This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/FSD_xSgegT7cc3ZOOtXLgaBRjMs.roa File: FSD_xSgegT7cc3ZOOtXLgaBRjMs.roa (raw, json) Hash identifier: NjZYQpqM0fGA4f7q8Gmw6Ge+hAZ+q6h+/rmaXtDWmiA= Subject key identifier: 15:20:FF:C5:28:1E:81:3E:DC:73:76:4E:3A:D5:CB:81:A0:51:8C:CB Certificate issuer: /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d Certificate serial: 019B78350949ECC2738B0CAAEBBB2581FEF4 Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/FSD_xSgegT7cc3ZOOtXLgaBRjMs.roa Signing time: Thu 01 Jan 2026 06:18:20 +0000 ROA not before: Thu 01 Jan 2026 06:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209183 IP address blocks: 185.103.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:09:49:ec:c2:73:8b:0c:aa:eb:bb:25:81:fe:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d Validity Not Before: Jan 1 06:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1520ffc5281e813edc73764e3ad5cb81a0518ccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0a:f8:d3:3b:25:08:57:d0:21:2f:1a:44:b2: 21:e6:9d:be:13:1d:00:2d:ae:b9:f8:28:79:41:ef: da:b5:26:15:c5:7b:dc:ea:32:25:3f:e4:5a:d1:60: f9:22:cb:fa:88:2e:cc:ca:bb:4a:5e:c2:01:20:87: c1:9c:81:4f:84:25:09:4e:b7:d1:09:dd:50:31:95: 87:34:0e:e6:9c:55:29:d5:23:b2:26:be:bf:0f:9d: b3:27:03:ff:a8:c3:63:8e:ec:53:0c:7d:d5:bb:0f: d3:8a:99:9d:93:5f:33:5b:56:88:ef:97:73:3a:8b: a8:57:45:e5:60:ee:64:1c:37:01:f2:bd:2d:f9:0c: 89:75:85:cf:eb:da:53:fe:5d:4b:da:4c:c9:aa:a4: e8:a4:7f:c3:84:39:9d:a7:91:31:09:db:7e:99:99: 10:6d:ce:f1:cb:09:70:06:de:d6:e3:4d:87:af:f4: c8:e8:dc:74:78:2b:19:20:38:69:62:36:a1:83:d9: fb:2d:a4:04:65:12:eb:4a:b1:6c:b4:65:82:d6:94: 75:bc:45:a4:d6:3c:d3:9d:7a:12:47:8e:e8:79:e3: 0b:f3:be:7c:a0:22:9d:c0:95:fe:3a:68:e6:c6:61: cc:b2:52:1c:ee:0f:6f:4e:db:b2:1c:26:96:ec:f6: 14:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:20:FF:C5:28:1E:81:3E:DC:73:76:4E:3A:D5:CB:81:A0:51:8C:CB X509v3 Authority Key Identifier: keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/FSD_xSgegT7cc3ZOOtXLgaBRjMs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.103.200.0/24 Signature Algorithm: sha256WithRSAEncryption 73:91:e9:7a:ff:e8:d1:a7:bf:cd:69:be:16:5a:7d:a5:bb:92: df:70:6b:ad:4e:64:eb:b7:9a:aa:05:37:5e:72:0e:5f:d4:28: d8:b5:e1:e1:51:05:67:7a:7f:4e:3d:c3:1c:80:2c:22:9c:71: ae:5f:8a:7b:3c:d8:00:d1:41:ce:31:0c:37:c2:7a:ba:a2:b8: a4:9c:4d:e4:f2:fa:ab:3b:72:83:00:6f:32:c1:26:01:c2:cb: b0:ed:02:6e:c2:49:aa:e4:6a:54:57:9e:a4:13:e3:3f:0e:37: e2:9e:6b:21:f6:64:33:99:e8:d2:d3:8a:ee:03:b7:b3:21:e8: 52:79:7b:83:b4:20:8d:f8:f6:15:a6:60:22:03:ff:f6:78:be: 23:63:e0:0f:91:ed:fa:65:7d:f1:ef:4c:dd:66:dd:3d:60:f7: 58:1e:8c:36:a3:4d:4b:cc:e3:5e:b8:f2:21:73:a2:1d:3c:ca: f8:fe:fe:6b:26:9a:5e:26:a7:49:90:b4:50:6e:58:b9:96:86: b0:d0:83:4e:32:b3:fb:71:64:b3:84:9c:0b:f6:fa:90:b5:69: 61:5b:77:64:e2:d3:b8:d7:d4:9a:19:49:c3:43:41:51:fe:bf: 5d:a7:28:17:3a:52:41:bc:03:c4:98:cb:ab:d5:61:e3:33:bf: 4a:eb:f6:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NQlJ7MJziwyq67slgf70MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZWJiNjkxYjI0ZjI4NzkyNTNlM2E2YTQ1ZTBiNWM1MjY3 M2IwOWQwHhcNMjYwMTAxMDYxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTIwZmZjNTI4MWU4MTNlZGM3Mzc2NGUzYWQ1Y2I4MWEwNTE4Y2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwr40zslCFfQIS8aRLIh5p2+Ex0A La65+Ch5Qe/atSYVxXvc6jIlP+Ra0WD5Isv6iC7MyrtKXsIBIIfBnIFPhCUJTrfR Cd1QMZWHNA7mnFUp1SOyJr6/D52zJwP/qMNjjuxTDH3Vuw/Tipmdk18zW1aI75dz OouoV0XlYO5kHDcB8r0t+QyJdYXP69pT/l1L2kzJqqTopH/DhDmdp5ExCdt+mZkQ bc7xywlwBt7W402Hr/TI6Nx0eCsZIDhpYjahg9n7LaQEZRLrSrFstGWC1pR1vEWk 1jzTnXoSR47oeeML8758oCKdwJX+OmjmxmHMslIc7g9vTtuyHCaW7PYUnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBUg/8UoHoE+3HN2TjrVy4GgUYzLMB8GA1UdIwQY MBaAFC7rtpGyTyh5JT46akXgtcUmc7CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAt ZGEzZTExOTJjZGY2LzEvRlNEX3hTZ2VnVDdjYzNaT090WExnYUJSak1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAtZGEzZTExOTJjZGY2 LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWfIMA0G CSqGSIb3DQEBCwUAA4IBAQBzkel6/+jRp7/Nab4WWn2lu5LfcGutTmTrt5qqBTde cg5f1CjYteHhUQVnen9OPcMcgCwinHGuX4p7PNgA0UHOMQw3wnq6oriknE3k8vqr O3KDAG8ywSYBwsuw7QJuwkmq5GpUV56kE+M/Djfinmsh9mQzmejS04ruA7ezIehS eXuDtCCN+PYVpmAiA//2eL4jY+APke36ZX3x70zdZt09YPdYHow2o01LzONeuPIh c6IdPMr4/v5rJppeJqdJkLRQbli5loaw0INOMrP7cWSzhJwL9vqQtWlhW3dk4tO4 19SaGUnDQ0FR/r9dpygXOlJBvAPEmMur1WHjM79K6/bG -----END CERTIFICATE-----Generated at Sun Jan 25 10:30:00 2026 by rpki-client