This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/Fjwh_xe98NLC_NhYm0MDb-WiDn8.roa File: Fjwh_xe98NLC_NhYm0MDb-WiDn8.roa (raw, json) Hash identifier: PIt7e72kgyCo74un3u52sqzROHoMmxmWZGgzptnTe7c= Subject key identifier: 16:3C:21:FF:17:BD:F0:D2:C2:FC:D8:58:9B:43:03:6F:E5:A2:0E:7F Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Certificate serial: 019B7E38C8AAC1BB71517E133021CAEB864E Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/Fjwh_xe98NLC_NhYm0MDb-WiDn8.roa Signing time: Fri 02 Jan 2026 10:20:09 +0000 ROA not before: Fri 02 Jan 2026 10:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215672 IP address blocks: 31.42.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c8:aa:c1:bb:71:51:7e:13:30:21:ca:eb:86:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Validity Not Before: Jan 2 10:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=163c21ff17bdf0d2c2fcd8589b43036fe5a20e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e4:b8:67:4a:ac:33:4f:85:21:45:36:6e:40: 1e:4a:38:ce:ce:59:ec:7a:bd:25:8f:57:e2:8f:d8: 43:e8:c0:64:ba:1b:bb:2d:90:0f:80:48:7d:4c:19: 23:93:71:e9:df:8a:7f:4e:01:0f:2e:b8:7f:0e:22: 79:a5:90:b5:5b:37:8c:f7:0f:a1:5b:4b:75:4c:3d: 0c:a5:27:15:d6:76:1e:e4:6e:97:36:f5:f7:7f:28: 20:19:b2:18:c4:18:8a:83:d1:a4:d8:db:b8:6d:16: 34:af:69:d6:b8:06:b1:2c:8b:51:87:e8:69:38:35: c8:d6:6b:43:80:80:8c:a5:5c:a4:4c:57:c5:b3:24: d0:81:bb:d2:da:7e:f5:69:28:d3:89:28:9f:aa:91: 2f:71:ab:2d:49:a1:64:60:58:a8:b7:c3:e2:f2:17: 4a:c5:05:75:a0:d0:3e:6f:61:fe:23:d5:9f:af:3c: 53:e8:e0:0b:d9:30:16:fd:5c:50:d3:f9:87:3f:29: f8:0f:95:1f:51:1d:36:5c:0f:9e:3c:aa:ef:1a:d3: 7f:e8:08:79:d4:d1:5d:3a:68:a0:4f:49:05:59:46: 0b:7f:66:14:6e:a5:40:e5:be:91:5a:28:ed:fe:03: bf:e4:31:4e:9f:a6:3b:90:52:62:7a:58:01:59:a3: 01:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3C:21:FF:17:BD:F0:D2:C2:FC:D8:58:9B:43:03:6F:E5:A2:0E:7F X509v3 Authority Key Identifier: keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/Fjwh_xe98NLC_NhYm0MDb-WiDn8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.42.125.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:d0:c7:3a:21:55:9e:c1:51:e0:26:12:03:99:64:cc:35:14: d2:db:d8:fc:16:40:cd:aa:41:86:5f:9a:ef:00:c1:c0:d6:19: 06:23:34:d8:67:f2:6f:83:01:7a:b2:c0:fb:6b:af:58:3c:ce: 46:5b:fc:00:c8:e5:34:d8:b2:b4:42:b8:0a:73:46:26:dd:a1: 1d:6c:e3:da:ad:3b:fd:a3:78:32:a4:0e:b3:75:3c:03:11:ba: c1:84:94:1f:f4:6f:ab:5d:dd:3f:01:b3:e8:ec:89:f9:e8:1a: ab:4d:55:25:9e:b0:06:3a:83:67:ca:ed:62:2a:bf:4f:ce:c7: 42:99:22:e3:30:bf:b6:d5:d7:14:35:33:3b:95:4e:fd:6f:c6: f9:bf:ab:e7:73:28:e3:b1:c9:f3:1e:d9:c4:74:bb:25:63:22: 46:50:fe:7c:19:a3:bb:52:2a:4e:84:2b:a7:3b:97:fc:0e:24: 84:16:07:43:f4:27:67:27:a0:c1:d7:a2:85:a0:af:55:81:ee: 3b:14:f9:dd:f5:df:32:4f:56:4e:38:ef:f9:11:67:6c:ee:ed: cb:9b:c3:d9:2b:7a:a8:e9:f9:64:f7:08:ab:07:56:d5:4d:ca: ff:08:08:e3:df:fa:4f:76:ba:52:d8:d1:1e:89:6d:e4:8d:7e: 53:c7:91:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OMiqwbtxUX4TMCHK64ZOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1 ZTNmOTgwHhcNMjYwMTAyMTAyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjNjMjFmZjE3YmRmMGQyYzJmY2Q4NTg5YjQzMDM2ZmU1YTIwZTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuS4Z0qsM0+FIUU2bkAeSjjOzlns er0lj1fij9hD6MBkuhu7LZAPgEh9TBkjk3Hp34p/TgEPLrh/DiJ5pZC1WzeM9w+h W0t1TD0MpScV1nYe5G6XNvX3fyggGbIYxBiKg9Gk2Nu4bRY0r2nWuAaxLItRh+hp ODXI1mtDgICMpVykTFfFsyTQgbvS2n71aSjTiSifqpEvcastSaFkYFiot8Pi8hdK xQV1oNA+b2H+I9WfrzxT6OAL2TAW/VxQ0/mHPyn4D5UfUR02XA+ePKrvGtN/6Ah5 1NFdOmigT0kFWUYLf2YUbqVA5b6RWijt/gO/5DFOn6Y7kFJielgBWaMBRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBY8If8XvfDSwvzYWJtDA2/log5/MB8GA1UdIwQY MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt OWNkNjYyYmM4MzIwLzEvRmp3aF94ZTk4TkxDX05oWW0wTURiLVdpRG44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyp9MA0G CSqGSIb3DQEBCwUAA4IBAQCL0Mc6IVWewVHgJhIDmWTMNRTS29j8FkDNqkGGX5rv AMHA1hkGIzTYZ/JvgwF6ssD7a69YPM5GW/wAyOU02LK0QrgKc0Ym3aEdbOParTv9 o3gypA6zdTwDEbrBhJQf9G+rXd0/AbPo7In56BqrTVUlnrAGOoNnyu1iKr9PzsdC mSLjML+21dcUNTM7lU79b8b5v6vncyjjscnzHtnEdLslYyJGUP58GaO7UipOhCun O5f8DiSEFgdD9CdnJ6DB16KFoK9Vge47FPnd9d8yT1ZOOO/5EWds7u3Lm8PZK3qo 6flk9wirB1bVTcr/CAjj3/pPdrpS2NEeiW3kjX5Tx5Es -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:47 2026 by rpki-client