This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/fUgeR2nF_pXWNWV55rMg8WE-3cA.roa File: fUgeR2nF_pXWNWV55rMg8WE-3cA.roa (raw, json) Hash identifier: tWjY+UnVt+eeOEtvKdASRIS/bltLwSGhZ5m+5B8PJGo= Subject key identifier: 7D:48:1E:47:69:C5:FE:95:D6:35:65:79:E6:B3:20:F1:61:3E:DD:C0 Certificate issuer: /CN=97da420008cfb9193499278ef558bd42d61c7f75 Certificate serial: 019B7DCA67C8AC4E8F07ABF588020A26186B Authority key identifier: 97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/fUgeR2nF_pXWNWV55rMg8WE-3cA.roa Signing time: Fri 02 Jan 2026 08:19:35 +0000 ROA not before: Fri 02 Jan 2026 08:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199256 IP address blocks: 217.115.121.0/24 maxlen: 24 217.115.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:67:c8:ac:4e:8f:07:ab:f5:88:02:0a:26:18:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97da420008cfb9193499278ef558bd42d61c7f75 Validity Not Before: Jan 2 08:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d481e4769c5fe95d6356579e6b320f1613eddc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3e:99:5a:1b:cc:19:d2:0c:8a:dc:9e:0f:b6: 13:e4:45:01:16:7d:1a:5b:44:af:ff:49:25:d8:00: 60:ec:21:84:b3:a0:d9:f9:c6:2b:ed:ba:16:1a:c3: 6a:d8:38:d6:b1:1b:21:89:88:a1:ca:e4:0d:ef:17: c6:dc:27:33:75:fc:e0:e1:f8:c0:9e:d7:4b:2e:b6: 05:2a:32:34:ec:8f:67:89:1e:18:2e:58:11:c6:3e: 21:06:0c:0b:9f:f9:1a:ef:f5:71:2e:f8:7c:3a:5e: 40:ab:b4:24:f6:33:9a:a0:ab:51:95:af:4b:5a:41: 30:d5:4b:38:c8:d8:ce:99:f9:96:1a:4f:45:43:5c: 99:ce:d6:33:aa:98:57:86:fb:47:f0:73:ea:70:a5: 77:a7:ed:66:4b:38:e0:ac:78:f5:ef:15:8c:65:f9: ef:f2:45:b5:ce:01:c3:2e:10:68:fb:10:f8:27:2e: e1:52:bf:ca:48:97:69:75:f4:60:e7:aa:c3:87:ae: ed:83:33:0f:a5:38:d2:4a:d5:ea:6c:36:f6:af:74: b4:9c:75:29:d5:a2:0b:4f:e2:4d:94:b5:2d:f6:b9: 00:41:e1:02:34:84:2e:05:b7:f2:bd:f8:84:cf:64: 52:f5:b5:a7:83:d8:c0:d1:37:cc:fc:b7:26:fe:85: fb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:48:1E:47:69:C5:FE:95:D6:35:65:79:E6:B3:20:F1:61:3E:DD:C0 X509v3 Authority Key Identifier: keyid:97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/fUgeR2nF_pXWNWV55rMg8WE-3cA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.115.121.0/24 217.115.124.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:a8:40:4a:1b:ca:2f:80:aa:5a:98:55:ed:54:5f:f8:c1:3c: 7d:79:a8:ee:84:d3:cd:ef:c8:cd:ce:fb:ff:2d:56:27:4e:50: 17:c3:f7:d6:3e:77:4d:73:f9:e4:dd:7d:4c:79:64:5d:59:07: 06:21:3d:12:be:98:1b:f9:a9:da:99:f7:68:48:4d:cf:32:8a: b5:c7:68:6c:1c:77:b7:0c:60:fa:74:4a:95:c1:69:0d:04:26: 3e:70:5f:3b:80:3f:3c:9d:87:81:72:df:d2:4c:d4:c9:bd:6e: 67:79:1c:66:55:2e:b9:91:30:64:40:90:92:66:14:07:1d:20: dd:f3:b3:7c:b6:02:e2:74:9a:72:c9:ee:da:90:9c:c8:a9:2b: 33:d2:6b:7e:0e:b7:3d:9a:e9:81:f8:46:92:53:a7:17:90:25: 2d:a8:dd:df:57:42:ae:a4:81:49:24:03:37:32:31:32:65:14: 41:54:0f:a9:9c:f1:9c:02:ce:76:53:46:91:ba:9d:bb:2e:15: f5:4c:72:4f:d4:ec:26:52:ef:f5:c0:95:fe:79:0c:e1:2e:cf: 20:48:2c:f3:a2:50:fc:69:74:f8:66:23:65:04:1f:d6:51:ef: bc:ff:ed:43:cc:3c:c2:27:0f:3b:4d:18:9d:61:7e:b3:6c:9b: ee:ec:6b:32 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9ymfIrE6PB6v1iAIKJhhrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZGE0MjAwMDhjZmI5MTkzNDk5Mjc4ZWY1NThiZDQyZDYx YzdmNzUwHhcNMjYwMTAyMDgxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDQ4MWU0NzY5YzVmZTk1ZDYzNTY1NzllNmIzMjBmMTYxM2VkZGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT6ZWhvMGdIMityeD7YT5EUBFn0a W0Sv/0kl2ABg7CGEs6DZ+cYr7boWGsNq2DjWsRshiYihyuQN7xfG3Cczdfzg4fjA ntdLLrYFKjI07I9niR4YLlgRxj4hBgwLn/ka7/VxLvh8Ol5Aq7Qk9jOaoKtRla9L WkEw1Us4yNjOmfmWGk9FQ1yZztYzqphXhvtH8HPqcKV3p+1mSzjgrHj17xWMZfnv 8kW1zgHDLhBo+xD4Jy7hUr/KSJdpdfRg56rDh67tgzMPpTjSStXqbDb2r3S0nHUp 1aILT+JNlLUt9rkAQeECNIQuBbfyvfiEz2RS9bWng9jA0TfM/Lcm/oX7TQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFH1IHkdpxf6V1jVleeazIPFhPt3AMB8GA1UdIwQY MBaAFJfaQgAIz7kZNJknjvVYvULWHH91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDlwQ0FBalB1UmswbVNlTzlWaTlRdFljZjNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xMzkwNDQtOWViYy00NTU5LWJhMTAt YTM4ZTFlY2E0ZmQ0LzEvZlVnZVIybkZfcFhXTldWNTVyTWc4V0UtM2NBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8xMzkwNDQtOWViYy00NTU5LWJhMTAtYTM4ZTFlY2E0ZmQ0 LzEvbDlwQ0FBalB1UmswbVNlTzlWaTlRdFljZjNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2XN5AwQA 2XN8MA0GCSqGSIb3DQEBCwUAA4IBAQANqEBKG8ovgKpamFXtVF/4wTx9eajuhNPN 78jNzvv/LVYnTlAXw/fWPndNc/nk3X1MeWRdWQcGIT0Svpgb+anamfdoSE3PMoq1 x2hsHHe3DGD6dEqVwWkNBCY+cF87gD88nYeBct/STNTJvW5neRxmVS65kTBkQJCS ZhQHHSDd87N8tgLidJpyye7akJzIqSsz0mt+Drc9mumB+EaSU6cXkCUtqN3fV0Ku pIFJJAM3MjEyZRRBVA+pnPGcAs52U0aRup27LhX1THJP1OwmUu/1wJX+eQzhLs8g SCzzolD8aXT4ZiNlBB/WUe+8/+1DzDzCJw87TRidYX6zbJvu7Gsy -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:48 2026 by rpki-client