This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/FUSrBx5nHnlTGB6ewg5v8yqgXPU.roa File: FUSrBx5nHnlTGB6ewg5v8yqgXPU.roa (raw, json) Hash identifier: 2MUjqPWuE0Az4HiuRSuLiJ3ZQ8HNjqYEJSlT6u/vtLo= Subject key identifier: 15:44:AB:07:1E:67:1E:79:53:18:1E:9E:C2:0E:6F:F3:2A:A0:5C:F5 Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714 Certificate serial: 019B7EA4788183D79AAA0246A5314DA3AB76 Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/FUSrBx5nHnlTGB6ewg5v8yqgXPU.roa Signing time: Fri 02 Jan 2026 12:17:46 +0000 ROA not before: Fri 02 Jan 2026 12:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43120 IP address blocks: 86.111.87.0/24 maxlen: 24 95.215.216.0/22 maxlen: 23 176.39.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:78:81:83:d7:9a:aa:02:46:a5:31:4d:a3:ab:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714 Validity Not Before: Jan 2 12:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1544ab071e671e7953181e9ec20e6ff32aa05cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4b:79:e3:44:65:be:8d:16:a8:2c:74:5d:1b: 25:b2:d6:96:ee:e8:12:01:15:37:c1:50:1f:3e:1b: 7f:2d:59:e0:b1:dd:94:68:68:be:10:71:b1:c0:46: 0b:05:bc:25:0c:52:7d:32:a6:cb:2c:8d:5d:4e:dc: a5:f6:9f:93:21:d6:8e:3c:37:13:f0:ad:87:1d:36: c8:00:6b:c0:37:d2:0a:b9:bc:cd:5b:8b:d9:ed:4a: 07:1f:27:73:37:e4:9c:b4:94:cd:f3:b5:7e:db:f7: bb:20:84:a9:b5:5a:ca:f9:e6:bb:35:49:72:10:4c: ba:85:a0:4c:f7:87:24:9d:5c:8a:02:f3:05:5d:d0: 85:c8:f9:dd:a8:6a:c1:cb:7c:74:6c:7b:05:66:39: c9:0e:22:64:29:45:ba:ce:4b:6c:73:d0:f4:48:37: 2d:79:2d:98:95:26:13:11:80:e6:45:e5:72:a4:25: 30:53:20:11:35:87:fc:e3:14:15:c8:57:11:cf:ba: 98:c6:c1:12:8b:07:bb:65:68:94:b7:53:35:f9:aa: c1:df:c4:ab:0e:3d:a6:38:dc:43:e6:00:6d:72:83: e4:01:3e:53:63:34:99:5a:d9:9c:95:46:e5:b2:0a: cc:11:0e:03:af:f1:c3:b2:08:20:c6:85:8b:e8:1b: 9c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:44:AB:07:1E:67:1E:79:53:18:1E:9E:C2:0E:6F:F3:2A:A0:5C:F5 X509v3 Authority Key Identifier: keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/FUSrBx5nHnlTGB6ewg5v8yqgXPU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.111.87.0/24 95.215.216.0/22 176.39.32.0/23 Signature Algorithm: sha256WithRSAEncryption 03:6e:71:90:50:e4:b8:7a:34:4c:a9:e4:64:ab:f5:78:ee:31: 21:c6:c5:3f:5b:44:31:95:3e:69:a1:2f:03:9e:6f:a1:9d:55: d0:c2:cd:dc:f2:b2:d9:f8:ba:67:d5:0f:34:c6:73:c6:94:93: b0:e2:02:4f:91:79:24:14:90:0b:ee:42:3e:f5:59:6f:39:11: 56:dd:c7:c9:5d:6f:3e:22:fd:79:40:c2:67:d6:f4:8e:d6:18: 4d:f8:9b:59:39:6e:f2:76:3a:b2:99:0a:27:b9:bd:d0:32:62: ee:50:16:44:b7:c2:fd:5d:bf:e2:46:c4:4b:a8:76:91:d1:8b: a3:31:e4:1f:9d:48:99:4a:54:43:a0:02:b0:08:a2:8b:ff:8f: 70:0f:0e:2e:d7:e4:95:ed:2b:2f:5e:43:07:b4:bf:3d:7a:65: 52:ab:0b:16:1c:af:3b:e5:2b:63:4a:ef:d3:a8:e1:55:93:4f: ea:63:83:09:85:c7:1c:20:30:87:26:b4:ee:45:9e:52:57:f3: 90:cd:e5:df:d2:3d:c6:1d:2b:74:14:59:3f:d3:e6:40:1b:1f: f0:33:94:a1:80:82:c9:6e:94:2e:1b:c1:3a:10:1c:0b:7e:01: c7:f6:cd:1a:51:9f:c3:14:65:d4:d6:91:e8:28:6b:d5:9b:86: ce:59:6a:f5 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt+pHiBg9eaqgJGpTFNo6t2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NDEyODE0NmI3YmVjOGJkMTE4NWJiZTBjM2I5MzQwYWFm NWI3MTQwHhcNMjYwMTAyMTIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTQ0YWIwNzFlNjcxZTc5NTMxODFlOWVjMjBlNmZmMzJhYTA1Y2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ut540Rlvo0WqCx0XRslstaW7ugS ARU3wVAfPht/LVngsd2UaGi+EHGxwEYLBbwlDFJ9MqbLLI1dTtyl9p+TIdaOPDcT 8K2HHTbIAGvAN9IKubzNW4vZ7UoHHydzN+SctJTN87V+2/e7IISptVrK+ea7NUly EEy6haBM94cknVyKAvMFXdCFyPndqGrBy3x0bHsFZjnJDiJkKUW6zktsc9D0SDct eS2YlSYTEYDmReVypCUwUyARNYf84xQVyFcRz7qYxsESiwe7ZWiUt1M1+arB38Sr Dj2mONxD5gBtcoPkAT5TYzSZWtmclUblsgrMEQ4Dr/HDsgggxoWL6Buc5wIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFBVEqwceZx55UxgensIOb/MqoFz1MB8GA1UdIwQY MBaAFPhBKBRre+yL0Rhbvgw7k0Cq9bcUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1FRW9GR3Q3N0l2UkdGdS1ERHVUUUtyMXR4US5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvZmIyNDExLTQ4NWItNDE0My05MjQx LTEzODM5NjQwYTYwNC8xL0ZVU3JCeDVuSG5sVEdCNmV3ZzV2OHlxZ1hQVS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjIvZmIyNDExLTQ4NWItNDE0My05MjQxLTEzODM5NjQwYTYw NC8xLzEtRUVvRkd0NzdJdlJHRnUtRER1VFFLcjF0eFEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBABWb1cD BAJf19gDBAGwJyAwDQYJKoZIhvcNAQELBQADggEBAANucZBQ5Lh6NEyp5GSr9Xju MSHGxT9bRDGVPmmhLwOeb6GdVdDCzdzystn4umfVDzTGc8aUk7DiAk+ReSQUkAvu Qj71WW85EVbdx8ldbz4i/XlAwmfW9I7WGE34m1k5bvJ2OrKZCie5vdAyYu5QFkS3 wv1dv+JGxEuodpHRi6Mx5B+dSJlKVEOgArAIoov/j3APDi7X5JXtKy9eQwe0vz16 ZVKrCxYcrzvlK2NK79Oo4VWTT+pjgwmFxxwgMIcmtO5FnlJX85DN5d/SPcYdK3QU WT/T5kAbH/AzlKGAgslulC4bwToQHAt+Acf2zRpRn8MUZdTWkegoa9Wbhs5ZavU= -----END CERTIFICATE-----Generated at Mon Feb 9 21:02:41 2026 by rpki-client