This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FqBPPoVW8fa7ekl4sDzsFMj-ucA.roa File: FqBPPoVW8fa7ekl4sDzsFMj-ucA.roa (raw, json) Hash identifier: AWamzISAB7nXIhl7UF4CmvTY61F5z+pNpP1AMej8tHc= Subject key identifier: 16:A0:4F:3E:85:56:F1:F6:BB:7A:49:78:B0:3C:EC:14:C8:FE:B9:C0 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BEFF68E4BD106DC879B819369AA47951E Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FqBPPoVW8fa7ekl4sDzsFMj-ucA.roa Signing time: Sat 24 Jan 2026 12:24:31 +0000 ROA not before: Sat 24 Jan 2026 12:24:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 274199 IP address blocks: 151.247.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ef:f6:8e:4b:d1:06:dc:87:9b:81:93:69:aa:47:95:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 24 12:24:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16a04f3e8556f1f6bb7a4978b03cec14c8feb9c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:57:30:5e:4b:03:ee:01:b2:f4:48:12:1b:c7: cf:c1:66:a3:28:58:54:23:ae:fd:a6:66:f8:d5:2f: 50:06:0e:4f:b1:cd:e3:92:86:cb:c3:e8:3d:77:3c: 46:d2:5a:54:96:b3:2d:3c:84:c1:32:17:55:1f:40: 7a:2c:a7:9e:00:2f:9f:70:b8:a2:49:7d:ab:14:d3: b5:14:6e:9e:9c:e2:8d:22:d6:e2:d9:00:6a:d1:1f: b1:fd:e6:02:f0:36:ec:ae:97:a4:d9:a5:59:bc:87: 78:cf:0f:24:49:15:99:c8:d7:ea:f4:e8:59:3c:78: c7:87:65:29:e0:63:53:06:b8:5f:2d:53:6e:56:45: 16:16:66:9e:af:68:e9:99:f0:65:e4:19:cc:0f:58: 83:22:d3:15:96:44:b0:74:80:af:00:a3:1f:e0:25: e6:82:10:f9:77:89:3f:8f:b4:32:63:a2:60:45:1e: 94:19:f9:f9:21:2b:46:79:89:e1:de:2e:dc:9f:9e: 66:55:c2:52:01:1e:8c:d9:8d:1a:47:64:25:dc:09: ac:60:cf:52:12:e7:7b:84:f1:58:c6:c6:2f:1b:94: 33:7b:29:0c:d3:85:d9:35:54:b6:9b:ba:7a:88:7a: 28:d5:f0:d0:ad:3c:0b:a9:ca:a0:cf:7c:fe:34:7a: 96:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A0:4F:3E:85:56:F1:F6:BB:7A:49:78:B0:3C:EC:14:C8:FE:B9:C0 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FqBPPoVW8fa7ekl4sDzsFMj-ucA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.247.32.0/24 Signature Algorithm: sha256WithRSAEncryption 24:4e:de:4d:ca:21:f5:42:98:1f:90:e4:82:39:4a:2c:74:17: d4:7d:7a:e4:b3:44:c2:16:ea:f6:9c:4b:54:a6:ef:d3:a8:7a: fa:33:68:82:2a:26:fc:fc:9e:28:80:69:7a:53:f1:55:c7:b2: 50:4e:18:82:93:db:a6:0d:01:a7:b4:b3:79:74:97:a2:3c:ba: 6c:0b:06:68:72:1d:b8:22:0b:ee:3a:3b:85:04:b2:2e:15:36: 6c:ba:e5:6b:44:df:a7:30:9e:d8:f8:01:9f:24:5b:82:83:5f: c6:b9:cf:fc:16:03:fc:ff:08:b5:13:d2:81:3a:96:ab:45:4c: 4b:53:1b:1e:2f:e9:29:03:d6:86:82:76:7d:08:ba:84:c9:fe: 25:5c:e3:5b:28:e6:0a:22:c9:03:a0:c2:d6:78:57:75:41:31: 97:84:e0:8d:f9:95:df:23:33:40:8a:87:d4:c0:b4:3d:8b:d7: f8:0f:cf:61:63:29:3d:97:b9:75:b9:16:6e:d6:ec:61:c6:f0: 36:9f:f7:94:6a:42:39:16:ae:86:22:6f:08:82:d5:f4:9c:c5: 25:a7:3e:6f:ed:a1:df:a2:dc:69:b3:55:f9:44:c7:e2:76:89: 3d:82:53:83:93:eb:1c:0e:4b:a1:bb:55:54:cf:d3:47:4a:98: 4d:76:a8:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvv9o5L0Qbch5uBk2mqR5UeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTI0MTIyNDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmEwNGYzZTg1NTZmMWY2YmI3YTQ5NzhiMDNjZWMxNGM4ZmViOWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFcwXksD7gGy9EgSG8fPwWajKFhU I679pmb41S9QBg5Psc3jkobLw+g9dzxG0lpUlrMtPITBMhdVH0B6LKeeAC+fcLii SX2rFNO1FG6enOKNItbi2QBq0R+x/eYC8Dbsrpek2aVZvId4zw8kSRWZyNfq9OhZ PHjHh2Up4GNTBrhfLVNuVkUWFmaer2jpmfBl5BnMD1iDItMVlkSwdICvAKMf4CXm ghD5d4k/j7QyY6JgRR6UGfn5IStGeYnh3i7cn55mVcJSAR6M2Y0aR2Ql3AmsYM9S Eud7hPFYxsYvG5QzeykM04XZNVS2m7p6iHoo1fDQrTwLqcqgz3z+NHqWSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBagTz6FVvH2u3pJeLA87BTI/rnAMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvRnFCUFBvVlc4ZmE3ZWtsNHNEenNGTWotdWNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/cgMA0G CSqGSIb3DQEBCwUAA4IBAQAkTt5NyiH1QpgfkOSCOUosdBfUfXrks0TCFur2nEtU pu/TqHr6M2iCKib8/J4ogGl6U/FVx7JQThiCk9umDQGntLN5dJeiPLpsCwZoch24 IgvuOjuFBLIuFTZsuuVrRN+nMJ7Y+AGfJFuCg1/Guc/8FgP8/wi1E9KBOparRUxL UxseL+kpA9aGgnZ9CLqEyf4lXONbKOYKIskDoMLWeFd1QTGXhOCN+ZXfIzNAiofU wLQ9i9f4D89hYyk9l7l1uRZu1uxhxvA2n/eUakI5Fq6GIm8IgtX0nMUlpz5v7aHf otxps1X5RMfidok9glODk+scDkuhu1VUz9NHSphNdqia -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:11 2026 by rpki-client