This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/fu8EFLBF_9xBbOEHVnyNLRJnHa0.roa File: fu8EFLBF_9xBbOEHVnyNLRJnHa0.roa (raw, json) Hash identifier: dKtegHQwYF7coZssB47iAI52kF7RHO6JNg34A6o1Uv8= Subject key identifier: 7E:EF:04:14:B0:45:FF:DC:41:6C:E1:07:56:7C:8D:2D:12:67:1D:AD Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e Certificate serial: 019B7C7F95DBCF47ED28FBBF8B5B23FD21A1 Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/fu8EFLBF_9xBbOEHVnyNLRJnHa0.roa Signing time: Fri 02 Jan 2026 02:18:14 +0000 ROA not before: Fri 02 Jan 2026 02:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20877 IP address blocks: 109.205.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:95:db:cf:47:ed:28:fb:bf:8b:5b:23:fd:21:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e Validity Not Before: Jan 2 02:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7eef0414b045ffdc416ce107567c8d2d12671dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6c:ae:8f:50:a9:7f:13:8c:87:ad:4a:76:ca: 9c:e2:6c:99:7e:b9:e9:37:94:de:b5:42:fb:14:07: 4b:0a:44:70:c2:0b:d6:6b:2f:9b:2c:ad:e6:e4:53: ee:32:59:27:96:72:c2:f9:b1:b2:8e:44:0d:59:26: 30:87:2a:94:29:94:79:c3:a8:26:08:87:8c:3a:42: 8d:57:cc:dc:7c:33:ba:02:2f:55:f6:07:b5:70:cd: a1:cf:a1:41:13:ef:c9:58:8f:6e:66:42:5d:9f:b3: 8b:55:6c:d4:b0:b3:7f:dc:2c:47:63:48:e1:da:28: 33:e8:34:c4:d7:d4:45:26:be:39:90:dc:6b:b4:7a: 70:37:89:19:81:6e:86:0d:be:b3:03:6e:27:f7:1b: 3c:75:9c:70:43:de:f5:bc:8a:8d:7a:91:22:22:cc: 2d:3f:ca:00:a9:d0:49:67:0d:ed:4c:6c:74:1a:b7: 90:dd:7c:63:ce:6e:21:5f:28:cf:ab:45:fb:6f:46: 9c:7f:b5:fc:c5:0c:6d:f9:24:f2:ee:9f:da:d7:68: f2:39:6c:b3:77:4e:99:c2:d9:d7:9c:28:5e:c1:0d: b1:81:a9:0e:de:ea:85:8a:98:b7:ec:f6:dd:ad:af: 93:9f:0e:ff:a7:0b:78:41:89:0f:52:20:ee:15:4e: f9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:EF:04:14:B0:45:FF:DC:41:6C:E1:07:56:7C:8D:2D:12:67:1D:AD X509v3 Authority Key Identifier: keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/fu8EFLBF_9xBbOEHVnyNLRJnHa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.91.0/24 Signature Algorithm: sha256WithRSAEncryption 69:53:b9:1a:db:61:42:e6:61:53:80:7a:ab:ab:1f:4e:c2:a0: 9d:72:a2:ae:69:ab:c6:6f:5c:4b:ac:85:ec:b0:92:31:b4:fc: 1c:fc:75:7c:58:31:b4:9b:cf:d9:35:a9:da:25:1d:c3:e6:5f: 4a:5a:e6:71:d0:95:b9:8a:2a:42:0b:14:33:c4:f6:12:ff:45: 70:0e:9c:e1:22:30:b4:b8:74:f6:c7:c6:b9:9c:2f:91:c9:a3: ee:f0:18:97:55:b2:57:d5:d9:3b:b6:ec:8c:ec:79:b7:3c:34: ae:0b:b7:cb:de:3f:82:11:0d:49:ea:1e:32:d4:6b:32:14:b7: 96:57:07:79:d0:2f:1c:25:d5:42:ee:1d:0e:02:c7:0d:e2:2f: 67:b1:f2:e7:30:5d:59:35:01:dc:bd:ca:29:88:2b:5b:fb:2f: 62:1a:42:f2:41:ae:db:80:1f:ae:12:79:1f:e9:6c:11:75:42: 67:34:e3:a2:ce:9d:94:66:15:1a:c9:2c:2f:58:13:04:5a:7c: 87:4c:cd:89:5f:f9:7e:22:1c:40:5c:a1:ea:0a:b5:6f:ae:96: 72:e8:d7:dd:92:99:12:96:29:ae:db:0f:66:4b:87:aa:b0:cd: 1b:a5:c1:d1:3a:9c:15:02:db:54:ea:d0:8f:a3:42:44:10:55: c6:3d:d3:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f5Xbz0ftKPu/i1sj/SGhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZjYxNzk4ZGQxODk2NWMwMjdhZmE3ZjkzYWUwMzBmZjVl MWQ3NmUwHhcNMjYwMTAyMDIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWVmMDQxNGIwNDVmZmRjNDE2Y2UxMDc1NjdjOGQyZDEyNjcxZGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2yuj1CpfxOMh61Kdsqc4myZfrnp N5TetUL7FAdLCkRwwgvWay+bLK3m5FPuMlknlnLC+bGyjkQNWSYwhyqUKZR5w6gm CIeMOkKNV8zcfDO6Ai9V9ge1cM2hz6FBE+/JWI9uZkJdn7OLVWzUsLN/3CxHY0jh 2igz6DTE19RFJr45kNxrtHpwN4kZgW6GDb6zA24n9xs8dZxwQ971vIqNepEiIswt P8oAqdBJZw3tTGx0GreQ3Xxjzm4hXyjPq0X7b0acf7X8xQxt+STy7p/a12jyOWyz d06ZwtnXnChewQ2xgakO3uqFipi37Pbdra+Tnw7/pwt4QYkPUiDuFU75nwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH7vBBSwRf/cQWzhB1Z8jS0SZx2tMB8GA1UdIwQY MBaAFAr2F5jdGJZcAnr6f5OuAw/14dduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEt ZDZlMWUzNDdmOWM3LzEvZnU4RUZMQkZfOXhCYk9FSFZueU5MUkpuSGEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEtZDZlMWUzNDdmOWM3 LzEvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbc1bMA0G CSqGSIb3DQEBCwUAA4IBAQBpU7ka22FC5mFTgHqrqx9OwqCdcqKuaavGb1xLrIXs sJIxtPwc/HV8WDG0m8/ZNanaJR3D5l9KWuZx0JW5iipCCxQzxPYS/0VwDpzhIjC0 uHT2x8a5nC+RyaPu8BiXVbJX1dk7tuyM7Hm3PDSuC7fL3j+CEQ1J6h4y1GsyFLeW Vwd50C8cJdVC7h0OAscN4i9nsfLnMF1ZNQHcvcopiCtb+y9iGkLyQa7bgB+uEnkf 6WwRdUJnNOOizp2UZhUaySwvWBMEWnyHTM2JX/l+IhxAXKHqCrVvrpZy6NfdkpkS limu2w9mS4eqsM0bpcHROpwVAttU6tCPo0JEEFXGPdPl -----END CERTIFICATE-----Generated at Mon Jan 26 03:58:09 2026 by rpki-client