This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/FKbR9jGxYRX9V8_8o4DRVVGFjPU.roa File: FKbR9jGxYRX9V8_8o4DRVVGFjPU.roa (raw, json) Hash identifier: Og48h/OvPKZ/MgS2Z6y01qdzTx8n+7C8XDKbughbbnk= Subject key identifier: 14:A6:D1:F6:31:B1:61:15:FD:57:CF:FC:A3:80:D1:55:51:85:8C:F5 Certificate issuer: /CN=bd73747f78bd328d0ae1c89171b381aa19011ace Certificate serial: 019B7BA33B4264CCF4212844FA34765755CE Authority key identifier: BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/FKbR9jGxYRX9V8_8o4DRVVGFjPU.roa Signing time: Thu 01 Jan 2026 22:17:33 +0000 ROA not before: Thu 01 Jan 2026 22:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40513 IP address blocks: 147.78.60.0/24 maxlen: 24 147.78.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:3b:42:64:cc:f4:21:28:44:fa:34:76:57:55:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd73747f78bd328d0ae1c89171b381aa19011ace Validity Not Before: Jan 1 22:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14a6d1f631b16115fd57cffca380d15551858cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c9:39:b5:1a:6d:c2:f1:80:35:28:55:55:69: 90:72:f7:bf:46:04:8f:4e:18:1a:81:9d:93:92:ff: 06:3c:e3:4e:92:f7:93:50:a6:0a:3d:c8:c4:ab:15: 3f:5e:cd:80:a9:e8:d8:a5:09:f4:76:3a:f6:b2:19: 80:06:bb:4b:bc:2d:09:75:26:0f:fc:28:84:f9:d3: b1:07:d0:39:0d:84:21:ed:7e:7b:bc:09:22:1a:03: 08:4b:02:a5:bd:2a:07:e3:ff:a9:91:95:77:0c:a5: c1:01:30:e7:a1:93:e6:1e:84:5d:88:d6:8c:f3:14: 10:f4:2b:b0:f3:81:ca:70:31:91:c9:f8:2c:62:df: ca:81:b4:7b:4e:13:bb:0b:11:99:f6:63:b4:07:58: 57:a7:48:a0:fc:6b:4a:89:42:1f:c0:94:04:9f:9e: 02:27:b4:74:69:71:1d:36:9d:e3:6b:85:79:84:e1: b1:f4:24:1d:b9:06:72:d0:53:be:1f:12:26:9c:6a: 9f:6f:c6:07:42:dd:40:c2:8d:ba:90:9c:89:60:e7: 10:a9:e6:6f:f9:26:ac:8c:1c:d7:25:fb:b7:49:49: 54:25:3a:51:e6:00:b9:8e:6e:48:f6:0d:7c:29:1b: fd:0c:19:7c:e5:d3:0e:94:30:19:9c:51:80:e9:90: f9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A6:D1:F6:31:B1:61:15:FD:57:CF:FC:A3:80:D1:55:51:85:8C:F5 X509v3 Authority Key Identifier: keyid:BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/FKbR9jGxYRX9V8_8o4DRVVGFjPU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.60.0/23 Signature Algorithm: sha256WithRSAEncryption 37:23:89:2b:cb:52:64:a5:a4:f6:82:ab:d2:53:5c:99:6b:9f: 8b:e3:ba:3e:3c:20:54:ff:1b:b3:8c:95:e1:31:e2:b8:81:a2: 8a:0e:87:8f:39:27:e0:ca:08:ea:1a:93:0a:c6:11:76:14:93: 47:dc:02:10:07:3f:fb:82:57:60:67:05:e9:9d:88:6f:4c:7f: 94:8d:6e:d4:96:00:1b:5b:b8:c1:82:52:68:21:17:34:6b:bd: a9:96:99:8f:1c:f4:13:dc:6e:b5:12:da:8f:68:2a:38:8d:d4: d1:71:fa:37:54:ed:4b:f7:09:0e:ba:1a:91:77:b8:0c:f8:3c: 40:b0:da:87:69:e3:ae:74:7d:4e:87:ba:35:6f:f3:20:d0:59: 7e:50:3e:4f:20:96:74:3e:00:b1:d0:98:1a:83:c1:19:0d:32: d0:1f:c9:46:9e:d3:79:27:a2:ea:53:f7:96:62:2e:1d:59:bf: 65:a9:fc:3b:22:6d:ed:58:bb:0c:57:36:c8:5d:bd:f2:4d:b9: 9b:f5:3d:f1:bc:a1:87:d3:99:1c:b1:0c:04:fa:b9:bc:1d:bd: 4b:71:19:a8:f7:4e:50:80:ff:06:56:1d:dc:28:78:d4:2f:f0: c0:c9:61:ab:cb:f4:6d:43:b0:d8:42:2d:91:46:15:ce:dc:21: 88:43:1d:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7oztCZMz0IShE+jR2V1XOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNzM3NDdmNzhiZDMyOGQwYWUxYzg5MTcxYjM4MWFhMTkw MTFhY2UwHhcNMjYwMTAxMjIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGE2ZDFmNjMxYjE2MTE1ZmQ1N2NmZmNhMzgwZDE1NTUxODU4Y2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8k5tRptwvGANShVVWmQcve/RgSP ThgagZ2Tkv8GPONOkveTUKYKPcjEqxU/Xs2AqejYpQn0djr2shmABrtLvC0JdSYP /CiE+dOxB9A5DYQh7X57vAkiGgMISwKlvSoH4/+pkZV3DKXBATDnoZPmHoRdiNaM 8xQQ9Cuw84HKcDGRyfgsYt/KgbR7ThO7CxGZ9mO0B1hXp0ig/GtKiUIfwJQEn54C J7R0aXEdNp3ja4V5hOGx9CQduQZy0FO+HxImnGqfb8YHQt1Awo26kJyJYOcQqeZv +SasjBzXJfu3SUlUJTpR5gC5jm5I9g18KRv9DBl85dMOlDAZnFGA6ZD5OwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBSm0fYxsWEV/VfP/KOA0VVRhYz1MB8GA1UdIwQY MBaAFL1zdH94vTKNCuHIkXGzgaoZARrOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlhOMGYzaTlNbzBLNGNpUmNiT0JxaGtCR3M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hNTU1NTMtMjk3NS00MjQ0LWIyNjAt NWJkYmY2Zjg0N2Y5LzEvRktiUjlqR3hZUlg5VjhfOG80RFJWVkdGalBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9hNTU1NTMtMjk3NS00MjQ0LWIyNjAtNWJkYmY2Zjg0N2Y5 LzEvdlhOMGYzaTlNbzBLNGNpUmNiT0JxaGtCR3M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk048MA0G CSqGSIb3DQEBCwUAA4IBAQA3I4kry1JkpaT2gqvSU1yZa5+L47o+PCBU/xuzjJXh MeK4gaKKDoePOSfgygjqGpMKxhF2FJNH3AIQBz/7gldgZwXpnYhvTH+UjW7UlgAb W7jBglJoIRc0a72plpmPHPQT3G61EtqPaCo4jdTRcfo3VO1L9wkOuhqRd7gM+DxA sNqHaeOudH1Oh7o1b/Mg0Fl+UD5PIJZ0PgCx0Jgag8EZDTLQH8lGntN5J6LqU/eW Yi4dWb9lqfw7Im3tWLsMVzbIXb3yTbmb9T3xvKGH05kcsQwE+rm8Hb1LcRmo905Q gP8GVh3cKHjUL/DAyWGry/RtQ7DYQi2RRhXO3CGIQx29 -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:55 2026 by rpki-client