This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/F0pqu2hYvFj4Ixyud0Ql5qH20TA.roa File: F0pqu2hYvFj4Ixyud0Ql5qH20TA.roa (raw, json) Hash identifier: BFTTjYFyuZZqLvBkRLWX6LNQY4QUBI8rT6bJHXYnaks= Subject key identifier: 17:4A:6A:BB:68:58:BC:58:F8:23:1C:AE:77:44:25:E6:A1:F6:D1:30 Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019B7759139F3C305D8492754B0492C63961 Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/F0pqu2hYvFj4Ixyud0Ql5qH20TA.roa Signing time: Thu 01 Jan 2026 02:18:04 +0000 ROA not before: Thu 01 Jan 2026 02:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209579 IP address blocks: 85.202.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:13:9f:3c:30:5d:84:92:75:4b:04:92:c6:39:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Jan 1 02:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=174a6abb6858bc58f8231cae774425e6a1f6d130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0b:a1:00:7a:5d:16:b9:6c:62:2e:cc:db:20: 7c:72:68:97:c7:b3:f5:5e:e2:5a:45:39:fc:f3:e6: 56:ba:91:56:f1:a4:44:96:d6:72:de:26:ee:9d:4d: 61:92:bc:cf:45:79:50:9d:18:3e:f9:52:11:8c:ea: 5d:a4:c2:e6:5b:64:c5:58:88:50:c8:8f:3d:f1:6d: 2c:da:e3:e8:29:c5:0d:e6:a5:f0:f5:87:1f:02:fa: 6f:fa:35:7a:29:85:53:d1:94:8c:9a:b0:75:f8:58: d7:34:cf:2c:46:15:e5:e2:6d:c3:64:48:84:83:dc: 85:73:e9:e9:9e:2d:1c:9c:41:3e:11:20:3a:a6:af: e9:b9:1d:c6:7e:1d:b7:4c:65:7b:94:0a:2f:61:e7: 8b:90:77:d3:71:31:9c:01:da:ea:41:5c:68:2b:b0: fb:b1:24:dd:43:38:72:11:78:07:83:78:58:fa:db: 20:93:06:69:96:4c:66:fc:f6:3c:03:92:38:80:42: a2:cb:c7:af:37:da:1c:b4:78:d5:7d:29:a2:e0:c2: f4:7c:b1:ba:f5:be:8f:64:da:49:86:c7:2d:3b:91: 87:fc:de:f1:58:7f:97:3c:f8:62:be:a1:27:24:29: b5:06:b2:8f:1a:4a:08:f7:04:2d:01:4a:c3:73:87: 57:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:4A:6A:BB:68:58:BC:58:F8:23:1C:AE:77:44:25:E6:A1:F6:D1:30 X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/F0pqu2hYvFj4Ixyud0Ql5qH20TA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.202.58.0/24 Signature Algorithm: sha256WithRSAEncryption 25:11:df:0b:b1:91:39:5b:37:c2:66:a0:a8:f0:36:a6:4b:7d: 6d:27:7e:29:65:7c:a1:3d:f1:77:9b:9c:df:e1:d2:3a:a2:74: 8f:68:ae:f1:9d:49:91:cd:c8:fa:b0:f2:76:ef:1b:68:55:5d: 34:e5:12:61:6e:4a:2f:d0:94:b1:3e:c9:41:c8:58:26:ce:2f: 9d:51:5e:11:ff:87:b9:75:83:57:d7:db:fc:3a:ca:78:ab:07: 97:bc:0f:68:4b:7b:78:f5:d9:e4:af:7d:43:0c:c8:56:e8:c5: 3f:6a:ad:ed:54:30:47:c2:ec:e2:1a:84:42:a1:d1:1c:29:12: 4f:09:27:ca:7f:7e:0f:61:0e:fb:68:dd:bc:84:d1:25:7e:d1: 7d:ef:a6:b6:f7:9c:2b:6c:30:dd:fe:c8:b3:1d:9a:db:dd:dc: 75:72:3e:24:b1:4d:86:71:05:6a:7a:9f:74:6b:a6:cd:92:ab: af:2d:f5:e8:dc:2f:2b:da:99:97:28:c9:b5:3a:cc:e1:5d:63: 8e:ff:fe:36:af:e5:a9:c9:b1:14:b7:9e:89:23:46:48:1d:0c: cd:c4:0f:9c:2c:10:6e:42:d4:1a:82:bd:0a:05:91:6e:fd:d3: 82:75:73:87:76:42:63:9b:ae:ed:eb:ec:34:33:51:81:31:4a: 13:b6:76:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WROfPDBdhJJ1SwSSxjlhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjYwMTAxMDIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzRhNmFiYjY4NThiYzU4ZjgyMzFjYWU3NzQ0MjVlNmExZjZkMTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQuhAHpdFrlsYi7M2yB8cmiXx7P1 XuJaRTn88+ZWupFW8aREltZy3ibunU1hkrzPRXlQnRg++VIRjOpdpMLmW2TFWIhQ yI898W0s2uPoKcUN5qXw9YcfAvpv+jV6KYVT0ZSMmrB1+FjXNM8sRhXl4m3DZEiE g9yFc+npni0cnEE+ESA6pq/puR3Gfh23TGV7lAovYeeLkHfTcTGcAdrqQVxoK7D7 sSTdQzhyEXgHg3hY+tsgkwZplkxm/PY8A5I4gEKiy8evN9octHjVfSmi4ML0fLG6 9b6PZNpJhsctO5GH/N7xWH+XPPhivqEnJCm1BrKPGkoI9wQtAUrDc4dXoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBdKartoWLxY+CMcrndEJeah9tEwMB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvRjBwcXUyaFl2Rmo0SXh5dWQwUWw1cUgyMFRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3 LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVco6MA0G CSqGSIb3DQEBCwUAA4IBAQAlEd8LsZE5WzfCZqCo8DamS31tJ34pZXyhPfF3m5zf 4dI6onSPaK7xnUmRzcj6sPJ27xtoVV005RJhbkov0JSxPslByFgmzi+dUV4R/4e5 dYNX19v8Osp4qweXvA9oS3t49dnkr31DDMhW6MU/aq3tVDBHwuziGoRCodEcKRJP CSfKf34PYQ77aN28hNElftF976a295wrbDDd/sizHZrb3dx1cj4ksU2GcQVqep90 a6bNkquvLfXo3C8r2pmXKMm1OszhXWOO//42r+WpybEUt56JI0ZIHQzNxA+cLBBu QtQagr0KBZFu/dOCdXOHdkJjm67t6+w0M1GBMUoTtnZS -----END CERTIFICATE-----Generated at Sun Jan 25 20:31:27 2026 by rpki-client