This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/F1XFKolR75CvzOCyFlTtMYXp3UA.roa File: F1XFKolR75CvzOCyFlTtMYXp3UA.roa (raw, json) Hash identifier: 1NsFIv/Vqxyf17zBRZ7ykgjIIYfbwgtJjmnNI1bztF0= Subject key identifier: 17:55:C5:2A:89:51:EF:90:AF:CC:E0:B2:16:54:ED:31:85:E9:DD:40 Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Certificate serial: 019B7E386FFA3AC68A58B6068238F34DCAA4 Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/F1XFKolR75CvzOCyFlTtMYXp3UA.roa Signing time: Fri 02 Jan 2026 10:19:46 +0000 ROA not before: Fri 02 Jan 2026 10:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33667 IP address blocks: 185.22.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:6f:fa:3a:c6:8a:58:b6:06:82:38:f3:4d:ca:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Validity Not Before: Jan 2 10:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1755c52a8951ef90afcce0b21654ed3185e9dd40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b6:94:58:6a:1b:55:81:89:56:8f:e8:ff:b9: 3f:7b:d9:b8:fa:62:a6:49:33:06:48:ac:5b:a1:c6: 0b:d7:d8:37:de:c8:00:ac:10:e7:71:78:ce:2e:f8: b4:a1:ed:44:1f:53:87:eb:9e:bc:c0:14:0f:76:57: e2:b3:af:e4:cf:10:fe:65:ea:71:c2:59:93:af:6b: 3e:d5:5d:df:a1:1c:b1:85:71:fc:31:0a:81:6d:92: c7:34:67:cc:6b:b5:55:f8:71:37:75:8d:0e:57:cc: ec:d5:21:9c:b9:61:ac:ac:00:da:fd:3d:df:c8:84: c2:2e:74:1d:2d:2b:75:61:84:5c:f8:75:94:85:fb: f7:72:5f:7a:f4:8e:0a:6d:d1:6b:8b:95:8b:70:53: 67:63:f2:c7:30:db:64:99:0f:dc:ed:b6:ae:db:c4: f5:95:1e:2d:16:77:56:f5:7f:01:3c:dc:02:27:79: cd:65:f2:fb:9c:b0:d7:ad:fb:01:82:fe:98:96:9f: 21:fc:92:7f:cb:b5:f5:4e:40:51:7a:da:3b:3b:be: 47:cd:aa:2c:65:f2:bf:a7:89:fb:6e:0d:72:86:7f: f5:2f:2c:2c:88:06:bf:47:bb:fb:50:7f:8e:b1:84: 72:00:e4:c9:1a:11:33:fe:81:ca:20:d3:d7:01:1d: 1a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:55:C5:2A:89:51:EF:90:AF:CC:E0:B2:16:54:ED:31:85:E9:DD:40 X509v3 Authority Key Identifier: keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/F1XFKolR75CvzOCyFlTtMYXp3UA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.22.43.0/24 Signature Algorithm: sha256WithRSAEncryption 06:75:ed:ea:a9:6d:1a:e9:6f:61:44:1b:8f:2c:4c:16:54:e1: 2e:3d:a8:03:3f:9b:b9:5a:8f:af:fd:b0:5f:52:ee:17:63:bc: db:65:aa:08:1f:9e:d8:9c:eb:7c:ef:7d:32:ea:66:dd:51:0d: 2d:c5:f0:f8:5a:bb:54:bc:56:4b:33:61:8e:cc:cc:15:fe:a4: 6d:04:99:33:35:15:d9:34:12:f0:64:4f:aa:8d:0e:40:87:e5: 1d:e8:8d:73:36:38:3c:11:1c:03:1b:d8:4c:22:f6:b4:75:7b: 57:01:90:0c:01:6c:ba:49:d9:95:c7:fe:6f:22:c4:69:90:e3: 69:90:52:98:84:49:d6:d1:0f:ae:d5:93:c1:db:7f:5d:7e:c6: cf:57:75:3f:73:ee:c4:fb:63:92:d5:ce:77:c0:67:13:7a:c2: f9:e9:91:96:ce:bf:e7:c7:27:f0:7c:9f:b5:d7:a0:3a:9a:8e: a0:a4:3d:33:aa:71:36:7a:f5:d5:36:e4:33:dd:0f:11:68:ec: 18:8b:b1:ff:d5:a1:f7:24:80:e2:f6:cb:11:45:69:13:e1:d3: 52:8f:08:06:eb:0f:4a:96:25:f1:89:50:f5:4d:97:c3:56:33: e7:9d:23:f8:7f:82:f2:78:13:49:0e:3a:35:fa:89:8d:23:77: bd:60:aa:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OG/6OsaKWLYGgjjzTcqkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx ZjZhN2QwHhcNMjYwMTAyMTAxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzU1YzUyYTg5NTFlZjkwYWZjY2UwYjIxNjU0ZWQzMTg1ZTlkZDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7aUWGobVYGJVo/o/7k/e9m4+mKm STMGSKxbocYL19g33sgArBDncXjOLvi0oe1EH1OH6568wBQPdlfis6/kzxD+Zepx wlmTr2s+1V3foRyxhXH8MQqBbZLHNGfMa7VV+HE3dY0OV8zs1SGcuWGsrADa/T3f yITCLnQdLSt1YYRc+HWUhfv3cl969I4KbdFri5WLcFNnY/LHMNtkmQ/c7bau28T1 lR4tFndW9X8BPNwCJ3nNZfL7nLDXrfsBgv6Ylp8h/JJ/y7X1TkBReto7O75Hzaos ZfK/p4n7bg1yhn/1LywsiAa/R7v7UH+OsYRyAOTJGhEz/oHKINPXAR0aMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBdVxSqJUe+Qr8zgshZU7TGF6d1AMB8GA1UdIwQY MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt MjdmYmM5OWVhM2M2LzEvRjFYRktvbFI3NUN2ek9DeUZsVHRNWVhwM1VBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2 LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRYrMA0G CSqGSIb3DQEBCwUAA4IBAQAGde3qqW0a6W9hRBuPLEwWVOEuPagDP5u5Wo+v/bBf Uu4XY7zbZaoIH57YnOt8730y6mbdUQ0txfD4WrtUvFZLM2GOzMwV/qRtBJkzNRXZ NBLwZE+qjQ5Ah+Ud6I1zNjg8ERwDG9hMIva0dXtXAZAMAWy6SdmVx/5vIsRpkONp kFKYhEnW0Q+u1ZPB239dfsbPV3U/c+7E+2OS1c53wGcTesL56ZGWzr/nxyfwfJ+1 16A6mo6gpD0zqnE2evXVNuQz3Q8RaOwYi7H/1aH3JIDi9ssRRWkT4dNSjwgG6w9K liXxiVD1TZfDVjPnnSP4f4LyeBNJDjo1+omNI3e9YKrW -----END CERTIFICATE-----Generated at Wed Jan 21 01:50:03 2026 by rpki-client