This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/FJKGPqRbP8xDdlIqN18Km-mq5mU.roa File: FJKGPqRbP8xDdlIqN18Km-mq5mU.roa (raw, json) Hash identifier: yvkN+oHGf2dtLUrIB+ZTxmrHi2uUOO/6c/JtBwxzoqQ= Subject key identifier: 14:92:86:3E:A4:5B:3F:CC:43:76:52:2A:37:5F:0A:9B:E9:AA:E6:65 Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019B7C808404EB20D0CD013C7A32703F6C8D Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/FJKGPqRbP8xDdlIqN18Km-mq5mU.roa Signing time: Fri 02 Jan 2026 02:19:15 +0000 ROA not before: Fri 02 Jan 2026 02:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200740 IP address blocks: 45.134.12.0/23 maxlen: 23 45.134.14.0/23 maxlen: 23 89.44.84.0/23 maxlen: 23 91.200.14.0/24 maxlen: 24 91.200.15.0/24 maxlen: 24 95.81.77.0/24 maxlen: 24 95.81.93.0/24 maxlen: 24 95.81.94.0/23 maxlen: 23 95.81.112.0/24 maxlen: 24 95.81.113.0/24 maxlen: 24 95.81.119.0/24 maxlen: 24 95.81.120.0/24 maxlen: 24 103.85.112.0/24 maxlen: 24 103.85.113.0/24 maxlen: 24 103.249.132.0/23 maxlen: 23 103.249.134.0/23 maxlen: 23 104.128.138.0/23 maxlen: 23 104.128.142.0/23 maxlen: 23 104.128.142.0/24 maxlen: 24 104.128.143.0/24 maxlen: 24 109.69.56.0/23 maxlen: 23 109.69.58.0/23 maxlen: 23 185.103.252.0/23 maxlen: 23 185.103.254.0/23 maxlen: 23 2a0c:5d00:3002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:84:04:eb:20:d0:cd:01:3c:7a:32:70:3f:6c:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Jan 2 02:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1492863ea45b3fcc4376522a375f0a9be9aae665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:63:0f:0d:d3:7b:7c:05:cb:a1:37:83:40:d8: 5e:37:ed:d9:af:10:3f:be:66:0b:57:d6:8f:c9:19: 14:d9:9c:73:e8:9a:65:93:00:c7:cd:99:5e:d5:44: 60:73:b1:7a:bb:9d:be:02:61:58:10:f0:28:3d:e6: 97:10:ae:0b:7f:f7:0c:82:e8:ef:c1:3a:ec:cc:a2: 43:0a:1e:d0:8a:f9:53:c3:d9:7a:4b:8b:72:68:d6: 31:a8:6e:87:f5:a8:6f:4d:25:96:e2:f4:6c:08:0d: 7e:be:c2:5c:b2:1a:c8:8f:46:70:f4:b2:33:27:65: 58:b1:75:72:58:79:61:e5:50:51:a4:b5:62:2c:23: 42:e4:04:0d:83:c7:c3:2a:22:e2:a3:76:ae:9c:b3: 3b:91:a5:00:3e:a7:97:31:c3:9a:af:4e:34:0b:20: eb:62:ec:6a:1c:b1:49:76:19:6d:47:02:1d:3a:cc: fd:4e:4d:f1:31:da:e1:44:dd:de:9b:8b:94:15:51: 8f:5e:71:19:af:6a:dc:fc:df:5e:28:47:7c:e2:5e: d6:de:4d:fe:7f:11:07:cc:e1:96:25:4a:27:ae:d4: cf:b4:2a:4f:f5:34:65:a4:46:db:f8:25:e1:f5:cb: b1:9c:41:53:d9:5a:10:75:af:63:2e:d1:f3:de:7e: c4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:92:86:3E:A4:5B:3F:CC:43:76:52:2A:37:5F:0A:9B:E9:AA:E6:65 X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/FJKGPqRbP8xDdlIqN18Km-mq5mU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.12.0/22 89.44.84.0/23 91.200.14.0/23 95.81.77.0/24 95.81.93.0-95.81.95.255 95.81.112.0/23 95.81.119.0-95.81.120.255 103.85.112.0/23 103.249.132.0/22 104.128.138.0/23 104.128.142.0/23 109.69.56.0/22 185.103.252.0/22 IPv6: 2a0c:5d00:3002::/48 Signature Algorithm: sha256WithRSAEncryption 76:90:86:57:14:0f:ca:bf:f4:ab:2b:f5:ad:23:eb:12:e8:97: e6:67:ad:89:28:cf:0a:e4:c9:07:d3:30:a8:0d:53:13:56:28: 56:c8:7a:a1:6d:76:82:ab:6a:2a:9a:55:29:71:26:67:27:73: cc:db:c9:72:fc:35:30:53:b4:3e:50:d2:31:59:4c:c0:5b:28: 4d:c1:90:35:7c:d1:e4:60:44:eb:3b:a5:69:19:85:7d:f8:6b: 35:d6:ab:21:07:9f:19:dd:2f:a2:7e:4f:4d:78:2f:60:16:9c: a2:86:19:60:78:ff:e2:7f:db:74:71:4b:45:97:68:02:06:3b: 33:1b:e4:a0:33:02:0a:e8:80:d2:e6:ef:75:46:da:b2:01:d3: f3:45:bf:30:ce:0e:e6:2c:14:6f:37:ce:bb:a4:2f:d8:bc:f4: b2:d2:31:ad:fc:3e:d5:e5:72:81:22:0f:9a:8b:c6:e3:3d:9e: 7f:b8:86:da:3e:ea:76:ce:04:4a:6b:68:18:2a:ef:91:c1:60: 64:31:fe:b5:29:d5:ae:d1:5e:c1:28:99:63:37:0d:d4:34:05: dc:98:e1:a9:7c:28:8d:70:98:60:b7:fe:24:d7:f7:5b:df:9e: f5:d4:85:b4:bf:1c:e6:4b:f6:f2:9a:1c:cb:11:de:e6:af:a7: 25:e4:a9:8f -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgISAZt8gIQE6yDQzQE8ejJwP2yNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjYwMTAyMDIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDkyODYzZWE0NWIzZmNjNDM3NjUyMmEzNzVmMGE5YmU5YWFlNjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GMPDdN7fAXLoTeDQNheN+3ZrxA/ vmYLV9aPyRkU2Zxz6JplkwDHzZle1URgc7F6u52+AmFYEPAoPeaXEK4Lf/cMgujv wTrszKJDCh7QivlTw9l6S4tyaNYxqG6H9ahvTSWW4vRsCA1+vsJcshrIj0Zw9LIz J2VYsXVyWHlh5VBRpLViLCNC5AQNg8fDKiLio3aunLM7kaUAPqeXMcOar040CyDr YuxqHLFJdhltRwIdOsz9Tk3xMdrhRN3em4uUFVGPXnEZr2rc/N9eKEd84l7W3k3+ fxEHzOGWJUonrtTPtCpP9TRlpEbb+CXh9cuxnEFT2VoQda9jLtHz3n7E4QIDAQAB o4ICczCCAm8wHQYDVR0OBBYEFBSShj6kWz/MQ3ZSKjdfCpvpquZlMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvRkpLR1BxUmJQOHhEZGxJcU4xOEttLW1xNW1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGIBggrBgEFBQcBBwEB/wR5MHcwZAQCAAEwXgMEAi2GDAME AVksVAMEAVvIDgMEAF9RTTAMAwQAX1FdAwQFX1FAAwQBX1FwMAwDBABfUXcDBABf UXgDBAFnVXADBAJn+YQDBAFogIoDBAFogI4DBAJtRTgDBAK5Z/wwDwQCAAIwCQMH ACoMXQAwAjANBgkqhkiG9w0BAQsFAAOCAQEAdpCGVxQPyr/0qyv1rSPrEuiX5met iSjPCuTJB9MwqA1TE1YoVsh6oW12gqtqKppVKXEmZydzzNvJcvw1MFO0PlDSMVlM wFsoTcGQNXzR5GBE6zulaRmFffhrNdarIQefGd0von5PTXgvYBacooYZYHj/4n/b dHFLRZdoAgY7MxvkoDMCCuiA0ubvdUbasgHT80W/MM4O5iwUbzfOu6Qv2Lz0stIx rfw+1eVygSIPmovG4z2ef7iG2j7qds4ESmtoGCrvkcFgZDH+tSnVrtFewSiZYzcN 1DQF3JjhqXwojXCYYLf+JNf3W9+e9dSFtL8c5kv28pocyxHe5q+nJeSpjw== -----END CERTIFICATE-----Generated at Wed Jan 21 08:06:29 2026 by rpki-client