This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/fhyLY9yJmwIhlgdl0r_eC4s6raM.roa File: fhyLY9yJmwIhlgdl0r_eC4s6raM.roa (raw, json) Hash identifier: oTh1Q6WnZkhhrxgjEjjzthbMNdzSpywy2PEB3YpQ5UM= Subject key identifier: 7E:1C:8B:63:DC:89:9B:02:21:96:07:65:D2:BF:DE:0B:8B:3A:AD:A3 Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Certificate serial: 019B7D5BEF10214B2F53EDE3DDBFA4DFEA5D Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/fhyLY9yJmwIhlgdl0r_eC4s6raM.roa Signing time: Fri 02 Jan 2026 06:18:55 +0000 ROA not before: Fri 02 Jan 2026 06:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215897 IP address blocks: 95.181.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:ef:10:21:4b:2f:53:ed:e3:dd:bf:a4:df:ea:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Validity Not Before: Jan 2 06:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e1c8b63dc899b0221960765d2bfde0b8b3aada3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:42:c5:ef:d7:62:04:68:e1:aa:69:ca:83:ab: 94:45:92:9f:db:9e:37:fc:ba:2c:13:3f:2d:0b:12: e6:73:62:9f:0e:ea:73:58:43:18:7a:3c:33:d8:6d: 2b:26:3f:30:67:68:59:0e:2d:ff:9f:03:15:28:30: b0:20:d8:cc:ce:4c:cf:e4:02:e7:e3:52:d1:32:23: 5f:fd:6b:1a:b1:71:94:c9:49:24:0a:87:f4:d5:de: 9d:50:20:c0:a2:21:49:ce:64:44:a8:d6:14:e7:41: 28:52:8a:ba:9f:53:63:27:34:13:16:5e:67:6f:5d: da:47:74:27:8a:e5:1b:f9:73:2b:f4:33:6f:16:e9: 71:33:75:60:90:e4:e4:22:d5:79:57:ce:54:61:fb: c5:29:b2:43:eb:84:0c:c2:e6:c9:f4:39:15:bb:b5: 9f:10:38:3f:94:a7:5e:13:6d:5c:f4:b2:f8:36:76: 23:e3:57:63:1e:27:be:e2:84:b1:67:d7:f1:0d:b1: 48:b4:72:53:04:54:48:0a:f6:44:03:32:a9:be:9a: 4a:c5:b4:1c:18:7a:2b:99:1a:51:25:90:f4:b8:98: 54:aa:2b:73:db:38:5a:e3:0e:72:4d:6c:77:15:cc: 67:68:4e:9c:03:fb:bd:e6:24:4a:a3:2a:e1:58:9c: 66:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1C:8B:63:DC:89:9B:02:21:96:07:65:D2:BF:DE:0B:8B:3A:AD:A3 X509v3 Authority Key Identifier: keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/fhyLY9yJmwIhlgdl0r_eC4s6raM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.181.150.0/24 Signature Algorithm: sha256WithRSAEncryption 43:66:f4:db:5c:13:43:d3:a9:c3:81:10:11:d0:69:1b:d3:08: b9:00:9a:a0:63:21:c5:fa:0b:57:cf:44:b2:70:a2:bd:f2:be: 70:45:c9:d9:a4:94:26:44:7b:58:67:30:72:8e:17:f5:e1:e6: 2a:40:fe:7c:e3:be:be:64:33:80:73:e1:36:ce:fc:0f:07:67: 99:4a:66:bb:b2:a6:3d:f2:3c:7d:b6:79:49:cd:7a:d1:c5:34: 7f:73:eb:10:cd:9a:16:c6:c8:67:25:cf:9f:f5:91:c0:a8:d6: ab:34:6c:b0:f4:55:2c:a5:dd:92:67:36:5f:7f:4b:e1:47:74: 0d:d2:78:99:7e:c8:db:28:30:34:26:a1:c8:ad:0f:84:88:b1: b8:1d:b3:1d:6a:86:bf:62:fa:36:d4:5b:bc:66:91:87:f7:58: 01:dc:87:19:b2:ad:5e:e5:58:24:21:c0:fd:1e:48:43:49:3a: 28:4b:51:d6:dc:e9:14:e7:a1:d4:6b:6b:b4:48:19:87:26:4d: 59:f9:05:c2:78:e9:22:4b:1e:f7:5f:e5:23:3b:6c:2c:04:bf: c4:74:ba:a2:cc:38:b0:a4:22:61:b9:a5:1e:db:b0:bd:40:b0: 55:92:10:30:31:73:e7:0c:5a:43:f9:4f:ab:be:a3:af:a1:ca: 3e:5b:08:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W+8QIUsvU+3j3b+k3+pdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1 YTNjMjAwHhcNMjYwMTAyMDYxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTFjOGI2M2RjODk5YjAyMjE5NjA3NjVkMmJmZGUwYjhiM2FhZGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkLF79diBGjhqmnKg6uURZKf2543 /LosEz8tCxLmc2KfDupzWEMYejwz2G0rJj8wZ2hZDi3/nwMVKDCwINjMzkzP5ALn 41LRMiNf/WsasXGUyUkkCof01d6dUCDAoiFJzmREqNYU50EoUoq6n1NjJzQTFl5n b13aR3QniuUb+XMr9DNvFulxM3VgkOTkItV5V85UYfvFKbJD64QMwubJ9DkVu7Wf EDg/lKdeE21c9LL4NnYj41djHie+4oSxZ9fxDbFItHJTBFRICvZEAzKpvppKxbQc GHormRpRJZD0uJhUqitz2zha4w5yTWx3FcxnaE6cA/u95iRKoyrhWJxmOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH4ci2PciZsCIZYHZdK/3guLOq2jMB8GA1UdIwQY MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt Mzk5ZmM5NjkzYjIyLzEvZmh5TFk5eUptd0lobGdkbDByX2VDNHM2cmFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX7WWMA0G CSqGSIb3DQEBCwUAA4IBAQBDZvTbXBND06nDgRAR0Gkb0wi5AJqgYyHF+gtXz0Sy cKK98r5wRcnZpJQmRHtYZzByjhf14eYqQP58476+ZDOAc+E2zvwPB2eZSma7sqY9 8jx9tnlJzXrRxTR/c+sQzZoWxshnJc+f9ZHAqNarNGyw9FUspd2SZzZff0vhR3QN 0niZfsjbKDA0JqHIrQ+EiLG4HbMdaoa/Yvo21Fu8ZpGH91gB3IcZsq1e5VgkIcD9 HkhDSTooS1HW3OkU56HUa2u0SBmHJk1Z+QXCeOkiSx73X+UjO2wsBL/EdLqizDiw pCJhuaUe27C9QLBVkhAwMXPnDFpD+U+rvqOvoco+WwhZ -----END CERTIFICATE-----Generated at Sun Jan 25 19:19:11 2026 by rpki-client