This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/FnbYoQsUtzd_P9lxqhjbyHQ7OE8.roa File: FnbYoQsUtzd_P9lxqhjbyHQ7OE8.roa (raw, json) Hash identifier: br68gs/aZRJu5N0ObrhyZ0fsIuQa4E0avrXz0o1l2uI= Subject key identifier: 16:76:D8:A1:0B:14:B7:37:7F:3F:D9:71:AA:18:DB:C8:74:3B:38:4F Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B79114D99F4BC234F1A6FF6C069C2AAED Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/FnbYoQsUtzd_P9lxqhjbyHQ7OE8.roa Signing time: Thu 01 Jan 2026 10:18:55 +0000 ROA not before: Thu 01 Jan 2026 10:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205380 IP address blocks: 104.238.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:4d:99:f4:bc:23:4f:1a:6f:f6:c0:69:c2:aa:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1676d8a10b14b7377f3fd971aa18dbc8743b384f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1f:55:6a:97:fa:63:8e:48:2e:00:0d:c1:d2: 3d:96:92:37:4c:4f:fb:54:9c:22:79:80:04:38:a6: 0d:f0:78:9d:72:f8:5f:0a:e8:73:74:c8:14:e0:30: 89:ec:72:35:8b:ed:bf:8c:c0:8a:85:17:f9:92:f1: 8b:6e:8e:cf:9c:88:69:c2:7a:22:3d:60:61:a2:c1: c0:39:ab:74:f0:d2:58:df:ac:37:67:28:12:20:19: 3d:7d:0b:21:10:4b:22:b0:e2:3a:29:73:81:ee:17: e2:ad:41:2d:9d:5f:92:1c:d6:19:95:00:50:30:9d: 31:27:1f:d6:3a:de:52:0a:90:90:72:f7:1c:70:56: a8:47:ba:13:d2:e3:27:0d:8e:ea:f9:7a:1f:c7:9a: 5a:fe:bc:13:e2:71:01:b4:c9:04:9b:aa:ed:5c:0a: 01:48:b1:01:f0:ed:5e:55:7a:75:7f:02:85:b7:31: f9:fa:80:06:24:5c:7a:6f:d1:74:40:45:f8:00:b5: 0d:3d:2f:b4:ee:9f:43:ef:a6:5d:48:b9:56:95:34: 78:9c:44:25:b8:16:6f:6f:e3:da:d0:5c:38:92:9c: ef:b4:b1:62:09:c2:82:1b:bb:e0:90:aa:af:e0:66: 39:7a:e4:0e:62:55:25:0d:29:50:55:d5:42:f5:4a: 5e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:76:D8:A1:0B:14:B7:37:7F:3F:D9:71:AA:18:DB:C8:74:3B:38:4F X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/FnbYoQsUtzd_P9lxqhjbyHQ7OE8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.238.26.0/24 Signature Algorithm: sha256WithRSAEncryption 47:f5:14:f8:58:e4:b2:ab:dc:c6:67:aa:6e:c0:2d:52:ed:47: 5e:14:57:45:a8:17:e4:bb:ef:52:cf:52:d3:f0:ec:a5:2e:97: 5c:d2:6c:34:71:0e:c9:d3:43:9d:fe:37:8e:5b:8e:89:15:2d: 3e:99:4f:cb:fe:19:de:d7:9b:7c:6e:20:01:7f:b4:8d:9c:3f: ca:31:bc:73:f3:46:1a:d6:b8:51:7d:9b:68:61:fd:9e:68:96: c8:0c:82:fa:d9:7b:f4:8c:07:9c:c7:97:0e:b3:db:58:af:21: cf:59:5a:22:53:97:77:b8:35:a7:70:99:4e:69:e9:cc:df:19: e2:ca:24:a5:ed:72:52:2a:5e:da:8c:82:f7:65:5e:15:df:c7: 86:b8:a8:cd:f7:0d:d1:eb:a6:df:ec:aa:93:c5:6e:c1:b6:61: 9c:fd:d5:1f:68:11:c6:26:28:b0:1f:0b:cf:ae:b5:c2:33:52: d9:08:00:46:37:38:7d:01:60:e8:05:b1:87:57:fb:e0:76:26: 55:50:56:1e:79:44:25:68:09:3f:29:c0:99:01:2c:2a:ee:eb: c5:14:7b:de:be:0a:8b:5f:52:32:2e:3d:2a:94:51:09:d2:e3: 13:60:e0:dc:b0:fc:6a:28:cd:0b:78:ec:25:be:f9:21:10:98: 49:b8:1b:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EU2Z9LwjTxpv9sBpwqrtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjc2ZDhhMTBiMTRiNzM3N2YzZmQ5NzFhYTE4ZGJjODc0M2IzODRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh9Vapf6Y45ILgANwdI9lpI3TE/7 VJwieYAEOKYN8HidcvhfCuhzdMgU4DCJ7HI1i+2/jMCKhRf5kvGLbo7PnIhpwnoi PWBhosHAOat08NJY36w3ZygSIBk9fQshEEsisOI6KXOB7hfirUEtnV+SHNYZlQBQ MJ0xJx/WOt5SCpCQcvcccFaoR7oT0uMnDY7q+Xofx5pa/rwT4nEBtMkEm6rtXAoB SLEB8O1eVXp1fwKFtzH5+oAGJFx6b9F0QEX4ALUNPS+07p9D76ZdSLlWlTR4nEQl uBZvb+Pa0Fw4kpzvtLFiCcKCG7vgkKqv4GY5euQOYlUlDSlQVdVC9UpewwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBZ22KELFLc3fz/ZcaoY28h0OzhPMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvRm5iWW9Rc1V0emRfUDlseHFoamJ5SFE3T0U4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO4aMA0G CSqGSIb3DQEBCwUAA4IBAQBH9RT4WOSyq9zGZ6puwC1S7UdeFFdFqBfku+9Sz1LT 8OylLpdc0mw0cQ7J00Od/jeOW46JFS0+mU/L/hne15t8biABf7SNnD/KMbxz80Ya 1rhRfZtoYf2eaJbIDIL62Xv0jAecx5cOs9tYryHPWVoiU5d3uDWncJlOaenM3xni yiSl7XJSKl7ajIL3ZV4V38eGuKjN9w3R66bf7KqTxW7BtmGc/dUfaBHGJiiwHwvP rrXCM1LZCABGNzh9AWDoBbGHV/vgdiZVUFYeeUQlaAk/KcCZASwq7uvFFHvevgqL X1IyLj0qlFEJ0uMTYODcsPxqKM0LeOwlvvkhEJhJuBtX -----END CERTIFICATE-----Generated at Fri Jan 2 02:40:51 2026 by rpki-client