This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/fhJi_NlOEDBq0cRK6LZq1GCss_M.roa File: fhJi_NlOEDBq0cRK6LZq1GCss_M.roa (raw, json) Hash identifier: QiQfTogh36djFn3qF6ABSLFZFM71Mudbq/5FRG96GVA= Subject key identifier: 7E:12:62:FC:D9:4E:10:30:6A:D1:C4:4A:E8:B6:6A:D4:60:AC:B3:F3 Certificate issuer: /CN=af6eaeff123ca67446d0e49401e495057078e174 Certificate serial: 019A781E37FB72A9E3272B7CB32ECA19860A Authority key identifier: AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/fhJi_NlOEDBq0cRK6LZq1GCss_M.roa Signing time: Wed 12 Nov 2025 12:50:37 +0000 ROA not before: Wed 12 Nov 2025 12:50:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 30962 IP address blocks: 93.89.4.0/22 maxlen: 22 93.89.4.0/24 maxlen: 24 93.89.5.0/24 maxlen: 24 93.89.6.0/24 maxlen: 24 93.89.7.0/24 maxlen: 24 2a0b:2301::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:1e:37:fb:72:a9:e3:27:2b:7c:b3:2e:ca:19:86:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af6eaeff123ca67446d0e49401e495057078e174 Validity Not Before: Nov 12 12:50:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7e1262fcd94e10306ad1c44ae8b66ad460acb3f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c9:e6:44:ae:f8:43:3c:24:5b:81:81:86:20: 27:e2:14:f3:5f:91:9c:90:72:d4:5c:f5:45:9b:03: 9d:12:ae:5c:ff:d9:c5:93:8e:42:66:de:59:fd:08: bf:4c:e3:3d:73:9a:4f:68:31:c0:1d:7f:ae:c4:74: ac:43:dc:44:89:07:48:a6:f3:c8:e5:06:af:5f:b9: e8:5c:d4:e2:d2:ec:ee:5e:7a:6a:94:6a:a6:b0:6f: 24:58:3a:9e:e5:c4:35:06:cd:78:96:6e:f7:32:e8: 7b:1d:60:8b:d3:10:3c:c8:d3:ab:18:dd:25:ea:f6: b7:83:dc:79:47:5d:98:c6:a6:60:0f:fa:4e:f7:7f: c9:cb:1f:fd:59:b7:32:c6:9f:ec:78:f3:93:a5:50: 1e:8a:27:9d:1d:04:17:f5:c2:57:2f:3c:78:7e:dd: 74:7a:5c:56:e5:c4:4b:88:b5:c0:a8:af:e5:06:79: a7:34:a3:bc:0d:bc:30:3b:cb:de:4c:a0:d7:07:bf: 64:db:c1:d6:40:88:3f:89:82:73:3d:40:a8:a8:a7: 03:45:bf:f2:22:c6:48:b7:41:89:06:f1:f2:c4:be: fc:d2:81:9c:98:8c:59:49:77:1d:8c:4a:6a:e6:5c: 34:fc:57:fe:4b:21:e3:20:b0:8d:4d:46:2e:46:77: 8d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:12:62:FC:D9:4E:10:30:6A:D1:C4:4A:E8:B6:6A:D4:60:AC:B3:F3 X509v3 Authority Key Identifier: keyid:AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/fhJi_NlOEDBq0cRK6LZq1GCss_M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.89.4.0/22 IPv6: 2a0b:2301::/32 Signature Algorithm: sha256WithRSAEncryption 5e:19:99:d4:2d:db:ce:eb:f9:9e:ce:d7:94:25:3b:a9:5b:9e: 31:c4:74:24:46:ad:dc:b1:a7:52:38:54:27:1a:4a:17:d3:2b: 63:53:76:bc:5d:ca:68:f4:55:ba:f9:df:6c:ea:a9:63:12:de: dc:56:94:6c:63:cc:46:13:99:40:c8:ba:ae:17:48:6c:27:da: b9:02:1e:32:7a:de:0a:6c:67:1b:31:48:2d:7e:9e:cf:fc:a7: fd:26:fb:8f:8e:3d:3b:c3:bb:12:06:a7:13:b4:6c:66:19:87: 47:4f:99:7f:ab:0e:70:60:22:f3:c6:3b:07:c5:c7:e1:21:44: a6:52:c8:d1:e8:dd:55:ae:cc:72:6d:20:93:22:d0:f2:f5:8c: 42:aa:e9:96:33:aa:c5:b8:89:f4:0b:e8:76:27:1f:9f:42:cc: b7:ce:74:38:05:36:7a:85:49:b0:6a:04:3e:e2:54:87:f2:46: c2:d6:9b:c3:6a:a3:b2:80:7e:a6:c3:30:0c:1e:6b:3f:1d:04: 56:91:10:f8:c9:c7:dc:73:21:88:23:83:39:f3:ed:a7:fc:eb: e7:bd:37:ca:0b:4b:cc:79:49:7e:f6:2b:65:5f:2a:b2:06:a9: eb:83:bc:ce:e0:a7:a3:41:7e:70:02:7e:70:fb:65:29:b1:c0: f2:8f:d4:a0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZp4Hjf7cqnjJyt8sy7KGYYKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNmVhZWZmMTIzY2E2NzQ0NmQwZTQ5NDAxZTQ5NTA1NzA3 OGUxNzQwHhcNMjUxMTEyMTI1MDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTEyNjJmY2Q5NGUxMDMwNmFkMWM0NGFlOGI2NmFkNDYwYWNiM2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsnmRK74QzwkW4GBhiAn4hTzX5Gc kHLUXPVFmwOdEq5c/9nFk45CZt5Z/Qi/TOM9c5pPaDHAHX+uxHSsQ9xEiQdIpvPI 5QavX7noXNTi0uzuXnpqlGqmsG8kWDqe5cQ1Bs14lm73Muh7HWCL0xA8yNOrGN0l 6va3g9x5R12YxqZgD/pO93/Jyx/9Wbcyxp/sePOTpVAeiiedHQQX9cJXLzx4ft10 elxW5cRLiLXAqK/lBnmnNKO8DbwwO8veTKDXB79k28HWQIg/iYJzPUCoqKcDRb/y IsZIt0GJBvHyxL780oGcmIxZSXcdjEpq5lw0/Ff+SyHjILCNTUYuRneNuwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFH4SYvzZThAwatHESui2atRgrLPzMB8GA1UdIwQY MBaAFK9urv8SPKZ0RtDklAHklQVweOF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjI2dV94SThwblJHME9TVUFlU1ZCWEI0NFhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83MDAxNjQtODlkMS00MDRmLWFmMzUt NGVmNDdmYzRiZDdmLzEvZmhKaV9ObE9FREJxMGNSSzZMWnExR0Nzc19NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy83MDAxNjQtODlkMS00MDRmLWFmMzUtNGVmNDdmYzRiZDdm LzEvcjI2dV94SThwblJHME9TVUFlU1ZCWEI0NFhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCXVkEMA0E AgACMAcDBQAqCyMBMA0GCSqGSIb3DQEBCwUAA4IBAQBeGZnULdvO6/mezteUJTup W54xxHQkRq3csadSOFQnGkoX0ytjU3a8Xcpo9FW6+d9s6qljEt7cVpRsY8xGE5lA yLquF0hsJ9q5Ah4yet4KbGcbMUgtfp7P/Kf9JvuPjj07w7sSBqcTtGxmGYdHT5l/ qw5wYCLzxjsHxcfhIUSmUsjR6N1VrsxybSCTItDy9YxCqumWM6rFuIn0C+h2Jx+f Qsy3znQ4BTZ6hUmwagQ+4lSH8kbC1pvDaqOygH6mwzAMHms/HQRWkRD4ycfccyGI I4M58+2n/OvnvTfKC0vMeUl+9itlXyqyBqnrg7zO4KejQX5wAn5w+2UpscDyj9Sg -----END CERTIFICATE-----Generated at Sat Dec 6 11:36:17 2025 by rpki-client