This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/FwR0yqx5y3CdP-sU085XkCoeoLE.roa File: FwR0yqx5y3CdP-sU085XkCoeoLE.roa (raw, json) Hash identifier: Ox6O5Ll7B9e98Is00YoyZ52q5mUyGgIVzdpG2Q8Tw8s= Subject key identifier: 17:04:74:CA:AC:79:CB:70:9D:3F:EB:14:D3:CE:57:90:2A:1E:A0:B1 Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C80530C46A3540CCD8C72A29E944F02 Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/FwR0yqx5y3CdP-sU085XkCoeoLE.roa Signing time: Fri 02 Jan 2026 02:19:03 +0000 ROA not before: Fri 02 Jan 2026 02:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43991 IP address blocks: 185.42.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:53:0c:46:a3:54:0c:cd:8c:72:a2:9e:94:4f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=170474caac79cb709d3feb14d3ce57902a1ea0b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:78:0f:77:c1:c1:ab:8f:19:d4:99:15:7c:a7: 2c:72:c2:4a:89:c0:a6:37:f8:42:0d:7b:21:af:d9: 9a:4f:ad:10:fe:44:46:60:c8:8b:55:87:18:f1:d1: bf:a7:e3:d1:93:75:a4:2c:0e:55:a8:48:ba:ee:09: 25:88:80:58:b2:49:a2:3e:c1:d1:78:ea:e6:ee:61: b9:2a:d6:13:43:b5:dd:80:fe:8d:69:c8:cc:ff:2a: c4:52:52:cc:e1:b7:c7:b3:5b:18:8a:d3:00:1f:c3: ba:2c:d6:c1:61:8c:d0:0c:b4:af:06:c9:37:ee:c3: cd:c6:6e:5d:1e:c8:24:f5:b2:68:6b:0b:5f:32:86: b5:9e:7e:24:c0:d5:90:4c:fc:69:5b:3c:2c:21:be: 34:e8:d0:bd:12:f7:1e:ec:80:2f:45:d0:90:87:d9: 3d:92:e6:6c:d8:c7:f8:73:02:46:8c:ba:e0:12:d5: f4:cb:5c:50:90:a7:a1:10:60:f7:ae:e7:5d:38:48: b0:e6:15:e7:d1:a4:f6:54:ce:4e:3f:8f:3f:29:0b: 4f:43:ca:02:b8:59:48:4a:77:4d:56:61:51:d6:9d: 2f:d9:d3:6e:47:41:63:cc:69:59:97:45:ba:86:5f: 68:71:d9:94:76:e6:4f:61:69:8e:ac:d6:07:31:44: 0a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:04:74:CA:AC:79:CB:70:9D:3F:EB:14:D3:CE:57:90:2A:1E:A0:B1 X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/FwR0yqx5y3CdP-sU085XkCoeoLE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.42.13.0/24 Signature Algorithm: sha256WithRSAEncryption 53:8d:c1:ec:d9:e3:41:7c:7b:02:5e:47:94:99:0a:d9:4a:7a: 98:24:37:fb:ad:38:dd:2e:e3:f3:15:58:a7:e8:be:38:45:45: 76:8f:e9:c4:46:22:dc:67:f7:97:95:c7:db:b1:31:22:f3:b2: 35:dd:36:2a:4d:34:a1:47:25:69:b8:34:9f:b4:d8:2c:e1:13: 0f:b0:44:95:08:38:25:c6:a7:55:fe:ae:15:47:13:d1:5f:62: 55:59:68:75:b6:3c:4d:7d:fb:43:67:f6:e4:31:8c:d2:46:ba: 04:6c:70:83:4a:78:9a:93:5b:e5:a3:ba:92:ab:82:25:a3:a2: f1:ae:8e:65:3f:f2:66:19:3d:a0:46:b3:a1:81:4b:83:be:0f: 8d:e1:7b:96:ca:d7:93:07:d6:e4:c0:ff:2f:b4:ac:1e:c0:cd: e0:64:b6:01:7f:a0:dc:d0:96:be:35:4c:ff:35:c8:44:81:8e: a2:3d:2c:93:61:c3:2a:96:46:15:c3:c1:ce:8d:ea:40:ac:51: 1a:61:05:14:e0:84:3c:e5:15:99:35:68:80:43:cf:21:2f:54: da:87:fb:41:20:d9:36:75:03:c8:9b:5e:30:e4:cb:4e:35:ae: e5:50:76:88:ec:b4:81:2c:55:c7:ed:2b:c4:a7:62:65:d5:b4: 10:aa:23:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gFMMRqNUDM2McqKelE8CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzA0NzRjYWFjNzljYjcwOWQzZmViMTRkM2NlNTc5MDJhMWVhMGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApngPd8HBq48Z1JkVfKcscsJKicCm N/hCDXshr9maT60Q/kRGYMiLVYcY8dG/p+PRk3WkLA5VqEi67gkliIBYskmiPsHR eOrm7mG5KtYTQ7XdgP6NacjM/yrEUlLM4bfHs1sYitMAH8O6LNbBYYzQDLSvBsk3 7sPNxm5dHsgk9bJoawtfMoa1nn4kwNWQTPxpWzwsIb406NC9Evce7IAvRdCQh9k9 kuZs2Mf4cwJGjLrgEtX0y1xQkKehEGD3ruddOEiw5hXn0aT2VM5OP48/KQtPQ8oC uFlISndNVmFR1p0v2dNuR0FjzGlZl0W6hl9ocdmUduZPYWmOrNYHMUQK7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBcEdMqsectwnT/rFNPOV5AqHqCxMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvRndSMHlxeDV5M0NkUC1zVTA4NVhrQ29lb0xFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSoNMA0G CSqGSIb3DQEBCwUAA4IBAQBTjcHs2eNBfHsCXkeUmQrZSnqYJDf7rTjdLuPzFVin 6L44RUV2j+nERiLcZ/eXlcfbsTEi87I13TYqTTShRyVpuDSftNgs4RMPsESVCDgl xqdV/q4VRxPRX2JVWWh1tjxNfftDZ/bkMYzSRroEbHCDSniak1vlo7qSq4Ilo6Lx ro5lP/JmGT2gRrOhgUuDvg+N4XuWyteTB9bkwP8vtKwewM3gZLYBf6Dc0Ja+NUz/ NchEgY6iPSyTYcMqlkYVw8HOjepArFEaYQUU4IQ85RWZNWiAQ88hL1Tah/tBINk2 dQPIm14w5MtONa7lUHaI7LSBLFXH7SvEp2Jl1bQQqiNi -----END CERTIFICATE-----Generated at Sat Jan 10 03:55:36 2026 by rpki-client