This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/FGXwoit8a4sabQ5C7V91KCVEisg.roa File: FGXwoit8a4sabQ5C7V91KCVEisg.roa (raw, json) Hash identifier: snmXzF1yCkwjQV6I20Cp2hZS6KrdvqWPo0SPQih8C7o= Subject key identifier: 14:65:F0:A2:2B:7C:6B:8B:1A:6D:0E:42:ED:5F:75:28:25:44:8A:C8 Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Certificate serial: 019B7E38BF7301FA9E019BA5D6E9F1F3D40F Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/FGXwoit8a4sabQ5C7V91KCVEisg.roa Signing time: Fri 02 Jan 2026 10:20:06 +0000 ROA not before: Fri 02 Jan 2026 10:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 109.122.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:bf:73:01:fa:9e:01:9b:a5:d6:e9:f1:f3:d4:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Validity Not Before: Jan 2 10:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1465f0a22b7c6b8b1a6d0e42ed5f752825448ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0d:0b:2b:ff:6c:3b:85:1f:e0:75:21:d0:65: 1f:38:57:4c:79:a1:a2:c4:d3:9d:fa:bd:0c:b8:23: 9e:4b:2e:e5:a4:19:91:d9:22:1e:3c:4c:1a:78:2a: 6c:3b:44:af:9f:5f:72:9d:ed:51:88:e7:0c:a6:ef: 95:5b:2f:5a:3b:5c:b1:fd:c2:5e:28:78:54:1e:f7: a2:da:7c:56:68:39:84:99:8d:ba:5a:6a:88:f2:4c: 58:bd:af:e8:b5:a3:85:c9:20:b1:e8:83:88:a7:85: 27:ce:7c:f6:61:71:f3:fe:f9:85:c3:30:7e:d5:51: d0:c7:bd:5b:17:d5:59:a5:48:2c:d0:2d:d6:64:b0: 8f:d6:b5:d6:2d:fa:b1:4d:51:81:97:e5:32:c3:f9: a6:79:86:da:84:1e:20:b3:4f:52:5b:05:a0:e8:8a: 72:44:4a:ca:28:9a:7c:ce:16:1a:0f:7c:97:ba:fd: 69:0c:13:5b:ed:34:b7:8d:bb:28:40:ba:94:c9:ad: 24:37:f7:e4:e0:77:57:7b:91:28:d8:34:dd:5e:22: 2d:ae:08:d8:77:9c:19:c1:b9:a2:43:cf:3c:bc:ea: 4a:ff:e2:77:16:ca:4f:3d:83:db:68:b1:f6:b9:94: a0:e4:65:91:dc:4a:67:1b:32:49:f6:ed:ff:4f:4f: 99:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:65:F0:A2:2B:7C:6B:8B:1A:6D:0E:42:ED:5F:75:28:25:44:8A:C8 X509v3 Authority Key Identifier: keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/FGXwoit8a4sabQ5C7V91KCVEisg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.62.0/24 Signature Algorithm: sha256WithRSAEncryption 01:31:5c:4a:69:ff:68:91:b2:5d:00:6f:17:aa:48:f1:3c:d2: 25:5f:9e:fb:b0:cc:62:cd:6f:3c:16:38:b5:fb:41:ed:5f:04: 9e:31:1e:d0:e4:de:cc:57:26:5d:27:5f:b5:db:d1:b9:a8:cf: 07:66:4e:7b:8d:5b:76:f8:f0:9a:61:af:eb:2b:3a:59:e0:49: d5:57:61:18:7c:20:dd:85:45:c0:5e:84:d8:82:33:02:4a:19: a6:db:bf:c6:c7:93:9a:4b:f0:e0:a1:05:dd:0f:a8:9e:e5:10: 4f:fb:95:14:bd:28:b7:f6:19:3d:39:78:fc:82:e3:e8:cf:17: 48:cb:13:a2:21:18:7d:84:f1:a0:8d:b6:f5:c7:84:db:1c:96: 1f:a6:cc:62:2a:74:a9:2d:71:2f:14:33:4c:45:f8:bc:7f:5b: 04:51:c8:ed:ce:66:24:3a:9c:c0:c7:3f:a8:ff:6b:12:69:85: b1:29:6e:1c:03:ca:51:aa:9d:02:7d:2b:5b:e9:5d:1a:f7:c2: 6c:61:18:88:5e:0b:2d:2f:a5:82:5c:8c:64:17:23:42:f7:3e: 68:db:99:a2:c1:74:44:a4:35:f5:73:e0:0b:ea:f8:56:13:57: 2d:63:4e:ac:1b:3b:a4:09:2e:ca:8e:6d:d1:18:d8:ae:9e:fe: aa:46:a0:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OL9zAfqeAZul1unx89QPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1 ZTNmOTgwHhcNMjYwMTAyMTAyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDY1ZjBhMjJiN2M2YjhiMWE2ZDBlNDJlZDVmNzUyODI1NDQ4YWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA0LK/9sO4Uf4HUh0GUfOFdMeaGi xNOd+r0MuCOeSy7lpBmR2SIePEwaeCpsO0Svn19yne1RiOcMpu+VWy9aO1yx/cJe KHhUHvei2nxWaDmEmY26WmqI8kxYva/otaOFySCx6IOIp4Unznz2YXHz/vmFwzB+ 1VHQx71bF9VZpUgs0C3WZLCP1rXWLfqxTVGBl+Uyw/mmeYbahB4gs09SWwWg6Ipy RErKKJp8zhYaD3yXuv1pDBNb7TS3jbsoQLqUya0kN/fk4HdXe5Eo2DTdXiItrgjY d5wZwbmiQ888vOpK/+J3FspPPYPbaLH2uZSg5GWR3EpnGzJJ9u3/T0+Z9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBRl8KIrfGuLGm0OQu1fdSglRIrIMB8GA1UdIwQY MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt OWNkNjYyYmM4MzIwLzEvRkdYd29pdDhhNHNhYlE1QzdWOTFLQ1ZFaXNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXo+MA0G CSqGSIb3DQEBCwUAA4IBAQABMVxKaf9okbJdAG8XqkjxPNIlX577sMxizW88Fji1 +0HtXwSeMR7Q5N7MVyZdJ1+129G5qM8HZk57jVt2+PCaYa/rKzpZ4EnVV2EYfCDd hUXAXoTYgjMCShmm27/Gx5OaS/DgoQXdD6ie5RBP+5UUvSi39hk9OXj8guPozxdI yxOiIRh9hPGgjbb1x4TbHJYfpsxiKnSpLXEvFDNMRfi8f1sEUcjtzmYkOpzAxz+o /2sSaYWxKW4cA8pRqp0CfStb6V0a98JsYRiIXgstL6WCXIxkFyNC9z5o25miwXRE pDX1c+AL6vhWE1ctY06sGzukCS7Kjm3RGNiunv6qRqAD -----END CERTIFICATE-----Generated at Sun Jan 25 14:32:03 2026 by rpki-client