This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/FZlBOz2gFwzrDKVZ6gMchrb7teE.roa File: FZlBOz2gFwzrDKVZ6gMchrb7teE.roa (raw, json) Hash identifier: EuuVBUMpYSozzMT++aJ7DLlwFhh2sATMKgkOl8ndakk= Subject key identifier: 15:99:41:3B:3D:A0:17:0C:EB:0C:A5:59:EA:03:1C:86:B6:FB:B5:E1 Certificate issuer: /CN=d9a988916d51406f9a269f30a02d0086b57f4d5a Certificate serial: 019B7DCB520A82884CBA226BBD69D9B21F74 Authority key identifier: D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/FZlBOz2gFwzrDKVZ6gMchrb7teE.roa Signing time: Fri 02 Jan 2026 08:20:35 +0000 ROA not before: Fri 02 Jan 2026 08:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210997 IP address blocks: 185.6.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:52:0a:82:88:4c:ba:22:6b:bd:69:d9:b2:1f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9a988916d51406f9a269f30a02d0086b57f4d5a Validity Not Before: Jan 2 08:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1599413b3da0170ceb0ca559ea031c86b6fbb5e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f2:85:a3:94:41:27:03:4f:a5:f2:27:eb:15: 63:69:de:ed:21:b6:45:d1:21:3f:8c:92:a3:8f:ea: 05:b4:5b:82:be:ac:f3:e3:f4:3a:94:ce:9a:b7:f0: 0c:0f:d2:67:0e:a3:75:bf:83:9f:e7:80:f2:4a:ae: 8a:ec:90:bb:6b:f7:cd:e6:8f:d6:f4:63:b3:95:15: 36:57:88:ad:cc:c6:35:7b:fa:f4:a7:68:5d:c9:94: ef:0f:58:15:9b:33:a8:10:2a:78:ef:1d:c6:5f:24: 13:49:e0:f9:21:6c:94:b5:b8:f6:cf:b1:f3:38:e7: a1:90:57:a1:2d:3b:41:26:42:cf:33:ea:83:67:8f: e9:21:0a:04:3f:e8:99:ae:c8:1f:e1:29:bb:55:da: bd:c1:5c:8b:8b:29:9c:06:00:61:ad:a3:0b:78:2d: 38:79:a8:b2:4a:f2:24:9a:54:0e:b6:af:29:2d:f5: dd:2d:9c:5e:82:4e:30:76:ae:3a:09:19:55:92:49: b3:08:01:cb:50:c7:1d:4c:17:73:4f:15:12:c3:8c: 81:f9:4a:67:27:26:09:4a:64:0e:46:17:26:f8:1f: 73:49:a6:81:05:c8:4a:82:f8:0c:59:5d:37:7f:b6: 92:59:64:06:ee:7f:cc:0a:72:90:66:c8:e2:48:8d: c0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:99:41:3B:3D:A0:17:0C:EB:0C:A5:59:EA:03:1C:86:B6:FB:B5:E1 X509v3 Authority Key Identifier: keyid:D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/FZlBOz2gFwzrDKVZ6gMchrb7teE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.6.31.0/24 Signature Algorithm: sha256WithRSAEncryption 74:d0:0f:fe:72:32:21:5e:df:59:4c:83:e4:02:66:c8:d5:59: 47:ab:c8:ec:dc:64:c8:36:1f:c1:bf:95:72:a6:8f:f6:5d:f0: 1f:57:d9:4f:4c:71:50:ce:24:d2:89:9a:78:ea:ca:b2:b6:a7: 15:c9:b7:06:11:83:0f:44:0a:ed:7e:20:de:f8:3e:36:21:5d: e2:f8:28:f3:c0:49:9a:52:af:52:dc:f6:a8:a8:55:20:35:b2: f5:f5:82:db:0b:c5:18:d9:ce:8c:1a:73:82:9b:99:0c:44:97: d8:aa:d2:46:94:b6:cf:76:10:48:4a:50:88:91:0a:0a:71:ac: 29:b9:4e:d2:0c:0f:b7:60:6c:21:c4:4f:d2:da:e5:56:11:b9: 5f:75:1e:5e:d8:8c:11:16:07:52:a4:9a:d2:e7:d8:ca:b8:fd: 8b:27:8f:6e:a1:6c:31:55:6e:26:a0:80:53:f2:0c:c5:b2:39: 23:59:84:ee:19:7b:82:9b:26:5c:b0:36:66:41:b5:1a:69:b2: 3e:89:c2:34:ab:b9:84:d0:dd:1d:4d:71:64:e8:f3:63:2e:f5: 3b:34:a3:83:fb:af:d9:d3:49:f4:08:4b:02:91:0f:d5:9c:95: 74:13:e6:d7:4b:75:38:16:35:21:ff:94:00:fa:61:3a:11:c9: b9:cf:52:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y1IKgohMuiJrvWnZsh90MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5YTk4ODkxNmQ1MTQwNmY5YTI2OWYzMGEwMmQwMDg2YjU3 ZjRkNWEwHhcNMjYwMTAyMDgyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTk5NDEzYjNkYTAxNzBjZWIwY2E1NTllYTAzMWM4NmI2ZmJiNWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPKFo5RBJwNPpfIn6xVjad7tIbZF 0SE/jJKjj+oFtFuCvqzz4/Q6lM6at/AMD9JnDqN1v4Of54DySq6K7JC7a/fN5o/W 9GOzlRU2V4itzMY1e/r0p2hdyZTvD1gVmzOoECp47x3GXyQTSeD5IWyUtbj2z7Hz OOehkFehLTtBJkLPM+qDZ4/pIQoEP+iZrsgf4Sm7Vdq9wVyLiymcBgBhraMLeC04 eaiySvIkmlQOtq8pLfXdLZxegk4wdq46CRlVkkmzCAHLUMcdTBdzTxUSw4yB+Upn JyYJSmQORhcm+B9zSaaBBchKgvgMWV03f7aSWWQG7n/MCnKQZsjiSI3AWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBWZQTs9oBcM6wylWeoDHIa2+7XhMB8GA1UdIwQY MBaAFNmpiJFtUUBvmiafMKAtAIa1f01aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85NjJiM2YtZmMyNi00NTQ5LWFlMDIt NGQwNDlhMWVhZjJmLzEvRlpsQk96MmdGd3pyREtWWjZnTWNocmI3dGVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy85NjJiM2YtZmMyNi00NTQ5LWFlMDItNGQwNDlhMWVhZjJm LzEvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQYfMA0G CSqGSIb3DQEBCwUAA4IBAQB00A/+cjIhXt9ZTIPkAmbI1VlHq8js3GTINh/Bv5Vy po/2XfAfV9lPTHFQziTSiZp46sqytqcVybcGEYMPRArtfiDe+D42IV3i+CjzwEma Uq9S3PaoqFUgNbL19YLbC8UY2c6MGnOCm5kMRJfYqtJGlLbPdhBISlCIkQoKcawp uU7SDA+3YGwhxE/S2uVWEblfdR5e2IwRFgdSpJrS59jKuP2LJ49uoWwxVW4moIBT 8gzFsjkjWYTuGXuCmyZcsDZmQbUaabI+icI0q7mE0N0dTXFk6PNjLvU7NKOD+6/Z 00n0CEsCkQ/VnJV0E+bXS3U4FjUh/5QA+mE6Ecm5z1KH -----END CERTIFICATE-----Generated at Mon Jan 26 18:55:26 2026 by rpki-client