This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/FjbhwRaWG8H0F9gsOugZzmYyQhI.roa File: FjbhwRaWG8H0F9gsOugZzmYyQhI.roa (raw, json) Hash identifier: eQ55wapBZou4y5GxsaxVO10r26QYB8emildRQ31E6/w= Subject key identifier: 16:36:E1:C1:16:96:1B:C1:F4:17:D8:2C:3A:E8:19:CE:66:32:42:12 Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Certificate serial: 019B7E38B4F281C43D5C4251B42021A49833 Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/FjbhwRaWG8H0F9gsOugZzmYyQhI.roa Signing time: Fri 02 Jan 2026 10:20:03 +0000 ROA not before: Fri 02 Jan 2026 10:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214379 IP address blocks: 141.105.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b4:f2:81:c4:3d:5c:42:51:b4:20:21:a4:98:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Validity Not Before: Jan 2 10:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1636e1c116961bc1f417d82c3ae819ce66324212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c4:d8:c3:33:05:3d:87:0c:7f:bc:56:17:33: 3b:e0:d0:24:27:ea:66:e7:df:9e:39:df:2d:7d:90: 5e:6e:79:9f:ee:6d:b2:ca:e4:48:c7:2c:6c:77:b2: 2f:2c:c4:5d:f5:e5:14:e9:4e:b2:86:18:71:4b:f3: 43:b2:05:cc:20:69:1e:0c:7a:b7:cc:f9:88:1b:f2: 9e:76:c6:7f:59:fd:99:7c:e6:eb:fb:aa:be:69:15: f7:27:d0:80:89:b4:b6:7b:17:b2:43:d7:d9:32:6e: 65:5e:b4:2e:da:b5:ab:dc:be:61:e8:84:f8:90:11: d2:3d:90:3c:40:04:73:b6:b9:25:94:95:fe:73:2c: e6:64:be:40:4e:10:83:8b:f4:8c:39:c7:58:c8:11: 2d:a2:02:90:9a:e0:47:a6:11:eb:14:d0:62:32:42: 70:2e:1d:51:9d:e4:30:1f:fa:71:83:20:12:cb:7e: b2:0a:31:1d:9a:8a:7c:30:70:69:36:f4:f0:ff:b9: 8f:53:d2:4b:37:da:4a:72:14:33:58:20:86:df:6f: b0:5c:20:5a:99:8d:00:60:5c:56:f0:f1:27:28:bf: 30:d4:85:4f:ed:4b:32:45:7e:bd:cc:6d:f6:a1:00: a0:37:8d:28:d0:b1:9c:11:6b:da:25:0e:8c:a7:81: 95:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:36:E1:C1:16:96:1B:C1:F4:17:D8:2C:3A:E8:19:CE:66:32:42:12 X509v3 Authority Key Identifier: keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/FjbhwRaWG8H0F9gsOugZzmYyQhI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.105.130.0/24 Signature Algorithm: sha256WithRSAEncryption 75:20:f8:c6:2c:5d:85:c1:2e:4d:b4:da:ab:a3:fe:43:bd:55: 5f:2d:52:b0:12:9f:b4:55:47:fa:fe:37:d4:77:c7:26:c3:91: 65:67:33:40:3e:38:4f:ef:18:5e:fd:40:ed:d9:a2:89:5f:56: d9:d4:62:f8:17:14:0e:f4:14:28:f5:84:52:05:bf:61:60:15: 54:a4:5c:eb:c6:af:fc:b5:25:ba:15:7f:38:1c:7b:43:8f:d0: 87:5c:e3:0b:98:f4:05:84:e6:3c:f5:a5:ef:d1:d1:17:3f:6b: 5a:78:ce:d4:06:e9:f9:f6:07:c5:a5:54:30:de:45:66:21:81: 6f:35:15:5d:58:d0:b2:d2:bb:7c:f5:ce:a9:6c:3e:54:68:35: 9d:b0:2b:16:36:70:9c:84:3b:5a:f9:b8:ac:68:72:22:06:11: fb:b4:65:d9:c6:27:89:8c:df:b5:b9:74:c9:3f:71:e2:90:6e: bd:5e:7e:d2:3f:d1:7b:41:a7:42:8a:d5:55:cb:33:fb:5b:e7: eb:99:5e:d6:17:5e:33:62:81:f4:8d:33:af:da:cc:04:0f:07: aa:02:07:93:e7:e6:3f:73:51:43:8d:7a:07:61:d4:18:0b:e7: 08:cc:ee:0d:0d:37:96:ec:db:67:28:5f:e6:c4:8c:d9:da:47: d4:04:0b:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OLTygcQ9XEJRtCAhpJgzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx OWZiMjAwHhcNMjYwMTAyMTAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjM2ZTFjMTE2OTYxYmMxZjQxN2Q4MmMzYWU4MTljZTY2MzI0MjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsTYwzMFPYcMf7xWFzM74NAkJ+pm 59+eOd8tfZBebnmf7m2yyuRIxyxsd7IvLMRd9eUU6U6yhhhxS/NDsgXMIGkeDHq3 zPmIG/KedsZ/Wf2ZfObr+6q+aRX3J9CAibS2exeyQ9fZMm5lXrQu2rWr3L5h6IT4 kBHSPZA8QARztrkllJX+cyzmZL5AThCDi/SMOcdYyBEtogKQmuBHphHrFNBiMkJw Lh1RneQwH/pxgyASy36yCjEdmop8MHBpNvTw/7mPU9JLN9pKchQzWCCG32+wXCBa mY0AYFxW8PEnKL8w1IVP7UsyRX69zG32oQCgN40o0LGcEWvaJQ6Mp4GVjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBY24cEWlhvB9BfYLDroGc5mMkISMB8GA1UdIwQY MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt NDI2OWI1NmJmN2Q0LzEvRmpiaHdSYVdHOEgwRjlnc091Z1p6bVl5UWhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0 LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWmCMA0G CSqGSIb3DQEBCwUAA4IBAQB1IPjGLF2FwS5NtNqro/5DvVVfLVKwEp+0VUf6/jfU d8cmw5FlZzNAPjhP7xhe/UDt2aKJX1bZ1GL4FxQO9BQo9YRSBb9hYBVUpFzrxq/8 tSW6FX84HHtDj9CHXOMLmPQFhOY89aXv0dEXP2taeM7UBun59gfFpVQw3kVmIYFv NRVdWNCy0rt89c6pbD5UaDWdsCsWNnCchDta+bisaHIiBhH7tGXZxieJjN+1uXTJ P3HikG69Xn7SP9F7QadCitVVyzP7W+frmV7WF14zYoH0jTOv2swEDweqAgeT5+Y/ c1FDjXoHYdQYC+cIzO4NDTeW7NtnKF/mxIzZ2kfUBAuI -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:35 2026 by rpki-client