This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/FDCz9vFy1afnhYd9FSvc-Bw_UfQ.roa File: FDCz9vFy1afnhYd9FSvc-Bw_UfQ.roa (raw, json) Hash identifier: nX+U0OE3yN8KGFoYzRWDUrILvEVuMqT3N2aNA/PsHZU= Subject key identifier: 14:30:B3:F6:F1:72:D5:A7:E7:85:87:7D:15:2B:DC:F8:1C:3F:51:F4 Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d Certificate serial: 019A6C2D04B54BE2CC06CE4322C2EB093479 Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/FDCz9vFy1afnhYd9FSvc-Bw_UfQ.roa Signing time: Mon 10 Nov 2025 05:11:20 +0000 ROA not before: Mon 10 Nov 2025 05:11:20 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213689 IP address blocks: 92.242.167.0/24 maxlen: 24 164.138.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6c:2d:04:b5:4b:e2:cc:06:ce:43:22:c2:eb:09:34:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d Validity Not Before: Nov 10 05:11:20 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1430b3f6f172d5a7e785877d152bdcf81c3f51f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:19:5a:c7:74:51:b1:8b:78:3e:0c:e8:ab:c5: da:d8:75:77:6c:ec:d5:d7:99:d9:e3:a3:8f:4a:8e: b8:a1:c9:dc:b3:5e:55:3f:c8:db:24:5a:93:75:e7: 84:c7:09:a7:c8:97:aa:4a:e4:a4:b9:f9:a1:0b:92: 27:97:30:c8:9f:97:ae:21:9e:b6:1a:25:cc:6d:78: 5b:6d:d3:d4:7d:f9:30:99:68:ec:28:7d:2a:f8:76: 3b:c8:2b:63:30:29:15:45:9a:f3:2a:ae:e8:10:52: ab:7e:73:4f:0e:17:c9:7e:2f:2f:9f:40:23:ae:af: 93:e5:2a:d1:bd:57:38:61:c7:27:7f:5a:f7:9b:bc: 02:80:01:60:2f:dd:fd:e2:95:86:77:c2:e0:59:05: 11:4d:6d:3b:60:4d:0d:ae:bf:66:e9:12:01:e5:e3: 9e:1c:c1:8a:1f:9e:51:be:fb:ee:3b:f9:e5:8d:6b: 6e:94:80:41:72:31:8b:d4:5b:e4:da:35:31:ec:f8: e4:9f:9e:8a:79:95:85:67:e9:fa:b4:8c:15:8f:2d: 3f:6f:c4:0d:fc:5c:a2:28:de:4c:e0:3e:c0:b2:07: b4:1a:c1:63:7c:4c:90:1c:30:e3:b7:e5:a2:31:57: 4c:9e:b8:d0:46:62:1f:25:a7:4b:c5:11:22:ed:63: 17:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:30:B3:F6:F1:72:D5:A7:E7:85:87:7D:15:2B:DC:F8:1C:3F:51:F4 X509v3 Authority Key Identifier: keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/FDCz9vFy1afnhYd9FSvc-Bw_UfQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.242.167.0/24 164.138.8.0/21 Signature Algorithm: sha256WithRSAEncryption d8:63:42:53:1f:11:07:a5:d8:52:c1:00:23:8a:07:64:79:6b: 1b:3c:34:fc:02:c5:58:87:75:3b:f1:eb:ca:15:e9:20:76:b8: 2a:ef:05:28:47:18:26:62:04:44:14:d8:e5:c2:59:b2:36:1d: 5b:4b:5f:20:c3:82:aa:40:27:81:18:16:12:6a:27:53:61:1f: c9:48:1a:14:ab:33:68:4a:e4:24:df:c0:c9:87:ab:9d:3f:65: 2e:fd:c6:a5:77:8c:10:fe:20:11:88:5c:d7:98:ee:ed:2b:89: eb:cc:b1:7b:aa:1c:15:33:de:92:d5:07:db:73:3a:2d:02:79: 44:54:13:1b:42:4a:4c:51:f4:96:d3:e2:48:a3:f9:49:0d:8f: 68:61:22:8c:39:a0:fa:90:9b:ac:9f:f5:8a:4c:23:cf:43:1d: 87:3b:e3:38:56:1d:8d:34:c2:ef:fe:3a:0c:eb:cb:ad:6c:e9: c7:76:8b:88:36:2b:89:bf:ef:35:f4:e3:fa:38:27:35:f2:47: 9e:c4:c8:cc:73:d3:56:7f:4f:ef:be:32:aa:b7:55:f2:86:5a: 39:d8:ad:83:24:db:fa:0e:6c:65:00:92:65:aa:d8:af:45:3f: ac:53:50:d2:3c:1f:72:4a:44:94:3d:51:3b:0e:2f:a6:28:6b: 0a:c1:22:06 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZpsLQS1S+LMBs5DIsLrCTR5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMTI1NDA0YzZkZDQ3MmYxMDAxZWQ5ZmZkZjcyNjc2MmFj NzcwMWQwHhcNMjUxMTEwMDUxMTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDMwYjNmNmYxNzJkNWE3ZTc4NTg3N2QxNTJiZGNmODFjM2Y1MWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBlax3RRsYt4Pgzoq8Xa2HV3bOzV 15nZ46OPSo64ocncs15VP8jbJFqTdeeExwmnyJeqSuSkufmhC5InlzDIn5euIZ62 GiXMbXhbbdPUffkwmWjsKH0q+HY7yCtjMCkVRZrzKq7oEFKrfnNPDhfJfi8vn0Aj rq+T5SrRvVc4Yccnf1r3m7wCgAFgL9394pWGd8LgWQURTW07YE0Nrr9m6RIB5eOe HMGKH55RvvvuO/nljWtulIBBcjGL1Fvk2jUx7Pjkn56KeZWFZ+n6tIwVjy0/b8QN /FyiKN5M4D7Asge0GsFjfEyQHDDjt+WiMVdMnrjQRmIfJadLxREi7WMXrQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBQws/bxctWn54WHfRUr3PgcP1H0MB8GA1UdIwQY MBaAFBESVATG3UcvEAHtn/33JnYqx3AdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jZjljZDYtZTcxNy00ZGRhLTgyZWYt NmRmZTBmN2Q1M2JkLzEvRkRDejl2RnkxYWZuaFlkOUZTdmMtQndfVWZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9jZjljZDYtZTcxNy00ZGRhLTgyZWYtNmRmZTBmN2Q1M2Jk LzEvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXPKnAwQD pIoIMA0GCSqGSIb3DQEBCwUAA4IBAQDYY0JTHxEHpdhSwQAjigdkeWsbPDT8AsVY h3U78evKFekgdrgq7wUoRxgmYgREFNjlwlmyNh1bS18gw4KqQCeBGBYSaidTYR/J SBoUqzNoSuQk38DJh6udP2Uu/cald4wQ/iARiFzXmO7tK4nrzLF7qhwVM96S1Qfb czotAnlEVBMbQkpMUfSW0+JIo/lJDY9oYSKMOaD6kJusn/WKTCPPQx2HO+M4Vh2N NMLv/joM68utbOnHdouINiuJv+819OP6OCc18keexMjMc9NWf0/vvjKqt1Xyhlo5 2K2DJNv6DmxlAJJlqtivRT+sU1DSPB9ySkSUPVE7Di+mKGsKwSIG -----END CERTIFICATE-----Generated at Sat Dec 6 22:12:46 2025 by rpki-client