This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/FigG7gxEbj00wnPxuEZJd3FsEtQ.roa File: FigG7gxEbj00wnPxuEZJd3FsEtQ.roa (raw, json) Hash identifier: D2YVN5Knh+9FC9Qxqpu7H8iwaXITQvr2iqugpv0PyYg= Subject key identifier: 16:28:06:EE:0C:44:6E:3D:34:C2:73:F1:B8:46:49:77:71:6C:12:D4 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EAE352E8989D90F5C4E0CCB57F21C Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/FigG7gxEbj00wnPxuEZJd3FsEtQ.roa Signing time: Thu 01 Jan 2026 12:18:23 +0000 ROA not before: Thu 01 Jan 2026 12:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3356 IP address blocks: 87.227.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 06:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ae:35:2e:89:89:d9:0f:5c:4e:0c:cb:57:f2:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=162806ee0c446e3d34c273f1b8464977716c12d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c0:f7:fb:6e:82:a6:48:3b:9f:c0:c8:bd:39: e7:e4:e7:39:92:55:79:3c:1f:cc:45:d7:c0:d9:6c: 62:ac:c7:32:b5:0d:ec:05:e1:c2:0c:de:ca:40:ea: e2:68:dc:9c:4d:5d:7d:f0:a5:12:9a:5b:e4:f0:1e: 3c:f2:63:eb:39:57:25:46:4e:57:92:d4:48:f0:b9: 8c:d1:19:24:b6:01:07:3c:77:a5:72:c6:d3:f5:98: 43:da:f5:39:40:9e:b4:a7:fe:ad:23:bd:84:84:8f: 09:10:a9:32:98:a9:4d:a2:49:f8:74:ba:d1:00:a0: 3c:2e:21:bc:61:33:10:1a:49:d1:5a:2d:ab:8a:86: 75:4b:d4:a9:30:7f:f9:ad:26:7f:ce:3f:24:b6:97: d9:2c:0b:c9:49:e2:03:ea:3d:13:2a:2a:08:13:54: 99:cc:1b:99:af:48:97:39:30:cb:a1:65:65:be:84: 52:44:e3:65:c1:67:eb:ef:a9:79:6c:f7:06:56:9e: 45:bb:28:d7:93:3d:4c:96:90:42:b6:1b:d4:c4:f4: b0:f8:22:72:da:76:2e:47:1d:65:90:81:8b:1a:8c: 44:bf:04:ac:aa:37:19:23:14:7e:aa:48:20:9f:1b: 5a:53:b2:06:31:b5:93:b2:db:05:72:4a:fc:88:ab: 50:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:28:06:EE:0C:44:6E:3D:34:C2:73:F1:B8:46:49:77:71:6C:12:D4 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/FigG7gxEbj00wnPxuEZJd3FsEtQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.227.206.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:04:26:d1:71:d0:88:8c:97:50:da:3e:83:b9:f0:55:e5:f4: 0f:b8:d3:26:39:47:e4:e1:be:c5:b1:06:ed:20:7d:4f:15:9b: 68:2b:f7:81:5e:37:17:a3:37:47:2f:75:56:87:a1:f9:93:58: 92:a6:91:c7:e5:6b:7d:60:08:a1:2d:97:6e:73:de:c1:04:53: d8:09:d3:3f:96:ce:8f:b6:79:70:85:a7:43:ad:7f:bc:b9:50: 55:f4:9f:c3:e2:15:8d:a9:ec:75:49:02:d5:1a:be:3b:c6:34: ee:96:42:f9:cd:b9:87:24:17:0d:30:70:8a:32:64:95:24:d7: b3:fa:7e:4f:ca:06:fa:a4:6f:a4:73:4e:4c:0b:20:9e:7c:06: de:fd:28:ff:a4:87:32:bf:45:31:f9:4d:27:a9:b3:31:27:17: e0:2b:2a:4a:8a:95:2d:13:c3:94:9d:f0:ef:7a:ec:26:2b:c4: bd:31:90:6d:a2:6e:97:67:a0:ca:7e:a9:68:7b:08:00:f5:ac: b4:9e:21:17:12:7f:4d:8a:7b:8c:63:8f:19:7b:5b:76:d7:59: fc:99:60:ec:7d:dc:46:5a:bc:41:eb:b8:06:24:75:28:cc:17: 63:99:8c:39:ad:ab:fe:37:a8:c4:49:b7:82:5d:0d:a2:6d:29: d3:30:c9:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fq41LomJ2Q9cTgzLV/IcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjI4MDZlZTBjNDQ2ZTNkMzRjMjczZjFiODQ2NDk3NzcxNmMxMmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cD3+26Cpkg7n8DIvTnn5Oc5klV5 PB/MRdfA2WxirMcytQ3sBeHCDN7KQOriaNycTV198KUSmlvk8B488mPrOVclRk5X ktRI8LmM0RkktgEHPHelcsbT9ZhD2vU5QJ60p/6tI72EhI8JEKkymKlNokn4dLrR AKA8LiG8YTMQGknRWi2rioZ1S9SpMH/5rSZ/zj8ktpfZLAvJSeID6j0TKioIE1SZ zBuZr0iXOTDLoWVlvoRSRONlwWfr76l5bPcGVp5FuyjXkz1MlpBCthvUxPSw+CJy 2nYuRx1lkIGLGoxEvwSsqjcZIxR+qkggnxtaU7IGMbWTstsFckr8iKtQPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBYoBu4MRG49NMJz8bhGSXdxbBLUMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvRmlnRzdneEViajAwd25QeHVFWkpkM0ZzRXRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+POMA0G CSqGSIb3DQEBCwUAA4IBAQCKBCbRcdCIjJdQ2j6DufBV5fQPuNMmOUfk4b7FsQbt IH1PFZtoK/eBXjcXozdHL3VWh6H5k1iSppHH5Wt9YAihLZduc97BBFPYCdM/ls6P tnlwhadDrX+8uVBV9J/D4hWNqex1SQLVGr47xjTulkL5zbmHJBcNMHCKMmSVJNez +n5Pygb6pG+kc05MCyCefAbe/Sj/pIcyv0Ux+U0nqbMxJxfgKypKipUtE8OUnfDv euwmK8S9MZBtom6XZ6DKfqloewgA9ay0niEXEn9NinuMY48Ze1t211n8mWDsfdxG WrxB67gGJHUozBdjmYw5rav+N6jESbeCXQ2ibSnTMMni -----END CERTIFICATE-----Generated at Fri Jan 23 16:03:33 2026 by rpki-client