This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/FJ8Eh3JmKHiLR0PnawziUf9K0bM.roa File: FJ8Eh3JmKHiLR0PnawziUf9K0bM.roa (raw, json) Hash identifier: mvKQV5uOXcpA2Ks4mg9Ffk96DMdPkiJ3q6amxvayj9s= Subject key identifier: 14:9F:04:87:72:66:28:78:8B:47:43:E7:6B:0C:E2:51:FF:4A:D1:B3 Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B7AC7A04FD3B15CA0B4D57747A94B0EEF Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/FJ8Eh3JmKHiLR0PnawziUf9K0bM.roa Signing time: Thu 01 Jan 2026 18:17:41 +0000 ROA not before: Thu 01 Jan 2026 18:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209372 IP address blocks: 45.140.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:a0:4f:d3:b1:5c:a0:b4:d5:77:47:a9:4b:0e:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Jan 1 18:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=149f0487726628788b4743e76b0ce251ff4ad1b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:58:bc:a5:81:9c:24:07:bc:01:55:cc:e8:47: fe:2f:7b:46:2b:7b:c7:2c:98:71:0f:0b:35:66:66: c1:f2:16:8b:b2:db:51:ae:d6:11:7e:82:79:99:56: 67:e8:b2:c1:ac:2f:e6:07:97:46:a9:8e:57:d0:31: 65:6e:c7:93:f4:8f:6d:f8:0b:f2:a8:72:bb:29:99: f0:30:ba:24:0f:71:43:10:9c:dd:a5:9b:09:ca:35: ea:ba:35:74:f6:56:53:e7:94:01:3f:57:f7:0a:05: 24:1f:e3:c3:e3:36:b1:bf:b2:92:34:75:3d:08:3a: d8:1a:91:ac:af:43:c0:d2:69:b3:c0:32:ce:b2:e2: 8a:35:6a:4f:5f:30:ca:69:d4:29:dc:6d:89:58:3b: 46:f5:c3:7e:54:c6:e8:a5:f2:dc:7d:40:db:1a:9b: 7c:1d:1c:eb:2a:3b:b6:52:6c:d2:a8:f5:1a:12:43: 2d:6f:ae:b7:5a:3f:f5:d4:bc:86:ef:64:5d:56:e4: 0a:89:e8:a2:04:97:9d:fa:7f:ca:a9:13:f3:d9:70: 7b:fc:51:5d:71:7e:d8:be:62:45:2c:88:11:a3:86: f5:be:8b:9b:eb:e4:89:fe:01:a0:ad:a6:fc:d7:20: 32:e4:96:b3:65:14:93:85:f2:5d:22:bc:e4:48:9a: 57:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9F:04:87:72:66:28:78:8B:47:43:E7:6B:0C:E2:51:FF:4A:D1:B3 X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/FJ8Eh3JmKHiLR0PnawziUf9K0bM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.172.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:8d:dc:82:01:24:27:d0:6a:dd:a7:5e:58:af:76:c5:36:dc: 59:c7:34:82:78:e6:37:ba:7a:a8:45:4d:5e:5a:25:ee:f1:71: 2d:56:c1:54:f0:12:83:09:1f:d0:89:4c:c7:03:37:ad:73:f4: 2f:86:76:26:20:43:7d:af:ea:ef:a6:1f:20:02:90:04:e9:a7: 87:ef:8b:e6:ad:4d:91:bb:ba:dd:d8:15:b1:7c:bb:dd:fd:ab: e6:7f:4c:bd:71:e0:7a:1c:c2:58:e2:a6:01:10:7a:a1:ae:f0: c6:e2:65:01:d3:30:a9:47:e9:c2:c0:83:4b:1a:f4:cc:20:bb: 18:c6:7b:7f:2d:7e:85:23:95:97:86:95:67:02:68:71:4d:fb: d0:01:2d:e5:57:1a:02:61:ca:ee:a9:b5:79:ea:54:aa:1b:be: 3f:d6:1f:7d:7b:39:36:48:d4:b5:ce:ea:e5:76:9e:9f:6e:01: 58:a9:a3:3f:2d:f6:c2:2b:04:68:93:b0:0e:39:6f:3f:57:33: f9:1a:40:12:c2:3e:6f:2b:84:a2:7d:71:df:7a:8f:8c:42:c7: c8:f6:29:94:5c:26:38:02:58:1c:a0:d4:0f:75:43:6a:64:fe: e6:e6:4e:b8:e3:ec:b2:64:63:9d:dc:29:43:21:99:20:75:b1: ce:08:c4:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x6BP07FcoLTVd0epSw7vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMTAxMTgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDlmMDQ4NzcyNjYyODc4OGI0NzQzZTc2YjBjZTI1MWZmNGFkMWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFi8pYGcJAe8AVXM6Ef+L3tGK3vH LJhxDws1ZmbB8haLsttRrtYRfoJ5mVZn6LLBrC/mB5dGqY5X0DFlbseT9I9t+Avy qHK7KZnwMLokD3FDEJzdpZsJyjXqujV09lZT55QBP1f3CgUkH+PD4zaxv7KSNHU9 CDrYGpGsr0PA0mmzwDLOsuKKNWpPXzDKadQp3G2JWDtG9cN+VMbopfLcfUDbGpt8 HRzrKju2UmzSqPUaEkMtb663Wj/11LyG72RdVuQKieiiBJed+n/KqRPz2XB7/FFd cX7YvmJFLIgRo4b1voub6+SJ/gGgrab81yAy5JazZRSThfJdIrzkSJpXQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBSfBIdyZih4i0dD52sM4lH/StGzMB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvRko4RWgzSm1LSGlMUjBQbmF3emlVZjlLMGJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYysMA0G CSqGSIb3DQEBCwUAA4IBAQBejdyCASQn0Grdp15Yr3bFNtxZxzSCeOY3unqoRU1e WiXu8XEtVsFU8BKDCR/QiUzHAzetc/QvhnYmIEN9r+rvph8gApAE6aeH74vmrU2R u7rd2BWxfLvd/avmf0y9ceB6HMJY4qYBEHqhrvDG4mUB0zCpR+nCwINLGvTMILsY xnt/LX6FI5WXhpVnAmhxTfvQAS3lVxoCYcruqbV56lSqG74/1h99ezk2SNS1zurl dp6fbgFYqaM/LfbCKwRok7AOOW8/VzP5GkASwj5vK4SifXHfeo+MQsfI9imUXCY4 AlgcoNQPdUNqZP7m5k644+yyZGOd3ClDIZkgdbHOCMQD -----END CERTIFICATE-----Generated at Mon Jan 19 20:34:56 2026 by rpki-client