This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/fnKKRoWAVJZeKiOvGQPgr3LCZIs.roa File: fnKKRoWAVJZeKiOvGQPgr3LCZIs.roa (raw, json) Hash identifier: JHOAXHnAaTWFlsyraZAXCqYuOsM3xPfPaJdjfqdyKlM= Subject key identifier: 7E:72:8A:46:85:80:54:96:5E:2A:23:AF:19:03:E0:AF:72:C2:64:8B Certificate issuer: /CN=71602627679a4980b70d8ade578f14192fafeb95 Certificate serial: 019B7F145F9DD822FAB8F7D406BF79892C17 Authority key identifier: 71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/fnKKRoWAVJZeKiOvGQPgr3LCZIs.roa Signing time: Fri 02 Jan 2026 14:20:00 +0000 ROA not before: Fri 02 Jan 2026 14:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209593 IP address blocks: 141.98.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:5f:9d:d8:22:fa:b8:f7:d4:06:bf:79:89:2c:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71602627679a4980b70d8ade578f14192fafeb95 Validity Not Before: Jan 2 14:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e728a46858054965e2a23af1903e0af72c2648b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:91:47:83:83:f8:85:ea:3a:d7:17:77:9b:a8: e5:4e:19:60:2a:62:6e:64:2e:4c:59:24:f2:18:d3: 58:e3:10:0b:18:c5:f6:76:f9:91:c9:9d:20:b5:4f: cd:88:30:41:82:c5:e6:88:f7:d2:a1:2c:8f:2d:06: 1b:83:c4:b9:a5:8b:6a:85:67:da:9a:db:be:d5:98: 47:bd:ed:db:51:47:ec:6b:49:4f:8f:62:a0:ea:97: b8:50:83:b5:ac:2a:9e:dc:36:8e:db:9f:7a:f9:c6: df:f7:94:1c:66:1b:c4:cc:05:80:b8:10:03:e4:10: b8:39:04:99:b6:ab:70:be:56:65:d6:73:e2:33:fd: 7d:07:d8:a3:eb:0a:92:15:4e:2a:5a:62:46:10:5b: d0:59:a2:a0:a0:3c:e8:c7:b3:d7:ee:9c:61:3d:df: 53:6e:ef:db:28:65:e3:bf:92:f4:58:ab:45:01:c1: 96:95:e8:04:0f:3e:12:81:1f:e9:36:0c:16:a1:6b: 0e:51:10:20:61:73:1d:1d:a7:a6:39:75:59:e5:e2: d2:c0:57:0e:6f:38:b4:d4:a9:cc:04:bb:f4:43:91: 72:83:0e:6c:ad:8f:37:31:bc:40:5a:e7:b1:ff:f3: e9:f5:c1:4d:22:44:06:14:bd:df:71:03:28:4e:38: af:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:72:8A:46:85:80:54:96:5E:2A:23:AF:19:03:E0:AF:72:C2:64:8B X509v3 Authority Key Identifier: keyid:71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/fnKKRoWAVJZeKiOvGQPgr3LCZIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.108.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:1b:b9:05:69:ed:b0:f5:01:03:17:e4:c9:41:6c:6a:f1:c2: 8d:0b:98:11:2f:50:0e:54:09:1f:e2:88:32:a7:76:b1:a6:ee: 26:54:3c:5f:2d:22:0d:41:74:23:2d:ef:ef:55:bc:af:d8:f3: b0:cd:51:f0:51:5a:5c:fb:ba:2f:0c:e1:1d:7a:17:4e:40:49: 2b:72:e0:52:da:3d:26:40:36:d1:45:db:14:5c:c7:1c:5d:28: c3:43:45:88:de:ca:ef:41:53:a9:0d:b3:0e:98:44:f5:9c:f5: 6d:a6:e0:ec:2f:d0:0c:f6:cc:96:c1:59:13:de:3f:88:a0:59: 5b:d1:11:fb:23:b7:c3:71:4d:b3:76:61:56:26:d9:17:93:3a: 71:8d:02:62:aa:e1:5e:56:e3:3d:73:c2:a6:48:d0:2c:58:1d: 67:d6:e9:d4:1b:9f:c3:62:a5:2c:3a:ac:51:a1:14:eb:ab:d3: d1:b4:c2:31:c5:86:4f:c6:63:32:44:66:f9:90:65:66:fa:5a: 98:07:a7:69:68:92:e0:22:5b:ad:95:3f:93:ba:4d:65:12:04: 50:f8:48:75:6b:c5:ba:81:f9:b9:8d:a0:df:cb:fe:d3:91:75: 1e:b8:2d:e0:b9:46:94:5f:c7:e2:db:80:24:74:7d:d9:ad:dc: ca:e8:58:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FF+d2CL6uPfUBr95iSwXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNjAyNjI3Njc5YTQ5ODBiNzBkOGFkZTU3OGYxNDE5MmZh ZmViOTUwHhcNMjYwMTAyMTQyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTcyOGE0Njg1ODA1NDk2NWUyYTIzYWYxOTAzZTBhZjcyYzI2NDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pFHg4P4heo61xd3m6jlThlgKmJu ZC5MWSTyGNNY4xALGMX2dvmRyZ0gtU/NiDBBgsXmiPfSoSyPLQYbg8S5pYtqhWfa mtu+1ZhHve3bUUfsa0lPj2Kg6pe4UIO1rCqe3DaO2596+cbf95QcZhvEzAWAuBAD 5BC4OQSZtqtwvlZl1nPiM/19B9ij6wqSFU4qWmJGEFvQWaKgoDzox7PX7pxhPd9T bu/bKGXjv5L0WKtFAcGWlegEDz4SgR/pNgwWoWsOURAgYXMdHaemOXVZ5eLSwFcO bzi01KnMBLv0Q5Fygw5srY83MbxAWuex//Pp9cFNIkQGFL3fcQMoTjivgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH5yikaFgFSWXiojrxkD4K9ywmSLMB8GA1UdIwQY MBaAFHFgJidnmkmAtw2K3lePFBkvr+uVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1dBbUoyZWFTWUMzRFlyZVY0OFVHUy12NjVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yNmI0ZTItY2FhMC00OGEzLTgxMTct N2Q1OTMwMzNkMDA1LzEvZm5LS1JvV0FWSlplS2lPdkdRUGdyM0xDWklzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8yNmI0ZTItY2FhMC00OGEzLTgxMTctN2Q1OTMwMzNkMDA1 LzEvY1dBbUoyZWFTWUMzRFlyZVY0OFVHUy12NjVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWJsMA0G CSqGSIb3DQEBCwUAA4IBAQB8G7kFae2w9QEDF+TJQWxq8cKNC5gRL1AOVAkf4ogy p3axpu4mVDxfLSINQXQjLe/vVbyv2POwzVHwUVpc+7ovDOEdehdOQEkrcuBS2j0m QDbRRdsUXMccXSjDQ0WI3srvQVOpDbMOmET1nPVtpuDsL9AM9syWwVkT3j+IoFlb 0RH7I7fDcU2zdmFWJtkXkzpxjQJiquFeVuM9c8KmSNAsWB1n1unUG5/DYqUsOqxR oRTrq9PRtMIxxYZPxmMyRGb5kGVm+lqYB6dpaJLgIlutlT+Tuk1lEgRQ+Eh1a8W6 gfm5jaDfy/7TkXUeuC3guUaUX8fi24AkdH3ZrdzK6FhE -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:14 2026 by rpki-client