This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/Ffin0rWh_yvg6Tmk-u_cXjupM8Q.roa File: Ffin0rWh_yvg6Tmk-u_cXjupM8Q.roa (raw, json) Hash identifier: 9VIUPXOuLKIWThDUo3hV+lRqsAnOw3iAcmnqTjK/WTI= Subject key identifier: 15:F8:A7:D2:B5:A1:FF:2B:E0:E9:39:A4:FA:EF:DC:5E:3B:A9:33:C4 Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Certificate serial: 019B7F139B235EA28007331619ABED936B6C Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/Ffin0rWh_yvg6Tmk-u_cXjupM8Q.roa Signing time: Fri 02 Jan 2026 14:19:09 +0000 ROA not before: Fri 02 Jan 2026 14:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3561 IP address blocks: 109.166.40.0/21 maxlen: 21 109.166.48.0/21 maxlen: 21 151.248.72.0/21 maxlen: 21 151.248.80.0/21 maxlen: 21 151.248.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:9b:23:5e:a2:80:07:33:16:19:ab:ed:93:6b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Validity Not Before: Jan 2 14:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15f8a7d2b5a1ff2be0e939a4faefdc5e3ba933c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5a:8f:e6:7a:dc:c5:83:df:e9:6f:0d:d1:18: 40:69:23:8f:10:ba:18:73:be:41:ad:5e:1c:11:30: 4f:d9:ce:3d:09:cb:a3:f1:53:88:12:29:a6:af:b0: 01:84:36:40:72:17:50:f2:c0:75:cb:09:c9:a7:c6: b9:9b:85:38:5c:eb:8b:fa:45:eb:8a:b2:c6:b9:02: 1b:c7:3b:4e:b1:83:2d:ba:63:b5:1a:84:c8:aa:2b: a3:a0:2d:05:36:57:7e:56:3e:45:89:a6:1e:17:f2: 7c:ab:88:f3:b0:c3:57:bb:d0:8e:e3:41:e2:f0:4d: 3e:f2:e9:77:8c:d1:28:7b:5f:93:9d:1f:3a:f7:93: 2b:0d:76:57:4d:86:7c:92:87:cf:c5:41:e4:7a:37: f6:67:7d:34:4d:91:d6:50:41:4a:38:7b:7e:dd:84: 9b:1e:33:6e:e5:83:84:f3:7a:14:42:2a:08:5b:4a: 1d:39:d0:a6:66:d8:49:d8:ea:97:ad:92:53:65:24: c0:09:61:ec:4a:11:32:c3:51:74:b9:da:ed:bc:d7: b6:be:87:f5:d7:8e:54:b4:82:8b:62:35:d6:be:e3: 3d:45:e4:88:d0:81:40:eb:c9:9d:11:59:62:08:f2: a7:6f:57:63:9e:f3:0f:32:72:9a:b6:c8:e4:2d:41: cf:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F8:A7:D2:B5:A1:FF:2B:E0:E9:39:A4:FA:EF:DC:5E:3B:A9:33:C4 X509v3 Authority Key Identifier: keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/Ffin0rWh_yvg6Tmk-u_cXjupM8Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.166.40.0-109.166.55.255 151.248.72.0-151.248.91.255 Signature Algorithm: sha256WithRSAEncryption 72:f8:a3:55:c2:2b:30:25:e9:10:eb:49:af:eb:c6:6d:3b:5e: 90:68:49:8e:80:8a:3d:0f:69:8b:b0:4d:60:02:44:55:1f:26: a4:e3:9a:e6:ef:db:c2:06:73:09:45:3e:e9:d7:28:57:27:2f: 8a:87:fa:e0:09:96:89:08:71:43:71:9d:6e:34:17:3b:4d:66: f5:50:a9:75:23:cb:bd:9f:5e:64:01:bb:e0:da:0b:30:cb:d2: b6:32:aa:03:99:1b:58:d8:9d:a8:2a:45:bd:c4:05:45:79:7c: 5c:44:7b:3a:d7:2e:16:cf:ad:ab:9c:1c:cf:41:eb:f0:30:b6: 3c:87:b7:1b:fc:96:2b:ae:0a:fd:66:0d:88:3a:96:b1:7c:3e: d4:57:62:98:c3:7c:ac:e4:c7:41:5d:45:8e:49:fa:54:9f:fe: eb:ee:a0:ed:29:92:80:bd:81:26:ba:8a:f7:17:e5:72:34:43: a1:54:a5:65:ee:85:96:7e:e6:d5:60:d5:52:6f:16:ac:ee:2b: f9:ff:94:05:ff:de:0a:3b:c9:8d:4c:e5:45:5f:fa:36:ef:10: f9:58:34:e8:7a:8f:ce:3a:84:3e:1e:6d:bb:b4:af:f5:6a:1b: f7:cb:2a:cd:e3:c3:8f:95:c7:59:b9:86:13:d0:b9:00:fc:68: 46:a6:85:68 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt/E5sjXqKABzMWGavtk2tsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi MmNjYjIwHhcNMjYwMTAyMTQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWY4YTdkMmI1YTFmZjJiZTBlOTM5YTRmYWVmZGM1ZTNiYTkzM2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1qP5nrcxYPf6W8N0RhAaSOPELoY c75BrV4cETBP2c49Ccuj8VOIEimmr7ABhDZAchdQ8sB1ywnJp8a5m4U4XOuL+kXr irLGuQIbxztOsYMtumO1GoTIqiujoC0FNld+Vj5FiaYeF/J8q4jzsMNXu9CO40Hi 8E0+8ul3jNEoe1+TnR8695MrDXZXTYZ8kofPxUHkejf2Z300TZHWUEFKOHt+3YSb HjNu5YOE83oUQioIW0odOdCmZthJ2OqXrZJTZSTACWHsShEyw1F0udrtvNe2vof1 145UtIKLYjXWvuM9ReSI0IFA68mdEVliCPKnb1djnvMPMnKatsjkLUHPoQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFBX4p9K1of8r4Ok5pPrv3F47qTPEMB8GA1UdIwQY MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt MDJkZWY2ZTg0YzkxLzEvRmZpbjByV2hfeXZnNlRtay11X2NYanVwTThRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBANtpigD BANtpjAwDAMEA5f4SAMEApf4WDANBgkqhkiG9w0BAQsFAAOCAQEAcvijVcIrMCXp EOtJr+vGbTtekGhJjoCKPQ9pi7BNYAJEVR8mpOOa5u/bwgZzCUU+6dcoVycviof6 4AmWiQhxQ3GdbjQXO01m9VCpdSPLvZ9eZAG74NoLMMvStjKqA5kbWNidqCpFvcQF RXl8XER7OtcuFs+tq5wcz0Hr8DC2PIe3G/yWK64K/WYNiDqWsXw+1FdimMN8rOTH QV1Fjkn6VJ/+6+6g7SmSgL2BJrqK9xflcjRDoVSlZe6Fln7m1WDVUm8WrO4r+f+U Bf/eCjvJjUzlRV/6Nu8Q+Vg06HqPzjqEPh5tu7Sv9Wob98sqzePDj5XHWbmGE9C5 APxoRqaFaA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:32 2026 by rpki-client