This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/FDfmsu_IgoQfV2wt46Usr4SYc3g.roa File: FDfmsu_IgoQfV2wt46Usr4SYc3g.roa (raw, json) Hash identifier: F5BDEBTgZRkZKg47n0IHrA45+01eu4MWtwsHqaOf0SA= Subject key identifier: 14:37:E6:B2:EF:C8:82:84:1F:57:6C:2D:E3:A5:2C:AF:84:98:73:78 Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019AEBC641AFD6E3D3506C1FB8C5A5B03250 Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/FDfmsu_IgoQfV2wt46Usr4SYc3g.roa Signing time: Thu 04 Dec 2025 23:50:29 +0000 ROA not before: Thu 04 Dec 2025 23:50:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136526 IP address blocks: 2.59.152.0/22 maxlen: 22 45.91.224.0/22 maxlen: 22 45.142.152.0/22 maxlen: 22 91.204.224.0/22 maxlen: 22 185.202.100.0/22 maxlen: 22 185.202.103.0/24 maxlen: 24 193.239.150.0/23 maxlen: 23 193.239.154.0/23 maxlen: 23 193.239.154.0/24 maxlen: 24 194.126.215.0/24 maxlen: 24 194.126.219.0/24 maxlen: 24 194.126.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:eb:c6:41:af:d6:e3:d3:50:6c:1f:b8:c5:a5:b0:32:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Dec 4 23:50:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1437e6b2efc882841f576c2de3a52caf84987378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bc:25:f8:0c:5c:49:a9:d6:ad:d6:7b:58:c6: 2e:5d:2a:67:92:0c:19:7e:87:c1:da:74:da:cb:d7: e5:7f:39:fe:0e:4b:6a:88:74:63:e5:93:b7:3b:e8: e0:db:32:2f:82:c7:73:88:fc:81:02:0e:cf:e1:ee: 57:e0:15:e9:db:50:5a:00:2c:a8:0c:8a:58:e6:80: 67:03:97:bb:c0:80:5a:7f:b3:0a:a0:a2:fc:9b:16: 22:9e:35:71:db:43:a9:73:c8:a2:0f:cd:00:24:f8: ee:75:e9:32:94:34:f1:7a:c9:bd:17:f0:13:23:26: 21:18:5e:ec:a0:b3:41:a6:f1:96:5d:66:7f:0c:02: 62:63:4b:ec:af:95:55:9f:7a:a3:11:7e:63:1a:11: 63:91:c9:79:fe:c4:52:f1:82:d1:ad:82:c1:e3:f8: b9:fe:31:5b:60:3f:fa:5b:e6:99:33:98:bc:56:11: bd:f7:54:ac:be:24:0e:3c:71:a8:ec:73:cf:a3:e2: 5d:da:43:fe:4f:60:c3:58:dc:16:b3:e2:6e:b8:68: 34:fa:f6:eb:9c:ed:a7:e7:8f:33:34:22:b2:f8:73: 2a:83:68:0b:ca:06:2f:8d:8f:32:85:3d:99:40:2a: 3b:c1:15:be:b3:9e:5c:f0:70:c4:9c:f9:a6:07:58: 4a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:37:E6:B2:EF:C8:82:84:1F:57:6C:2D:E3:A5:2C:AF:84:98:73:78 X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/FDfmsu_IgoQfV2wt46Usr4SYc3g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.152.0/22 45.91.224.0/22 45.142.152.0/22 91.204.224.0/22 185.202.100.0/22 193.239.150.0/23 193.239.154.0/23 194.126.215.0/24 194.126.219.0/24 194.126.227.0/24 Signature Algorithm: sha256WithRSAEncryption 30:fa:7a:02:3b:88:99:7d:71:65:98:f3:83:76:81:eb:55:52: 6c:2b:17:8f:b7:bc:de:a9:6f:65:c5:a2:24:16:f7:c8:3e:a7: 3e:85:a7:3c:17:92:b3:21:f9:21:95:da:8b:b3:86:95:d0:0c: df:cb:a1:83:42:d2:66:66:77:a8:96:f2:06:31:bd:16:32:32: 82:68:b5:c1:a1:93:e4:63:09:45:20:fe:6b:ab:a1:2e:c3:81: 23:25:a4:00:0b:37:c7:57:52:bc:3b:30:89:dc:98:ff:bc:31: 2b:1e:35:1d:36:4a:73:61:d8:7d:cc:d1:89:d9:bc:c4:e9:22: df:eb:48:25:eb:9f:ce:87:de:d5:03:3f:e1:95:21:97:7f:bf: fd:b4:77:b0:27:4e:76:ba:95:fd:45:48:db:3a:78:82:11:63: de:3f:2d:11:95:4e:ad:d7:39:e3:13:66:93:17:27:cd:a3:5c: c7:47:5e:b7:e2:72:80:f0:89:f9:a4:8f:b9:71:48:65:72:9c: 03:d9:b4:2b:1a:f7:2b:3c:9a:53:69:04:05:48:67:df:9b:12: 20:59:e7:af:1f:bb:86:2d:42:fb:af:c7:2d:44:ae:50:f6:b0: bb:3d:03:74:6a:1b:93:d5:4a:e2:27:a5:2e:14:6c:dc:d9:d4: d3:5f:04:f5 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZrrxkGv1uPTUGwfuMWlsDJQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjUxMjA0MjM1MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDM3ZTZiMmVmYzg4Mjg0MWY1NzZjMmRlM2E1MmNhZjg0OTg3Mzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rwl+AxcSanWrdZ7WMYuXSpnkgwZ fofB2nTay9flfzn+DktqiHRj5ZO3O+jg2zIvgsdziPyBAg7P4e5X4BXp21BaACyo DIpY5oBnA5e7wIBaf7MKoKL8mxYinjVx20Opc8iiD80AJPjudekylDTxesm9F/AT IyYhGF7soLNBpvGWXWZ/DAJiY0vsr5VVn3qjEX5jGhFjkcl5/sRS8YLRrYLB4/i5 /jFbYD/6W+aZM5i8VhG991SsviQOPHGo7HPPo+Jd2kP+T2DDWNwWs+JuuGg0+vbr nO2n548zNCKy+HMqg2gLygYvjY8yhT2ZQCo7wRW+s55c8HDEnPmmB1hKVQIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFBQ35rLvyIKEH1dsLeOlLK+EmHN4MB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvRkRmbXN1X0lnb1FmVjJ3dDQ2VXNyNFNZYzNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQCAjuYAwQC LVvgAwQCLY6YAwQCW8zgAwQCucpkAwQBwe+WAwQBwe+aAwQAwn7XAwQAwn7bAwQA wn7jMA0GCSqGSIb3DQEBCwUAA4IBAQAw+noCO4iZfXFlmPODdoHrVVJsKxePt7ze qW9lxaIkFvfIPqc+hac8F5KzIfkhldqLs4aV0Azfy6GDQtJmZneolvIGMb0WMjKC aLXBoZPkYwlFIP5rq6Euw4EjJaQACzfHV1K8OzCJ3Jj/vDErHjUdNkpzYdh9zNGJ 2bzE6SLf60gl65/Oh97VAz/hlSGXf7/9tHewJ052upX9RUjbOniCEWPePy0RlU6t 1znjE2aTFyfNo1zHR1634nKA8In5pI+5cUhlcpwD2bQrGvcrPJpTaQQFSGffmxIg WeevH7uGLUL7r8ctRK5Q9rC7PQN0ahuT1UriJ6UuFGzc2dTTXwT1 -----END CERTIFICATE-----Generated at Sat Dec 6 14:53:48 2025 by rpki-client