This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/FHeRugMQCN304ofS34SnsX9g-9w.roa File: FHeRugMQCN304ofS34SnsX9g-9w.roa (raw, json) Hash identifier: dUPam4/lEvd+BV8filyPscn0FrY9JAUE0yoDRL+C9I0= Subject key identifier: 14:77:91:BA:03:10:08:DD:F4:E2:87:D2:DF:84:A7:B1:7F:60:FB:DC Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019AA3CB373CB46267B0B4E3755FAF6D6CE0 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/FHeRugMQCN304ofS34SnsX9g-9w.roa Signing time: Fri 21 Nov 2025 00:23:15 +0000 ROA not before: Fri 21 Nov 2025 00:23:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 32043 IP address blocks: 155.254.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 21:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a3:cb:37:3c:b4:62:67:b0:b4:e3:75:5f:af:6d:6c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Nov 21 00:23:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=147791ba031008ddf4e287d2df84a7b17f60fbdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:88:0e:d1:d2:f9:a1:11:51:69:f4:61:5a:ef: 00:36:e1:61:8a:93:d2:39:62:38:76:d9:f7:b1:8e: df:de:8d:4d:c9:ce:57:4f:0c:4a:ef:7a:12:b4:3c: 9e:36:9c:86:92:be:75:61:be:47:27:c3:7e:cc:8d: 2e:4d:8c:8f:da:39:08:98:d9:26:f0:c4:f1:4d:14: 58:9c:86:88:70:55:4d:00:0c:95:64:a9:d7:f8:79: 9d:60:1c:5f:bc:32:de:3a:ac:b5:3a:a1:71:60:1a: 16:90:7f:e8:a7:5f:c6:91:cc:db:0f:b7:47:a2:ef: 68:e1:10:af:37:73:64:83:1f:3f:d1:d1:69:70:92: 01:bc:7a:d0:83:44:40:94:bc:71:f3:68:23:03:8e: 15:f5:e1:63:49:70:95:7e:26:80:49:b2:71:de:2f: f9:58:f8:35:88:95:ad:f9:be:7b:cd:46:b7:40:b6: 56:1c:8c:03:7e:d1:01:99:6e:8a:9f:f7:e6:f7:7c: 4a:66:d6:eb:1a:63:70:7d:85:cf:fa:97:a6:b8:53: 46:7f:c0:01:b1:27:bb:da:36:6c:b6:20:a6:a8:2d: 57:03:9a:c1:4e:7d:fe:52:09:d4:20:4f:de:cf:fc: 10:88:e7:d2:e2:58:16:e7:79:87:c9:99:d3:08:06: fe:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:77:91:BA:03:10:08:DD:F4:E2:87:D2:DF:84:A7:B1:7F:60:FB:DC X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/FHeRugMQCN304ofS34SnsX9g-9w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.254.112.0/21 Signature Algorithm: sha256WithRSAEncryption 43:c7:a1:b9:5c:aa:d8:75:9c:18:54:51:86:b5:a7:51:3a:e1: a3:e9:2e:2b:7d:ea:bf:6c:47:87:2c:fd:b1:a4:79:98:5b:9d: 99:6e:cb:0a:10:cc:92:db:5f:36:24:0b:dc:0b:59:cf:e7:18: 5b:c0:ee:18:0c:32:50:91:73:68:f1:4f:fc:79:28:b1:54:aa: 86:ea:36:df:a8:6e:41:34:ea:6a:53:a0:06:eb:b7:5e:5b:15: 2d:a3:fd:d2:97:83:10:21:84:d8:9c:10:97:28:10:5f:d4:24: 5b:f4:05:09:6f:ac:b5:7f:16:71:96:d2:5d:20:ad:68:d1:e0: 2e:ef:98:a8:6d:d4:d9:87:c1:8a:36:6a:fb:3e:ed:52:da:34: 6a:48:44:b0:73:e1:99:0b:d8:86:3d:36:31:af:45:74:86:40: 15:fd:7a:aa:43:62:d5:de:4a:96:f6:be:8f:4c:57:cb:75:17: 36:84:bb:1c:86:81:00:2e:fe:4b:97:56:6d:90:9a:68:4b:11: de:bd:ea:19:a8:1c:ac:69:7b:bc:f9:39:6b:d4:ff:55:18:8b: 18:f0:2b:ac:5b:e6:ed:73:fe:a0:0c:6c:80:e3:ad:fc:aa:fd: 61:c1:95:e2:8b:cb:76:92:62:20:26:ec:a4:67:33:74:6c:e8: cf:70:36:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqjyzc8tGJnsLTjdV+vbWzgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjUxMTIxMDAyMzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDc3OTFiYTAzMTAwOGRkZjRlMjg3ZDJkZjg0YTdiMTdmNjBmYmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqogO0dL5oRFRafRhWu8ANuFhipPS OWI4dtn3sY7f3o1Nyc5XTwxK73oStDyeNpyGkr51Yb5HJ8N+zI0uTYyP2jkImNkm 8MTxTRRYnIaIcFVNAAyVZKnX+HmdYBxfvDLeOqy1OqFxYBoWkH/op1/GkczbD7dH ou9o4RCvN3Nkgx8/0dFpcJIBvHrQg0RAlLxx82gjA44V9eFjSXCVfiaASbJx3i/5 WPg1iJWt+b57zUa3QLZWHIwDftEBmW6Kn/fm93xKZtbrGmNwfYXP+pemuFNGf8AB sSe72jZstiCmqC1XA5rBTn3+UgnUIE/ez/wQiOfS4lgW53mHyZnTCAb+FQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBR3kboDEAjd9OKH0t+Ep7F/YPvcMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvRkhlUnVnTVFDTjMwNG9mUzM0U25zWDlnLTl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDm/5wMA0G CSqGSIb3DQEBCwUAA4IBAQBDx6G5XKrYdZwYVFGGtadROuGj6S4rfeq/bEeHLP2x pHmYW52ZbssKEMyS2182JAvcC1nP5xhbwO4YDDJQkXNo8U/8eSixVKqG6jbfqG5B NOpqU6AG67deWxUto/3Sl4MQIYTYnBCXKBBf1CRb9AUJb6y1fxZxltJdIK1o0eAu 75iobdTZh8GKNmr7Pu1S2jRqSESwc+GZC9iGPTYxr0V0hkAV/XqqQ2LV3kqW9r6P TFfLdRc2hLschoEALv5Ll1ZtkJpoSxHeveoZqBysaXu8+Tlr1P9VGIsY8CusW+bt c/6gDGyA4638qv1hwZXii8t2kmIgJuykZzN0bOjPcDbg -----END CERTIFICATE-----Generated at Sat Nov 29 07:10:54 2025 by rpki-client