This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/fUY8ZLyPFO6PzdE1sHTPRnXSlKM.roa File: fUY8ZLyPFO6PzdE1sHTPRnXSlKM.roa (raw, json) Hash identifier: mSqtCcipoj++PAZRPkO1MS55ZKNwolFB8twWgcQV0Yk= Subject key identifier: 7D:46:3C:64:BC:8F:14:EE:8F:CD:D1:35:B0:74:CF:46:75:D2:94:A3 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019B9CC8A7503A31F6759CB5C282B217779B Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/fUY8ZLyPFO6PzdE1sHTPRnXSlKM.roa Signing time: Thu 08 Jan 2026 08:45:54 +0000 ROA not before: Thu 08 Jan 2026 08:45:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53356 IP address blocks: 109.203.184.0/22 maxlen: 22 109.203.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9c:c8:a7:50:3a:31:f6:75:9c:b5:c2:82:b2:17:77:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Jan 8 08:45:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d463c64bc8f14ee8fcdd135b074cf4675d294a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b5:19:ea:1a:cb:89:12:72:8f:a3:a2:ff:66: 9c:f8:9e:05:a3:d3:f3:26:1e:11:24:6e:c8:eb:e1: 37:18:bb:88:96:66:28:a0:a4:e3:6f:44:06:fd:59: a5:d4:ba:ad:b9:71:37:3b:ac:94:8b:1a:d8:25:72: a2:8d:1f:77:20:59:46:05:b4:7b:c3:16:e1:81:cb: 55:5d:5c:63:81:a7:1f:b6:65:86:c9:6b:8a:63:32: 09:20:9c:ed:cd:2c:f5:fa:f6:5e:19:04:88:16:0b: 3e:b5:df:43:ba:98:51:69:d1:b0:fc:77:76:f3:49: 05:f9:75:17:d6:26:d0:bd:bd:c1:76:b4:e2:db:92: d5:a4:e3:93:69:2b:24:57:79:25:3d:d0:9e:98:2a: 26:43:c4:f7:6d:7f:a6:3e:bc:df:65:a0:ff:97:dc: 4a:3c:80:89:05:50:bd:0e:12:a1:0a:d6:df:12:b9: f0:56:08:e1:e9:39:c4:cc:23:30:85:ff:5e:56:ae: 54:19:c8:6b:94:90:11:0b:cb:82:f7:bc:6b:18:a0: 79:ca:7c:61:74:1c:c8:de:bf:de:6d:b5:0a:8b:be: 73:96:48:54:08:59:46:47:68:1e:15:82:22:5f:1a: 41:53:34:33:98:b6:9a:9c:25:ec:65:50:1d:49:00: 9b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:46:3C:64:BC:8F:14:EE:8F:CD:D1:35:B0:74:CF:46:75:D2:94:A3 X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/fUY8ZLyPFO6PzdE1sHTPRnXSlKM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.203.184.0/21 Signature Algorithm: sha256WithRSAEncryption 0b:fa:62:94:5f:3d:55:90:6d:6e:b3:46:65:5a:5f:76:27:85: 5e:06:8c:9a:75:74:c7:3f:cd:20:85:24:33:74:dd:db:c9:d1: 28:d6:fc:5f:31:36:3c:29:43:58:5f:88:c7:4d:06:3a:ea:97: 49:eb:dd:39:ca:ab:4e:f7:91:8d:aa:fc:ec:67:11:03:a2:2c: bf:e1:61:ce:0c:4a:32:92:04:41:60:3b:c4:78:12:82:2c:af: 81:4f:22:12:3f:98:0d:71:30:f0:3a:b8:d7:04:ec:f6:80:99: 96:12:04:46:ef:24:03:20:1e:0e:ef:e9:59:cc:2f:fe:1f:b9: 86:b1:53:ec:a1:1b:ae:cf:9e:62:c3:04:76:61:81:24:d3:08: 78:c6:f9:30:c4:33:d9:81:d9:75:4b:08:50:fa:87:db:c3:45: b7:39:2a:7f:e5:b4:0c:49:a5:be:8d:cc:8c:f8:f7:17:00:d2: 3f:f0:22:a3:54:8b:7d:f1:34:0a:84:29:81:0d:f2:cf:7e:c4: 93:ac:4c:b6:21:63:ae:3e:c6:c9:e2:90:c7:d5:61:d3:ae:55: 1b:32:87:aa:c8:8e:7b:1b:26:4c:45:36:1d:61:d8:10:5b:27: cb:0d:df:64:4a:dd:e3:a9:51:8e:5d:40:54:58:39:66:44:03: dc:63:d8:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZucyKdQOjH2dZy1woKyF3ebMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjYwMTA4MDg0NTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDQ2M2M2NGJjOGYxNGVlOGZjZGQxMzViMDc0Y2Y0Njc1ZDI5NGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7UZ6hrLiRJyj6Oi/2ac+J4Fo9Pz Jh4RJG7I6+E3GLuIlmYooKTjb0QG/Vml1LqtuXE3O6yUixrYJXKijR93IFlGBbR7 wxbhgctVXVxjgacftmWGyWuKYzIJIJztzSz1+vZeGQSIFgs+td9DuphRadGw/Hd2 80kF+XUX1ibQvb3BdrTi25LVpOOTaSskV3klPdCemComQ8T3bX+mPrzfZaD/l9xK PICJBVC9DhKhCtbfErnwVgjh6TnEzCMwhf9eVq5UGchrlJARC8uC97xrGKB5ynxh dBzI3r/ebbUKi75zlkhUCFlGR2geFYIiXxpBUzQzmLaanCXsZVAdSQCbmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH1GPGS8jxTuj83RNbB0z0Z10pSjMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvZlVZOFpMeVBGTzZQemRFMXNIVFBSblhTbEtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbcu4MA0G CSqGSIb3DQEBCwUAA4IBAQAL+mKUXz1VkG1us0ZlWl92J4VeBoyadXTHP80ghSQz dN3bydEo1vxfMTY8KUNYX4jHTQY66pdJ6905yqtO95GNqvzsZxEDoiy/4WHODEoy kgRBYDvEeBKCLK+BTyISP5gNcTDwOrjXBOz2gJmWEgRG7yQDIB4O7+lZzC/+H7mG sVPsoRuuz55iwwR2YYEk0wh4xvkwxDPZgdl1SwhQ+ofbw0W3OSp/5bQMSaW+jcyM +PcXANI/8CKjVIt98TQKhCmBDfLPfsSTrEy2IWOuPsbJ4pDH1WHTrlUbMoeqyI57 GyZMRTYdYdgQWyfLDd9kSt3jqVGOXUBUWDlmRAPcY9iv -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:36 2026 by rpki-client