This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/FU4n6XNa33EeNcK1pVjnryUAJ6g.roa File: FU4n6XNa33EeNcK1pVjnryUAJ6g.roa (raw, json) Hash identifier: vAyZ21gv2CupNTDwhYo/hiCxZiQKD0Xxe9J+fN5P0S8= Subject key identifier: 15:4E:27:E9:73:5A:DF:71:1E:35:C2:B5:A5:58:E7:AF:25:00:27:A8 Certificate issuer: /CN=3df96e7da5498b70e3bb17b6e18a3113712d32b6 Certificate serial: 019B775925CF32F714E9561775D026FEE762 Authority key identifier: 3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/FU4n6XNa33EeNcK1pVjnryUAJ6g.roa Signing time: Thu 01 Jan 2026 02:18:09 +0000 ROA not before: Thu 01 Jan 2026 02:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57474 IP address blocks: 91.240.60.0/22 maxlen: 22 91.240.60.0/24 maxlen: 24 91.240.61.0/24 maxlen: 24 91.240.62.0/24 maxlen: 24 91.240.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.crl rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:25:cf:32:f7:14:e9:56:17:75:d0:26:fe:e7:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3df96e7da5498b70e3bb17b6e18a3113712d32b6 Validity Not Before: Jan 1 02:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=154e27e9735adf711e35c2b5a558e7af250027a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:86:c8:84:9a:71:f3:d8:05:a9:f7:3f:34:fa: 28:66:9c:1c:05:14:b8:e6:71:7b:8a:53:c2:e2:ae: 54:37:cc:73:a7:36:d1:07:35:54:cf:12:10:09:fd: 4d:c0:44:74:d7:43:25:7a:8b:49:c1:d7:42:aa:00: b2:cd:f9:ce:6c:ac:17:ac:10:1e:ec:07:15:53:bd: 54:6f:a5:36:57:a8:52:68:66:05:57:16:58:f2:80: 48:49:e0:8b:55:29:f4:fa:13:ed:0a:46:c1:bf:bd: 8f:4f:0b:71:35:8b:4f:4b:36:eb:cd:30:e2:b7:f2: 2f:2f:a3:0e:18:d8:b8:93:d0:af:21:10:47:69:ee: 02:a0:85:8e:0b:b5:eb:58:4d:14:58:f1:a8:ab:06: 53:88:fa:5a:57:30:7f:ef:55:40:36:92:9c:66:71: 07:2c:ea:7c:4a:91:97:86:fa:5c:0b:cf:76:b9:c1: fb:5b:49:c4:93:c9:7f:11:eb:c5:15:8c:7f:86:2d: 27:8a:0e:11:e0:58:a7:57:f9:f4:c0:6f:cc:4f:4a: e4:bc:a6:b6:5a:18:d5:10:dc:dc:7e:6a:a0:8e:23: c0:f2:db:0d:8d:1c:84:6b:73:58:61:9d:e3:cb:1f: fc:97:5e:3a:82:38:05:73:98:1a:5e:75:3d:09:e7: aa:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4E:27:E9:73:5A:DF:71:1E:35:C2:B5:A5:58:E7:AF:25:00:27:A8 X509v3 Authority Key Identifier: keyid:3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/FU4n6XNa33EeNcK1pVjnryUAJ6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.60.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:0c:7f:40:88:a7:ec:da:e6:fe:2b:b8:b2:a3:ea:ac:f7:11: 87:ef:5b:11:b6:dd:68:80:31:ba:95:c8:2f:d2:e5:fd:69:b1: 34:6e:31:e9:51:ae:ea:c5:6e:0f:c4:97:36:a7:a5:26:b1:f9: f6:55:4c:ae:de:b9:61:74:18:96:f7:eb:01:9a:4e:e6:33:ab: 3a:d5:25:05:02:96:4f:38:ce:57:d9:bc:fc:3e:b0:4f:57:9d: 01:40:b1:4b:57:b0:31:ce:41:64:fc:18:4f:62:20:d7:95:e5: 88:5c:00:b4:08:1d:27:e7:bb:d8:4b:d8:fb:27:da:cb:b0:2a: 03:05:e6:6a:e1:5d:d6:c4:8c:a2:44:fd:0a:41:54:d8:ad:89: e2:54:93:a2:bc:97:d0:4e:86:24:1a:47:f2:00:b8:bb:15:4c: 6c:16:3a:98:f9:3b:87:0b:f3:f0:7f:bd:6c:27:63:cb:20:56: 3d:34:c0:89:29:58:2e:5a:cf:87:2d:fb:b9:0a:c3:68:3c:7e: 49:cc:90:24:9a:4c:c4:cf:24:02:b6:aa:33:a5:40:15:c5:17: f9:f3:db:e0:1e:29:8d:47:b2:2f:f2:3b:36:9e:e3:b4:b6:7a: 9f:f9:37:cb:de:03:37:b9:6a:cc:d7:89:50:1f:af:b6:b6:da: fb:a5:94:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WSXPMvcU6VYXddAm/udiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZjk2ZTdkYTU0OThiNzBlM2JiMTdiNmUxOGEzMTEzNzEy ZDMyYjYwHhcNMjYwMTAxMDIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTRlMjdlOTczNWFkZjcxMWUzNWMyYjVhNTU4ZTdhZjI1MDAyN2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYbIhJpx89gFqfc/NPooZpwcBRS4 5nF7ilPC4q5UN8xzpzbRBzVUzxIQCf1NwER010MleotJwddCqgCyzfnObKwXrBAe 7AcVU71Ub6U2V6hSaGYFVxZY8oBISeCLVSn0+hPtCkbBv72PTwtxNYtPSzbrzTDi t/IvL6MOGNi4k9CvIRBHae4CoIWOC7XrWE0UWPGoqwZTiPpaVzB/71VANpKcZnEH LOp8SpGXhvpcC892ucH7W0nEk8l/EevFFYx/hi0nig4R4FinV/n0wG/MT0rkvKa2 WhjVENzcfmqgjiPA8tsNjRyEa3NYYZ3jyx/8l146gjgFc5gaXnU9CeeqEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBVOJ+lzWt9xHjXCtaVY568lACeoMB8GA1UdIwQY MBaAFD35bn2lSYtw47sXtuGKMRNxLTK2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGZsdWZhVkppM0RqdXhlMjRZb3hFM0V0TXJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC84ODMxZDktMzkzMy00ODNhLWI5YWYt MzZlODg1MDY2ODBlLzEvRlU0bjZYTmEzM0VlTmNLMXBWam5yeVVBSjZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC84ODMxZDktMzkzMy00ODNhLWI5YWYtMzZlODg1MDY2ODBl LzEvUGZsdWZhVkppM0RqdXhlMjRZb3hFM0V0TXJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW/A8MA0G CSqGSIb3DQEBCwUAA4IBAQCPDH9AiKfs2ub+K7iyo+qs9xGH71sRtt1ogDG6lcgv 0uX9abE0bjHpUa7qxW4PxJc2p6Umsfn2VUyu3rlhdBiW9+sBmk7mM6s61SUFApZP OM5X2bz8PrBPV50BQLFLV7AxzkFk/BhPYiDXleWIXAC0CB0n57vYS9j7J9rLsCoD BeZq4V3WxIyiRP0KQVTYrYniVJOivJfQToYkGkfyALi7FUxsFjqY+TuHC/Pwf71s J2PLIFY9NMCJKVguWs+HLfu5CsNoPH5JzJAkmkzEzyQCtqozpUAVxRf589vgHimN R7Iv8js2nuO0tnqf+TfL3gM3uWrM14lQH6+2ttr7pZTX -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:23 2026 by rpki-client