This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/faH_H0bFTtExgpasofxwLYYJANE.roa File: faH_H0bFTtExgpasofxwLYYJANE.roa (raw, json) Hash identifier: UuzU0p9stf+YHdFjtIwVt8QxOqyBZDWMZbSxRsrWLug= Subject key identifier: 7D:A1:FF:1F:46:C5:4E:D1:31:82:96:AC:A1:FC:70:2D:86:09:00:D1 Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019A77D17B2768F120C1BF075AC8090F9135 Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/faH_H0bFTtExgpasofxwLYYJANE.roa Signing time: Wed 12 Nov 2025 11:26:48 +0000 ROA not before: Wed 12 Nov 2025 11:26:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 19905 IP address blocks: 109.107.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:77:d1:7b:27:68:f1:20:c1:bf:07:5a:c8:09:0f:91:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Nov 12 11:26:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7da1ff1f46c54ed1318296aca1fc702d860900d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0f:33:8c:9a:0e:52:ac:44:ac:b2:68:ef:61: ec:df:ac:b7:f3:af:c6:88:ac:31:02:be:db:97:39: 82:ba:61:1d:1e:c3:89:75:bf:cc:28:f2:df:90:ac: 81:f1:50:2b:24:e0:12:1b:de:0d:09:9a:5c:e2:a9: 90:8e:7f:8c:ae:aa:2b:40:c1:34:98:07:ec:ea:af: d3:e8:b1:45:45:6d:ae:2c:a4:58:51:ad:10:80:d4: 3c:23:18:70:ca:a9:f4:b9:75:41:81:75:81:94:65: 6f:cb:c0:fd:92:9d:54:3e:59:a1:32:e3:03:d5:6f: 1a:b8:04:c5:82:36:be:44:bc:8d:fc:92:6e:a7:31: 7a:e7:ea:bd:b8:65:b0:0d:88:aa:66:81:ef:d2:a3: 07:eb:ae:70:a5:22:b5:ce:c5:b5:6b:36:0c:84:19: cf:bf:59:18:a7:38:70:04:66:1b:56:a4:42:c6:d0: 92:02:c6:cb:1c:d7:cb:4a:19:1f:e2:a9:19:4d:8f: 93:30:a0:34:b2:b1:eb:62:20:6f:0d:35:a2:27:1f: d1:be:fa:c6:6a:ac:db:7f:76:14:d7:5f:42:bc:4a: 19:74:68:62:8d:c2:73:27:52:4c:d9:4f:f8:0b:e3: f9:06:d3:75:8b:9f:20:b4:ef:ae:74:f1:d0:05:69: 91:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A1:FF:1F:46:C5:4E:D1:31:82:96:AC:A1:FC:70:2D:86:09:00:D1 X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/faH_H0bFTtExgpasofxwLYYJANE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.155.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:89:63:da:8f:1c:64:8c:b7:ef:f4:ed:1c:d4:fa:f5:5f:46: f6:db:7d:cd:3f:6f:79:9a:3f:dd:db:f6:66:20:f9:65:eb:9e: 3d:7a:d2:d5:49:be:b0:3c:88:1a:00:77:07:cf:6e:54:3b:f1: fe:a4:6b:f2:b4:21:fd:1b:f4:a0:7f:79:c7:7d:8d:c3:15:6c: fd:76:a8:ee:7e:de:00:0a:53:d0:da:fa:e6:06:a4:9e:45:94: 07:37:d8:b9:9e:53:a7:ec:d8:2f:a6:48:42:0a:27:6f:30:39: 9b:37:4f:3c:14:75:88:17:a9:69:b6:c0:ed:6a:56:03:73:40: 66:e2:42:26:cf:2e:41:d7:94:23:5b:2a:22:f0:8f:1a:31:5f: 45:6b:6d:b9:1d:4d:48:89:95:a6:71:21:d8:7d:ba:e5:dc:0c: cb:06:57:e5:f9:26:11:10:be:15:ac:8d:e1:b3:4a:0c:e3:5d: 97:5e:de:6b:87:e5:8d:d5:b6:d6:b1:f8:5a:25:f2:82:6c:0c: c6:cb:28:11:b9:a6:9d:56:ef:19:f3:bc:60:35:74:ec:de:d4: 18:fe:e2:ee:95:2b:1c:d2:2e:46:1d:f1:b7:05:06:89:e9:84: 1c:7d:b8:3a:ed:12:2b:e7:d4:19:6e:6b:a6:c4:0b:27:ed:04: a7:0f:11:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp30XsnaPEgwb8HWsgJD5E1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjUxMTEyMTEyNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGExZmYxZjQ2YzU0ZWQxMzE4Mjk2YWNhMWZjNzAyZDg2MDkwMGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww8zjJoOUqxErLJo72Hs36y386/G iKwxAr7blzmCumEdHsOJdb/MKPLfkKyB8VArJOASG94NCZpc4qmQjn+MrqorQME0 mAfs6q/T6LFFRW2uLKRYUa0QgNQ8Ixhwyqn0uXVBgXWBlGVvy8D9kp1UPlmhMuMD 1W8auATFgja+RLyN/JJupzF65+q9uGWwDYiqZoHv0qMH665wpSK1zsW1azYMhBnP v1kYpzhwBGYbVqRCxtCSAsbLHNfLShkf4qkZTY+TMKA0srHrYiBvDTWiJx/RvvrG aqzbf3YU119CvEoZdGhijcJzJ1JM2U/4C+P5BtN1i58gtO+udPHQBWmRsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH2h/x9GxU7RMYKWrKH8cC2GCQDRMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvZmFIX0gwYkZUdEV4Z3Bhc29meHdMWVlKQU5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWubMA0G CSqGSIb3DQEBCwUAA4IBAQCLiWPajxxkjLfv9O0c1Pr1X0b2233NP295mj/d2/Zm IPll6549etLVSb6wPIgaAHcHz25UO/H+pGvytCH9G/Sgf3nHfY3DFWz9dqjuft4A ClPQ2vrmBqSeRZQHN9i5nlOn7NgvpkhCCidvMDmbN088FHWIF6lptsDtalYDc0Bm 4kImzy5B15QjWyoi8I8aMV9Fa225HU1IiZWmcSHYfbrl3AzLBlfl+SYREL4VrI3h s0oM412XXt5rh+WN1bbWsfhaJfKCbAzGyygRuaadVu8Z87xgNXTs3tQY/uLulSsc 0i5GHfG3BQaJ6YQcfbg67RIr59QZbmumxAsn7QSnDxGE -----END CERTIFICATE-----Generated at Fri Dec 5 22:10:24 2025 by rpki-client