This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/M-FsfGOycf9jYfp9tqtSOE1tveg.roa File: M-FsfGOycf9jYfp9tqtSOE1tveg.roa (raw, json) Hash identifier: KbWLzZCgilO6OBGCbfqwG+EF0N+c9KwghmXNtRevPUA= Subject key identifier: 33:E1:6C:7C:63:B2:71:FF:63:61:FA:7D:B6:AB:52:38:4D:6D:BD:E8 Certificate issuer: /CN=547841eeff20c78b33d411dae51a692adb892e31 Certificate serial: 019B7DCB0C01999647ED98ABB24AE8DC4A5C Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/M-FsfGOycf9jYfp9tqtSOE1tveg.roa Signing time: Fri 02 Jan 2026 08:20:17 +0000 ROA not before: Fri 02 Jan 2026 08:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212941 IP address blocks: 212.225.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:0c:01:99:96:47:ed:98:ab:b2:4a:e8:dc:4a:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31 Validity Not Before: Jan 2 08:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33e16c7c63b271ff6361fa7db6ab52384d6dbde8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:21:6e:e9:97:3f:2e:0d:a7:53:90:7b:b0:90: db:89:d9:32:23:a5:e6:64:ca:b9:6d:9f:a2:f3:f3: d8:e6:80:46:29:a8:da:09:03:c7:85:c2:39:2d:8d: c3:ff:fe:4b:e8:50:c8:d0:9f:f8:23:9e:a3:f5:70: 74:de:0d:1e:36:64:ab:96:1d:a3:56:49:14:46:8d: b5:66:69:44:a9:97:58:5b:63:77:1e:99:d3:35:51: 2b:5e:c1:51:03:9a:fe:18:cb:25:8b:ac:2a:24:7d: f3:24:25:ab:84:d3:60:27:fb:5f:f8:fa:fd:55:32: e5:8e:b5:5e:57:2e:8f:d4:d2:4f:c7:fa:db:e4:bb: 67:a6:82:09:af:69:ac:32:97:ca:27:6d:a0:ae:f2: 84:2e:7d:c3:d0:57:54:03:e2:54:80:e7:88:a1:99: 73:c9:a2:0f:0a:c6:ff:f4:77:50:7a:4c:f9:77:9b: eb:d8:91:1f:53:39:64:27:e0:01:3c:d7:e4:5e:4c: 5a:e0:05:6f:14:a9:3b:94:a8:f1:e5:b9:23:19:bf: 94:c5:9a:e4:e8:55:36:31:92:99:37:48:ca:ec:c2: a0:f7:cf:bf:17:8a:2d:4b:52:17:90:28:11:fc:44: db:60:b3:be:1f:a3:48:98:50:ca:73:0b:31:b7:39: e9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E1:6C:7C:63:B2:71:FF:63:61:FA:7D:B6:AB:52:38:4D:6D:BD:E8 X509v3 Authority Key Identifier: keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/M-FsfGOycf9jYfp9tqtSOE1tveg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.225.224.0/24 Signature Algorithm: sha256WithRSAEncryption 06:5f:40:06:70:1f:b3:55:25:bf:3b:4a:5b:e8:91:d8:6d:c5: d5:63:9b:5c:ef:a5:d7:e2:fb:6a:c5:c0:3c:48:00:a1:a9:91: ed:62:11:9a:c8:62:d9:2e:9f:ea:93:d9:c1:3a:c0:c3:6d:09: 7d:28:2b:c8:92:b6:c1:4e:13:f6:ac:e4:e0:c9:a9:e7:d2:96: 80:fb:15:60:8f:6f:db:c4:5b:8f:bf:ed:26:fe:a8:2f:2d:d9: f4:06:40:92:eb:01:41:a8:71:55:ce:ad:0f:02:db:be:34:cf: 1d:d1:28:ed:37:5f:89:48:96:0c:ed:ce:9f:35:73:4e:f6:56: 08:f4:6e:d0:91:63:e0:3d:cc:ec:2b:24:51:f2:ea:c7:f6:fc: 78:1b:69:e8:98:51:08:82:ab:89:82:e8:76:7c:e8:b5:22:5e: 00:6c:49:89:34:62:96:a7:9d:b4:c8:d4:7a:eb:bd:84:c9:2f: d4:99:62:bb:d1:68:df:71:7d:5b:c9:a7:fa:fd:3e:8c:8d:f9: a7:14:86:c7:e0:d6:20:ac:6a:6f:a6:5f:14:ae:91:6d:10:c8: a6:59:de:50:c5:31:f2:1e:d2:8a:bf:06:38:c7:5b:3a:25:cb: 62:58:9f:27:ea:36:42:f0:08:f6:e2:a9:fc:6c:49:50:d1:a4: 4b:63:91:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ywwBmZZH7Zirskro3EpcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Nzg0MWVlZmYyMGM3OGIzM2Q0MTFkYWU1MWE2OTJhZGI4 OTJlMzEwHhcNMjYwMTAyMDgyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2UxNmM3YzYzYjI3MWZmNjM2MWZhN2RiNmFiNTIzODRkNmRiZGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyFu6Zc/Lg2nU5B7sJDbidkyI6Xm ZMq5bZ+i8/PY5oBGKajaCQPHhcI5LY3D//5L6FDI0J/4I56j9XB03g0eNmSrlh2j VkkURo21ZmlEqZdYW2N3HpnTNVErXsFRA5r+GMsli6wqJH3zJCWrhNNgJ/tf+Pr9 VTLljrVeVy6P1NJPx/rb5LtnpoIJr2msMpfKJ22grvKELn3D0FdUA+JUgOeIoZlz yaIPCsb/9HdQekz5d5vr2JEfUzlkJ+ABPNfkXkxa4AVvFKk7lKjx5bkjGb+UxZrk 6FU2MZKZN0jK7MKg98+/F4otS1IXkCgR/ETbYLO+H6NImFDKcwsxtznp3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDPhbHxjsnH/Y2H6fbarUjhNbb3oMB8GA1UdIwQY MBaAFFR4Qe7/IMeLM9QR2uUaaSrbiS4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmIt MzY2YmExNzAwZmUwLzEvTS1Gc2ZHT3ljZjlqWWZwOXRxdFNPRTF0dmVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmItMzY2YmExNzAwZmUw LzEvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1OHgMA0G CSqGSIb3DQEBCwUAA4IBAQAGX0AGcB+zVSW/O0pb6JHYbcXVY5tc76XX4vtqxcA8 SAChqZHtYhGayGLZLp/qk9nBOsDDbQl9KCvIkrbBThP2rOTgyann0paA+xVgj2/b xFuPv+0m/qgvLdn0BkCS6wFBqHFVzq0PAtu+NM8d0SjtN1+JSJYM7c6fNXNO9lYI 9G7QkWPgPczsKyRR8urH9vx4G2nomFEIgquJguh2fOi1Il4AbEmJNGKWp520yNR6 672EyS/UmWK70WjfcX1byaf6/T6MjfmnFIbH4NYgrGpvpl8UrpFtEMimWd5QxTHy HtKKvwY4x1s6JctiWJ8n6jZC8Aj24qn8bElQ0aRLY5E5 -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:42 2026 by rpki-client