This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/FllgV1uq3gnfxzgcQ6YncIh4JMQ.roa File: FllgV1uq3gnfxzgcQ6YncIh4JMQ.roa (raw, json) Hash identifier: xP/yiKvXIB14qyF8rqguFru71C1q8PJ2Qa43mcie0iQ= Subject key identifier: 16:59:60:57:5B:AA:DE:09:DF:C7:38:1C:43:A6:27:70:88:78:24:C4 Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77 Certificate serial: 019B78A21C10DB7ACCACFE3C5B4269B73FD3 Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/FllgV1uq3gnfxzgcQ6YncIh4JMQ.roa Signing time: Thu 01 Jan 2026 08:17:28 +0000 ROA not before: Thu 01 Jan 2026 08:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50633 IP address blocks: 185.249.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:1c:10:db:7a:cc:ac:fe:3c:5b:42:69:b7:3f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77 Validity Not Before: Jan 1 08:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=165960575baade09dfc7381c43a62770887824c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ee:15:33:80:3d:19:cd:a5:7c:e6:f6:9b:26: 3a:cb:7b:63:77:56:1e:97:75:1f:24:9a:e9:87:df: 1e:66:b1:f5:45:1b:8c:70:04:7e:43:37:9a:53:a0: 30:a1:da:0d:39:b5:92:00:fe:35:8d:9f:e9:8e:26: b7:55:96:c9:6f:42:87:8d:8d:78:63:fb:a2:00:e5: 7c:5f:ab:e4:8c:05:36:f5:a9:d7:af:70:c2:4a:ed: cd:bf:a3:bb:1d:0e:43:9a:e4:9d:68:1d:20:b8:dd: 8b:b8:cc:01:03:a9:b6:1f:14:9d:a5:96:d6:f0:8a: da:90:97:a5:91:b5:72:f4:4c:d5:84:b9:96:a6:0e: e8:8b:9f:53:07:44:9b:a1:7b:b0:33:aa:ea:38:73: ad:8d:3c:ac:a6:01:e6:e9:3a:8c:2e:13:8c:89:ed: c6:ab:8e:2d:d1:4d:95:ab:28:66:e6:56:0a:63:68: d1:67:2f:87:b3:30:b1:c3:d9:49:90:5b:b1:8d:30: c1:1b:41:9e:5c:5e:05:30:e4:45:5b:90:04:d3:a5: 75:58:c6:a9:67:0b:26:16:f1:b0:0b:d4:20:b7:0a: 61:10:ac:31:c4:05:70:35:54:14:fa:b2:fa:52:1b: cd:75:b4:32:8a:b0:77:ac:d6:34:8f:a7:b9:84:8b: 8d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:59:60:57:5B:AA:DE:09:DF:C7:38:1C:43:A6:27:70:88:78:24:C4 X509v3 Authority Key Identifier: keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/FllgV1uq3gnfxzgcQ6YncIh4JMQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.249.161.0/24 Signature Algorithm: sha256WithRSAEncryption 89:c8:70:88:8b:9a:cc:b6:ac:09:0e:74:43:ab:dc:e3:83:0e: 9d:28:0d:b7:a5:5b:42:15:dd:d8:25:10:52:e0:47:c1:79:10: a8:a8:67:a3:b6:db:0d:7e:af:a1:a4:ee:85:d4:77:32:fa:ef: 1c:85:3e:b3:75:b1:f3:08:68:bc:f8:38:06:ae:09:d1:1b:73: 07:8d:63:16:f7:ee:5b:cb:01:ae:2e:fc:d6:ff:4b:0d:1d:27: 6f:af:2a:2e:9d:c7:cf:bb:b6:a4:1f:dc:35:f2:63:d7:c8:c3: b9:46:68:dd:9c:f2:7c:ea:43:14:fc:1f:31:a0:05:4a:82:71: f5:a5:22:ce:ce:0b:43:2d:cc:4e:9f:15:a6:05:9c:7d:d6:42: fb:f4:7e:00:19:a3:98:4f:65:f9:91:38:56:17:7e:d3:0c:30: 96:0a:b2:09:f1:04:54:81:11:84:a2:b1:b1:56:7d:ff:07:90: 85:38:68:e4:3a:9a:80:67:6f:34:f8:c5:cb:9b:29:04:bf:8b: 5b:33:3d:f6:aa:5e:f5:93:a4:4c:f2:5a:1b:d8:e2:59:4e:19: 1c:c6:94:0c:55:91:13:f7:0d:5c:15:23:c5:37:1b:64:c9:93: 8c:59:ac:0f:69:39:4c:67:23:c5:29:ec:19:68:5c:da:5e:e8: 2c:64:3a:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ohwQ23rMrP48W0Jptz/TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NTJiMDNlMWIwMTcwOTYzODk0MGQ5NTkyOTgzY2RlNzdl Y2FiNzcwHhcNMjYwMTAxMDgxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjU5NjA1NzViYWFkZTA5ZGZjNzM4MWM0M2E2Mjc3MDg4NzgyNGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAme4VM4A9Gc2lfOb2myY6y3tjd1Ye l3UfJJrph98eZrH1RRuMcAR+QzeaU6AwodoNObWSAP41jZ/pjia3VZbJb0KHjY14 Y/uiAOV8X6vkjAU29anXr3DCSu3Nv6O7HQ5DmuSdaB0guN2LuMwBA6m2HxSdpZbW 8IrakJelkbVy9EzVhLmWpg7oi59TB0SboXuwM6rqOHOtjTyspgHm6TqMLhOMie3G q44t0U2Vqyhm5lYKY2jRZy+HszCxw9lJkFuxjTDBG0GeXF4FMORFW5AE06V1WMap ZwsmFvGwC9QgtwphEKwxxAVwNVQU+rL6UhvNdbQyirB3rNY0j6e5hIuNKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBZZYFdbqt4J38c4HEOmJ3CIeCTEMB8GA1UdIwQY MBaAFIRSsD4bAXCWOJQNlZKYPN537Kt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQt MjAwZmMyNzRjYjAxLzEvRmxsZ1YxdXEzZ25meHpnY1E2WW5jSWg0Sk1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQtMjAwZmMyNzRjYjAx LzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufmhMA0G CSqGSIb3DQEBCwUAA4IBAQCJyHCIi5rMtqwJDnRDq9zjgw6dKA23pVtCFd3YJRBS 4EfBeRCoqGejttsNfq+hpO6F1Hcy+u8chT6zdbHzCGi8+DgGrgnRG3MHjWMW9+5b ywGuLvzW/0sNHSdvryouncfPu7akH9w18mPXyMO5RmjdnPJ86kMU/B8xoAVKgnH1 pSLOzgtDLcxOnxWmBZx91kL79H4AGaOYT2X5kThWF37TDDCWCrIJ8QRUgRGEorGx Vn3/B5CFOGjkOpqAZ280+MXLmykEv4tbMz32ql71k6RM8lob2OJZThkcxpQMVZET 9w1cFSPFNxtkyZOMWawPaTlMZyPFKewZaFzaXugsZDoQ -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:30 2026 by rpki-client