This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/fay_KIPQYeRk21dJN7RLGfTf3ig.roa File: fay_KIPQYeRk21dJN7RLGfTf3ig.roa (raw, json) Hash identifier: rgA8dGwQgdG2uChHAnDIz4pqzfnVDZx8vl1RsRoyjNc= Subject key identifier: 7D:AC:BF:28:83:D0:61:E4:64:DB:57:49:37:B4:4B:19:F4:DF:DE:28 Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019B7F838EA3CE753802D915F132D2647628 Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/fay_KIPQYeRk21dJN7RLGfTf3ig.roa Signing time: Fri 02 Jan 2026 16:21:26 +0000 ROA not before: Fri 02 Jan 2026 16:21:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213607 IP address blocks: 194.15.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:8e:a3:ce:75:38:02:d9:15:f1:32:d2:64:76:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Jan 2 16:21:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7dacbf2883d061e464db574937b44b19f4dfde28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ac:46:e1:50:0b:40:7b:73:3c:d7:e0:e1:42: 93:7f:48:63:3e:97:13:56:db:f6:b0:41:88:f5:91: 31:40:50:15:2d:07:58:85:38:65:dd:11:f1:54:2f: 5e:9e:6b:30:0d:ce:f0:5e:07:c4:73:e7:3d:3a:cc: 55:6d:83:34:6b:88:5f:1d:ab:77:c5:47:32:69:47: 4a:7c:84:ad:c5:a3:9f:c7:ec:08:ed:3f:50:08:e2: c5:ac:20:dc:eb:59:f9:48:8e:38:98:1a:b8:70:75: 9f:45:60:c3:ab:e3:c7:34:10:a8:7b:d4:f1:b2:b5: 9e:bc:83:98:46:cd:ca:eb:69:11:f5:21:40:6e:0e: 8d:04:01:21:20:5c:97:6d:76:12:dc:22:66:64:75: 9d:68:79:68:9f:21:d2:ed:26:c9:46:7a:85:ef:d5: 76:87:17:05:cd:f0:d0:83:b7:cf:88:d7:6a:d1:b2: c5:8a:3f:f6:43:2f:bf:26:c1:e0:a0:7c:62:0e:9c: c7:c6:7f:58:dc:71:9c:8e:b8:0e:58:d4:78:85:a0: 8c:f4:d3:7d:98:23:af:ef:c5:ae:4d:2c:c2:1d:a5: 67:f4:80:7f:6d:0e:bc:53:7f:c8:a0:20:ef:05:f8: 0d:f6:27:65:ba:ff:5f:2f:27:85:2e:b7:4e:93:83: 50:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AC:BF:28:83:D0:61:E4:64:DB:57:49:37:B4:4B:19:F4:DF:DE:28 X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/fay_KIPQYeRk21dJN7RLGfTf3ig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.15.99.0/24 Signature Algorithm: sha256WithRSAEncryption 74:d1:26:4c:c3:2d:76:80:d9:37:83:da:25:fa:13:3a:d4:3b: af:be:05:aa:cc:fa:74:f7:7b:ea:f0:b0:bf:ee:36:ef:91:03: cc:50:ee:61:b8:96:66:ab:64:3d:14:f5:ce:c7:bc:b7:3d:c5: b8:55:77:34:f4:66:8b:e3:d9:92:81:ef:36:89:65:73:46:c0: 50:3f:8d:40:64:04:68:5c:82:76:7f:98:57:02:9a:80:a8:dc: 93:a0:af:53:e1:5e:65:58:04:03:55:9d:fa:2c:ba:ca:b1:6c: c3:4d:50:3d:18:03:66:b0:ad:c7:76:50:f4:18:ed:16:5e:fd: 35:35:97:0d:24:c5:12:7e:ed:1f:e4:f7:95:a2:03:c4:04:b8: b0:18:1b:4f:c4:c6:5f:61:9a:e9:61:04:9f:9c:4a:09:9d:59: ed:a7:a1:69:11:6a:0b:71:c1:d8:dc:d7:46:7c:fe:66:37:9a: 0a:75:0c:86:f0:3e:cc:e8:f4:dc:76:ac:b9:7e:ca:6c:fc:ed: b5:04:e5:4c:64:fd:44:a7:ab:31:7c:ee:e1:34:71:65:52:64: dc:8b:07:3f:e4:93:8b:c7:59:00:1d:70:a3:5e:aa:a9:ef:4a: 2d:0f:e7:aa:3a:b8:67:ad:45:c2:d6:2e:52:f3:17:01:10:1a: e9:87:12:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g46jznU4AtkV8TLSZHYoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjYwMTAyMTYyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGFjYmYyODgzZDA2MWU0NjRkYjU3NDkzN2I0NGIxOWY0ZGZkZTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qxG4VALQHtzPNfg4UKTf0hjPpcT Vtv2sEGI9ZExQFAVLQdYhThl3RHxVC9enmswDc7wXgfEc+c9OsxVbYM0a4hfHat3 xUcyaUdKfIStxaOfx+wI7T9QCOLFrCDc61n5SI44mBq4cHWfRWDDq+PHNBCoe9Tx srWevIOYRs3K62kR9SFAbg6NBAEhIFyXbXYS3CJmZHWdaHlonyHS7SbJRnqF79V2 hxcFzfDQg7fPiNdq0bLFij/2Qy+/JsHgoHxiDpzHxn9Y3HGcjrgOWNR4haCM9NN9 mCOv78WuTSzCHaVn9IB/bQ68U3/IoCDvBfgN9idluv9fLyeFLrdOk4NQ5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH2svyiD0GHkZNtXSTe0Sxn0394oMB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvZmF5X0tJUFFZZVJrMjFkSk43UkxHZlRmM2lnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg9jMA0G CSqGSIb3DQEBCwUAA4IBAQB00SZMwy12gNk3g9ol+hM61DuvvgWqzPp093vq8LC/ 7jbvkQPMUO5huJZmq2Q9FPXOx7y3PcW4VXc09GaL49mSge82iWVzRsBQP41AZARo XIJ2f5hXApqAqNyToK9T4V5lWAQDVZ36LLrKsWzDTVA9GANmsK3HdlD0GO0WXv01 NZcNJMUSfu0f5PeVogPEBLiwGBtPxMZfYZrpYQSfnEoJnVntp6FpEWoLccHY3NdG fP5mN5oKdQyG8D7M6PTcdqy5fsps/O21BOVMZP1Ep6sxfO7hNHFlUmTciwc/5JOL x1kAHXCjXqqp70otD+eqOrhnrUXC1i5S8xcBEBrphxLP -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:59 2026 by rpki-client