This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/FGXifY4YNXSWwZi4QtD01XX8A_4.roa File: FGXifY4YNXSWwZi4QtD01XX8A_4.roa (raw, json) Hash identifier: r3Yn9lbI97BgnohED52RZmDaF/H4yGegwCsX0vScc1U= Subject key identifier: 14:65:E2:7D:8E:18:35:74:96:C1:98:B8:42:D0:F4:D5:75:FC:03:FE Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Certificate serial: 019B7910890632E434B74744CB19C8A688D0 Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/FGXifY4YNXSWwZi4QtD01XX8A_4.roa Signing time: Thu 01 Jan 2026 10:18:05 +0000 ROA not before: Thu 01 Jan 2026 10:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208149 IP address blocks: 109.68.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:89:06:32:e4:34:b7:47:44:cb:19:c8:a6:88:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Validity Not Before: Jan 1 10:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1465e27d8e18357496c198b842d0f4d575fc03fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:86:fc:72:4e:3d:89:db:cc:03:21:fd:29:3c: 94:fd:d8:07:31:03:de:6c:08:75:60:70:b3:05:c0: 5e:f3:35:55:c7:fa:f2:6e:18:1a:e9:99:a5:d3:69: 46:55:40:73:70:3b:2b:5e:87:78:c3:f7:b5:c9:28: 4c:6a:47:48:54:08:21:29:c0:7e:e3:b4:5f:15:cf: f9:ec:37:35:47:20:58:ed:d3:84:c2:99:9e:76:88: 95:9e:81:4b:d7:f8:d1:eb:a9:d1:84:d3:e1:27:df: bd:1b:5b:2b:fe:f4:62:21:a0:f5:57:64:39:85:b5: ef:f3:23:40:db:60:ce:53:b4:5e:00:74:ef:c8:a2: 0a:7d:d5:40:92:b7:48:6e:d4:f8:0e:16:3c:32:2b: 21:dc:45:1a:2c:17:4d:d8:3b:01:d2:0c:af:fa:fb: 29:24:92:28:2c:1d:ed:13:dc:21:4b:05:91:9f:0c: 23:f3:76:db:5a:d6:cb:03:ec:56:43:fa:12:e7:09: 62:ad:bb:6f:bd:f9:a4:42:73:64:44:02:07:30:0e: c5:70:ea:75:4b:ee:10:c9:79:58:d2:6b:62:0a:92: c6:8c:17:b7:6e:26:47:11:5c:37:f3:ae:96:68:0a: 90:a5:06:4f:c6:69:7b:cd:bf:f5:e5:ce:61:32:bb: 1f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:65:E2:7D:8E:18:35:74:96:C1:98:B8:42:D0:F4:D5:75:FC:03:FE X509v3 Authority Key Identifier: keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/FGXifY4YNXSWwZi4QtD01XX8A_4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.68.151.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:f2:d0:d1:e7:1c:6e:ae:a8:ad:bc:3b:68:30:c3:cf:00:20: 18:24:ff:3d:8a:db:21:85:25:eb:e0:39:27:32:a4:f0:ee:7f: 61:5b:fa:e3:ed:67:6a:18:38:d1:81:a8:8d:24:c6:d5:00:fe: 06:cb:10:d3:d8:00:e7:7d:78:2f:c4:df:67:18:d9:86:b4:12: 12:65:d4:cc:e9:94:55:49:16:66:e9:fe:c1:0e:d3:bb:a7:52: c9:9f:93:8a:2a:6d:db:e6:d1:8b:c7:d8:e0:bd:17:42:0c:9d: dc:b6:44:d3:e9:69:f5:4a:87:ed:f3:36:a8:64:1d:58:ee:8c: ae:11:ef:22:5a:cc:c7:25:51:ba:d3:e9:3e:01:1c:cf:a5:90: 56:7f:f5:a5:39:01:8a:f7:ea:89:dc:5f:88:e4:fd:d8:ab:89: 7d:4a:67:5b:50:ae:de:01:4a:3c:19:d4:76:37:5a:de:c7:f6: 49:3a:22:d1:e4:66:f6:05:6b:08:db:3a:12:75:df:ec:19:b9: 4e:97:79:da:85:1d:10:ad:0a:fa:22:31:e0:76:56:6a:f3:c9: 61:4f:dd:0d:60:3d:7f:b3:9a:a8:00:d9:88:5c:6e:29:99:5f: 6f:1f:f8:97:4e:fd:46:84:a6:55:9e:9c:76:78:09:00:23:42: a1:33:f9:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EIkGMuQ0t0dEyxnIpojQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYzUxYjBjMDYzY2ZjMTY5NDNmYzlhNDdlMmM4MDU5OTBm NmVhYWUwHhcNMjYwMTAxMTAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDY1ZTI3ZDhlMTgzNTc0OTZjMTk4Yjg0MmQwZjRkNTc1ZmMwM2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4b8ck49idvMAyH9KTyU/dgHMQPe bAh1YHCzBcBe8zVVx/rybhga6Zml02lGVUBzcDsrXod4w/e1yShMakdIVAghKcB+ 47RfFc/57Dc1RyBY7dOEwpmedoiVnoFL1/jR66nRhNPhJ9+9G1sr/vRiIaD1V2Q5 hbXv8yNA22DOU7ReAHTvyKIKfdVAkrdIbtT4DhY8Mish3EUaLBdN2DsB0gyv+vsp JJIoLB3tE9whSwWRnwwj83bbWtbLA+xWQ/oS5wlirbtvvfmkQnNkRAIHMA7FcOp1 S+4QyXlY0mtiCpLGjBe3biZHEVw3866WaAqQpQZPxml7zb/15c5hMrsf/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBRl4n2OGDV0lsGYuELQ9NV1/AP+MB8GA1UdIwQY MBaAFLPFGwwGPPwWlD/JpH4sgFmQ9uquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEt ZmY1ZjFhZDY5MjY2LzEvRkdYaWZZNFlOWFNXd1ppNFF0RDAxWFg4QV80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEtZmY1ZjFhZDY5MjY2 LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUSXMA0G CSqGSIb3DQEBCwUAA4IBAQCb8tDR5xxurqitvDtoMMPPACAYJP89itshhSXr4Dkn MqTw7n9hW/rj7WdqGDjRgaiNJMbVAP4GyxDT2ADnfXgvxN9nGNmGtBISZdTM6ZRV SRZm6f7BDtO7p1LJn5OKKm3b5tGLx9jgvRdCDJ3ctkTT6Wn1Soft8zaoZB1Y7oyu Ee8iWszHJVG60+k+ARzPpZBWf/WlOQGK9+qJ3F+I5P3Yq4l9SmdbUK7eAUo8GdR2 N1rex/ZJOiLR5Gb2BWsI2zoSdd/sGblOl3nahR0QrQr6IjHgdlZq88lhT90NYD1/ s5qoANmIXG4pmV9vH/iXTv1GhKZVnpx2eAkAI0KhM/nB -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:09 2026 by rpki-client