This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/fjS2CghdsDOfJAGDNNv1IoVdW4A.roa File: fjS2CghdsDOfJAGDNNv1IoVdW4A.roa (raw, json) Hash identifier: L16UjIVK52McMfz2H8lqgnkKRY5+lCVRsOxYUIF8LqM= Subject key identifier: 7E:34:B6:0A:08:5D:B0:33:9F:24:01:83:34:DB:F5:22:85:5D:5B:80 Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0 Certificate serial: 019B7D5C572CF90389B2312519E91F35C438 Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/fjS2CghdsDOfJAGDNNv1IoVdW4A.roa Signing time: Fri 02 Jan 2026 06:19:22 +0000 ROA not before: Fri 02 Jan 2026 06:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 164.152.232.0/21 maxlen: 21 194.164.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:57:2c:f9:03:89:b2:31:25:19:e9:1f:35:c4:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0 Validity Not Before: Jan 2 06:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e34b60a085db0339f24018334dbf522855d5b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7d:51:ed:b1:e6:96:db:15:ee:af:d9:cc:41: e5:7a:9d:00:41:cf:3b:97:38:47:2f:8c:35:75:04: ac:0b:8b:10:05:c0:45:1c:0b:3b:4a:5b:43:b6:d8: 96:00:eb:f1:68:5d:2e:7e:c9:da:23:4d:bb:a6:a7: 0e:9c:c3:a1:e5:03:32:ef:88:48:20:33:bd:d0:4e: 36:be:92:41:ea:98:2c:d5:7b:28:95:02:3c:10:44: 89:f4:0a:a9:5f:89:61:6f:2d:d0:7f:eb:9a:2c:41: 39:28:e8:c3:ec:d9:f5:95:a9:6b:9e:4e:6a:9b:63: a2:8c:8b:8f:68:0d:d5:0f:86:2c:74:55:9f:d4:4d: 16:86:8b:9d:4c:a1:25:07:3a:be:d8:95:6a:07:5a: 10:b9:f1:ce:11:24:ab:4f:d2:7e:57:86:9a:df:4e: 84:9f:2c:e5:26:dd:78:f1:56:28:9b:86:2d:3e:35: 7e:4c:a9:2c:4c:b0:da:c0:ea:a0:e5:b3:a1:e1:25: 4e:b9:9d:67:ff:6b:92:27:45:0d:21:1d:e6:db:09: 9e:c3:c2:68:cf:e3:c4:72:5e:5c:a7:88:90:59:a9: c7:3f:7d:e9:cd:6f:e2:f7:c9:1d:d7:e4:7c:5f:c6: 3b:55:16:84:d4:0a:39:48:ef:8c:71:ea:4f:1c:a9: 3a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:34:B6:0A:08:5D:B0:33:9F:24:01:83:34:DB:F5:22:85:5D:5B:80 X509v3 Authority Key Identifier: keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/fjS2CghdsDOfJAGDNNv1IoVdW4A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.152.232.0/21 194.164.246.0/24 Signature Algorithm: sha256WithRSAEncryption a2:8f:2d:ef:06:db:96:44:72:af:c8:54:37:b6:d2:d3:61:a5: 4c:1f:79:0f:12:f0:17:85:e4:aa:91:79:6c:dc:1c:2e:b8:9d: d5:8d:fa:43:8b:f2:70:a5:11:40:6a:0c:c1:bc:3f:77:94:20: 5f:64:ae:1f:3b:b7:3f:59:dc:b9:28:43:cf:af:c7:da:84:12: 75:81:ce:ab:ee:ac:4c:94:81:37:f0:ae:a1:a3:4a:61:23:21: c6:a9:6a:79:5a:6e:ba:89:0f:1b:bc:e6:17:e9:ac:6c:0c:41: 80:60:7e:99:f5:6a:89:3f:2e:e0:e8:f4:f2:db:3f:85:60:e3: e2:66:07:12:46:a5:0d:42:fe:bd:f8:51:5a:1c:90:ab:38:0d: 32:8c:dc:66:33:75:56:d1:0e:cf:40:8a:5a:51:08:3a:82:8f: 25:ea:cc:ff:44:34:6f:60:50:f5:ec:bc:56:ec:90:11:43:7c: c8:82:58:40:11:d6:c1:48:e9:fa:6f:81:1c:99:05:d8:ec:c1: 5a:96:d5:3e:4d:ce:c2:50:9d:21:69:c8:dc:01:fa:a7:d8:85: e5:36:26:7f:79:18:a4:6b:87:f1:b2:79:80:90:f1:a4:a5:a9: 01:00:c1:1a:f9:57:24:d8:30:26:7c:4f:a2:73:b9:8c:ac:e6: 12:78:ef:9a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XFcs+QOJsjElGekfNcQ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYjY0ZmE4ZTA1YTJkN2Y1NjRhY2YyODlhZTc1N2M0MDRj ZGQ5ZDAwHhcNMjYwMTAyMDYxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTM0YjYwYTA4NWRiMDMzOWYyNDAxODMzNGRiZjUyMjg1NWQ1YjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX1R7bHmltsV7q/ZzEHlep0AQc87 lzhHL4w1dQSsC4sQBcBFHAs7SltDttiWAOvxaF0ufsnaI027pqcOnMOh5QMy74hI IDO90E42vpJB6pgs1XsolQI8EESJ9AqpX4lhby3Qf+uaLEE5KOjD7Nn1lalrnk5q m2OijIuPaA3VD4YsdFWf1E0WhoudTKElBzq+2JVqB1oQufHOESSrT9J+V4aa306E nyzlJt148VYom4YtPjV+TKksTLDawOqg5bOh4SVOuZ1n/2uSJ0UNIR3m2wmew8Jo z+PEcl5cp4iQWanHP33pzW/i98kd1+R8X8Y7VRaE1Ao5SO+McepPHKk6swIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFH40tgoIXbAznyQBgzTb9SKFXVuAMB8GA1UdIwQY MBaAFG62T6jgWi1/VkrPKJrnV8QEzdnQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnJaUHFPQmFMWDlXU3M4b211ZFh4QVROMmRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy81ODQ5OTctODNhYi00ODE3LWFhYzMt ODhjZjcyY2E5ZTQ2LzEvZmpTMkNnaGRzRE9mSkFHRE5OdjFJb1ZkVzRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy81ODQ5OTctODNhYi00ODE3LWFhYzMtODhjZjcyY2E5ZTQ2 LzEvYnJaUHFPQmFMWDlXU3M4b211ZFh4QVROMmRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDpJjoAwQA wqT2MA0GCSqGSIb3DQEBCwUAA4IBAQCijy3vBtuWRHKvyFQ3ttLTYaVMH3kPEvAX heSqkXls3BwuuJ3VjfpDi/JwpRFAagzBvD93lCBfZK4fO7c/Wdy5KEPPr8fahBJ1 gc6r7qxMlIE38K6ho0phIyHGqWp5Wm66iQ8bvOYX6axsDEGAYH6Z9WqJPy7g6PTy 2z+FYOPiZgcSRqUNQv69+FFaHJCrOA0yjNxmM3VW0Q7PQIpaUQg6go8l6sz/RDRv YFD17LxW7JARQ3zIglhAEdbBSOn6b4EcmQXY7MFaltU+Tc7CUJ0hacjcAfqn2IXl NiZ/eRika4fxsnmAkPGkpakBAMEa+Vck2DAmfE+ic7mMrOYSeO+a -----END CERTIFICATE-----Generated at Fri Jan 2 11:03:56 2026 by rpki-client