This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Fj8mnE-rgCW0DJKXKnyIwaYLTBM.roa File: Fj8mnE-rgCW0DJKXKnyIwaYLTBM.roa (raw, json) Hash identifier: zaAMrs/cB19djCzdFKnivtpZJlotjQgZQyYyUjmMlns= Subject key identifier: 16:3F:26:9C:4F:AB:80:25:B4:0C:92:97:2A:7C:88:C1:A6:0B:4C:13 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77593FFB0AF4A53B5411A1B6BD598D99 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Fj8mnE-rgCW0DJKXKnyIwaYLTBM.roa Signing time: Thu 01 Jan 2026 02:18:16 +0000 ROA not before: Thu 01 Jan 2026 02:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12804 IP address blocks: 217.19.0.0/24 maxlen: 24 217.19.3.0/24 maxlen: 24 217.19.5.0/24 maxlen: 24 217.19.8.0/24 maxlen: 24 217.19.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:3f:fb:0a:f4:a5:3b:54:11:a1:b6:bd:59:8d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=163f269c4fab8025b40c92972a7c88c1a60b4c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2d:92:44:cf:07:0d:15:d8:67:3e:b0:65:6c: 17:9a:b5:b5:2b:a8:62:33:7f:2e:44:cb:91:40:bd: 3a:f4:e7:9d:b7:9f:c3:f1:2e:11:9b:f4:91:4b:1c: 89:d9:5b:20:d5:5e:36:68:2a:a8:8e:e0:85:6e:9b: ce:a7:6e:4d:56:7e:54:cc:3e:8f:4e:41:14:85:99: 7c:47:8d:a5:73:37:a9:f1:01:54:2c:68:18:0b:31: de:eb:31:58:08:72:81:61:e3:fd:77:2a:2c:bf:a7: 38:4c:79:f5:18:75:47:6c:26:dc:59:0b:df:a1:23: c7:83:2e:a3:60:2b:8a:04:02:0c:36:3c:89:c1:e5: 52:ef:eb:ba:29:75:d2:2b:e6:f2:52:0e:06:74:43: 2b:d1:cb:7e:59:c5:06:d4:d4:6b:50:f5:46:b6:0d: cf:12:95:40:6e:e3:be:b0:89:c0:fd:62:16:d8:97: 66:4b:dc:b2:73:f4:81:a0:20:e1:b8:37:95:6f:7f: d9:40:84:32:0a:0a:89:e7:04:15:7b:4e:c9:9c:09: a9:cb:af:c7:1e:6a:c9:2b:d8:99:70:06:04:77:cc: 8b:4e:21:36:fd:af:fc:bb:b0:dc:8d:95:ae:a7:72: b3:99:20:e2:e2:25:89:73:94:99:34:b7:0e:58:d3: 8e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3F:26:9C:4F:AB:80:25:B4:0C:92:97:2A:7C:88:C1:A6:0B:4C:13 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Fj8mnE-rgCW0DJKXKnyIwaYLTBM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.19.0.0/24 217.19.3.0/24 217.19.5.0/24 217.19.8.0/24 217.19.11.0/24 Signature Algorithm: sha256WithRSAEncryption bd:f8:d4:4b:0a:47:9c:28:69:88:78:89:46:d6:b5:67:a1:fb: ef:cd:c9:b8:0e:9a:d1:1a:5f:de:4d:c8:f8:35:5f:27:0b:05: 4a:6f:0e:76:56:fc:9d:82:28:d4:8c:79:fd:02:67:61:a0:e9: 0f:68:a2:f4:06:9b:26:d5:a9:38:fb:46:98:89:60:cc:82:b3: bf:c1:25:31:73:21:df:ae:f0:6d:9b:e8:8a:7e:ba:6c:76:79: 5d:43:f6:2e:3c:21:63:84:1e:b1:1f:68:4a:8c:ab:44:d7:87: b6:6e:71:03:2b:6c:12:c0:7d:02:72:59:db:1f:24:33:5e:f3: 3a:2e:61:b1:f2:74:da:95:86:42:4b:0d:f8:74:d2:eb:d4:44: 5b:5a:90:65:e3:4e:48:7a:ac:9c:ff:d5:0f:68:aa:37:cc:60: 78:cf:a1:c7:62:ec:e0:eb:c7:06:a8:52:fb:d9:b4:23:a1:43: d5:a4:43:29:0b:a6:af:3e:61:5d:51:0c:85:14:d3:8a:0e:49: fd:8b:db:97:3b:69:a5:aa:ea:ee:91:65:8f:ad:93:fe:fd:5f: 4e:57:c3:f6:05:76:ef:ea:c1:88:99:b8:24:e3:e9:ed:e3:bd: d7:d6:0e:2b:6b:6e:99:9c:38:3b:00:81:1c:51:34:1b:b8:87: 77:be:58:49 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt3WT/7CvSlO1QRoba9WY2ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjNmMjY5YzRmYWI4MDI1YjQwYzkyOTcyYTdjODhjMWE2MGI0YzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxy2SRM8HDRXYZz6wZWwXmrW1K6hi M38uRMuRQL069Oedt5/D8S4Rm/SRSxyJ2Vsg1V42aCqojuCFbpvOp25NVn5UzD6P TkEUhZl8R42lczep8QFULGgYCzHe6zFYCHKBYeP9dyosv6c4THn1GHVHbCbcWQvf oSPHgy6jYCuKBAIMNjyJweVS7+u6KXXSK+byUg4GdEMr0ct+WcUG1NRrUPVGtg3P EpVAbuO+sInA/WIW2JdmS9yyc/SBoCDhuDeVb3/ZQIQyCgqJ5wQVe07JnAmpy6/H HmrJK9iZcAYEd8yLTiE2/a/8u7DcjZWup3KzmSDi4iWJc5SZNLcOWNOOuQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFBY/JpxPq4AltAySlyp8iMGmC0wTMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL0ZqOG1uRS1yZ0NXMERKS1hLbnlJd2FZTFRCTS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBADZEwAD BADZEwMDBADZEwUDBADZEwgDBADZEwswDQYJKoZIhvcNAQELBQADggEBAL341EsK R5woaYh4iUbWtWeh++/NybgOmtEaX95NyPg1XycLBUpvDnZW/J2CKNSMef0CZ2Gg 6Q9oovQGmybVqTj7RpiJYMyCs7/BJTFzId+u8G2b6Ip+umx2eV1D9i48IWOEHrEf aEqMq0TXh7ZucQMrbBLAfQJyWdsfJDNe8zouYbHydNqVhkJLDfh00uvURFtakGXj Tkh6rJz/1Q9oqjfMYHjPocdi7ODrxwaoUvvZtCOhQ9WkQykLpq8+YV1RDIUU04oO Sf2L25c7aaWq6u6RZY+tk/79X05Xw/YFdu/qwYiZuCTj6e3jvdfWDitrbpmcODsA gRxRNBu4h3e+WEk= -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:35 2026 by rpki-client