This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FUjNXbrdjMQJJIhEzflVpWk6F4c.roa File: FUjNXbrdjMQJJIhEzflVpWk6F4c.roa (raw, json) Hash identifier: AZvxOHhLS2PDzAz1ZcKSDQuFw5nJF82fcD43tDPPmOg= Subject key identifier: 15:48:CD:5D:BA:DD:8C:C4:09:24:88:44:CD:F9:55:A5:69:3A:17:87 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B1211B8FC7AA9FDF93BE46393EF76392B Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FUjNXbrdjMQJJIhEzflVpWk6F4c.roa Signing time: Fri 12 Dec 2025 10:18:29 +0000 ROA not before: Fri 12 Dec 2025 10:18:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 89.34.106.0/24 maxlen: 24 93.114.183.0/24 maxlen: 24 93.115.106.0/24 maxlen: 24 194.58.47.0/24 maxlen: 24 206.245.158.0/24 maxlen: 24 212.192.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:11:b8:fc:7a:a9:fd:f9:3b:e4:63:93:ef:76:39:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Dec 12 10:18:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1548cd5dbadd8cc409248844cdf955a5693a1787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0e:68:5e:10:d3:f1:d6:72:37:f4:98:70:f4: 83:17:2e:97:0e:6c:1d:1e:1b:16:3a:44:a0:ae:cd: 4a:55:4f:34:ae:61:be:5b:e5:f7:41:4a:cf:0b:93: b7:ef:68:0c:5e:86:39:b2:52:51:a6:6e:32:8e:03: 60:2d:b1:13:48:ad:73:13:3f:03:4f:92:3e:f8:5e: 0a:67:3c:5a:33:70:41:93:53:1f:4e:82:b7:b6:a5: b1:57:c4:72:cf:68:7f:d4:d2:2c:db:c9:06:a6:4c: 5b:35:24:e0:ac:7e:6a:c4:36:72:84:02:73:de:45: ca:9a:c9:b6:14:61:79:3f:2b:0f:18:0f:c2:b0:6e: 7f:be:fb:c1:7a:00:d1:45:a4:3c:c9:58:86:1f:9c: 66:b4:6a:33:5b:f1:41:2b:86:fd:50:5b:d7:c5:db: 81:cb:24:c1:6b:64:2f:0e:9c:1d:ff:75:9f:11:3f: ab:b7:eb:34:c2:38:79:d9:1c:d3:b8:05:7c:c3:b3: 1c:54:04:c1:7b:69:89:81:72:56:04:2b:60:cb:d5: 84:d6:6f:82:26:71:98:44:7a:37:9f:25:5a:62:34: 45:ca:1b:59:98:d6:33:06:9a:11:73:04:4e:df:61: 6a:ba:f6:13:be:2e:12:06:01:ce:55:11:b7:94:b2: 47:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:48:CD:5D:BA:DD:8C:C4:09:24:88:44:CD:F9:55:A5:69:3A:17:87 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FUjNXbrdjMQJJIhEzflVpWk6F4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.106.0/24 93.114.183.0/24 93.115.106.0/24 194.58.47.0/24 206.245.158.0/24 212.192.8.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:c9:22:1d:cc:a3:49:6a:3e:38:2b:98:01:f8:8f:e7:5f:cc: 3c:42:86:c4:c3:60:c9:aa:fb:45:d7:1a:aa:c7:94:71:48:34: 7e:2f:b3:00:ae:cc:c5:fb:b4:47:a0:25:eb:a7:7c:b5:21:f0: 17:7a:00:b2:b2:37:99:ba:af:d5:0d:99:8e:24:30:8f:80:b7: c6:78:ea:0a:af:21:73:96:d5:66:97:3b:1d:74:83:6e:3a:63: fa:e1:3f:74:fc:7b:f0:f0:1c:ac:fc:e7:59:76:03:45:1e:94: 4c:91:85:65:7d:26:e7:b9:a9:7b:01:ec:de:a0:df:73:07:cf: 68:ce:5c:1e:b0:48:69:a8:27:72:20:f6:81:fd:b9:97:96:3f: 7c:d6:b8:d4:26:38:5d:91:1b:34:3c:ac:86:54:56:85:37:83: b6:cf:01:47:e4:77:4b:2e:9b:89:aa:4e:e7:63:38:64:6d:5c: ad:9a:36:4f:b3:5f:23:80:02:75:43:b8:b9:91:83:0a:b3:77: 36:61:64:b4:6e:0b:1d:27:25:41:d9:72:ca:e8:1d:76:de:b2: 11:61:86:61:6a:d6:c5:1c:b5:74:61:71:35:6a:8c:89:50:51: 1f:1e:ab:20:3d:df:f1:61:16:d6:99:58:60:a2:dc:09:3a:4e: 48:5a:c8:8e -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZsSEbj8eqn9+TvkY5PvdjkrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjUxMjEyMTAxODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTQ4Y2Q1ZGJhZGQ4Y2M0MDkyNDg4NDRjZGY5NTVhNTY5M2ExNzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3g5oXhDT8dZyN/SYcPSDFy6XDmwd HhsWOkSgrs1KVU80rmG+W+X3QUrPC5O372gMXoY5slJRpm4yjgNgLbETSK1zEz8D T5I++F4KZzxaM3BBk1MfToK3tqWxV8Ryz2h/1NIs28kGpkxbNSTgrH5qxDZyhAJz 3kXKmsm2FGF5PysPGA/CsG5/vvvBegDRRaQ8yViGH5xmtGozW/FBK4b9UFvXxduB yyTBa2QvDpwd/3WfET+rt+s0wjh52RzTuAV8w7McVATBe2mJgXJWBCtgy9WE1m+C JnGYRHo3nyVaYjRFyhtZmNYzBpoRcwRO32FquvYTvi4SBgHOVRG3lLJHwQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFBVIzV263YzECSSIRM35VaVpOheHMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvRlVqTlhicmRqTVFKSkloRXpmbFZwV2s2RjRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAWSJqAwQA XXK3AwQAXXNqAwQAwjovAwQAzvWeAwQA1MAIMA0GCSqGSIb3DQEBCwUAA4IBAQAv ySIdzKNJaj44K5gB+I/nX8w8QobEw2DJqvtF1xqqx5RxSDR+L7MArszF+7RHoCXr p3y1IfAXegCysjeZuq/VDZmOJDCPgLfGeOoKryFzltVmlzsddINuOmP64T90/Hvw 8Bys/OdZdgNFHpRMkYVlfSbnual7AezeoN9zB89ozlwesEhpqCdyIPaB/bmXlj98 1rjUJjhdkRs0PKyGVFaFN4O2zwFH5HdLLpuJqk7nYzhkbVytmjZPs18jgAJ1Q7i5 kYMKs3c2YWS0bgsdJyVB2XLK6B123rIRYYZhatbFHLV0YXE1aoyJUFEfHqsgPd/x YRbWmVhgotwJOk5IWsiO -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:41 2025 by rpki-client