This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/fmL33jm6pQbJAo5swZ5d7B5LbTk.roa File: fmL33jm6pQbJAo5swZ5d7B5LbTk.roa (raw, json) Hash identifier: UvT7sSrI/4M2udwrvWXd5a9wLBdKvu+G0V5zrpplgU0= Subject key identifier: 7E:62:F7:DE:39:BA:A5:06:C9:02:8E:6C:C1:9E:5D:EC:1E:4B:6D:39 Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019B45DB77939CF8886838BDCDDBD361B915 Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/fmL33jm6pQbJAo5swZ5d7B5LbTk.roa Signing time: Mon 22 Dec 2025 11:39:29 +0000 ROA not before: Mon 22 Dec 2025 11:39:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 11439 IP address blocks: 141.98.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:db:77:93:9c:f8:88:68:38:bd:cd:db:d3:61:b9:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Dec 22 11:39:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7e62f7de39baa506c9028e6cc19e5dec1e4b6d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:22:75:9d:f3:04:11:d6:fc:e6:b2:fc:6a:27: 88:e6:6b:15:85:cb:5e:da:fe:c5:91:78:5e:8a:73: 61:99:52:ae:9c:18:a5:72:55:da:28:53:fd:2d:67: 27:a8:30:8d:21:3f:ef:73:69:89:23:d2:39:6e:8a: 1e:82:4d:5b:07:5e:e3:8f:68:36:a9:30:2b:be:e1: 23:9a:eb:c8:5f:48:5f:ed:af:a9:db:7b:1a:09:f5: 38:f8:81:77:9d:77:26:68:1e:4b:ac:e0:4f:b4:c7: 37:b1:39:65:33:db:20:b2:5e:1d:1c:af:56:01:e0: 3f:06:55:e4:a2:7a:76:d1:2d:c3:bd:41:a6:7f:5c: bf:6b:01:0b:6f:66:c5:64:4c:c4:a9:21:8f:26:50: 6e:de:ce:77:93:d5:3c:ed:4c:97:f9:e0:9c:8b:2b: c1:d2:8b:f3:d2:d2:01:e6:38:1a:e8:d8:ab:a4:9b: b6:27:e4:70:73:e2:d0:1e:7b:54:85:56:93:6c:72: fa:a9:b3:d3:ee:92:32:ee:65:7a:1e:93:27:ba:a7: ea:06:6e:dc:f0:2a:a3:ea:c0:6c:7e:29:7d:a2:82: 7d:9c:bf:ae:b2:2c:5c:a6:96:e2:11:9a:82:30:56: 06:1f:90:0d:f2:99:43:24:a1:64:7f:bc:d3:bf:11: d2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:62:F7:DE:39:BA:A5:06:C9:02:8E:6C:C1:9E:5D:EC:1E:4B:6D:39 X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/fmL33jm6pQbJAo5swZ5d7B5LbTk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.148.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:07:b4:c5:0b:b4:35:5c:94:b7:a5:18:8c:8b:be:37:0c:f1: 94:fa:7c:b3:42:49:15:20:ea:48:82:48:81:56:fd:e3:e9:a7: 24:32:6e:5e:a4:d9:3a:aa:35:fe:0c:44:a9:be:9d:ba:e6:13: 94:bc:cc:ea:b4:90:34:82:6c:e5:ac:9e:12:14:3b:92:7a:b4: 48:33:88:ec:9f:b8:fc:3a:85:a1:a7:01:3f:58:98:ca:74:48: c0:1e:79:d7:ed:a1:55:da:dc:8e:a4:26:a1:eb:b1:e1:ae:54: 65:b1:25:e0:49:1b:26:c8:d3:ed:00:cf:73:4f:04:b1:8e:9a: 5e:13:87:09:63:51:a0:58:4b:c7:77:5e:d1:a2:ca:da:9d:97: 05:19:8e:f2:fc:72:bf:5c:e4:b8:53:56:f9:70:2d:c5:32:22: 52:1f:dd:49:33:01:28:4a:67:4e:20:3e:44:5b:06:6f:ca:6d: cc:9f:a4:ee:d4:ae:12:a1:c9:80:ce:89:04:94:af:3e:bb:b4: f8:72:32:36:74:0d:14:0e:7f:fc:5b:18:b0:d9:c1:b6:de:85: bd:a0:06:67:3a:6c:07:b4:64:fd:4c:75:f5:2d:b3:ba:12:fb: be:ba:1c:98:c6:2b:a3:95:2e:fc:ea:e7:6e:6b:b9:05:ff:08: 83:c4:80:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtF23eTnPiIaDi9zdvTYbkVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjUxMjIyMTEzOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTYyZjdkZTM5YmFhNTA2YzkwMjhlNmNjMTllNWRlYzFlNGI2ZDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiJ1nfMEEdb85rL8aieI5msVhcte 2v7FkXheinNhmVKunBilclXaKFP9LWcnqDCNIT/vc2mJI9I5booegk1bB17jj2g2 qTArvuEjmuvIX0hf7a+p23saCfU4+IF3nXcmaB5LrOBPtMc3sTllM9sgsl4dHK9W AeA/BlXkonp20S3DvUGmf1y/awELb2bFZEzEqSGPJlBu3s53k9U87UyX+eCciyvB 0ovz0tIB5jga6NirpJu2J+Rwc+LQHntUhVaTbHL6qbPT7pIy7mV6HpMnuqfqBm7c 8Cqj6sBsfil9ooJ9nL+usixcppbiEZqCMFYGH5AN8plDJKFkf7zTvxHSDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH5i9945uqUGyQKObMGeXeweS205MB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvZm1MMzNqbTZwUWJKQW81c3daNWQ3QjVMYlRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWKUMA0G CSqGSIb3DQEBCwUAA4IBAQBaB7TFC7Q1XJS3pRiMi743DPGU+nyzQkkVIOpIgkiB Vv3j6ackMm5epNk6qjX+DESpvp265hOUvMzqtJA0gmzlrJ4SFDuSerRIM4jsn7j8 OoWhpwE/WJjKdEjAHnnX7aFV2tyOpCah67HhrlRlsSXgSRsmyNPtAM9zTwSxjppe E4cJY1GgWEvHd17RosranZcFGY7y/HK/XOS4U1b5cC3FMiJSH91JMwEoSmdOID5E WwZvym3Mn6Tu1K4SocmAzokElK8+u7T4cjI2dA0UDn/8Wxiw2cG23oW9oAZnOmwH tGT9THX1LbO6Evu+uhyYxiujlS786udua7kF/wiDxIB8 -----END CERTIFICATE-----Generated at Fri Dec 26 06:31:48 2025 by rpki-client