This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/Fm0_ISZH1-WWGaWgz0JdnaHmNHg.roa File: Fm0_ISZH1-WWGaWgz0JdnaHmNHg.roa (raw, json) Hash identifier: 1I6JL/WcV3w6U1WH8/hKKwC4XbqutTUGbOTh1CUIMIo= Subject key identifier: 16:6D:3F:21:26:47:D7:E5:96:19:A5:A0:CF:42:5D:9D:A1:E6:34:78 Certificate issuer: /CN=3d2384b784f197ea03dac2feda7895fc4b740729 Certificate serial: 019B783504179DE22B7E1B0935FFA52187DC Authority key identifier: 3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/Fm0_ISZH1-WWGaWgz0JdnaHmNHg.roa Signing time: Thu 01 Jan 2026 06:18:18 +0000 ROA not before: Thu 01 Jan 2026 06:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206626 IP address blocks: 185.85.56.0/22 maxlen: 22 185.85.56.0/24 maxlen: 24 185.85.57.0/24 maxlen: 24 185.85.58.0/24 maxlen: 24 185.85.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:04:17:9d:e2:2b:7e:1b:09:35:ff:a5:21:87:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d2384b784f197ea03dac2feda7895fc4b740729 Validity Not Before: Jan 1 06:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=166d3f212647d7e59619a5a0cf425d9da1e63478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:70:43:4b:69:9e:20:4b:d0:5b:f0:98:d2:20: 76:18:d8:8e:36:83:da:2d:df:88:6f:8c:03:fd:2a: 1f:a9:ed:cc:58:52:ad:c7:96:a7:34:24:c5:7d:e2: 8b:4b:d6:c3:df:97:b8:8f:09:a2:94:31:c9:d2:d0: 60:a8:d2:59:67:39:dd:0c:da:cb:f6:93:3a:7d:f1: 25:b8:d2:d5:75:63:07:9e:ce:64:33:81:62:a5:18: f6:cc:7b:ee:a0:bd:27:37:54:ad:c0:8f:3b:38:09: fa:cc:c4:26:49:26:43:56:99:6c:90:cf:f7:82:40: d8:8e:d3:6c:74:41:4f:60:fd:c2:35:8c:36:c7:9e: cf:b7:dd:ef:06:f6:31:e6:09:ac:95:39:b6:97:e9: 60:a9:fb:9d:90:47:32:fb:cf:06:75:49:22:c9:c9: 6f:d7:d9:cd:7c:74:9d:9d:c8:2e:0f:f1:42:d3:3d: 9f:18:ee:27:6b:e0:2b:e0:6f:4f:1e:29:32:48:de: d1:71:72:eb:0d:79:50:dc:e1:af:eb:b9:f0:b1:0b: 89:61:49:2f:4e:d9:ab:7d:cc:fb:91:05:97:bd:dd: 23:a8:ff:46:21:25:15:bb:41:94:42:cc:e9:e4:01: 84:2e:00:0a:aa:44:80:dc:2f:49:ce:c9:a7:a4:8a: 03:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6D:3F:21:26:47:D7:E5:96:19:A5:A0:CF:42:5D:9D:A1:E6:34:78 X509v3 Authority Key Identifier: keyid:3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/Fm0_ISZH1-WWGaWgz0JdnaHmNHg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.85.56.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:f0:0d:7e:75:6c:4b:05:6e:27:e2:c4:51:3c:19:2e:34:de: 87:e1:9e:b0:dc:c7:72:f0:5b:68:b5:90:44:0c:56:ce:0e:b7: 04:28:de:73:2c:bd:43:d7:53:e2:a5:e2:89:f7:4f:98:3e:26: 08:b7:7f:73:51:dd:24:49:fc:ca:5b:24:f4:24:b3:2f:71:6b: 5c:a4:f0:aa:0d:a6:0d:3b:29:42:7a:db:0d:fb:76:cc:8d:ac: be:05:24:2b:6d:3b:07:a8:ae:ae:37:0c:6f:df:75:e8:08:35: 26:57:00:a6:11:5f:7b:cb:37:67:38:80:84:45:2d:6c:48:60: ad:11:a9:b3:59:32:f0:aa:9d:15:d4:56:3e:8f:7c:4b:ab:42: 58:c4:b2:e8:e2:bc:f0:5b:37:ff:f9:d7:2d:90:e0:b4:9b:ff: 7e:5a:b3:22:c5:1b:14:25:7d:72:17:32:ba:5f:aa:69:97:c5: 0a:26:2b:29:3f:33:ed:e2:5a:d6:44:33:0f:9d:b6:b7:01:1e: eb:6b:4f:87:20:0a:8d:b8:92:00:55:ea:2b:c1:aa:d2:df:87: 28:e8:e2:11:19:d6:8a:59:04:72:b9:e4:f7:44:d3:a3:8a:60: 8e:48:d7:6a:33:22:23:59:d0:ec:3a:e1:a2:e7:d0:62:ea:0f: 2e:ad:29:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NQQXneIrfhsJNf+lIYfcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMjM4NGI3ODRmMTk3ZWEwM2RhYzJmZWRhNzg5NWZjNGI3 NDA3MjkwHhcNMjYwMTAxMDYxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjZkM2YyMTI2NDdkN2U1OTYxOWE1YTBjZjQyNWQ5ZGExZTYzNDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznBDS2meIEvQW/CY0iB2GNiONoPa Ld+Ib4wD/Sofqe3MWFKtx5anNCTFfeKLS9bD35e4jwmilDHJ0tBgqNJZZzndDNrL 9pM6ffEluNLVdWMHns5kM4FipRj2zHvuoL0nN1StwI87OAn6zMQmSSZDVplskM/3 gkDYjtNsdEFPYP3CNYw2x57Pt93vBvYx5gmslTm2l+lgqfudkEcy+88GdUkiyclv 19nNfHSdncguD/FC0z2fGO4na+Ar4G9PHikySN7RcXLrDXlQ3OGv67nwsQuJYUkv Ttmrfcz7kQWXvd0jqP9GISUVu0GUQszp5AGELgAKqkSA3C9JzsmnpIoDWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBZtPyEmR9fllhmloM9CXZ2h5jR4MB8GA1UdIwQY MBaAFD0jhLeE8ZfqA9rC/tp4lfxLdAcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFNPRXQ0VHhsLW9EMnNMLTJuaVZfRXQwQnlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zYmQxM2QtZmU5NS00ODZmLTgwZWYt ZjA3MzU0ODM1MmJmLzEvRm0wX0lTWkgxLVdXR2FXZ3owSmRuYUhtTkhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8zYmQxM2QtZmU5NS00ODZmLTgwZWYtZjA3MzU0ODM1MmJm LzEvUFNPRXQ0VHhsLW9EMnNMLTJuaVZfRXQwQnlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVU4MA0G CSqGSIb3DQEBCwUAA4IBAQBa8A1+dWxLBW4n4sRRPBkuNN6H4Z6w3Mdy8FtotZBE DFbODrcEKN5zLL1D11PipeKJ90+YPiYIt39zUd0kSfzKWyT0JLMvcWtcpPCqDaYN OylCetsN+3bMjay+BSQrbTsHqK6uNwxv33XoCDUmVwCmEV97yzdnOICERS1sSGCt EamzWTLwqp0V1FY+j3xLq0JYxLLo4rzwWzf/+dctkOC0m/9+WrMixRsUJX1yFzK6 X6ppl8UKJispPzPt4lrWRDMPnba3AR7ra0+HIAqNuJIAVeorwarS34co6OIRGdaK WQRyueT3RNOjimCOSNdqMyIjWdDsOuGi59Bi6g8urSlP -----END CERTIFICATE-----Generated at Sat Jan 10 04:16:18 2026 by rpki-client