This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/FaJiHtix7PXUuvp8SlZYejxVheo.roa File: FaJiHtix7PXUuvp8SlZYejxVheo.roa (raw, json) Hash identifier: HY5OE1Yyp0dIsQtbFU8ZrzweQgS1+q5kZbWUEg+8bhg= Subject key identifier: 15:A2:62:1E:D8:B1:EC:F5:D4:BA:FA:7C:4A:56:58:7A:3C:55:85:EA Certificate issuer: /CN=da27113db55b63b67a4a627a7008a8afc2bcc42c Certificate serial: 019B7CEDBBCBBB5A786DCF608A5267DE9365 Authority key identifier: DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/FaJiHtix7PXUuvp8SlZYejxVheo.roa Signing time: Fri 02 Jan 2026 04:18:33 +0000 ROA not before: Fri 02 Jan 2026 04:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 146.66.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:bb:cb:bb:5a:78:6d:cf:60:8a:52:67:de:93:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da27113db55b63b67a4a627a7008a8afc2bcc42c Validity Not Before: Jan 2 04:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15a2621ed8b1ecf5d4bafa7c4a56587a3c5585ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e3:b2:d6:b3:b0:cf:42:c5:a2:e3:bd:11:b2: 3c:e8:20:32:87:a8:30:14:97:14:4d:58:26:5b:ef: 48:57:f2:81:a3:55:86:43:c2:0f:d0:0d:49:4b:94: 57:f4:45:ab:28:94:17:65:13:d4:9d:7e:6b:36:99: ac:58:83:8c:b4:ef:6d:82:a7:20:e5:c7:a2:f3:b3: 4e:90:d2:35:45:34:f4:d6:0c:a0:8f:96:d7:de:5d: 4e:20:7d:a5:96:7e:a8:a9:16:b3:58:dc:da:cb:87: 3b:5a:4c:3d:9a:76:93:b9:e8:8f:b4:19:ab:8f:9e: 68:1f:d8:c6:e7:ba:04:43:7d:c5:94:35:d1:0c:f2: ae:61:96:e8:47:ba:f3:cb:73:29:13:8f:68:3c:a4: 4a:4a:db:9f:81:07:a6:40:eb:25:fb:65:d6:b3:17: 2f:47:c7:ec:bc:42:0d:6b:05:6e:87:3e:3a:68:4d: 5e:8d:15:df:dc:11:1c:59:f0:90:b3:90:1f:2d:bf: 79:96:8a:43:d7:cd:8c:2a:4d:4a:f9:dc:d6:1a:92: fc:d9:d0:ea:34:0c:47:4d:50:10:9a:1e:6b:7f:e1: c2:5e:83:5c:3a:4b:e4:5f:9e:b5:f4:67:5e:a5:ea: 45:b1:24:38:8f:e2:3a:42:15:13:06:5d:d8:76:0b: 4b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A2:62:1E:D8:B1:EC:F5:D4:BA:FA:7C:4A:56:58:7A:3C:55:85:EA X509v3 Authority Key Identifier: keyid:DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/FaJiHtix7PXUuvp8SlZYejxVheo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.66.3.0/24 Signature Algorithm: sha256WithRSAEncryption 87:78:07:af:86:28:a4:2e:ad:11:c9:a5:e7:be:61:24:b7:41: a9:43:0d:cd:19:95:42:ec:81:23:eb:2c:cc:ed:9d:a8:4b:54: 53:8b:71:2e:c9:a8:92:21:91:a5:9d:e5:03:f7:d5:59:32:3a: ba:7b:c4:17:b2:ee:e7:93:1c:3e:a4:7a:02:27:0d:c2:9b:dc: 0d:d6:88:53:a6:63:4c:8b:2b:be:c6:3c:73:2e:a1:8c:05:7c: c6:9e:8f:fc:1b:f0:5f:4a:f2:26:cf:c2:02:7d:e7:28:60:d6: b0:90:e2:60:e6:a5:e1:ea:1f:f8:36:23:a3:54:9b:b4:58:f5: 94:3f:3f:ce:8e:21:44:30:de:6e:a6:9e:30:bc:01:d2:01:c0: 08:21:d6:d3:8b:3c:2c:59:5e:68:f2:2f:51:9b:22:5f:ca:8d: 02:b3:59:c2:25:2c:e9:52:b1:ef:83:c4:d1:17:1a:8c:b1:e6: 43:8d:3c:a5:23:5b:8f:fa:f1:66:b9:6d:53:82:ce:0b:d7:f4: bb:67:87:bb:86:b2:c7:9b:40:12:07:4e:d1:cf:55:4e:6e:98: 3f:64:13:eb:39:0d:4b:a6:ee:3f:d9:a0:22:4f:28:f0:c2:14: b1:28:18:02:83:ad:33:3c:39:62:a2:6c:92:c4:fa:ae:7c:29: 32:15:c4:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87bvLu1p4bc9gilJn3pNlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMjcxMTNkYjU1YjYzYjY3YTRhNjI3YTcwMDhhOGFmYzJi Y2M0MmMwHhcNMjYwMTAyMDQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWEyNjIxZWQ4YjFlY2Y1ZDRiYWZhN2M0YTU2NTg3YTNjNTU4NWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweOy1rOwz0LFouO9EbI86CAyh6gw FJcUTVgmW+9IV/KBo1WGQ8IP0A1JS5RX9EWrKJQXZRPUnX5rNpmsWIOMtO9tgqcg 5cei87NOkNI1RTT01gygj5bX3l1OIH2lln6oqRazWNzay4c7Wkw9mnaTueiPtBmr j55oH9jG57oEQ33FlDXRDPKuYZboR7rzy3MpE49oPKRKStufgQemQOsl+2XWsxcv R8fsvEINawVuhz46aE1ejRXf3BEcWfCQs5AfLb95lopD182MKk1K+dzWGpL82dDq NAxHTVAQmh5rf+HCXoNcOkvkX5619GdepepFsSQ4j+I6QhUTBl3YdgtLvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBWiYh7Ysez11Lr6fEpWWHo8VYXqMB8GA1UdIwQY MBaAFNonET21W2O2ekpienAIqK/CvMQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmljUlBiVmJZN1o2U21KNmNBaW9yOEs4eEN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hNWY5MzEtNmZhOC00Y2YwLThmOTct MjNiMjhmMzlhNjAyLzEvRmFKaUh0aXg3UFhVdXZwOFNsWlllanhWaGVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hNWY5MzEtNmZhOC00Y2YwLThmOTctMjNiMjhmMzlhNjAy LzEvMmljUlBiVmJZN1o2U21KNmNBaW9yOEs4eEN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkkIDMA0G CSqGSIb3DQEBCwUAA4IBAQCHeAevhiikLq0RyaXnvmEkt0GpQw3NGZVC7IEj6yzM 7Z2oS1RTi3EuyaiSIZGlneUD99VZMjq6e8QXsu7nkxw+pHoCJw3Cm9wN1ohTpmNM iyu+xjxzLqGMBXzGno/8G/BfSvImz8ICfecoYNawkOJg5qXh6h/4NiOjVJu0WPWU Pz/OjiFEMN5upp4wvAHSAcAIIdbTizwsWV5o8i9RmyJfyo0Cs1nCJSzpUrHvg8TR FxqMseZDjTylI1uP+vFmuW1Tgs4L1/S7Z4e7hrLHm0ASB07Rz1VObpg/ZBPrOQ1L pu4/2aAiTyjwwhSxKBgCg60zPDliomySxPqufCkyFcQn -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:44 2026 by rpki-client