This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/Fsb5HdL7NcO_faI7SYpSwT3IZj0.roa File: Fsb5HdL7NcO_faI7SYpSwT3IZj0.roa (raw, json) Hash identifier: Dq+bYU+W7cSYjUMeWCs5QEHpiuPHvRD8GOeB0Afw45M= Subject key identifier: 16:C6:F9:1D:D2:FB:35:C3:BF:7D:A2:3B:49:8A:52:C1:3D:C8:66:3D Certificate issuer: /CN=dee72c8faecb7052c841201b25f6a018e477b1c2 Certificate serial: 019B7BA5334EC98F8E6E9FEABAFEEBA10633 Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/Fsb5HdL7NcO_faI7SYpSwT3IZj0.roa Signing time: Thu 01 Jan 2026 22:19:42 +0000 ROA not before: Thu 01 Jan 2026 22:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209641 IP address blocks: 194.59.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:33:4e:c9:8f:8e:6e:9f:ea:ba:fe:eb:a1:06:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2 Validity Not Before: Jan 1 22:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16c6f91dd2fb35c3bf7da23b498a52c13dc8663d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:f8:f3:de:52:5b:cc:47:e0:45:6e:ef:5f: d0:7a:40:e1:bd:aa:29:1a:00:1f:66:94:05:43:86: cf:89:71:6c:b4:8a:e0:e8:38:d3:76:4b:68:6f:ee: 37:db:e9:12:48:fe:21:fd:62:15:a9:45:73:81:78: 96:04:d4:71:40:9e:56:c3:71:8f:d2:86:ec:99:6b: 8e:1b:91:bd:44:cf:e2:e6:91:ed:7a:c3:dc:ce:51: 4b:61:ed:b2:65:a7:60:6e:c2:65:0b:79:ac:85:25: 41:f8:8a:00:c8:79:0b:37:2e:11:8e:fe:2f:c2:d5: dc:5a:b9:38:d2:38:89:a7:01:df:f0:2a:5a:91:5b: 3d:3b:05:7f:84:85:97:c9:63:8d:43:e8:aa:f4:e0: d0:1f:c3:cd:10:e9:9d:ae:1b:f7:6e:e5:35:b0:d9: bf:27:d8:77:26:5e:0e:3a:a0:ac:3b:94:7c:7f:d8: 7b:33:1d:d5:ca:38:8b:f7:80:e6:b3:1c:3a:66:f0: 44:7f:a1:13:e8:57:54:be:93:86:02:2b:89:c0:db: d6:f0:3c:9a:1c:cb:f4:24:d7:09:43:83:90:de:5b: 6d:19:71:ab:e3:17:c9:a8:b6:4c:5b:9a:9e:f7:4b: 6f:7a:bd:36:97:3e:2e:2d:bb:e1:06:07:d5:e9:c6: e7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C6:F9:1D:D2:FB:35:C3:BF:7D:A2:3B:49:8A:52:C1:3D:C8:66:3D X509v3 Authority Key Identifier: keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/Fsb5HdL7NcO_faI7SYpSwT3IZj0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.59.215.0/24 Signature Algorithm: sha256WithRSAEncryption 24:58:d6:a5:9c:05:18:a4:06:25:b6:d8:f0:df:c1:dd:71:55: 3d:1f:0d:d1:4e:d6:8c:7c:3a:17:ba:19:cb:c0:7d:2b:33:1f: c1:15:79:da:31:23:29:eb:43:3c:d1:6f:f1:b4:d2:48:32:fd: e7:2a:1b:9e:46:e2:0d:2d:15:bb:61:1c:db:15:06:90:cb:a1: 4b:e7:76:07:90:67:20:da:7d:c4:d7:ac:27:15:d2:9c:f4:27: 18:fe:5f:c0:34:29:7e:9c:00:68:23:84:27:ae:95:ee:d6:07: 9b:67:5c:3f:f8:05:9c:f8:42:5a:ae:1e:7d:0a:ec:e0:2a:83: 09:24:6b:71:34:8d:a3:fb:e5:9f:3b:30:fd:78:17:cc:0f:78: 44:6c:ea:16:18:75:31:45:0e:3e:76:0c:28:9f:c2:1e:2f:be: fc:f6:ad:57:6d:ec:60:86:4f:95:09:a4:97:1d:f7:f8:59:85: 17:bf:7c:af:ce:3f:32:bd:e2:97:42:18:07:de:23:22:ae:11: d2:52:da:a1:fb:f0:71:d2:61:e6:a2:f2:ba:11:f1:4f:77:f6: 4c:fc:9c:e8:92:83:6c:6e:6e:df:0a:23:c1:9d:72:25:1a:0a: 15:0e:0b:2f:ba:22:da:0b:c2:b0:64:8e:b8:1e:de:2f:6d:47: b2:34:92:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pTNOyY+Obp/quv7roQYzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZTcyYzhmYWVjYjcwNTJjODQxMjAxYjI1ZjZhMDE4ZTQ3 N2IxYzIwHhcNMjYwMTAxMjIxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmM2ZjkxZGQyZmIzNWMzYmY3ZGEyM2I0OThhNTJjMTNkYzg2NjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfn4895SW8xH4EVu71/QekDhvaop GgAfZpQFQ4bPiXFstIrg6DjTdktob+432+kSSP4h/WIVqUVzgXiWBNRxQJ5Ww3GP 0obsmWuOG5G9RM/i5pHtesPczlFLYe2yZadgbsJlC3mshSVB+IoAyHkLNy4Rjv4v wtXcWrk40jiJpwHf8CpakVs9OwV/hIWXyWONQ+iq9ODQH8PNEOmdrhv3buU1sNm/ J9h3Jl4OOqCsO5R8f9h7Mx3VyjiL94Dmsxw6ZvBEf6ET6FdUvpOGAiuJwNvW8Dya HMv0JNcJQ4OQ3lttGXGr4xfJqLZMW5qe90tver02lz4uLbvhBgfV6cbnrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBbG+R3S+zXDv32iO0mKUsE9yGY9MB8GA1UdIwQY MBaAFN7nLI+uy3BSyEEgGyX2oBjkd7HCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3Vjc2o2N0xjRkxJUVNBYkpmYWdHT1Izc2NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lZjgyOWEtYWNmYy00NDAyLTk1Y2Ut MzgzZmIyYjk1NGQ5LzEvRnNiNUhkTDdOY09fZmFJN1NZcFN3VDNJWmowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9lZjgyOWEtYWNmYy00NDAyLTk1Y2UtMzgzZmIyYjk1NGQ5 LzEvM3Vjc2o2N0xjRkxJUVNBYkpmYWdHT1Izc2NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjvXMA0G CSqGSIb3DQEBCwUAA4IBAQAkWNalnAUYpAYlttjw38HdcVU9Hw3RTtaMfDoXuhnL wH0rMx/BFXnaMSMp60M80W/xtNJIMv3nKhueRuINLRW7YRzbFQaQy6FL53YHkGcg 2n3E16wnFdKc9CcY/l/ANCl+nABoI4QnrpXu1gebZ1w/+AWc+EJarh59CuzgKoMJ JGtxNI2j++WfOzD9eBfMD3hEbOoWGHUxRQ4+dgwon8IeL7789q1Xbexghk+VCaSX Hff4WYUXv3yvzj8yveKXQhgH3iMirhHSUtqh+/Bx0mHmovK6EfFPd/ZM/JzokoNs bm7fCiPBnXIlGgoVDgsvuiLaC8KwZI64Ht4vbUeyNJKk -----END CERTIFICATE-----Generated at Wed Jan 21 23:10:25 2026 by rpki-client