This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/FudhY_GW4msTOukhgnBFXzVYoiM.roa File: FudhY_GW4msTOukhgnBFXzVYoiM.roa (raw, json) Hash identifier: 7UgC+06y5UTQvkQ9UgPJMOjARzvFFXEio5n7Jvg4z+k= Subject key identifier: 16:E7:61:63:F1:96:E2:6B:13:3A:E9:21:82:70:45:5F:35:58:A2:23 Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Certificate serial: 019B7D5D1DD235A095C528BE9CB1E495AF5A Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/FudhY_GW4msTOukhgnBFXzVYoiM.roa Signing time: Fri 02 Jan 2026 06:20:13 +0000 ROA not before: Fri 02 Jan 2026 06:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 194.8.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:1d:d2:35:a0:95:c5:28:be:9c:b1:e4:95:af:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Validity Not Before: Jan 2 06:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16e76163f196e26b133ae9218270455f3558a223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c3:7e:5c:a6:fa:65:b7:b3:73:5a:71:5e:65: 6e:a4:19:4d:da:b4:08:28:e8:b3:67:4d:2c:61:7d: 21:67:ba:61:9f:16:47:ef:23:20:71:a9:b7:b5:44: f4:29:6e:9a:b3:01:ed:ba:3a:a1:ac:69:c1:75:3f: c4:2d:17:1e:cd:28:8b:23:4a:48:05:f9:07:18:cc: 2d:4a:d2:c1:a0:2d:2f:9c:42:3d:2a:a6:7e:66:c6: 8f:e5:05:1b:ce:7a:b8:0d:f7:86:f9:f3:e3:6e:b2: d0:de:7c:d1:51:29:ea:36:40:3d:0b:90:00:d0:5b: 4e:31:a1:66:9e:22:45:b7:d3:ca:78:6c:e8:05:c1: 41:0e:dc:9e:33:81:1a:50:97:40:22:3f:58:d9:5f: 5a:28:0e:2b:99:29:51:83:dd:eb:4d:f1:50:05:f6: 1b:70:42:61:83:40:82:f3:06:f7:ee:0a:cd:cf:28: a9:8a:2a:d5:c9:c5:99:15:6e:9b:ae:2e:ca:0a:c4: 28:dd:c6:87:8c:e0:07:16:8e:5f:d8:50:93:d3:99: 9d:92:f3:67:ca:c4:85:09:b3:69:37:d0:e4:81:ce: 67:05:1b:e8:9c:17:79:c9:82:20:a3:df:45:98:b4: 94:b9:e7:2d:41:0d:ea:d4:01:cb:ce:7a:a0:59:cb: 6c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E7:61:63:F1:96:E2:6B:13:3A:E9:21:82:70:45:5F:35:58:A2:23 X509v3 Authority Key Identifier: keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/FudhY_GW4msTOukhgnBFXzVYoiM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.8.123.0/24 Signature Algorithm: sha256WithRSAEncryption 75:6b:7c:34:1c:93:57:9f:d3:fc:50:6e:68:81:14:3b:f4:d8: 2f:5c:bc:0e:5b:f9:3d:66:4f:12:cd:ac:8c:0e:f9:31:41:c7: 8b:9f:e0:32:73:ad:f5:54:58:6c:64:28:5a:76:d2:a7:c0:03: 96:3a:47:87:77:af:20:ea:d8:aa:1b:a9:52:4b:4a:b4:d4:a3: ca:17:5e:23:bb:95:37:08:d7:a4:7c:a8:bd:e0:ec:6e:4a:67: d9:ed:d4:ef:1a:9e:51:52:d8:b8:be:88:be:f6:ca:70:5b:26: c7:df:0a:0f:c3:4d:85:bd:cf:f3:7e:3e:16:c7:9c:41:e4:9d: bb:b3:eb:aa:1e:75:05:12:e8:56:c6:a6:cc:6b:43:0b:11:78: ac:0d:c1:5f:ea:3e:20:28:27:23:28:78:2e:9c:6a:0a:54:15: e0:8e:ea:f2:2b:4d:02:6f:14:a7:f0:37:45:15:c3:c4:fc:c6: a2:d2:4d:35:b3:f0:d9:29:b8:43:1f:43:ae:04:af:b1:fa:fb: e1:46:fb:00:36:fb:51:15:be:fb:c1:c6:d2:9f:8d:98:8c:ea: 9c:60:0a:79:85:2d:fb:a7:1b:93:8f:59:06:b3:06:16:53:55: 7f:ea:53:70:a7:36:38:e5:68:ab:9f:7d:76:09:f8:d5:65:89: ed:a8:0e:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XR3SNaCVxSi+nLHkla9aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNWRlNDkwZmY4NzRlOTY4OWNlY2Y3MjZjYmI0ZTJmNTFm NmM3MzEwHhcNMjYwMTAyMDYyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmU3NjE2M2YxOTZlMjZiMTMzYWU5MjE4MjcwNDU1ZjM1NThhMjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcN+XKb6Zbezc1pxXmVupBlN2rQI KOizZ00sYX0hZ7phnxZH7yMgcam3tUT0KW6aswHtujqhrGnBdT/ELRcezSiLI0pI BfkHGMwtStLBoC0vnEI9KqZ+ZsaP5QUbznq4DfeG+fPjbrLQ3nzRUSnqNkA9C5AA 0FtOMaFmniJFt9PKeGzoBcFBDtyeM4EaUJdAIj9Y2V9aKA4rmSlRg93rTfFQBfYb cEJhg0CC8wb37grNzyipiirVycWZFW6bri7KCsQo3caHjOAHFo5f2FCT05mdkvNn ysSFCbNpN9Dkgc5nBRvonBd5yYIgo99FmLSUuectQQ3q1AHLznqgWctsKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBbnYWPxluJrEzrpIYJwRV81WKIjMB8GA1UdIwQY MBaAFJ1d5JD/h06Wic7Pcmy7Ti9R9scxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUt Y2VjMzNiYTFiZGY1LzEvRnVkaFlfR1c0bXNUT3VraGduQkZYelZZb2lNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUtY2VjMzNiYTFiZGY1 LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgh7MA0G CSqGSIb3DQEBCwUAA4IBAQB1a3w0HJNXn9P8UG5ogRQ79NgvXLwOW/k9Zk8SzayM DvkxQceLn+Ayc631VFhsZChadtKnwAOWOkeHd68g6tiqG6lSS0q01KPKF14ju5U3 CNekfKi94OxuSmfZ7dTvGp5RUti4voi+9spwWybH3woPw02Fvc/zfj4Wx5xB5J27 s+uqHnUFEuhWxqbMa0MLEXisDcFf6j4gKCcjKHgunGoKVBXgjuryK00CbxSn8DdF FcPE/Mai0k01s/DZKbhDH0OuBK+x+vvhRvsANvtRFb77wcbSn42YjOqcYAp5hS37 pxuTj1kGswYWU1V/6lNwpzY45Wirn312CfjVZYntqA75 -----END CERTIFICATE-----Generated at Wed Jan 7 22:29:19 2026 by rpki-client