This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/FjKOaSffmodjULE60Uqyds_9UrY.roa File: FjKOaSffmodjULE60Uqyds_9UrY.roa (raw, json) Hash identifier: Cvv1kQqsgheFH6HLElDwGFzdf6a+v+I+lfZ3+Gpg/Ko= Subject key identifier: 16:32:8E:69:27:DF:9A:87:63:50:B1:3A:D1:4A:B2:76:CF:FD:52:B6 Certificate issuer: /CN=db979b898c0f5834cbc838a69a05e3abe8c02903 Certificate serial: 019B7910B5C149F1A4333DE59768D30F09D8 Authority key identifier: DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/FjKOaSffmodjULE60Uqyds_9UrY.roa Signing time: Thu 01 Jan 2026 10:18:16 +0000 ROA not before: Thu 01 Jan 2026 10:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5466 IP address blocks: 178.255.216.0/24 maxlen: 24 2a09:2140::/48 maxlen: 48 2a09:2140:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b5:c1:49:f1:a4:33:3d:e5:97:68:d3:0f:09:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db979b898c0f5834cbc838a69a05e3abe8c02903 Validity Not Before: Jan 1 10:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16328e6927df9a876350b13ad14ab276cffd52b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d5:34:d8:15:8e:02:ec:35:db:a2:9d:61:19: 0e:2b:f8:fb:93:0c:1c:c4:02:ee:e6:99:f4:9a:19: 25:4d:ac:54:e6:e1:70:3f:98:77:cd:ee:1c:b6:84: 9a:17:ae:35:f3:07:59:77:1a:5f:5f:35:05:54:20: 6c:06:a8:d7:ca:e4:d6:6e:4d:6e:89:15:a0:cf:0b: 62:1a:02:02:87:77:88:f6:d3:23:91:17:53:4b:7c: 9c:ee:f2:15:4e:ac:13:c4:58:64:4f:8a:d5:1f:99: 60:21:ef:ad:10:77:19:5a:5c:70:41:98:ab:ee:17: c4:95:e3:ac:31:51:69:5c:f1:c5:37:65:f8:52:09: a7:b3:c2:e0:7a:90:84:c5:0b:db:bb:14:84:dd:57: f7:f8:98:c1:79:3e:d2:c8:fe:d2:e9:4f:8d:35:df: da:1d:c7:0d:a5:52:61:a5:72:81:26:c7:46:0a:6d: 80:f6:76:0b:3e:34:1e:95:13:07:63:bb:80:6a:0e: cf:aa:2f:5d:61:05:b1:70:32:e7:09:16:75:26:6c: 3e:0e:fe:05:6a:e3:d7:6f:ef:be:d5:6b:d1:f7:c5: f9:2c:39:37:73:1b:c7:d0:ba:16:1e:b8:7f:98:8d: a6:43:6c:fd:cb:6f:c6:4d:bf:7a:cb:2e:c5:bd:9b: bb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:32:8E:69:27:DF:9A:87:63:50:B1:3A:D1:4A:B2:76:CF:FD:52:B6 X509v3 Authority Key Identifier: keyid:DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/FjKOaSffmodjULE60Uqyds_9UrY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.255.216.0/24 IPv6: 2a09:2140::/48 2a09:2140:8000::/48 Signature Algorithm: sha256WithRSAEncryption 3d:06:3e:83:51:3c:df:a4:12:62:bf:3a:16:d2:ae:b9:d0:fb: d8:e6:79:c2:d2:a2:4e:1a:35:59:89:95:2f:a9:6b:3c:1a:99: 17:b3:55:fb:84:a2:1f:80:bb:5a:3e:b9:93:85:17:10:d7:19: 9d:af:de:b9:00:14:91:40:86:30:9d:4e:08:1f:b8:f4:8f:53: a4:af:69:8f:83:25:0c:9f:cc:8f:df:e4:c1:16:47:ca:92:95: bf:f7:50:2c:bb:4c:6a:49:c6:2a:51:c2:28:fc:b0:9c:c6:7d: 7c:f1:88:d1:ca:23:47:1d:d2:37:7b:9c:9a:9b:7e:99:ca:59: c4:61:68:be:6a:57:1a:5e:e1:3e:69:06:b3:87:01:f5:74:1b: 1e:57:66:75:37:35:0f:b6:b7:a2:6b:bc:14:07:22:ee:25:dd: 4e:ef:16:2b:2c:29:64:83:d2:39:1c:df:af:a3:24:07:40:1b: 6e:00:5d:8b:87:2f:c0:7b:f3:12:ae:25:8c:e6:a3:d2:7f:ae: d3:62:fd:c8:ff:23:c8:44:81:e0:2a:e2:ab:2c:fb:eb:fe:1f: 09:92:29:79:96:67:69:c1:10:f6:72:10:7d:61:31:ec:0b:fa: 48:1f:ea:f9:99:c8:e1:19:d9:49:ff:13:ff:4b:a6:7b:7c:08: 6a:e9:d4:55 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt5ELXBSfGkMz3ll2jTDwnYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOTc5Yjg5OGMwZjU4MzRjYmM4MzhhNjlhMDVlM2FiZThj MDI5MDMwHhcNMjYwMTAxMTAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjMyOGU2OTI3ZGY5YTg3NjM1MGIxM2FkMTRhYjI3NmNmZmQ1MmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldU02BWOAuw126KdYRkOK/j7kwwc xALu5pn0mhklTaxU5uFwP5h3ze4ctoSaF6418wdZdxpfXzUFVCBsBqjXyuTWbk1u iRWgzwtiGgICh3eI9tMjkRdTS3yc7vIVTqwTxFhkT4rVH5lgIe+tEHcZWlxwQZir 7hfEleOsMVFpXPHFN2X4Ugmns8LgepCExQvbuxSE3Vf3+JjBeT7SyP7S6U+NNd/a HccNpVJhpXKBJsdGCm2A9nYLPjQelRMHY7uAag7Pqi9dYQWxcDLnCRZ1Jmw+Dv4F auPXb+++1WvR98X5LDk3cxvH0LoWHrh/mI2mQ2z9y2/GTb96yy7FvZu7CwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFBYyjmkn35qHY1CxOtFKsnbP/VK2MB8GA1UdIwQY MBaAFNuXm4mMD1g0y8g4ppoF46vowCkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjVlYmlZd1BXRFRMeURpbW1nWGpxLWpBS1FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kNWZkZTYtMTk1MS00N2I4LWEzMjUt NGNiMjU3ZWUxOTJjLzEvRmpLT2FTZmZtb2RqVUxFNjBVcXlkc185VXJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kNWZkZTYtMTk1MS00N2I4LWEzMjUtNGNiMjU3ZWUxOTJj LzEvMjVlYmlZd1BXRFRMeURpbW1nWGpxLWpBS1FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAsv/YMBgE AgACMBIDBwAqCSFAAAADBwAqCSFAgAAwDQYJKoZIhvcNAQELBQADggEBAD0GPoNR PN+kEmK/OhbSrrnQ+9jmecLSok4aNVmJlS+pazwamRezVfuEoh+Au1o+uZOFFxDX GZ2v3rkAFJFAhjCdTggfuPSPU6SvaY+DJQyfzI/f5MEWR8qSlb/3UCy7TGpJxipR wij8sJzGfXzxiNHKI0cd0jd7nJqbfpnKWcRhaL5qVxpe4T5pBrOHAfV0Gx5XZnU3 NQ+2t6JrvBQHIu4l3U7vFissKWSD0jkc36+jJAdAG24AXYuHL8B78xKuJYzmo9J/ rtNi/cj/I8hEgeAq4qss++v+HwmSKXmWZ2nBEPZyEH1hMewL+kgf6vmZyOEZ2Un/ E/9Lpnt8CGrp1FU= -----END CERTIFICATE-----Generated at Mon Jan 26 01:14:59 2026 by rpki-client