This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/f2KR8h_5o1QsslK8nolQ4ahTN08.roa File: f2KR8h_5o1QsslK8nolQ4ahTN08.roa (raw, json) Hash identifier: AIZ4lGLd2ADd/z7qsU4674hSFsUsEiTPO5cs/Imqvtk= Subject key identifier: 7F:62:91:F2:1F:F9:A3:54:2C:B2:52:BC:9E:89:50:E1:A8:53:37:4F Certificate issuer: /CN=eb50d3084bf8aa9ea777d245b60d511be189eab2 Certificate serial: 019B7C113DBFD60F8DF852CF10E09C60C2D6 Authority key identifier: EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/f2KR8h_5o1QsslK8nolQ4ahTN08.roa Signing time: Fri 02 Jan 2026 00:17:43 +0000 ROA not before: Fri 02 Jan 2026 00:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207366 IP address blocks: 164.138.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:3d:bf:d6:0f:8d:f8:52:cf:10:e0:9c:60:c2:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb50d3084bf8aa9ea777d245b60d511be189eab2 Validity Not Before: Jan 2 00:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f6291f21ff9a3542cb252bc9e8950e1a853374f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:89:f4:4f:e9:4f:e8:5e:8d:74:7b:e3:ef:0b: 4b:43:2e:6c:f9:37:6c:da:36:8b:40:7a:56:c4:4c: d8:e1:cb:0d:3d:68:0a:47:1d:7f:b0:dd:d2:4e:0c: b4:c4:69:0e:91:de:70:9c:ad:a1:68:dc:4b:1f:a7: 23:07:69:69:c2:d3:fa:78:e4:40:89:e7:c3:e1:31: 29:bd:4c:36:71:5f:e7:a0:f7:e3:2c:68:d1:50:54: 85:97:6f:a2:ad:3c:34:ba:4f:a8:06:e7:42:04:7e: c6:5b:62:c3:da:f7:23:67:df:91:36:cd:a9:c1:b2: 95:dc:0a:47:6a:15:e9:3d:c3:ad:6a:cd:4a:8a:c6: a8:08:ff:e6:fc:28:93:d2:cd:1d:20:1f:0b:3d:35: a5:37:ca:ce:8c:9d:c5:87:d2:01:9f:a3:52:56:5c: af:8a:36:60:ef:28:07:2a:1a:d2:47:b1:a2:b0:f5: 3b:0e:84:aa:de:81:47:c6:eb:ae:64:85:ef:b8:cf: 4e:41:80:91:a1:92:78:9b:9f:93:8f:b1:c2:33:2d: 44:88:c5:69:31:a5:fd:0a:1b:60:c1:29:54:6e:c7: de:4e:66:d6:e7:83:7f:35:8d:1b:79:06:50:b7:f4: 0c:60:b3:b4:b2:80:5b:58:f3:dc:9b:d9:d9:16:16: a2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:62:91:F2:1F:F9:A3:54:2C:B2:52:BC:9E:89:50:E1:A8:53:37:4F X509v3 Authority Key Identifier: keyid:EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/f2KR8h_5o1QsslK8nolQ4ahTN08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.138.254.0/24 Signature Algorithm: sha256WithRSAEncryption 54:5d:e5:98:e4:83:9b:cc:35:e8:fb:b8:e5:f1:71:05:4a:40: 00:fe:64:3b:c1:97:71:84:b4:6e:5e:b1:7d:fa:0f:f4:f4:e8: 90:a4:18:03:89:d8:b6:8a:5e:e4:fe:35:bb:93:0d:e8:80:06: 1c:6b:7a:20:cb:39:4e:f0:cf:ac:8d:e7:d3:f0:9b:6e:58:fb: e1:42:0e:a6:a1:6a:b7:72:05:7b:7f:53:f5:04:4d:b2:33:f9: 1b:02:22:a5:fe:40:bb:ea:1b:fa:f6:0f:c1:a5:90:18:7b:58: b8:78:8d:5f:cc:b6:5e:81:bf:5b:5b:4e:26:fb:f0:5e:bf:b2: 8f:1f:e4:27:7a:ba:13:18:49:87:5d:cb:95:3b:e7:28:f9:df: 84:f5:b5:5b:71:28:0d:de:b6:8b:8f:1c:b6:85:98:75:03:17: a3:a7:d6:3c:3b:e2:69:dc:af:d8:b5:7f:1a:84:43:2c:6b:6a: 3a:31:59:5f:12:01:8d:7a:51:69:63:bc:bf:e5:bb:b4:b9:3d: 47:bc:be:eb:c1:fa:64:33:46:4d:93:b3:56:49:1c:44:e4:b7: c6:dd:e2:6e:ae:9f:8a:7f:e0:f8:01:9e:20:c4:6c:c6:b5:84: 88:dd:02:f3:1c:f9:da:5f:27:51:85:84:27:41:3c:04:c4:f1: 4a:41:71:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ET2/1g+N+FLPEOCcYMLWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNTBkMzA4NGJmOGFhOWVhNzc3ZDI0NWI2MGQ1MTFiZTE4 OWVhYjIwHhcNMjYwMTAyMDAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjYyOTFmMjFmZjlhMzU0MmNiMjUyYmM5ZTg5NTBlMWE4NTMzNzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04n0T+lP6F6NdHvj7wtLQy5s+Tds 2jaLQHpWxEzY4csNPWgKRx1/sN3STgy0xGkOkd5wnK2haNxLH6cjB2lpwtP6eORA iefD4TEpvUw2cV/noPfjLGjRUFSFl2+irTw0uk+oBudCBH7GW2LD2vcjZ9+RNs2p wbKV3ApHahXpPcOtas1KisaoCP/m/CiT0s0dIB8LPTWlN8rOjJ3Fh9IBn6NSVlyv ijZg7ygHKhrSR7GisPU7DoSq3oFHxuuuZIXvuM9OQYCRoZJ4m5+Tj7HCMy1EiMVp MaX9ChtgwSlUbsfeTmbW54N/NY0beQZQt/QMYLO0soBbWPPcm9nZFhaikwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH9ikfIf+aNULLJSvJ6JUOGoUzdPMB8GA1UdIwQY MBaAFOtQ0whL+Kqep3fSRbYNURvhieqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjFEVENFdjRxcDZuZDlKRnRnMVJHLUdKNnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xMmU3MmMtNzQ5MS00N2UyLWFjNTMt YWMwYzYwMTAwNDc4LzEvZjJLUjhoXzVvMVFzc2xLOG5vbFE0YWhUTjA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8xMmU3MmMtNzQ5MS00N2UyLWFjNTMtYWMwYzYwMTAwNDc4 LzEvNjFEVENFdjRxcDZuZDlKRnRnMVJHLUdKNnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApIr+MA0G CSqGSIb3DQEBCwUAA4IBAQBUXeWY5IObzDXo+7jl8XEFSkAA/mQ7wZdxhLRuXrF9 +g/09OiQpBgDidi2il7k/jW7kw3ogAYca3ogyzlO8M+sjefT8JtuWPvhQg6moWq3 cgV7f1P1BE2yM/kbAiKl/kC76hv69g/BpZAYe1i4eI1fzLZegb9bW04m+/Bev7KP H+QneroTGEmHXcuVO+co+d+E9bVbcSgN3raLjxy2hZh1Axejp9Y8O+Jp3K/YtX8a hEMsa2o6MVlfEgGNelFpY7y/5bu0uT1HvL7rwfpkM0ZNk7NWSRxE5LfG3eJurp+K f+D4AZ4gxGzGtYSI3QLzHPnaXydRhYQnQTwExPFKQXH8 -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:43 2026 by rpki-client