This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/ADT8NHavskB_f-QX_biQB6s3hjM.roa File: ADT8NHavskB_f-QX_biQB6s3hjM.roa (raw, json) Hash identifier: g7mT0bM8U1tBgaCrO9JeZJLHUsM1LBUnAA963U3MJWE= Subject key identifier: 00:34:FC:34:76:AF:B2:40:7F:7F:E4:17:FD:B8:90:07:AB:37:86:33 Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Certificate serial: 019B79ED380CF2AE39A144B18FCA5EF74ADB Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/ADT8NHavskB_f-QX_biQB6s3hjM.roa Signing time: Thu 01 Jan 2026 14:19:08 +0000 ROA not before: Thu 01 Jan 2026 14:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62874 IP address blocks: 204.225.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:38:0c:f2:ae:39:a1:44:b1:8f:ca:5e:f7:4a:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Validity Not Before: Jan 1 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0034fc3476afb2407f7fe417fdb89007ab378633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:90:9d:2e:a0:a2:54:d3:29:4c:b3:49:68:eb: 2f:34:d7:2a:5a:e1:c0:d8:82:6c:47:14:e2:2f:a1: 7b:38:2e:01:bd:4a:5f:0d:0b:6b:e5:7d:8e:5b:4f: f4:d4:d1:88:2a:6b:40:56:44:fe:ca:b8:88:df:9b: 72:d8:57:1c:da:4e:bb:cb:92:60:e3:11:1d:e0:a6: 2b:d5:3b:1d:45:17:6b:a1:62:9d:b7:e6:3b:a6:06: 9a:48:ed:12:b3:1a:f7:f3:18:4a:d6:e8:95:90:0f: d2:99:19:74:e0:36:dc:6f:b0:05:83:f3:83:c4:08: a0:87:cc:b3:94:af:ca:f4:4e:e7:a0:5d:68:59:2c: 9d:a9:cd:a1:32:d1:3b:a0:41:ac:19:8e:08:bc:32: 65:e9:95:7f:f9:9a:97:74:40:0b:30:e5:5b:87:e6: 71:27:15:59:d9:dc:11:0a:23:cf:dd:ff:ba:d9:30: a1:11:d4:42:82:d0:f4:bb:ba:48:24:9b:a8:11:f2: f6:9f:ee:bd:de:0d:7f:84:1a:a9:dc:a4:f5:57:f0: 9d:ac:70:1b:be:1c:28:0b:44:66:fc:8e:b7:3e:f9: ea:09:70:b9:db:e2:74:79:23:ff:8e:71:af:d9:6d: 99:f6:a4:1e:51:be:9c:1a:48:b1:62:d8:4d:f5:2b: 00:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:34:FC:34:76:AF:B2:40:7F:7F:E4:17:FD:B8:90:07:AB:37:86:33 X509v3 Authority Key Identifier: keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/ADT8NHavskB_f-QX_biQB6s3hjM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.225.218.0/24 Signature Algorithm: sha256WithRSAEncryption d1:7c:90:82:13:99:8a:8a:de:a4:6c:1f:7f:6e:b9:a8:e6:5f: b1:c1:1c:31:1a:14:41:01:81:4b:39:c6:c7:f3:79:97:47:82: 63:80:91:36:41:59:5b:d1:bf:30:7e:31:fe:33:75:3a:4d:4f: 0d:76:74:e6:d7:3c:3e:15:ec:35:58:67:01:34:4d:e1:1f:50: 2b:2b:14:4e:56:f6:7b:b6:29:78:da:7e:b4:4b:49:ac:23:b9: 3c:34:97:a1:a6:46:07:78:8c:c6:88:49:05:49:91:71:9e:b2: 6a:4a:ef:e8:82:36:1f:66:e3:1b:7f:d6:1f:a8:9f:3d:cc:21: 70:20:e1:e5:9e:e7:62:50:e1:8b:e2:69:f8:2e:67:45:23:5c: d4:f8:68:aa:04:44:92:ab:8b:9b:25:58:7c:66:58:eb:a8:18: 96:09:98:4e:35:2f:c7:23:70:45:41:e4:21:78:a3:19:29:4b: 50:3d:2e:c7:55:b7:ee:86:7c:46:38:36:45:4c:d7:e1:b0:d3: 72:79:7a:3c:52:ef:e5:89:32:bd:91:1a:64:e9:db:44:a0:1a: 57:dd:5b:f0:c0:32:57:12:97:f1:0e:c3:8f:8a:8c:a2:11:8a: d3:25:c0:50:28:26:8e:0b:97:4f:93:ac:65:ea:6a:67:26:5f: 97:e4:f1:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57TgM8q45oUSxj8pe90rbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5 MTk3ZjIwHhcNMjYwMTAxMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDM0ZmMzNDc2YWZiMjQwN2Y3ZmU0MTdmZGI4OTAwN2FiMzc4NjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJCdLqCiVNMpTLNJaOsvNNcqWuHA 2IJsRxTiL6F7OC4BvUpfDQtr5X2OW0/01NGIKmtAVkT+yriI35ty2Fcc2k67y5Jg 4xEd4KYr1TsdRRdroWKdt+Y7pgaaSO0Ssxr38xhK1uiVkA/SmRl04Dbcb7AFg/OD xAigh8yzlK/K9E7noF1oWSydqc2hMtE7oEGsGY4IvDJl6ZV/+ZqXdEALMOVbh+Zx JxVZ2dwRCiPP3f+62TChEdRCgtD0u7pIJJuoEfL2n+693g1/hBqp3KT1V/CdrHAb vhwoC0Rm/I63PvnqCXC52+J0eSP/jnGv2W2Z9qQeUb6cGkixYthN9SsANQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAA0/DR2r7JAf3/kF/24kAerN4YzMB8GA1UdIwQY MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt MmQxNDNkN2I4NTNjLzEvQURUOE5IYXZza0JfZi1RWF9iaVFCNnMzaGpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzOHaMA0G CSqGSIb3DQEBCwUAA4IBAQDRfJCCE5mKit6kbB9/brmo5l+xwRwxGhRBAYFLOcbH 83mXR4JjgJE2QVlb0b8wfjH+M3U6TU8NdnTm1zw+Few1WGcBNE3hH1ArKxROVvZ7 til42n60S0msI7k8NJehpkYHeIzGiEkFSZFxnrJqSu/ogjYfZuMbf9YfqJ89zCFw IOHlnudiUOGL4mn4LmdFI1zU+GiqBESSq4ubJVh8ZljrqBiWCZhONS/HI3BFQeQh eKMZKUtQPS7HVbfuhnxGODZFTNfhsNNyeXo8Uu/liTK9kRpk6dtEoBpX3VvwwDJX EpfxDsOPioyiEYrTJcBQKCaOC5dPk6xl6mpnJl+X5PHr -----END CERTIFICATE-----Generated at Sun Jan 11 12:56:45 2026 by rpki-client