This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/FkAj1Ha2AxLXAFzT4B7Vtdx1ia4.roa File: FkAj1Ha2AxLXAFzT4B7Vtdx1ia4.roa (raw, json) Hash identifier: euTw/AAqqjTUVbMKtn/QFj1jXzFLLBGGY1nCe1c6cCc= Subject key identifier: 16:40:23:D4:76:B6:03:12:D7:00:5C:D3:E0:1E:D5:B5:DC:75:89:AE Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019C042220347C853B5A8CD72D1788F95047 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/FkAj1Ha2AxLXAFzT4B7Vtdx1ia4.roa Signing time: Wed 28 Jan 2026 10:24:31 +0000 ROA not before: Wed 28 Jan 2026 10:24:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205009 IP address blocks: 216.173.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:22:20:34:7c:85:3b:5a:8c:d7:2d:17:88:f9:50:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 28 10:24:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=164023d476b60312d7005cd3e01ed5b5dc7589ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6b:4d:18:3c:3b:b9:fc:dd:16:d2:fe:fe:be: b6:51:c9:22:60:28:c3:db:f5:0d:60:07:72:c9:de: 10:53:45:2a:60:fa:33:66:85:31:01:10:1d:6b:f6: 4a:42:58:90:de:f8:e5:c9:28:95:02:59:be:0b:f0: eb:33:32:1e:64:88:a4:eb:4d:94:d6:2c:55:26:2f: d0:84:6f:c6:ee:52:ce:ca:76:62:ac:67:a9:42:e9: 9b:c6:80:4d:92:b8:4c:b2:e3:83:6d:5f:5b:1d:83: 0d:68:57:c4:4c:bf:fc:7a:39:35:63:e6:be:ef:2b: 3e:29:a7:a9:97:e2:8f:ea:c4:e4:3a:da:df:96:11: 8b:8d:48:5e:f3:83:c4:b0:15:5e:0c:a5:1c:42:39: e4:8c:70:04:22:80:c2:8b:ff:9a:d2:a9:58:74:1b: 08:df:10:92:d7:3b:a4:9f:dc:02:07:94:6b:c5:95: eb:c3:db:b8:aa:a4:f4:c8:2c:10:9b:23:c7:f8:ce: 7b:8c:ec:6e:d7:75:09:e2:90:28:5e:91:b2:79:7d: af:8d:c1:77:9d:cd:ba:40:0b:21:e6:57:a2:e7:b1: 7b:50:d9:27:9b:fe:4a:1d:e6:7a:cf:06:00:b5:5a: 8c:fd:af:94:e2:38:05:cc:fe:19:61:0a:9f:49:d6: e8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:40:23:D4:76:B6:03:12:D7:00:5C:D3:E0:1E:D5:B5:DC:75:89:AE X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/FkAj1Ha2AxLXAFzT4B7Vtdx1ia4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.173.121.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:c8:30:2e:5d:3c:a6:8e:31:16:14:1e:1d:5f:01:69:9a:da: 21:28:b2:b7:c9:f6:20:b6:6d:94:95:24:66:8c:f8:c0:9e:a0: fb:53:a8:5e:5b:6c:3d:13:62:ee:22:d3:53:22:28:92:40:fa: e8:63:10:01:e2:ca:d8:ca:f4:cf:f0:04:0f:ea:34:0e:be:65: ce:73:e4:8a:33:23:f1:81:ef:57:51:8d:05:65:27:35:11:ff: b6:8f:4e:56:20:22:2a:98:5f:38:8a:8e:96:0b:c9:d6:14:ec: 66:76:2f:89:68:bd:e4:5c:c7:da:46:62:47:27:15:ba:4f:df: ef:6c:34:ba:e0:30:ec:72:9d:b6:49:96:57:c2:02:4c:2d:3a: 97:b8:a2:0a:b7:91:2d:56:f6:f9:46:c4:7b:c3:08:91:a9:da: e5:fd:6b:a2:ca:08:3e:e2:d5:75:fa:3e:ea:e2:06:46:d9:bb: e8:f5:d4:81:b6:db:85:ed:7d:fd:ba:68:65:db:f2:28:ed:2e: c6:e2:83:ce:3f:e2:75:02:64:88:b2:1e:46:d0:85:09:5c:81: b7:8d:6a:3a:4a:42:df:2e:64:27:7a:61:8d:c3:2e:76:8a:d2: 89:f1:b9:b7:90:0a:82:7a:24:b1:52:93:4c:c3:32:62:ef:a4: 6c:c6:00:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwEIiA0fIU7WozXLReI+VBHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTI4MTAyNDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjQwMjNkNDc2YjYwMzEyZDcwMDVjZDNlMDFlZDViNWRjNzU4OWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WtNGDw7ufzdFtL+/r62UckiYCjD 2/UNYAdyyd4QU0UqYPozZoUxARAda/ZKQliQ3vjlySiVAlm+C/DrMzIeZIik602U 1ixVJi/QhG/G7lLOynZirGepQumbxoBNkrhMsuODbV9bHYMNaFfETL/8ejk1Y+a+ 7ys+Kaepl+KP6sTkOtrflhGLjUhe84PEsBVeDKUcQjnkjHAEIoDCi/+a0qlYdBsI 3xCS1zukn9wCB5RrxZXrw9u4qqT0yCwQmyPH+M57jOxu13UJ4pAoXpGyeX2vjcF3 nc26QAsh5lei57F7UNknm/5KHeZ6zwYAtVqM/a+U4jgFzP4ZYQqfSdbodwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBZAI9R2tgMS1wBc0+Ae1bXcdYmuMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvRmtBajFIYTJBeExYQUZ6VDRCN1Z0ZHgxaWE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2K15MA0G CSqGSIb3DQEBCwUAA4IBAQB6yDAuXTymjjEWFB4dXwFpmtohKLK3yfYgtm2UlSRm jPjAnqD7U6heW2w9E2LuItNTIiiSQProYxAB4srYyvTP8AQP6jQOvmXOc+SKMyPx ge9XUY0FZSc1Ef+2j05WICIqmF84io6WC8nWFOxmdi+JaL3kXMfaRmJHJxW6T9/v bDS64DDscp22SZZXwgJMLTqXuKIKt5EtVvb5RsR7wwiRqdrl/Wuiygg+4tV1+j7q 4gZG2bvo9dSBttuF7X39umhl2/Io7S7G4oPOP+J1AmSIsh5G0IUJXIG3jWo6SkLf LmQnemGNwy52itKJ8bm3kAqCeiSxUpNMwzJi76RsxgDp -----END CERTIFICATE-----Generated at Mon Feb 2 15:24:10 2026 by rpki-client