This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Fij9x4AhUydnGF2q48jo3fSvI54.roa File: Fij9x4AhUydnGF2q48jo3fSvI54.roa (raw, json) Hash identifier: l+X4W9M5LuIzKnS9UTlJoqn6dJ41MxcG0yaMWrfvc+U= Subject key identifier: 16:28:FD:C7:80:21:53:27:67:18:5D:AA:E3:C8:E8:DD:F4:AF:23:9E Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019A71FB2C9E1931C7CF92FC390EDD883F68 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Fij9x4AhUydnGF2q48jo3fSvI54.roa Signing time: Tue 11 Nov 2025 08:14:37 +0000 ROA not before: Tue 11 Nov 2025 08:14:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212755 IP address blocks: 86.53.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 15:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:71:fb:2c:9e:19:31:c7:cf:92:fc:39:0e:dd:88:3f:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Nov 11 08:14:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1628fdc78021532767185daae3c8e8ddf4af239e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f1:63:da:44:d4:ed:a5:d5:e7:a1:01:c7:b8: 28:e9:c7:42:fa:8b:0e:af:09:2b:b4:2f:22:7f:54: b3:4a:45:89:20:c8:b1:e9:89:91:fe:cc:03:68:34: ef:75:04:1f:df:37:b1:8e:4b:d6:ee:b7:b4:2c:20: 50:b4:f1:57:9f:9d:a3:0d:73:89:7b:5e:4d:e4:ce: 05:dd:fc:20:46:f1:b3:c4:17:d1:91:0f:28:9b:ab: c7:93:c1:93:dc:ba:ec:76:1f:a8:ff:1b:71:a0:e3: bc:26:46:6b:9a:f0:6e:8f:73:ca:db:a3:78:2a:ed: df:13:f1:7f:f9:d7:9c:9e:31:cb:53:f1:39:02:7e: 3f:8c:48:fc:c4:92:15:07:22:c5:f6:60:74:43:37: b8:6b:da:a1:79:3f:65:70:bc:b7:b2:cc:ae:d8:2e: 28:0e:b6:81:77:bc:e3:09:96:7d:63:02:61:d5:d8: 4f:58:fa:e8:5f:bf:be:d2:fc:43:4c:5a:ad:5d:06: 2d:6d:54:de:ee:2e:27:dd:19:2c:01:e1:6f:15:84: de:be:3d:12:3b:bb:fd:de:9c:86:1a:0e:d4:f6:79: d3:21:20:41:9c:1d:2f:5d:ee:ea:85:65:77:18:9e: 3f:c3:69:d5:37:0a:e4:3b:cd:12:58:8b:02:71:a5: 65:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:28:FD:C7:80:21:53:27:67:18:5D:AA:E3:C8:E8:DD:F4:AF:23:9E X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Fij9x4AhUydnGF2q48jo3fSvI54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.53.147.0/24 Signature Algorithm: sha256WithRSAEncryption 32:f4:c2:1a:3b:9c:3f:9d:b7:77:61:ca:f6:ba:e0:3a:30:44: 08:03:89:e9:c9:e8:0a:81:27:b5:c9:30:ea:15:5c:b0:54:e9: 47:d1:8b:23:cf:4d:d7:06:e8:49:a3:3a:5b:4f:81:20:51:f0: a2:c6:2f:a5:07:cf:74:e0:72:f3:5d:30:b4:57:56:9f:f7:0e: 26:ff:b5:33:d2:3f:ac:62:72:d3:a6:1f:52:59:5b:7d:6b:c9: a4:5f:ea:7a:05:5a:11:fa:6e:4e:b9:40:4d:08:fb:a3:c4:c7: 86:c7:1f:b8:db:fd:f9:da:07:88:a8:22:dc:67:01:c7:23:20: 12:8d:c9:fa:4e:f5:5a:3f:4d:00:83:a7:33:2d:eb:0e:84:0f: b5:be:6b:30:85:e4:30:db:44:98:3b:fc:88:62:81:89:f1:3f: c8:e7:ce:ba:a7:2f:da:94:a4:6c:48:26:4e:76:f7:f5:f1:03: b5:cb:b5:c7:78:3b:22:69:ee:7c:9f:ec:6a:1d:85:03:12:12: c4:27:3b:a9:05:da:9d:15:b5:b6:a1:3c:5a:c5:cc:1d:f1:bb: 65:dd:e2:1e:aa:dd:16:27:c8:0e:f2:6f:0b:30:11:b5:ef:d1: 1d:8b:83:63:55:b8:09:9a:e7:55:21:d1:ec:32:25:9b:99:f0: 7f:f8:29:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpx+yyeGTHHz5L8OQ7diD9oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMTExMDgxNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjI4ZmRjNzgwMjE1MzI3NjcxODVkYWFlM2M4ZThkZGY0YWYyMzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPFj2kTU7aXV56EBx7go6cdC+osO rwkrtC8if1SzSkWJIMix6YmR/swDaDTvdQQf3zexjkvW7re0LCBQtPFXn52jDXOJ e15N5M4F3fwgRvGzxBfRkQ8om6vHk8GT3Lrsdh+o/xtxoOO8JkZrmvBuj3PK26N4 Ku3fE/F/+decnjHLU/E5An4/jEj8xJIVByLF9mB0Qze4a9qheT9lcLy3ssyu2C4o DraBd7zjCZZ9YwJh1dhPWProX7++0vxDTFqtXQYtbVTe7i4n3RksAeFvFYTevj0S O7v93pyGGg7U9nnTISBBnB0vXe7qhWV3GJ4/w2nVNwrkO80SWIsCcaVljwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBYo/ceAIVMnZxhdquPI6N30ryOeMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvRmlqOXg0QWhVeWRuR0YycTQ4am8zZlN2STU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVjWTMA0G CSqGSIb3DQEBCwUAA4IBAQAy9MIaO5w/nbd3Ycr2uuA6MEQIA4npyegKgSe1yTDq FVywVOlH0Ysjz03XBuhJozpbT4EgUfCixi+lB8904HLzXTC0V1af9w4m/7Uz0j+s YnLTph9SWVt9a8mkX+p6BVoR+m5OuUBNCPujxMeGxx+42/352geIqCLcZwHHIyAS jcn6TvVaP00Ag6czLesOhA+1vmswheQw20SYO/yIYoGJ8T/I5866py/alKRsSCZO dvf18QO1y7XHeDsiae58n+xqHYUDEhLEJzupBdqdFbW2oTxaxcwd8btl3eIeqt0W J8gO8m8LMBG179Edi4NjVbgJmudVIdHsMiWbmfB/+Cky -----END CERTIFICATE-----Generated at Thu Dec 4 19:56:34 2025 by rpki-client