This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Fiisplv3w9_pcxosla-tTkhAJ08.roa File: Fiisplv3w9_pcxosla-tTkhAJ08.roa (raw, json) Hash identifier: P97Lb0EUKlBvkmhA1xwdZkUEdqeyjS045eltxd5n80c= Subject key identifier: 16:28:AC:A6:5B:F7:C3:DF:E9:73:1A:2C:95:AF:AD:4E:48:40:27:4F Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 019B7AC82E831731E349427E080C24DCB203 Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Fiisplv3w9_pcxosla-tTkhAJ08.roa Signing time: Thu 01 Jan 2026 18:18:17 +0000 ROA not before: Thu 01 Jan 2026 18:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57604 IP address blocks: 139.28.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:2e:83:17:31:e3:49:42:7e:08:0c:24:dc:b2:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Jan 1 18:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1628aca65bf7c3dfe9731a2c95afad4e4840274f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:01:52:88:ac:f1:72:75:bf:92:79:82:42:e4: 6b:f5:27:0b:69:71:dc:2e:19:4e:91:29:78:07:7e: f0:54:43:c7:cf:30:a0:0d:4c:6b:b9:37:54:d8:5c: f3:23:58:eb:bc:ed:e5:d7:45:16:9b:36:4e:98:72: bb:9f:3f:3b:42:cd:ed:a7:37:10:08:5f:e6:71:d4: 6d:6b:ad:c3:7f:bf:d8:58:52:4b:db:30:32:2b:40: 32:38:8b:91:b7:00:90:9d:a5:b9:ed:95:eb:ae:70: 59:74:a9:e2:03:5c:62:32:e0:ef:e3:70:98:03:37: da:b5:38:a6:14:83:0a:95:27:94:31:a3:6a:83:92: 3f:66:c1:59:15:b3:4f:86:cd:1c:fa:88:4c:17:22: 3e:cd:0f:4b:40:34:96:21:0c:75:7e:5a:70:2d:7a: 3a:a9:42:d5:43:5c:7c:d7:bd:7b:99:6f:d8:96:69: fe:28:d3:25:87:27:1d:34:e7:d9:f0:aa:18:98:5d: cf:8b:48:b5:3c:02:b6:15:7d:ae:0b:ae:a4:91:f1: ee:76:83:8f:a5:09:d1:0d:a6:97:e0:d8:87:27:12: d1:1b:ee:32:80:1c:69:de:b5:e6:4f:95:a0:78:7b: 64:d4:85:8f:a8:c9:a5:9a:15:8d:6b:a4:73:3c:8c: 46:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:28:AC:A6:5B:F7:C3:DF:E9:73:1A:2C:95:AF:AD:4E:48:40:27:4F X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Fiisplv3w9_pcxosla-tTkhAJ08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.28.72.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:45:da:b9:8b:bf:ef:82:16:ad:a3:8f:8d:6c:71:0c:8f:a7: 7f:c1:a1:f4:3a:a8:b2:06:90:fd:6c:ec:80:de:0f:92:4d:15: 91:de:92:36:8a:ce:0c:b1:9f:67:5c:e5:af:ed:9a:f7:40:65: 90:8b:25:c5:f4:3f:7c:b3:d2:b1:63:90:17:5b:40:a6:b6:6c: 16:0b:bd:df:c7:ea:6d:2a:7d:2e:03:62:2b:e6:b6:44:cc:f5: ec:8a:f0:12:48:54:e3:33:22:22:21:3a:a1:5d:54:92:29:1a: 8b:31:a7:8d:73:74:c7:13:f9:c3:76:d1:9c:17:37:be:63:00: c2:af:17:f6:5e:3b:31:e2:19:d9:f6:67:4a:6b:0b:43:17:2a: 2a:57:07:d3:65:a7:48:dd:ef:f7:f8:57:de:80:e8:c2:95:9a: f3:70:4d:92:84:20:d4:94:42:d7:c5:3a:f8:2e:cd:e0:df:dc: ca:93:df:c2:ca:dc:88:5f:27:8c:a8:18:a4:d6:98:4f:95:a9: 32:d2:74:2d:0f:04:3a:21:88:6d:4c:00:f0:11:6b:da:bd:b1: 98:e6:c7:95:cb:c9:02:0c:21:5d:7d:ba:1b:95:a3:96:db:34: a3:b8:d5:e5:2d:7b:ae:fb:b4:70:9f:7d:f3:79:e9:15:56:1c: c6:68:43:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yC6DFzHjSUJ+CAwk3LIDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjYwMTAxMTgxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjI4YWNhNjViZjdjM2RmZTk3MzFhMmM5NWFmYWQ0ZTQ4NDAyNzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAFSiKzxcnW/knmCQuRr9ScLaXHc LhlOkSl4B37wVEPHzzCgDUxruTdU2FzzI1jrvO3l10UWmzZOmHK7nz87Qs3tpzcQ CF/mcdRta63Df7/YWFJL2zAyK0AyOIuRtwCQnaW57ZXrrnBZdKniA1xiMuDv43CY AzfatTimFIMKlSeUMaNqg5I/ZsFZFbNPhs0c+ohMFyI+zQ9LQDSWIQx1flpwLXo6 qULVQ1x81717mW/Ylmn+KNMlhycdNOfZ8KoYmF3Pi0i1PAK2FX2uC66kkfHudoOP pQnRDaaX4NiHJxLRG+4ygBxp3rXmT5WgeHtk1IWPqMmlmhWNa6RzPIxGkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBYorKZb98Pf6XMaLJWvrU5IQCdPMB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvRmlpc3BsdjN3OV9wY3hvc2xhLXRUa2hBSjA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCixxIMA0G CSqGSIb3DQEBCwUAA4IBAQBMRdq5i7/vghato4+NbHEMj6d/waH0OqiyBpD9bOyA 3g+STRWR3pI2is4MsZ9nXOWv7Zr3QGWQiyXF9D98s9KxY5AXW0CmtmwWC73fx+pt Kn0uA2Ir5rZEzPXsivASSFTjMyIiITqhXVSSKRqLMaeNc3THE/nDdtGcFze+YwDC rxf2Xjsx4hnZ9mdKawtDFyoqVwfTZadI3e/3+FfegOjClZrzcE2ShCDUlELXxTr4 Ls3g39zKk9/CytyIXyeMqBik1phPlaky0nQtDwQ6IYhtTADwEWvavbGY5seVy8kC DCFdfboblaOW2zSjuNXlLXuu+7Rwn33zeekVVhzGaEOt -----END CERTIFICATE-----Generated at Wed Jan 21 12:44:21 2026 by rpki-client