This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/FOIGx5-VXjOve-N7mfII03ytFD0.roa File: FOIGx5-VXjOve-N7mfII03ytFD0.roa (raw, json) Hash identifier: e4g2C3HACEw66dXSjAJV8WZd57r1VCKWLBncQ7FYwig= Subject key identifier: 14:E2:06:C7:9F:95:5E:33:AF:7B:E3:7B:99:F2:08:D3:7C:AD:14:3D Certificate issuer: /CN=d3d4e0da68c1446689419d103711b191ded567f4 Certificate serial: 019B7F15325E5261B45E4FCEC21F7B528B57 Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/FOIGx5-VXjOve-N7mfII03ytFD0.roa Signing time: Fri 02 Jan 2026 14:20:54 +0000 ROA not before: Fri 02 Jan 2026 14:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31605 IP address blocks: 45.139.107.0/24 maxlen: 24 46.29.35.0/24 maxlen: 24 2a13:cec0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:32:5e:52:61:b4:5e:4f:ce:c2:1f:7b:52:8b:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4 Validity Not Before: Jan 2 14:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14e206c79f955e33af7be37b99f208d37cad143d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c9:5c:fc:85:93:d4:e5:75:11:50:67:12:1e: a5:5c:d7:2d:c9:d7:8e:f7:11:8f:47:65:d5:f1:7d: d4:29:df:0f:d8:7e:1f:43:d4:0d:1b:20:77:bc:e8: e7:8c:32:d6:40:53:e7:7a:19:fd:63:78:1c:62:f6: 0d:ef:08:7d:32:f3:cb:1f:a1:46:9d:cf:03:64:7f: 31:0c:38:ad:d7:e9:1b:2d:f4:3f:3c:48:e2:c6:7a: 9f:3f:82:74:de:b4:a4:82:6f:f0:bb:4a:71:67:60: ca:f9:41:a1:5a:1e:a2:83:c2:f0:05:e5:84:43:88: a1:42:3e:34:53:eb:aa:8a:d2:21:80:a7:79:ff:8f: bd:93:66:b0:f8:17:4d:92:2a:cd:27:82:41:85:44: e4:1a:58:c1:43:32:91:e8:2e:40:99:36:10:db:78: d5:cc:d4:4f:0f:03:c9:33:bd:89:cd:d7:50:eb:c7: 21:41:c2:84:e6:3b:c1:7c:f0:e2:07:be:62:5c:f5: 73:1f:58:75:0a:db:8a:48:41:da:4d:03:09:3c:ec: 33:d0:b5:f1:c9:79:10:e5:4c:25:c5:9d:87:5d:dd: b6:e4:bd:c9:0c:32:d4:bb:8c:ed:24:cb:36:66:08: 58:d7:26:f0:6d:c8:f2:40:d0:93:b4:e2:a6:25:bf: 80:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E2:06:C7:9F:95:5E:33:AF:7B:E3:7B:99:F2:08:D3:7C:AD:14:3D X509v3 Authority Key Identifier: keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/FOIGx5-VXjOve-N7mfII03ytFD0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.107.0/24 46.29.35.0/24 IPv6: 2a13:cec0::/29 Signature Algorithm: sha256WithRSAEncryption 09:d0:83:1c:35:2d:6f:b0:bb:8b:21:d4:c2:bb:fe:5d:3c:e6: 3e:94:07:e6:cb:9e:ad:f5:f2:9d:42:37:cf:af:95:e6:dc:31: 25:d7:a8:ff:ec:af:e3:9a:d0:b7:e0:a5:dc:b5:9b:11:8c:1c: cd:79:80:8d:63:a2:5a:9e:e2:bc:3e:ae:93:f1:2b:c5:42:38: 5f:6b:21:6d:fb:c5:fb:70:15:20:e7:20:2d:39:08:3b:8e:c1: 16:fa:44:7f:1a:f1:cd:d5:d1:97:47:4f:1c:43:17:bf:22:0d: b8:0c:cd:bb:3e:46:ae:04:89:a2:41:c8:cc:46:60:97:b9:2e: a4:9f:c0:8d:bc:71:14:b5:b4:d0:69:3c:d8:a6:bf:e7:77:35: 92:78:11:8a:de:85:d6:3c:07:be:24:26:4f:72:67:62:5d:95: b0:1d:4c:b5:40:36:c8:06:4f:ee:c2:92:d5:a4:15:97:4e:e8: 51:be:62:d1:49:88:a0:fc:ad:ee:7e:b8:94:5d:12:e3:f8:32: 3b:4d:f9:29:2e:61:dd:4d:47:d8:ba:12:ba:19:cd:28:88:9d: 86:a9:e8:05:fb:30:9e:28:20:0b:b9:02:55:55:23:e7:15:1f: 82:9a:d8:ac:6f:af:4c:90:ec:96:a0:b2:e5:e9:05:1f:96:b3: d2:b7:18:8a -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/FTJeUmG0Xk/Owh97UotXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZDRlMGRhNjhjMTQ0NjY4OTQxOWQxMDM3MTFiMTkxZGVk NTY3ZjQwHhcNMjYwMTAyMTQyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGUyMDZjNzlmOTU1ZTMzYWY3YmUzN2I5OWYyMDhkMzdjYWQxNDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxslc/IWT1OV1EVBnEh6lXNctydeO 9xGPR2XV8X3UKd8P2H4fQ9QNGyB3vOjnjDLWQFPnehn9Y3gcYvYN7wh9MvPLH6FG nc8DZH8xDDit1+kbLfQ/PEjixnqfP4J03rSkgm/wu0pxZ2DK+UGhWh6ig8LwBeWE Q4ihQj40U+uqitIhgKd5/4+9k2aw+BdNkirNJ4JBhUTkGljBQzKR6C5AmTYQ23jV zNRPDwPJM72JzddQ68chQcKE5jvBfPDiB75iXPVzH1h1CtuKSEHaTQMJPOwz0LXx yXkQ5UwlxZ2HXd225L3JDDLUu4ztJMs2ZghY1ybwbcjyQNCTtOKmJb+AwwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBTiBseflV4zr3vje5nyCNN8rRQ9MB8GA1UdIwQY MBaAFNPU4NpowURmiUGdEDcRsZHe1Wf0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDlUZzJtakJSR2FKUVowUU54R3hrZDdWWl9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zODE1ZTMtZDNhOC00YjNjLWE0YjIt Y2IzNDRmMTgwMGVkLzEvRk9JR3g1LVZYak92ZS1ON21mSUkwM3l0RkQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8zODE1ZTMtZDNhOC00YjNjLWE0YjItY2IzNDRmMTgwMGVk LzEvMDlUZzJtakJSR2FKUVowUU54R3hrZDdWWl9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALYtrAwQA Lh0jMA0EAgACMAcDBQMqE87AMA0GCSqGSIb3DQEBCwUAA4IBAQAJ0IMcNS1vsLuL IdTCu/5dPOY+lAfmy56t9fKdQjfPr5Xm3DEl16j/7K/jmtC34KXctZsRjBzNeYCN Y6JanuK8Pq6T8SvFQjhfayFt+8X7cBUg5yAtOQg7jsEW+kR/GvHN1dGXR08cQxe/ Ig24DM27PkauBImiQcjMRmCXuS6kn8CNvHEUtbTQaTzYpr/ndzWSeBGK3oXWPAe+ JCZPcmdiXZWwHUy1QDbIBk/uwpLVpBWXTuhRvmLRSYig/K3ufriUXRLj+DI7Tfkp LmHdTUfYuhK6Gc0oiJ2GqegF+zCeKCALuQJVVSPnFR+Cmtisb69MkOyWoLLl6QUf lrPStxiK -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:20 2026 by rpki-client