This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FUDsfThk0_Nph1K8Z711NgKYeso.roa File: FUDsfThk0_Nph1K8Z711NgKYeso.roa (raw, json) Hash identifier: D89KWLD16o15+xdLO3tQLfbhF0l+8QcIP31E+6V7emQ= Subject key identifier: 15:40:EC:7D:38:64:D3:F3:69:87:52:BC:67:BD:75:36:02:98:7A:CA Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019A829A8DB6D7AEE1DD01A92F6417B5D50E Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FUDsfThk0_Nph1K8Z711NgKYeso.roa Signing time: Fri 14 Nov 2025 13:42:38 +0000 ROA not before: Fri 14 Nov 2025 13:42:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212623 IP address blocks: 146.120.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 15:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:82:9a:8d:b6:d7:ae:e1:dd:01:a9:2f:64:17:b5:d5:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Nov 14 13:42:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1540ec7d3864d3f3698752bc67bd753602987aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:36:49:72:80:11:24:cd:da:aa:52:f5:27:78: 55:e6:5d:95:57:4f:0a:20:00:c2:37:94:bc:bc:12: d9:d3:1a:dd:93:08:23:36:89:f9:70:b6:8f:32:3f: 5d:af:7b:3f:79:97:27:66:fb:db:b3:8d:1b:db:4c: 42:48:a5:51:99:64:58:1a:f3:56:59:cb:9d:7b:33: d4:6e:6a:ea:0a:c8:42:26:bb:cd:47:95:89:09:e8: e3:65:3a:1d:2e:6b:d7:51:d3:c9:14:71:ed:f7:75: 8c:8c:1e:cb:89:3b:89:79:28:86:70:bb:5c:83:ba: eb:ea:08:b5:21:13:37:02:74:be:da:31:11:3b:da: 40:88:cd:cd:b0:bb:81:32:43:0b:ff:c7:dc:60:56: e5:cb:ab:1d:37:26:95:32:4b:4f:61:ad:9b:02:5c: 8d:5e:1c:7e:f2:14:c9:b4:2a:2e:61:7c:cc:14:d7: ec:10:c1:8e:dc:42:1c:87:ae:5e:cd:06:f6:48:78: 02:8a:ef:5c:53:97:e7:f0:8a:73:e0:32:42:5e:f1: 25:d8:42:43:96:80:fe:b1:fc:b5:80:ae:82:74:3a: 39:c9:07:8e:c2:57:06:5d:82:da:ba:6b:e6:bb:c7: fe:55:34:db:c9:04:2b:ae:68:07:a4:5b:7a:66:40: 30:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:40:EC:7D:38:64:D3:F3:69:87:52:BC:67:BD:75:36:02:98:7A:CA X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FUDsfThk0_Nph1K8Z711NgKYeso.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.120.214.0/24 Signature Algorithm: sha256WithRSAEncryption 76:de:11:65:ea:f6:da:13:04:92:cb:5e:a6:9f:4d:67:46:d0: 2e:a4:24:fb:75:ae:d2:43:8d:1d:e6:c6:4c:b9:6a:8f:7e:7a: 94:9f:0e:8d:bb:85:5b:78:f5:d7:e9:31:69:2f:40:d3:67:b1: f7:67:d8:cb:53:1c:64:15:85:f5:84:a7:e3:5e:c9:d2:28:33: 55:f3:12:62:f6:45:2d:82:11:1f:fd:b6:b8:03:cf:19:09:19: 00:f8:b2:7c:6f:0f:4a:59:89:ec:56:6c:ce:93:9d:8d:6b:5e: 61:6d:d3:13:9d:f4:87:03:dd:c3:1d:01:61:21:96:5b:87:04: f9:0e:78:e9:f0:ca:a2:64:6f:59:b6:ae:47:15:d1:64:b7:1b: 53:63:c8:cf:c3:db:37:92:d9:b7:61:b4:b0:54:54:7f:8e:86: 2e:9d:db:c6:3f:00:df:50:31:55:28:b4:ac:63:61:2f:d6:a6: 42:a6:05:de:15:e1:23:14:cb:03:03:05:30:ac:cd:ed:84:88: 89:c9:46:10:74:54:c2:0a:b0:e3:e9:17:cd:aa:aa:77:28:1b: 26:ea:79:3f:cd:9f:37:1c:c2:52:54:3a:92:5d:13:c7:30:b9: c5:cc:f6:fa:1c:39:d4:e2:07:c6:3e:6b:67:8f:c9:49:b5:ec: b2:93:ff:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqCmo22167h3QGpL2QXtdUOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjUxMTE0MTM0MjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTQwZWM3ZDM4NjRkM2YzNjk4NzUyYmM2N2JkNzUzNjAyOTg3YWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DZJcoARJM3aqlL1J3hV5l2VV08K IADCN5S8vBLZ0xrdkwgjNon5cLaPMj9dr3s/eZcnZvvbs40b20xCSKVRmWRYGvNW WcudezPUbmrqCshCJrvNR5WJCejjZTodLmvXUdPJFHHt93WMjB7LiTuJeSiGcLtc g7rr6gi1IRM3AnS+2jERO9pAiM3NsLuBMkML/8fcYFbly6sdNyaVMktPYa2bAlyN Xhx+8hTJtCouYXzMFNfsEMGO3EIch65ezQb2SHgCiu9cU5fn8Ipz4DJCXvEl2EJD loD+sfy1gK6CdDo5yQeOwlcGXYLaumvmu8f+VTTbyQQrrmgHpFt6ZkAwqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBVA7H04ZNPzaYdSvGe9dTYCmHrKMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvRlVEc2ZUaGswX05waDFLOFo3MTFOZ0tZZXNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAknjWMA0G CSqGSIb3DQEBCwUAA4IBAQB23hFl6vbaEwSSy16mn01nRtAupCT7da7SQ40d5sZM uWqPfnqUnw6Nu4VbePXX6TFpL0DTZ7H3Z9jLUxxkFYX1hKfjXsnSKDNV8xJi9kUt ghEf/ba4A88ZCRkA+LJ8bw9KWYnsVmzOk52Na15hbdMTnfSHA93DHQFhIZZbhwT5 Dnjp8MqiZG9Ztq5HFdFktxtTY8jPw9s3ktm3YbSwVFR/joYundvGPwDfUDFVKLSs Y2Ev1qZCpgXeFeEjFMsDAwUwrM3thIiJyUYQdFTCCrDj6RfNqqp3KBsm6nk/zZ83 HMJSVDqSXRPHMLnFzPb6HDnU4gfGPmtnj8lJteyyk//B -----END CERTIFICATE-----Generated at Sun Dec 7 21:32:19 2025 by rpki-client