This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/FpVW71nyoW-_gJoXR54EYMZoVQE.roa File: FpVW71nyoW-_gJoXR54EYMZoVQE.roa (raw, json) Hash identifier: gZatusuUvr/QTel7Hexm6oiz929ityXKMuJIjfNYW6U= Subject key identifier: 16:95:56:EF:59:F2:A1:6F:BF:80:9A:17:47:9E:04:60:C6:68:55:01 Certificate issuer: /CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa Certificate serial: 019B797F3F3F048CFCBC1040F2058BA8812D Authority key identifier: 55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/FpVW71nyoW-_gJoXR54EYMZoVQE.roa Signing time: Thu 01 Jan 2026 12:19:00 +0000 ROA not before: Thu 01 Jan 2026 12:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59499 IP address blocks: 5.159.8.0/21 maxlen: 21 5.159.8.0/22 maxlen: 22 5.159.12.0/22 maxlen: 22 185.141.16.0/22 maxlen: 22 185.141.18.0/23 maxlen: 23 185.141.18.0/24 maxlen: 24 185.141.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:3f:3f:04:8c:fc:bc:10:40:f2:05:8b:a8:81:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa Validity Not Before: Jan 1 12:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=169556ef59f2a16fbf809a17479e0460c6685501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3c:0d:52:86:ed:6d:c8:d2:c9:48:e5:47:ae: 4a:c5:26:2e:e9:13:00:18:57:3e:f0:3e:a9:5e:06: c2:c4:cd:60:df:bc:36:e2:e2:c2:4b:72:cd:16:69: d8:28:32:4f:84:0d:cc:ed:45:66:b3:44:cf:24:29: 9c:51:91:44:c2:ae:d8:8e:9a:7e:7b:8d:e5:b2:fc: e7:5a:97:d8:f2:00:de:73:74:c3:db:0f:80:a7:e8: f9:57:dc:1d:07:9b:c5:fd:e3:fe:70:d4:63:40:93: 49:39:0c:0f:81:5c:d5:da:e0:65:48:ec:4c:a9:71: 71:8d:4e:f6:97:37:c1:01:23:29:1c:18:a3:24:1e: 8e:a2:24:d8:88:6c:a1:6d:33:d5:9c:f3:8d:a9:a7: d7:9a:d0:98:78:19:03:64:b8:cc:52:c8:94:0a:b1: a8:1f:ee:b0:31:a2:cd:82:43:ce:ac:d8:88:a1:2c: 29:f8:f3:4a:19:f9:00:13:ab:4c:55:11:b5:91:f6: 78:6b:1a:f0:67:f8:db:1b:f8:24:3c:a8:93:64:0e: de:44:17:d8:59:cb:9c:f4:a2:9e:d9:b4:36:37:9c: 91:2f:8c:6e:fc:f4:c1:ef:c5:bc:dd:ef:de:df:73: 6c:3e:ba:46:5a:e5:42:b0:80:98:a9:59:87:0b:a0: 30:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:95:56:EF:59:F2:A1:6F:BF:80:9A:17:47:9E:04:60:C6:68:55:01 X509v3 Authority Key Identifier: keyid:55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/FpVW71nyoW-_gJoXR54EYMZoVQE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.159.8.0/21 185.141.16.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:f4:0f:51:d4:be:3b:74:eb:c4:da:9a:db:5f:f3:5e:ce:f6: 53:a4:6a:67:45:a4:7b:e5:d8:a5:e1:ca:18:e9:b8:5d:ea:33: c4:73:07:9d:b8:04:f7:42:74:c4:29:04:e9:af:19:16:da:c6: 6b:dd:2d:13:ff:c7:ea:88:02:c3:78:ab:29:c2:b6:09:83:10: 93:4b:95:ac:25:b2:5c:4d:2a:a5:c7:f9:4d:dd:bc:0a:cc:8d: 85:65:e9:19:07:8d:ce:fd:59:a5:1a:10:6b:ea:45:10:7a:78: 11:6b:77:ac:d1:50:7c:96:05:31:14:97:37:4e:7f:45:9a:14: ff:95:27:db:f2:67:c6:66:97:4d:b6:cf:d2:48:15:ff:7d:83: f2:08:76:95:a1:c5:5d:73:d4:bd:a7:61:44:b8:a2:dc:cd:3e: a2:b0:a6:75:db:5f:50:37:67:6d:ff:97:12:32:86:f0:1a:1b: 86:58:98:ed:36:4d:cd:12:c6:5f:38:3f:70:a0:83:6d:17:5a: 22:8f:06:57:c1:b5:91:42:ed:5f:7b:13:58:61:4f:3d:e6:05: 71:a7:65:00:48:ad:44:10:99:41:9a:68:9c:9c:2d:a9:59:51: e2:e3:b1:f5:b0:38:7c:03:ec:ee:94:84:7a:4f:ea:1d:ca:75: 4a:b7:b9:a0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fz8/BIz8vBBA8gWLqIEtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZTkzY2MzZTYxY2YzMzRiMTYxMTFjYWUzNGFlOTkyOGM0 ZmMzZmEwHhcNMjYwMTAxMTIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjk1NTZlZjU5ZjJhMTZmYmY4MDlhMTc0NzllMDQ2MGM2Njg1NTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjwNUobtbcjSyUjlR65KxSYu6RMA GFc+8D6pXgbCxM1g37w24uLCS3LNFmnYKDJPhA3M7UVms0TPJCmcUZFEwq7Yjpp+ e43lsvznWpfY8gDec3TD2w+Ap+j5V9wdB5vF/eP+cNRjQJNJOQwPgVzV2uBlSOxM qXFxjU72lzfBASMpHBijJB6OoiTYiGyhbTPVnPONqafXmtCYeBkDZLjMUsiUCrGo H+6wMaLNgkPOrNiIoSwp+PNKGfkAE6tMVRG1kfZ4axrwZ/jbG/gkPKiTZA7eRBfY Wcuc9KKe2bQ2N5yRL4xu/PTB78W83e/e33NsPrpGWuVCsICYqVmHC6AwEwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBaVVu9Z8qFvv4CaF0eeBGDGaFUBMB8GA1UdIwQY MBaAFFXpPMPmHPM0sWERyuNK6ZKMT8P6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmVrOHctWWM4elN4WVJISzQwcnBrb3hQd19vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zYzQzODYtNDIzOC00ZGU2LWI1MGIt ZTgwOTJkZDY1YzdmLzEvRnBWVzcxbnlvVy1fZ0pvWFI1NEVZTVpvVlFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8zYzQzODYtNDIzOC00ZGU2LWI1MGItZTgwOTJkZDY1Yzdm LzEvVmVrOHctWWM4elN4WVJISzQwcnBrb3hQd19vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDBZ8IAwQC uY0QMA0GCSqGSIb3DQEBCwUAA4IBAQCO9A9R1L47dOvE2prbX/NezvZTpGpnRaR7 5dil4coY6bhd6jPEcweduAT3QnTEKQTprxkW2sZr3S0T/8fqiALDeKspwrYJgxCT S5WsJbJcTSqlx/lN3bwKzI2FZekZB43O/VmlGhBr6kUQengRa3es0VB8lgUxFJc3 Tn9FmhT/lSfb8mfGZpdNts/SSBX/fYPyCHaVocVdc9S9p2FEuKLczT6isKZ1219Q N2dt/5cSMobwGhuGWJjtNk3NEsZfOD9woINtF1oijwZXwbWRQu1fexNYYU895gVx p2UASK1EEJlBmmicnC2pWVHi47H1sDh8A+zulIR6T+odynVKt7mg -----END CERTIFICATE-----Generated at Tue Jan 13 00:09:51 2026 by rpki-client