This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/FPRZaioA3xTO8msfX7PiUSgZVV8.roa File: FPRZaioA3xTO8msfX7PiUSgZVV8.roa (raw, json) Hash identifier: /PvCGs9dQFAFmDQQLy53W0qWLgzSHrzsRVaAJqUCXKA= Subject key identifier: 14:F4:59:6A:2A:00:DF:14:CE:F2:6B:1F:5F:B3:E2:51:28:19:55:5F Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e Certificate serial: 019B7C7F96EC9D0752FE106F065D87CC1CAB Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/FPRZaioA3xTO8msfX7PiUSgZVV8.roa Signing time: Fri 02 Jan 2026 02:18:15 +0000 ROA not before: Fri 02 Jan 2026 02:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38981 IP address blocks: 87.237.108.0/24 maxlen: 24 87.237.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:96:ec:9d:07:52:fe:10:6f:06:5d:87:cc:1c:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e Validity Not Before: Jan 2 02:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14f4596a2a00df14cef26b1f5fb3e2512819555f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:28:7a:11:72:27:d8:c4:2a:67:99:3c:04:eb: 88:2c:d9:19:8e:99:e5:8b:3b:be:4c:c3:29:6f:5d: 12:a1:14:1b:9a:eb:3c:56:5d:7b:91:ff:64:21:d7: 73:13:ae:e8:34:88:0c:f0:dd:12:2f:be:b2:b1:d9: 00:dd:cc:3b:86:5e:01:3c:91:7f:cf:a1:d3:b2:c5: 7b:9f:10:60:69:13:12:9a:52:a9:b5:ad:b0:d4:91: 6c:9d:97:2a:b0:d8:8c:aa:fe:50:c3:fb:2b:ea:b4: 1a:00:fe:7f:05:30:fc:8c:b0:36:7b:6e:47:53:91: 2f:44:ed:03:a9:80:9a:bc:74:98:b1:30:c5:ad:f5: 8d:55:a0:e8:51:d7:41:57:d5:3a:d2:cf:1f:0f:46: 94:30:b0:c3:ee:28:c5:b9:0f:d7:d7:0c:d4:3d:9f: 0a:c2:9a:03:4c:86:1f:75:2d:ca:54:60:2b:d5:7d: 75:94:3d:a1:1a:b1:24:5a:5e:49:be:fd:88:3c:7b: 44:20:58:68:0c:6c:89:32:1b:77:40:7e:89:07:76: ff:e0:7f:33:0e:d5:a7:54:b9:20:7d:56:74:d5:68: 68:8c:3d:0b:46:70:7b:f0:c2:11:01:0e:5a:ae:75: 6d:7a:f9:d3:14:2c:9b:4f:01:10:36:a6:95:5b:dc: 2b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F4:59:6A:2A:00:DF:14:CE:F2:6B:1F:5F:B3:E2:51:28:19:55:5F X509v3 Authority Key Identifier: keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/FPRZaioA3xTO8msfX7PiUSgZVV8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.237.108.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:59:5d:cd:7d:bf:83:89:06:e6:e3:47:0f:9d:c0:51:06:c3: 90:86:8e:36:69:f1:aa:21:fa:e3:32:e6:37:3e:8f:21:59:91: 7a:74:31:f6:dc:ea:ac:c9:2e:46:2b:b6:e2:72:af:7c:5b:1d: 33:5f:6a:0f:4a:5a:9d:5e:d7:95:64:e1:d5:41:97:93:48:51: ff:66:98:6e:17:e8:10:57:c0:fb:e2:59:b8:88:dc:60:90:32: 2a:db:95:9a:bb:88:cd:66:55:d1:0b:18:1c:56:29:74:11:7b: 74:82:56:28:d3:8c:7e:fb:2c:59:35:32:94:7a:d7:13:d8:f8: 9d:14:a5:c2:48:97:37:d8:62:7e:72:85:a6:e4:e8:83:97:8e: 19:71:0d:d6:65:27:de:8b:60:f6:ab:8b:14:5c:b2:f9:85:b3: db:2d:7b:2e:f1:ad:b8:c1:16:13:71:30:73:7b:d4:2a:86:5e: ee:39:93:1a:b0:bd:fc:d5:a0:a5:f0:b4:be:e3:17:3b:dc:e3: fc:eb:8e:9d:4c:82:c9:b4:93:da:58:a0:1e:15:65:01:1b:61: eb:c9:97:d7:d3:8d:af:81:28:55:10:97:57:53:cb:43:39:e7: 73:a6:a1:ef:bd:53:54:7d:6e:b3:8a:ad:67:f9:e4:25:7a:50: 3a:69:fa:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f5bsnQdS/hBvBl2HzByrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZjYxNzk4ZGQxODk2NWMwMjdhZmE3ZjkzYWUwMzBmZjVl MWQ3NmUwHhcNMjYwMTAyMDIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGY0NTk2YTJhMDBkZjE0Y2VmMjZiMWY1ZmIzZTI1MTI4MTk1NTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ch6EXIn2MQqZ5k8BOuILNkZjpnl izu+TMMpb10SoRQbmus8Vl17kf9kIddzE67oNIgM8N0SL76ysdkA3cw7hl4BPJF/ z6HTssV7nxBgaRMSmlKpta2w1JFsnZcqsNiMqv5Qw/sr6rQaAP5/BTD8jLA2e25H U5EvRO0DqYCavHSYsTDFrfWNVaDoUddBV9U60s8fD0aUMLDD7ijFuQ/X1wzUPZ8K wpoDTIYfdS3KVGAr1X11lD2hGrEkWl5Jvv2IPHtEIFhoDGyJMht3QH6JB3b/4H8z DtWnVLkgfVZ01WhojD0LRnB78MIRAQ5arnVtevnTFCybTwEQNqaVW9wriQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBT0WWoqAN8UzvJrH1+z4lEoGVVfMB8GA1UdIwQY MBaAFAr2F5jdGJZcAnr6f5OuAw/14dduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEt ZDZlMWUzNDdmOWM3LzEvRlBSWmFpb0EzeFRPOG1zZlg3UGlVU2daVlY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEtZDZlMWUzNDdmOWM3 LzEvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBV+1sMA0G CSqGSIb3DQEBCwUAA4IBAQB6WV3Nfb+DiQbm40cPncBRBsOQho42afGqIfrjMuY3 Po8hWZF6dDH23OqsyS5GK7bicq98Wx0zX2oPSlqdXteVZOHVQZeTSFH/ZphuF+gQ V8D74lm4iNxgkDIq25Wau4jNZlXRCxgcVil0EXt0glYo04x++yxZNTKUetcT2Pid FKXCSJc32GJ+coWm5OiDl44ZcQ3WZSfei2D2q4sUXLL5hbPbLXsu8a24wRYTcTBz e9Qqhl7uOZMasL381aCl8LS+4xc73OP8646dTILJtJPaWKAeFWUBG2HryZfX042v gShVEJdXU8tDOedzpqHvvVNUfW6ziq1n+eQlelA6afqy -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:43 2026 by rpki-client