This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FYYHYUGoGvN1v8iZEsvIMUiBDuc.roa File: FYYHYUGoGvN1v8iZEsvIMUiBDuc.roa (raw, json) Hash identifier: 5TNc2AIFURoGMvX0XYbEM3UC8FEruKwZsC3SRf2KaGU= Subject key identifier: 15:86:07:61:41:A8:1A:F3:75:BF:C8:99:12:CB:C8:31:48:81:0E:E7 Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 019AA59A784ED27AB982FD4F61BA5329450E Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FYYHYUGoGvN1v8iZEsvIMUiBDuc.roa Signing time: Fri 21 Nov 2025 08:49:15 +0000 ROA not before: Fri 21 Nov 2025 08:49:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5511 IP address blocks: 213.249.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:9a:78:4e:d2:7a:b9:82:fd:4f:61:ba:53:29:45:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Nov 21 08:49:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1586076141a81af375bfc89912cbc83148810ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c4:93:fb:41:51:28:1a:15:34:75:fa:94:c8: e5:bf:4d:fb:ba:7c:dd:73:c1:e9:8c:e7:b6:da:e6: aa:bf:9c:03:44:8c:22:e9:9f:c4:8c:98:4b:c0:2a: a5:da:37:f6:cd:00:ce:f1:8d:92:4c:58:97:f6:4e: b3:19:4c:cc:fc:1b:67:2c:91:40:8d:c1:94:b1:d9: 67:d0:fe:e3:2a:15:83:09:87:7b:f5:19:2e:f6:5f: e3:cd:7a:79:dc:38:50:c8:00:f3:60:46:cb:9e:e5: d6:dd:f9:f9:c5:63:60:cd:f3:75:99:63:5e:aa:d4: a1:0e:f0:a2:57:91:38:be:27:9b:8b:4f:8f:52:3b: b8:54:9e:3d:6f:6d:cf:9a:c0:41:6a:b8:3f:97:a7: 7f:cb:df:8a:83:22:e6:ed:71:f5:9a:e6:63:55:b4: 2b:da:fd:0f:55:14:a4:9f:d3:aa:df:f6:87:23:81: 74:46:7a:97:5e:07:b6:00:7f:37:e5:a4:b2:eb:55: 3e:0a:4f:6b:2a:1b:65:b4:44:a0:ef:4e:4b:c6:34: 8d:d5:3d:46:30:f6:a8:96:b7:63:1c:ee:6f:0c:45: d8:6c:39:5c:4a:58:8b:2d:8e:d2:7b:3f:3b:28:e8: bf:e2:d9:25:b0:5d:5d:15:d3:0b:bb:fc:e5:c6:7a: e6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:86:07:61:41:A8:1A:F3:75:BF:C8:99:12:CB:C8:31:48:81:0E:E7 X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FYYHYUGoGvN1v8iZEsvIMUiBDuc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.249.88.0/24 Signature Algorithm: sha256WithRSAEncryption 71:95:41:fc:5c:d9:34:4c:ad:60:b7:4e:f0:93:c1:a2:93:e3: 10:1a:eb:d2:33:24:53:1e:14:33:52:d1:56:df:6c:d2:67:ee: f7:74:96:ba:c3:0c:83:33:36:56:7f:5c:a9:d2:a4:c1:09:0f: 45:b6:c5:f1:cd:2c:bf:c8:3b:e3:d9:f9:f4:11:e2:0c:07:c3: da:b3:cb:0a:3c:1b:fe:6d:b9:fe:1a:cf:c3:b1:fd:f5:57:70: f8:8d:fe:94:cf:f5:57:e6:18:53:eb:99:78:4c:0c:39:92:0e: 79:62:17:1c:4d:5e:89:d4:47:72:03:e7:d7:0e:e6:3b:84:44: 56:f7:91:26:5e:38:94:d4:50:54:cc:62:43:ea:42:82:f0:f0: ca:17:0b:ae:6d:3c:56:b8:4f:c6:a3:0b:3d:4f:aa:a2:80:e2: b3:3e:c7:0d:1a:7c:74:3a:ac:66:6e:41:80:76:ae:c4:80:ff: fb:de:cb:90:cd:e2:80:90:4e:8c:70:c2:8f:71:22:3b:61:d4: 1b:55:7e:6a:e6:9d:0e:36:03:1e:94:2f:b4:c0:b8:e3:6b:7e: f5:09:79:f0:56:fb:ff:2f:77:a5:2b:2a:a4:8b:ac:7c:39:6f: 84:43:04:1d:06:49:0f:78:4a:fc:41:dc:63:e5:cc:8b:60:da: fb:c4:12:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqlmnhO0nq5gv1PYbpTKUUOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjUxMTIxMDg0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTg2MDc2MTQxYTgxYWYzNzViZmM4OTkxMmNiYzgzMTQ4ODEwZWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sST+0FRKBoVNHX6lMjlv037unzd c8HpjOe22uaqv5wDRIwi6Z/EjJhLwCql2jf2zQDO8Y2STFiX9k6zGUzM/BtnLJFA jcGUsdln0P7jKhWDCYd79Rku9l/jzXp53DhQyADzYEbLnuXW3fn5xWNgzfN1mWNe qtShDvCiV5E4viebi0+PUju4VJ49b23PmsBBarg/l6d/y9+KgyLm7XH1muZjVbQr 2v0PVRSkn9Oq3/aHI4F0RnqXXge2AH835aSy61U+Ck9rKhtltESg705LxjSN1T1G MPaolrdjHO5vDEXYbDlcSliLLY7Sez87KOi/4tklsF1dFdMLu/zlxnrmawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBWGB2FBqBrzdb/ImRLLyDFIgQ7nMB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvRllZSFlVR29Hdk4xdjhpWkVzdklNVWlCRHVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1flYMA0G CSqGSIb3DQEBCwUAA4IBAQBxlUH8XNk0TK1gt07wk8Gik+MQGuvSMyRTHhQzUtFW 32zSZ+73dJa6wwyDMzZWf1yp0qTBCQ9FtsXxzSy/yDvj2fn0EeIMB8Pas8sKPBv+ bbn+Gs/Dsf31V3D4jf6Uz/VX5hhT65l4TAw5kg55YhccTV6J1EdyA+fXDuY7hERW 95EmXjiU1FBUzGJD6kKC8PDKFwuubTxWuE/Gows9T6qigOKzPscNGnx0OqxmbkGA dq7EgP/73suQzeKAkE6McMKPcSI7YdQbVX5q5p0ONgMelC+0wLjja371CXnwVvv/ L3elKyqki6x8OW+EQwQdBkkPeEr8Qdxj5cyLYNr7xBII -----END CERTIFICATE-----Generated at Thu Dec 4 07:45:27 2025 by rpki-client