This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/FJssQUG-5WpajvHpyzR6SI1qsiY.roa File: FJssQUG-5WpajvHpyzR6SI1qsiY.roa (raw, json) Hash identifier: 8p9Ojnq2EsfJr6DYc4W+gY6tO6sh3FzfrhiKvLdrJvw= Subject key identifier: 14:9B:2C:41:41:BE:E5:6A:5A:8E:F1:E9:CB:34:7A:48:8D:6A:B2:26 Certificate issuer: /CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e Certificate serial: 019AA0B43265C856F998205218786C198721 Authority key identifier: 8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/FJssQUG-5WpajvHpyzR6SI1qsiY.roa Signing time: Thu 20 Nov 2025 09:59:15 +0000 ROA not before: Thu 20 Nov 2025 09:59:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207995 IP address blocks: 194.24.162.0/23 maxlen: 24 194.24.176.0/23 maxlen: 24 212.221.128.0/17 maxlen: 24 2a10:340::/30 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:b4:32:65:c8:56:f9:98:20:52:18:78:6c:19:87:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e Validity Not Before: Nov 20 09:59:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=149b2c4141bee56a5a8ef1e9cb347a488d6ab226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:83:1f:e9:31:70:59:4d:46:1f:06:9c:45:ea: 85:99:1e:41:9b:e9:50:10:26:7c:0c:64:69:51:98: 50:c3:fb:b8:78:4f:bb:50:48:e9:b2:27:ba:b5:c1: f6:99:57:61:6d:e6:04:2d:dc:5d:af:88:11:8b:02: be:41:b9:97:6b:a2:db:dd:75:56:cf:f5:6b:aa:9f: 25:b1:d0:15:13:de:9b:19:74:5e:bb:ce:0d:d8:c0: e0:d3:1c:23:ac:2c:7c:2c:35:9f:4f:33:03:bd:39: 2f:46:74:c1:2a:25:18:44:3f:5d:a3:c3:72:5c:31: d3:50:67:27:24:93:ba:df:a6:2a:3e:af:2a:7b:af: 41:81:ee:fd:3a:0b:36:b4:de:b9:a4:ce:ee:f7:08: bd:88:f5:ba:fe:ba:0e:fc:0e:9f:d9:d3:b3:c7:9b: 48:bd:34:d3:e7:d5:74:76:0b:f9:f5:d5:d5:d8:d7: 45:f5:f3:39:b1:41:c1:4e:ae:80:bb:bc:b7:5e:89: 4f:53:e3:39:c1:2b:ef:a9:31:38:92:67:35:06:f4: 69:e5:9b:16:48:15:65:07:ce:74:18:b7:8c:60:f0: d6:f1:7d:ea:ca:ec:41:fc:39:bb:4f:7a:b3:ca:40: 1a:e9:f1:74:8c:8e:4e:42:96:0b:a6:82:1f:83:97: 9f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9B:2C:41:41:BE:E5:6A:5A:8E:F1:E9:CB:34:7A:48:8D:6A:B2:26 X509v3 Authority Key Identifier: keyid:8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/FJssQUG-5WpajvHpyzR6SI1qsiY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.24.162.0/23 194.24.176.0/23 212.221.128.0/17 IPv6: 2a10:340::/30 Signature Algorithm: sha256WithRSAEncryption 79:8b:df:6a:e7:bb:0e:a7:3c:30:c4:d9:e0:d3:6b:a9:c8:6e: ae:26:ad:61:2f:62:69:e8:1b:02:08:5e:3f:a3:51:7b:12:b0: d6:53:58:f4:1a:84:bc:d7:e0:81:50:7b:52:15:c9:ab:62:e5: d1:c6:2f:5a:3e:36:2d:21:52:46:94:d6:73:5e:12:be:1c:70: 6a:b8:52:71:4f:67:64:31:b9:97:9a:7f:82:e1:60:3f:03:41: df:ea:0d:9d:4e:0d:ad:ce:db:12:40:03:aa:9c:bb:a6:64:f6: 0f:d7:9b:97:18:b1:bb:81:bc:f7:fa:f6:5a:02:a2:90:b2:e1: f0:c4:9f:f6:c1:ed:15:55:12:44:42:76:23:19:c0:2f:1d:7b: e6:2d:52:ba:cc:82:67:7b:18:e0:90:a6:7d:42:8c:bc:4d:ad: 6e:0e:86:89:79:d2:85:40:45:5c:d1:5d:0c:e7:82:ac:f5:5a: f8:22:78:52:8e:7d:f3:bf:bc:39:2d:2b:8b:dd:70:51:53:fd: be:aa:ff:90:aa:b7:89:50:e5:58:ba:4a:53:8c:00:4f:ce:14: 11:8c:3e:f9:aa:f7:3e:58:68:a1:c4:de:62:76:4b:9a:43:42: c0:56:3b:f4:2f:c1:65:50:35:55:c0:05:db:2b:a1:d9:a3:34: ae:71:48:8f -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZqgtDJlyFb5mCBSGHhsGYchMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYjQ0YjA3ODUyMmRhOWMzMTA2MmI5YzdlZjdmNTE3Mjdl NzNlNWUwHhcNMjUxMTIwMDk1OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDliMmM0MTQxYmVlNTZhNWE4ZWYxZTljYjM0N2E0ODhkNmFiMjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoMf6TFwWU1GHwacReqFmR5Bm+lQ ECZ8DGRpUZhQw/u4eE+7UEjpsie6tcH2mVdhbeYELdxdr4gRiwK+QbmXa6Lb3XVW z/Vrqp8lsdAVE96bGXReu84N2MDg0xwjrCx8LDWfTzMDvTkvRnTBKiUYRD9do8Ny XDHTUGcnJJO636YqPq8qe69Bge79Ogs2tN65pM7u9wi9iPW6/roO/A6f2dOzx5tI vTTT59V0dgv59dXV2NdF9fM5sUHBTq6Au7y3XolPU+M5wSvvqTE4kmc1BvRp5ZsW SBVlB850GLeMYPDW8X3qyuxB/Dm7T3qzykAa6fF0jI5OQpYLpoIfg5efdwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFBSbLEFBvuVqWo7x6cs0ekiNarImMB8GA1UdIwQY MBaAFI60SweFItqcMQYrnH739Rcn5z5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanJSTEI0VWkycHd4Qml1Y2Z2ZjFGeWZuUGw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81NzkyZTAtNmEzYS00NTI3LTkwZmMt NjdmZjVhMGNlMWE1LzEvRkpzc1FVRy01V3BhanZIcHl6UjZTSTFxc2lZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS81NzkyZTAtNmEzYS00NTI3LTkwZmMtNjdmZjVhMGNlMWE1 LzEvanJSTEI0VWkycHd4Qml1Y2Z2ZjFGeWZuUGw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBwhiiAwQB whiwAwQH1N2AMA0EAgACMAcDBQIqEANAMA0GCSqGSIb3DQEBCwUAA4IBAQB5i99q 57sOpzwwxNng02upyG6uJq1hL2Jp6BsCCF4/o1F7ErDWU1j0GoS81+CBUHtSFcmr YuXRxi9aPjYtIVJGlNZzXhK+HHBquFJxT2dkMbmXmn+C4WA/A0Hf6g2dTg2tztsS QAOqnLumZPYP15uXGLG7gbz3+vZaAqKQsuHwxJ/2we0VVRJEQnYjGcAvHXvmLVK6 zIJnexjgkKZ9Qoy8Ta1uDoaJedKFQEVc0V0M54Ks9Vr4InhSjn3zv7w5LSuL3XBR U/2+qv+QqreJUOVYukpTjABPzhQRjD75qvc+WGihxN5idkuaQ0LAVjv0L8FlUDVV wAXbK6HZozSucUiP -----END CERTIFICATE-----Generated at Sat Dec 6 05:45:01 2025 by rpki-client