This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/FxlVSI3Pzk5LMHhEN368eliO1Zk.roa File: FxlVSI3Pzk5LMHhEN368eliO1Zk.roa (raw, json) Hash identifier: gF++G6xQjDJflZ/Ja5HPf6B0qWFfzOW2mYFsfoVk7H8= Subject key identifier: 17:19:55:48:8D:CF:CE:4E:4B:30:78:44:37:7E:BC:7A:58:8E:D5:99 Certificate issuer: /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430 Certificate serial: 019BC13957CB0FA9FA625B043611DC2DF4EA Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/FxlVSI3Pzk5LMHhEN368eliO1Zk.roa Signing time: Thu 15 Jan 2026 10:35:19 +0000 ROA not before: Thu 15 Jan 2026 10:35:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5607 IP address blocks: 91.103.33.0/24 maxlen: 24 91.103.34.0/24 maxlen: 24 94.119.4.0/22 maxlen: 22 94.119.8.0/21 maxlen: 21 94.119.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c1:39:57:cb:0f:a9:fa:62:5b:04:36:11:dc:2d:f4:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430 Validity Not Before: Jan 15 10:35:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=171955488dcfce4e4b307844377ebc7a588ed599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:42:5b:a1:93:21:d8:b1:29:46:8a:b9:9f:88: 5f:86:e7:74:6f:4d:e9:69:ae:6c:cb:0f:f4:81:2a: eb:25:00:bb:df:fb:93:b1:dc:77:b9:08:a1:a6:7a: 08:0f:55:8a:4e:78:48:1f:32:06:18:1d:b3:62:41: bf:bc:c6:ba:f0:79:5d:c6:0d:d6:b1:3f:cd:15:e1: 1d:37:cf:38:d3:e2:6a:37:d7:c8:b6:63:87:3e:b1: f0:1e:ac:02:af:4e:53:f5:b7:9a:ea:4d:2b:01:5d: 5c:64:c2:6d:7b:a3:98:ff:28:c5:ed:b7:b3:81:79: 1b:35:68:b5:39:b7:45:d8:bd:24:fb:79:f8:0d:c0: 45:0b:c2:e7:f5:d4:bd:27:dd:19:d0:cd:ec:25:b7: e5:0f:20:25:0e:f3:03:63:75:50:ef:04:69:3c:0d: e8:ac:ee:53:fd:9b:3e:4e:99:dd:ba:20:be:eb:ab: 25:92:fb:12:06:44:ab:7f:8f:11:03:a7:77:94:27: 5b:fd:56:13:2f:a3:9b:eb:f0:72:67:89:e7:52:8e: 86:2f:35:fd:65:ba:f6:7d:29:a3:76:bf:98:41:41: 2b:45:22:75:7e:32:58:01:b6:5d:cb:f3:c7:0c:08: ac:cf:19:92:75:ce:b2:db:c8:2b:11:21:10:17:8f: c3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:19:55:48:8D:CF:CE:4E:4B:30:78:44:37:7E:BC:7A:58:8E:D5:99 X509v3 Authority Key Identifier: keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/FxlVSI3Pzk5LMHhEN368eliO1Zk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.103.33.0-91.103.34.255 94.119.4.0-94.119.23.255 Signature Algorithm: sha256WithRSAEncryption 98:6b:8c:1d:e7:c0:a1:52:b4:ed:49:6e:05:06:c6:c5:83:0e: aa:95:df:0e:6d:d8:71:af:39:fe:1a:d9:ab:41:66:61:74:bc: 82:d3:4e:cc:19:be:94:26:3a:2b:1d:3c:8c:b3:ae:e9:60:c6: 00:ab:a5:42:79:71:f0:40:d2:38:57:29:99:d4:05:27:a2:1c: 8f:b1:62:09:7b:e5:73:db:d3:00:7b:0a:ad:ae:43:99:a0:cd: 50:23:81:d7:2a:66:fd:3e:11:97:1b:e6:de:7a:04:32:ab:6b: 0f:5f:dc:95:4e:0f:e5:50:4e:2f:63:7d:f1:27:bf:29:e3:fd: 10:d5:cc:3b:6a:a8:62:72:41:e0:1e:ec:49:24:70:38:3c:a3: 86:f9:0a:2c:e1:a3:9f:9a:35:a0:cb:ea:e2:27:40:2c:65:b0: a3:a4:7a:e7:90:f2:d0:4c:44:be:84:a1:7d:a2:65:ec:22:a4: 29:22:5b:ed:73:8a:7b:32:3e:01:7f:d4:85:42:49:7b:f5:30: 10:67:2c:43:a1:ce:7a:e1:3f:e2:9c:92:48:68:5c:00:a6:d6: 92:53:17:c6:d6:55:af:d3:02:ee:a8:67:95:3b:fa:16:e1:29: d8:a8:30:4a:4f:9f:59:e7:c6:98:54:92:c8:4e:eb:c3:fc:39: 68:c3:b5:53 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZvBOVfLD6n6YlsENhHcLfTqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNDM5OTUyODliNmE1Y2E5NzJjNGI4N2I1ZTMxNDljMzJj YjQ0MzAwHhcNMjYwMTE1MTAzNTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzE5NTU0ODhkY2ZjZTRlNGIzMDc4NDQzNzdlYmM3YTU4OGVkNTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EJboZMh2LEpRoq5n4hfhud0b03p aa5syw/0gSrrJQC73/uTsdx3uQihpnoID1WKTnhIHzIGGB2zYkG/vMa68Hldxg3W sT/NFeEdN8840+JqN9fItmOHPrHwHqwCr05T9bea6k0rAV1cZMJte6OY/yjF7bez gXkbNWi1ObdF2L0k+3n4DcBFC8Ln9dS9J90Z0M3sJbflDyAlDvMDY3VQ7wRpPA3o rO5T/Zs+TpnduiC+66slkvsSBkSrf48RA6d3lCdb/VYTL6Ob6/ByZ4nnUo6GLzX9 Zbr2fSmjdr+YQUErRSJ1fjJYAbZdy/PHDAiszxmSdc6y28grESEQF4/DtQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFBcZVUiNz85OSzB4RDd+vHpYjtWZMB8GA1UdIwQY MBaAFL5DmVKJtqXKlyxLh7XjFJwyy0QwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmtPWlVvbTJwY3FYTEV1SHRlTVVuRExMUkRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83NjRiMzQtMGQ5OC00NTRjLTg1YTIt MzA2MDQ1ZWZjZDY4LzEvRnhsVlNJM1B6azVMTUhoRU4zNjhlbGlPMVprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS83NjRiMzQtMGQ5OC00NTRjLTg1YTItMzA2MDQ1ZWZjZDY4 LzEvdmtPWlVvbTJwY3FYTEV1SHRlTVVuRExMUkRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBABbZyED BABbZyIwDAMEAl53BAMEA153EDANBgkqhkiG9w0BAQsFAAOCAQEAmGuMHefAoVK0 7UluBQbGxYMOqpXfDm3Yca85/hrZq0FmYXS8gtNOzBm+lCY6Kx08jLOu6WDGAKul Qnlx8EDSOFcpmdQFJ6Icj7FiCXvlc9vTAHsKra5DmaDNUCOB1ypm/T4Rlxvm3noE MqtrD1/clU4P5VBOL2N98Se/KeP9ENXMO2qoYnJB4B7sSSRwODyjhvkKLOGjn5o1 oMvq4idALGWwo6R655Dy0ExEvoShfaJl7CKkKSJb7XOKezI+AX/UhUJJe/UwEGcs Q6HOeuE/4pySSGhcAKbWklMXxtZVr9MC7qhnlTv6FuEp2KgwSk+fWefGmFSSyE7r w/w5aMO1Uw== -----END CERTIFICATE-----Generated at Tue Jan 20 23:29:28 2026 by rpki-client