: 1b:21:59:3d:47:58:ff:ca:b6:18:e0:ac:0c:63:6f:42:83:8d: 92:de:82:f8:93:6d:04:c1:12:43:f8:b2:ed:e9:51:c4:bc:28: 8b:d9:91:29:d5:75:fd:e9:bc:bd:96:49:54:5c:27:a9:a5:73: 4c:22:03:8a:27:6d:b2:ef:f4:27:bd:7b:50:8f:10:d8:d2:13: db:24:1d:ae:c2:73:a9:fb:17:a4:1e:a4:0a:b7:99:4d:29:5b: dd:26:35:2a:aa:04:64:2e:b2:17:3b:5b:39:4c:e5:6e:b7:7a: 0f:d6:13:a0:e1:81:4a:dc:74:41:c4:77:8c:7a:af:79:13:a2: 80:dd:e0:46:b4:c1:94:ae:c9:80:49:9c:30:a2:38:cf:a3:04: 2d:f9:0c:86:42:ba:73:6a:fb:bb:89:db:0c:6b:c8:a3:fc:6c: 43:c5:5b:19:b3:ea:dd:15:95:c8:49:5e:f8:53:2d:c8:7d:a7: 55:52:45:13:d0:3b:8f:58:93:c5:73:83:01:fe:96:a7:ea:3d: ab:4f:95:e2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Nc2CHCzpF/PoC3hminkJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNTYzNjA2MjRjYzFiNGM0OWRhNzJiYzMyNWY1YmI2YWI0 ZDgzMDAwHhcNMjYwMTAxMjAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmFlMzFmM2I1ZTZiYTkwNGUwMjQwYTJiMTgxMWMzN2I1ZWFhMTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbZApt1IMnQZKNMsUQ8GfKTSkxOD tO//P/6YGp3TdbjzCcNIm+iNbI3n6gkyArdNBDjm7zYIoZeHBPSkcm5RNRHn0BZU T06MwH5ZQtsiJA5PjTqZ5zckjVMESLgtfLjIE24fxYxhBZ/pipcask+3RJEeAPKw a80u4OcwogZnL3kRL9LkhbJvJfgde+AbyBQ+XAr3cMw21vw38PgM/WJf1ezX3z1Z WSVmqrDYfbpzbFmuQCeoITTxoph/a2mlh+EOKhuzQbJbDFhVGcdbIn4z0ismlOyA 4oNR7+J0s6xV1RsnPja6QTFYzBLe8O+JKhQMPBRT7o1ZxdB5TbWL5iIB1QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBauMfO15rqQTgJAorGBHDe16qGRMB8GA1UdIwQY MBaAFM5WNgYkzBtMSdpyvDJfW7arTYMAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUt YTk4ZWYzMDA4NTgwLzEvRnE0eDg3WG11cEJPQWtDaXNZRWNON1hxb1pFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUtYTk4ZWYzMDA4NTgw LzEvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuatQAwQA uatTMA0GCSqGSIb3DQEBCwUAA4IBAQAOmE72lVxB5+dDIyZtGErMx3/apCn7A46k ZGMOFXrS1uzDJ+l+9ho7iHGm6Lo4ya1q5uESwjYbIVk9R1j/yrYY4KwMY29Cg42S 3oL4k20EwRJD+LLt6VHEvCiL2ZEp1XX96by9lklUXCeppXNMIgOKJ22y7/QnvXtQ jxDY0hPbJB2uwnOp+xekHqQKt5lNKVvdJjUqqgRkLrIXO1s5TOVut3oP1hOg4YFK 3HRBxHeMeq95E6KA3eBGtMGUrsmASZwwojjPowQt+QyGQrpzavu7idsMa8ij/GxD xVsZs+rdFZXISV74Uy3IfadVUkUT0DuPWJPFc4MB/pan6j2rT5Xi -----END CERTIFICATE-----Generated at Wed Jan 21 11:15:10 2026 by rpki-client