This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/fPUxVV7UyTZqibxa_fO2Z7Dv9bw.roa File: fPUxVV7UyTZqibxa_fO2Z7Dv9bw.roa (raw, json) Hash identifier: rWKalIAkW6Zh9W6BAPZNwld+hHBcJmoL3lPHNNP3Pi4= Subject key identifier: 7C:F5:31:55:5E:D4:C9:36:6A:89:BC:5A:FD:F3:B6:67:B0:EF:F5:BC Certificate issuer: /CN=4e4c1389a849ef5dccb8303703b898c91e63d14f Certificate serial: 019B7E38C565CDDB72FBB14C944E41AB8393 Authority key identifier: 4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/fPUxVV7UyTZqibxa_fO2Z7Dv9bw.roa Signing time: Fri 02 Jan 2026 10:20:08 +0000 ROA not before: Fri 02 Jan 2026 10:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48367 IP address blocks: 152.89.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c5:65:cd:db:72:fb:b1:4c:94:4e:41:ab:83:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e4c1389a849ef5dccb8303703b898c91e63d14f Validity Not Before: Jan 2 10:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cf531555ed4c9366a89bc5afdf3b667b0eff5bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:29:71:16:9f:d8:df:ea:62:71:34:86:ba:48: 53:2b:4e:a8:01:8a:d6:fa:54:2b:b7:c3:a1:ba:bc: 3d:94:f2:85:b7:39:f7:5a:83:c9:11:fc:b7:13:0e: c2:8b:ea:58:60:3e:1a:fd:1e:c5:d2:7d:f2:d8:d4: 12:72:0b:fd:5b:0a:95:df:4a:d0:90:76:e6:ac:bf: 1a:a6:4d:85:54:92:48:d9:d4:9a:39:28:36:93:ea: 13:45:53:69:8f:95:c9:bc:84:71:d8:99:98:43:ee: 74:d4:a5:29:31:a1:60:c8:45:77:3d:18:f7:45:ec: 0d:f5:46:7b:2a:7c:64:1d:c5:d9:d0:9f:58:30:3e: 82:3b:b1:08:f1:f9:e9:ad:79:e1:e1:19:bf:09:4e: e3:a9:19:c8:c3:c4:e7:a9:56:65:e4:0b:35:9c:01: 3f:87:3e:ee:55:e4:a4:6c:0a:91:e3:28:13:ee:94: 26:be:ab:7c:2a:4a:4d:9c:61:51:81:0b:91:9f:f5: b4:98:f4:f2:06:8d:dd:4e:88:8d:34:b3:05:d0:f4: bc:43:7f:18:0b:59:de:cc:27:7f:33:53:ce:86:d2: 6e:db:9c:77:ab:1b:12:83:ca:7f:54:c4:fc:e5:d7: 65:cf:8a:4c:4f:f5:22:fc:d9:13:d1:59:4d:65:9e: 12:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F5:31:55:5E:D4:C9:36:6A:89:BC:5A:FD:F3:B6:67:B0:EF:F5:BC X509v3 Authority Key Identifier: keyid:4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/fPUxVV7UyTZqibxa_fO2Z7Dv9bw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.220.0/22 Signature Algorithm: sha256WithRSAEncryption 62:09:3e:0d:bd:d6:a4:f0:c9:45:18:21:47:d4:48:70:0c:88: fd:76:56:05:11:43:bf:32:04:5a:bf:d8:3d:14:ec:15:e7:b8: 56:8a:d3:f5:3f:ce:7c:ec:c1:cc:73:a3:9c:ab:dc:f6:03:0d: 00:ab:b8:f6:4e:46:a6:52:6d:c4:39:69:d4:16:3f:8c:51:40: b0:1e:de:4a:a6:3f:b8:34:bd:00:cb:b5:4f:12:12:14:64:94: 80:f6:df:0e:fd:31:61:49:9b:9e:6d:12:dc:14:7a:e8:1d:42: 42:9c:b7:7c:d0:e5:8a:a8:c6:8d:43:2a:2b:e4:69:77:32:ad: bf:36:e2:e4:7f:cc:b7:1a:08:fc:26:90:da:0c:49:aa:cc:b1: 0b:7b:2a:a5:2c:ef:0e:09:f0:2c:2d:ea:5b:3f:d7:12:84:56: 13:bd:f9:ee:97:ce:86:2f:ed:07:01:0c:bb:9f:25:47:c4:85: c8:3e:5d:dc:7f:e8:7a:bb:74:be:7c:bd:3c:f9:33:ce:d1:d7: 57:c0:5e:85:83:8c:d2:14:2f:3f:78:bf:6a:76:9c:37:6f:e9: a6:2f:71:23:b1:8b:7b:86:4d:26:13:f5:17:d4:fd:b4:a5:65: 88:de:44:e8:ee:cd:7e:ca:02:76:62:b7:94:79:da:82:a2:45: 60:7c:be:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OMVlzdty+7FMlE5Bq4OTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNGMxMzg5YTg0OWVmNWRjY2I4MzAzNzAzYjg5OGM5MWU2 M2QxNGYwHhcNMjYwMTAyMTAyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2Y1MzE1NTVlZDRjOTM2NmE4OWJjNWFmZGYzYjY2N2IwZWZmNWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ilxFp/Y3+picTSGukhTK06oAYrW +lQrt8Ohurw9lPKFtzn3WoPJEfy3Ew7Ci+pYYD4a/R7F0n3y2NQScgv9WwqV30rQ kHbmrL8apk2FVJJI2dSaOSg2k+oTRVNpj5XJvIRx2JmYQ+501KUpMaFgyEV3PRj3 RewN9UZ7KnxkHcXZ0J9YMD6CO7EI8fnprXnh4Rm/CU7jqRnIw8TnqVZl5As1nAE/ hz7uVeSkbAqR4ygT7pQmvqt8KkpNnGFRgQuRn/W0mPTyBo3dToiNNLMF0PS8Q38Y C1nezCd/M1POhtJu25x3qxsSg8p/VMT85ddlz4pMT/Ui/NkT0VlNZZ4SUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHz1MVVe1Mk2aom8Wv3ztmew7/W8MB8GA1UdIwQY MBaAFE5ME4moSe9dzLgwNwO4mMkeY9FPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGt3VGlhaEo3MTNNdURBM0E3aVl5UjVqMFU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zOTY1YjAtZmVlOS00OWJmLWE1NGQt YThkODM4NDM4ZDhhLzEvZlBVeFZWN1V5VFpxaWJ4YV9mTzJaN0R2OWJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8zOTY1YjAtZmVlOS00OWJmLWE1NGQtYThkODM4NDM4ZDhh LzEvVGt3VGlhaEo3MTNNdURBM0E3aVl5UjVqMFU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmFncMA0G CSqGSIb3DQEBCwUAA4IBAQBiCT4Nvdak8MlFGCFH1EhwDIj9dlYFEUO/MgRav9g9 FOwV57hWitP1P8587MHMc6Ocq9z2Aw0Aq7j2TkamUm3EOWnUFj+MUUCwHt5Kpj+4 NL0Ay7VPEhIUZJSA9t8O/TFhSZuebRLcFHroHUJCnLd80OWKqMaNQyor5Gl3Mq2/ NuLkf8y3Ggj8JpDaDEmqzLELeyqlLO8OCfAsLepbP9cShFYTvfnul86GL+0HAQy7 nyVHxIXIPl3cf+h6u3S+fL08+TPO0ddXwF6Fg4zSFC8/eL9qdpw3b+mmL3EjsYt7 hk0mE/UX1P20pWWI3kTo7s1+ygJ2YreUedqCokVgfL54 -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:51 2026 by rpki-client