This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/FPvHk-5xoAHc4H4YcVBwDRtBohY.roa File: FPvHk-5xoAHc4H4YcVBwDRtBohY.roa (raw, json) Hash identifier: 1eXklAxiTWfBmlit+CmMXJ1zXs3giUYtPRN9wO99uro= Subject key identifier: 14:FB:C7:93:EE:71:A0:01:DC:E0:7E:18:71:50:70:0D:1B:41:A2:16 Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Certificate serial: 019A8E231ED6B3D0BEBFA6A38CA52CB36CC9 Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/FPvHk-5xoAHc4H4YcVBwDRtBohY.roa Signing time: Sun 16 Nov 2025 19:27:37 +0000 ROA not before: Sun 16 Nov 2025 19:27:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 109.122.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 04:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:8e:23:1e:d6:b3:d0:be:bf:a6:a3:8c:a5:2c:b3:6c:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Validity Not Before: Nov 16 19:27:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=14fbc793ee71a001dce07e187150700d1b41a216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4f:f4:2a:59:56:10:63:5b:e8:66:e8:7c:f1: 3b:9f:ae:cf:90:d0:27:9a:79:22:b4:88:2d:a1:4e: a0:67:1a:b4:3d:50:7f:e2:35:03:07:4d:f9:2d:cc: be:3f:81:da:6e:27:04:c8:54:c8:1f:f2:2b:b9:fe: 1e:ca:37:cf:0f:55:3d:eb:3e:76:d2:bc:f8:a4:a7: 4a:a6:88:d2:92:83:4c:d6:88:45:31:7f:8b:45:33: 4b:d7:f8:c0:3f:46:a0:33:03:b5:68:b9:3c:6f:4a: 84:f1:e5:9a:bb:6f:2c:1f:0f:8d:31:7f:0c:ac:99: b3:cb:0c:ed:2d:ba:88:4f:50:7e:a9:b5:41:b9:99: e6:b2:0d:04:5e:0e:86:1a:66:08:1d:ef:ef:4b:d1: 48:e2:18:6d:78:2b:ac:18:ee:93:74:00:d1:78:a2: 49:97:35:1f:ce:cc:04:09:d1:f0:e2:5c:53:1c:ed: de:8f:ac:27:bf:b6:18:2e:07:3d:a4:0f:1d:8a:12: 57:d0:6b:e9:4b:d0:6d:da:d0:6a:69:e7:34:f2:b5: dd:be:f9:bd:bc:6f:9f:48:27:e0:e8:a0:9f:f5:f6: 50:a7:ed:de:6d:75:cc:07:f4:83:37:b3:12:19:3a: 7f:76:f2:bf:6f:ea:95:42:3d:15:09:76:f3:7a:a5: 4a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FB:C7:93:EE:71:A0:01:DC:E0:7E:18:71:50:70:0D:1B:41:A2:16 X509v3 Authority Key Identifier: keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/FPvHk-5xoAHc4H4YcVBwDRtBohY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.29.0/24 Signature Algorithm: sha256WithRSAEncryption 46:5d:6f:3f:16:09:9d:49:e3:01:74:db:7d:b0:2d:c2:11:15: 08:5c:8a:11:33:73:56:88:73:02:35:82:8f:44:a9:91:24:fe: 0e:54:3b:4c:ea:11:50:36:65:be:70:26:4d:d4:10:70:86:5a: 28:27:9a:37:f9:2b:b9:01:3d:6a:18:f1:84:70:89:05:65:88: 8c:a3:9c:11:e7:dd:fb:78:3f:64:ea:29:a6:d3:00:96:c1:20: f0:49:98:fc:87:7c:ef:86:42:d5:b2:1e:ac:46:1c:40:0f:5d: 78:9e:f0:48:04:d1:06:8e:2c:63:ea:e9:b4:33:c3:c4:d7:13: ef:c3:bf:72:5d:91:4e:9c:2f:ef:40:4e:8f:c5:0d:8d:0b:3f: c2:d1:56:40:5f:09:22:60:24:d2:58:40:73:1e:8a:8d:79:57: 25:fe:32:0c:51:af:a6:45:71:c9:2e:d1:40:00:93:89:8c:b9: ed:7c:14:94:15:cf:06:99:3c:66:0f:47:6f:35:e9:e6:88:b3: 48:55:e7:32:4f:9a:ce:a3:8b:3b:b9:ac:03:d8:76:25:86:58: e9:9c:4c:25:fd:57:a6:4a:e0:40:39:d4:1c:88:14:33:a7:b8: f5:80:ac:c2:36:47:c1:b6:94:b0:b7:e7:6a:d9:1c:1d:2a:c2: eb:cb:3a:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqOIx7Ws9C+v6ajjKUss2zJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3 OGE1NzkwHhcNMjUxMTE2MTkyNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGZiYzc5M2VlNzFhMDAxZGNlMDdlMTg3MTUwNzAwZDFiNDFhMjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2k/0KllWEGNb6GbofPE7n67PkNAn mnkitIgtoU6gZxq0PVB/4jUDB035Lcy+P4HabicEyFTIH/Iruf4eyjfPD1U96z52 0rz4pKdKpojSkoNM1ohFMX+LRTNL1/jAP0agMwO1aLk8b0qE8eWau28sHw+NMX8M rJmzywztLbqIT1B+qbVBuZnmsg0EXg6GGmYIHe/vS9FI4hhteCusGO6TdADReKJJ lzUfzswECdHw4lxTHO3ej6wnv7YYLgc9pA8dihJX0GvpS9Bt2tBqaec08rXdvvm9 vG+fSCfg6KCf9fZQp+3ebXXMB/SDN7MSGTp/dvK/b+qVQj0VCXbzeqVKTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBT7x5PucaAB3OB+GHFQcA0bQaIWMB8GA1UdIwQY MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt YTM5YWMyNTM5ZmM1LzEvRlB2SGstNXhvQUhjNEg0WWNWQndEUnRCb2hZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1 LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXodMA0G CSqGSIb3DQEBCwUAA4IBAQBGXW8/FgmdSeMBdNt9sC3CERUIXIoRM3NWiHMCNYKP RKmRJP4OVDtM6hFQNmW+cCZN1BBwhlooJ5o3+Su5AT1qGPGEcIkFZYiMo5wR5937 eD9k6imm0wCWwSDwSZj8h3zvhkLVsh6sRhxAD114nvBIBNEGjixj6um0M8PE1xPv w79yXZFOnC/vQE6PxQ2NCz/C0VZAXwkiYCTSWEBzHoqNeVcl/jIMUa+mRXHJLtFA AJOJjLntfBSUFc8GmTxmD0dvNenmiLNIVecyT5rOo4s7uawD2HYlhljpnEwl/Vem SuBAOdQciBQzp7j1gKzCNkfBtpSwt+dq2RwdKsLryzq4 -----END CERTIFICATE-----Generated at Sun Nov 23 13:54:47 2025 by rpki-client