This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/FCkzejw_mpzO5Fq5yjHQgkf7Sdk.roa File: FCkzejw_mpzO5Fq5yjHQgkf7Sdk.roa (raw, json) Hash identifier: 5DPuExNydi8iS0O+8G5exy3CCsfyO/TUaPjNpiw2D6I= Subject key identifier: 14:29:33:7A:3C:3F:9A:9C:CE:E4:5A:B9:CA:31:D0:82:47:FB:49:D9 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37C2609F9F8A66380D6D934E937300 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/FCkzejw_mpzO5Fq5yjHQgkf7Sdk.roa Signing time: Fri 02 Jan 2026 10:19:02 +0000 ROA not before: Fri 02 Jan 2026 10:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203057 IP address blocks: 147.90.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:c2:60:9f:9f:8a:66:38:0d:6d:93:4e:93:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1429337a3c3f9a9ccee45ab9ca31d08247fb49d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:01:19:8f:ae:93:c8:6a:03:df:44:2b:06:c2: 2d:b6:a4:ec:4d:29:94:a4:e4:b5:c7:e4:2a:15:e3: 85:c4:67:d1:40:ce:cf:2a:a7:78:78:cb:33:91:39: 78:95:f8:c4:e7:47:3f:1e:37:39:f8:f5:0e:20:6d: e7:72:41:d4:3b:be:54:65:29:24:e8:b1:ce:84:b0: 64:90:e4:d7:70:d8:53:d8:61:1b:00:e2:98:b2:73: b6:91:19:51:1e:ca:7d:37:f8:49:db:0d:49:bc:b2: 0f:ed:e6:5e:01:ae:5e:1b:ec:d1:cd:55:ca:f0:a3: 54:43:62:e0:d5:20:76:fa:8c:a2:e3:46:3c:17:ed: 8a:d9:90:1f:28:ec:b8:c5:1d:c8:b3:52:c1:2d:4d: 93:be:b2:e9:eb:a2:d0:c9:40:72:35:c2:b3:bc:57: b1:f3:9e:7d:67:ab:ed:7e:ce:15:09:4a:24:8b:df: f2:4b:c2:19:81:18:53:46:ac:71:8e:ee:50:06:66: e9:5c:31:d3:60:9b:92:50:02:15:0a:91:a8:2f:85: e5:74:1b:12:e7:3e:da:4f:01:6d:41:d4:2c:cb:93: 34:8c:0f:4a:26:b9:0d:af:6e:2d:e5:88:e5:af:d2: 17:da:b4:1a:d1:8a:d6:3f:7c:aa:92:b6:c0:4e:a4: f9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:29:33:7A:3C:3F:9A:9C:CE:E4:5A:B9:CA:31:D0:82:47:FB:49:D9 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/FCkzejw_mpzO5Fq5yjHQgkf7Sdk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.90.72.0/22 Signature Algorithm: sha256WithRSAEncryption 67:23:af:90:c8:99:fe:f2:d0:a1:47:6d:31:4f:20:9d:3e:a9: 14:14:1b:97:93:b4:dd:3a:79:33:21:b4:5c:7a:b8:2e:7b:34: 56:ff:37:85:58:e1:2c:9f:a9:05:dc:5f:3f:04:bc:d3:a5:0e: 36:98:13:50:6a:5b:79:61:94:47:31:82:c4:de:5b:1a:b4:ba: f4:47:39:a8:e8:0e:dc:69:b8:da:1c:59:c3:8b:69:0f:5f:d5: ff:5c:4a:c6:39:2b:c2:f3:32:58:75:9b:db:b7:a3:61:d5:9e: af:30:8a:b6:44:a8:25:c6:af:1a:a4:a5:a3:8a:e0:2d:4b:f1: 41:af:a5:54:cb:75:3d:c1:9e:a1:40:2c:08:c8:77:a9:3f:8c: e0:82:be:5c:72:83:ef:8a:f0:15:c9:dd:88:eb:43:91:6e:84: c5:1c:01:b2:21:cf:12:37:d3:9d:65:99:b1:65:51:de:51:5c: 66:2e:7c:f2:cf:bc:fc:36:e0:58:9f:9e:27:b0:05:a5:12:35: 38:73:36:bc:57:17:b9:58:ba:b8:4e:44:49:0a:a0:3f:7d:14: eb:72:30:40:2d:43:91:3d:b7:22:03:81:2a:8e:f8:ed:8e:62: e3:39:ef:db:93:c2:3d:56:b0:ec:2d:7c:5e:ff:ef:51:c6:f0: 35:c2:28:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N8Jgn5+KZjgNbZNOk3MAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDI5MzM3YTNjM2Y5YTljY2VlNDVhYjljYTMxZDA4MjQ3ZmI0OWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQEZj66TyGoD30QrBsIttqTsTSmU pOS1x+QqFeOFxGfRQM7PKqd4eMszkTl4lfjE50c/Hjc5+PUOIG3nckHUO75UZSkk 6LHOhLBkkOTXcNhT2GEbAOKYsnO2kRlRHsp9N/hJ2w1JvLIP7eZeAa5eG+zRzVXK 8KNUQ2Lg1SB2+oyi40Y8F+2K2ZAfKOy4xR3Is1LBLU2TvrLp66LQyUByNcKzvFex 8559Z6vtfs4VCUoki9/yS8IZgRhTRqxxju5QBmbpXDHTYJuSUAIVCpGoL4XldBsS 5z7aTwFtQdQsy5M0jA9KJrkNr24t5Yjlr9IX2rQa0YrWP3yqkrbATqT51wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBQpM3o8P5qczuRaucox0IJH+0nZMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvRkNremVqd19tcHpPNUZxNXlqSFFna2Y3U2RrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk1pIMA0G CSqGSIb3DQEBCwUAA4IBAQBnI6+QyJn+8tChR20xTyCdPqkUFBuXk7TdOnkzIbRc erguezRW/zeFWOEsn6kF3F8/BLzTpQ42mBNQalt5YZRHMYLE3lsatLr0Rzmo6A7c abjaHFnDi2kPX9X/XErGOSvC8zJYdZvbt6Nh1Z6vMIq2RKglxq8apKWjiuAtS/FB r6VUy3U9wZ6hQCwIyHepP4zggr5ccoPvivAVyd2I60ORboTFHAGyIc8SN9OdZZmx ZVHeUVxmLnzyz7z8NuBYn54nsAWlEjU4cza8Vxe5WLq4TkRJCqA/fRTrcjBALUOR PbciA4EqjvjtjmLjOe/bk8I9VrDsLXxe/+9RxvA1wih+ -----END CERTIFICATE-----Generated at Fri Jan 23 04:39:25 2026 by rpki-client