This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/FSTJ8w92afiSz0qI6f5cSEytc7Q.roa File: FSTJ8w92afiSz0qI6f5cSEytc7Q.roa (raw, json) Hash identifier: fXpshaRrLltZbsPZ3N9EZgWimcdFJLJ1wWhFL1Fg174= Subject key identifier: 15:24:C9:F3:0F:76:69:F8:92:CF:4A:88:E9:FE:5C:48:4C:AD:73:B4 Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba Certificate serial: 019B7EA66179E04152FD0B1CF463CCE27BA7 Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/FSTJ8w92afiSz0qI6f5cSEytc7Q.roa Signing time: Fri 02 Jan 2026 12:19:51 +0000 ROA not before: Fri 02 Jan 2026 12:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28952 IP address blocks: 85.248.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:61:79:e0:41:52:fd:0b:1c:f4:63:cc:e2:7b:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba Validity Not Before: Jan 2 12:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1524c9f30f7669f892cf4a88e9fe5c484cad73b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8a:73:55:3f:25:47:e7:49:74:55:4f:c4:10: da:3c:0e:89:e6:91:8a:5b:be:fb:09:18:52:bf:f5: ea:6b:f7:8b:fb:b6:42:3b:c8:a8:be:08:e3:97:4a: 95:de:b5:1d:6a:38:45:36:47:14:bf:7e:67:ab:6f: e2:83:86:fb:ca:20:53:fa:c8:6f:f4:27:cd:13:aa: 80:b9:fb:ea:02:33:35:09:ab:e3:ec:64:c9:ec:04: 58:ba:7c:8b:12:0d:6c:a6:d4:7e:c9:b5:f4:c3:6e: ea:81:d2:5c:dc:24:e2:25:fb:40:fb:af:8e:b7:dd: 37:64:84:b0:6b:41:d3:05:63:d9:3d:2d:74:97:c6: 17:9c:69:43:79:88:a1:9e:b6:3a:81:4c:c0:f7:b8: c2:a4:3c:1f:45:21:6e:22:b4:32:ba:d6:52:c5:37: 70:b8:e0:3a:1d:c1:5b:61:d3:46:f2:24:a3:33:3d: af:9e:c1:33:45:4e:50:cf:68:e2:eb:49:1c:9b:e2: 58:6f:e1:69:94:f1:e8:bd:e1:90:c3:59:c7:a9:20: d7:4c:da:97:69:b0:75:e6:72:df:a9:5b:d4:57:cb: a1:34:2c:67:2a:f0:29:a2:a6:f9:c8:e7:fe:66:ff: f0:26:57:e5:61:e3:09:cb:b6:7a:6b:af:64:54:d6: 17:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:24:C9:F3:0F:76:69:F8:92:CF:4A:88:E9:FE:5C:48:4C:AD:73:B4 X509v3 Authority Key Identifier: keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/FSTJ8w92afiSz0qI6f5cSEytc7Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.248.240.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:db:1d:81:da:5b:ca:b6:b2:6a:d7:31:9e:03:17:e3:7c:4e: ac:5f:d6:81:94:ca:1f:73:04:60:2c:39:15:81:ec:5d:d6:e9: 97:95:6e:e4:ea:92:6a:fa:7d:87:ad:06:c1:2c:9e:f2:80:59: ad:d7:51:59:5c:0e:de:39:68:3c:47:4d:0f:c0:dc:66:9d:76: df:04:61:d9:ad:0d:ec:87:4e:7c:b7:ef:7d:de:5a:db:e8:b4: 71:93:88:34:31:21:17:5d:8c:f1:4d:05:ed:23:0d:22:2d:d7: 95:8f:5a:28:7c:2c:ae:cb:1a:50:7f:e2:54:ea:c8:22:78:4d: 35:90:24:48:a7:d6:44:22:87:66:a5:1c:87:39:13:30:85:fd: ad:19:7a:4d:5b:1a:5e:8e:aa:b9:6d:e1:86:4e:c2:4c:16:ea: 94:3f:62:75:e0:2c:d3:01:c8:95:7f:f7:df:43:72:4c:ad:17: 96:00:d5:46:67:fd:64:80:a7:dc:5a:ee:6b:d2:cd:c2:cc:53: c1:73:6f:72:c8:99:93:2d:f2:e8:6b:d4:40:81:6c:a2:6e:51: d6:e8:d1:f0:cf:d1:44:bd:2f:ca:61:3a:da:ba:6c:b0:f5:ed: e4:ce:a1:70:a4:a7:b9:7c:00:3a:2b:57:ab:dc:e9:e8:c0:f4: e9:e4:79:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pmF54EFS/Qsc9GPM4nunMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Zjg4MTQwMWFiYWNjODhjOTQxZmRmNzQwZjFhYjE1MzZm MDVkYmEwHhcNMjYwMTAyMTIxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTI0YzlmMzBmNzY2OWY4OTJjZjRhODhlOWZlNWM0ODRjYWQ3M2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YpzVT8lR+dJdFVPxBDaPA6J5pGK W777CRhSv/Xqa/eL+7ZCO8iovgjjl0qV3rUdajhFNkcUv35nq2/ig4b7yiBT+shv 9CfNE6qAufvqAjM1Cavj7GTJ7ARYunyLEg1sptR+ybX0w27qgdJc3CTiJftA+6+O t903ZISwa0HTBWPZPS10l8YXnGlDeYihnrY6gUzA97jCpDwfRSFuIrQyutZSxTdw uOA6HcFbYdNG8iSjMz2vnsEzRU5Qz2ji60kcm+JYb+FplPHoveGQw1nHqSDXTNqX abB15nLfqVvUV8uhNCxnKvApoqb5yOf+Zv/wJlflYeMJy7Z6a69kVNYXOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBUkyfMPdmn4ks9KiOn+XEhMrXO0MB8GA1UdIwQY MBaAFOf4gUAausyIyUH990DxqxU28F26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmIt ZTJmYmMzYTY4ODAwLzEvRlNUSjh3OTJhZmlTejBxSTZmNWNTRXl0YzdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmItZTJmYmMzYTY4ODAw LzEvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVfjwMA0G CSqGSIb3DQEBCwUAA4IBAQBb2x2B2lvKtrJq1zGeAxfjfE6sX9aBlMofcwRgLDkV gexd1umXlW7k6pJq+n2HrQbBLJ7ygFmt11FZXA7eOWg8R00PwNxmnXbfBGHZrQ3s h058t+993lrb6LRxk4g0MSEXXYzxTQXtIw0iLdeVj1oofCyuyxpQf+JU6sgieE01 kCRIp9ZEIodmpRyHORMwhf2tGXpNWxpejqq5beGGTsJMFuqUP2J14CzTAciVf/ff Q3JMrReWANVGZ/1kgKfcWu5r0s3CzFPBc29yyJmTLfLoa9RAgWyiblHW6NHwz9FE vS/KYTraumyw9e3kzqFwpKe5fAA6K1er3OnowPTp5HlD -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:56 2026 by rpki-client