This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/FuIldjWwC771dcFJZ2BXXg7QNtE.roa File: FuIldjWwC771dcFJZ2BXXg7QNtE.roa (raw, json) Hash identifier: 0/YvhnNfmrfW1rIeAImBgzBQVqK+XQUOllK6k6PziVo= Subject key identifier: 16:E2:25:76:35:B0:0B:BE:F5:75:C1:49:67:60:57:5E:0E:D0:36:D1 Certificate issuer: /CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb Certificate serial: 019B7F1592EF484232B1EF8AC258378A08C9 Authority key identifier: 6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/FuIldjWwC771dcFJZ2BXXg7QNtE.roa Signing time: Fri 02 Jan 2026 14:21:18 +0000 ROA not before: Fri 02 Jan 2026 14:21:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50975 IP address blocks: 109.75.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:92:ef:48:42:32:b1:ef:8a:c2:58:37:8a:08:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb Validity Not Before: Jan 2 14:21:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16e2257635b00bbef575c1496760575e0ed036d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c9:52:f3:bd:96:bd:0d:74:42:26:5d:e8:f5: 56:1b:5a:d9:1b:77:3e:49:0f:88:44:5f:75:f9:da: a9:a7:1a:2b:61:49:ae:e0:cb:64:23:2a:7f:a9:fc: a9:33:5c:02:1b:08:64:fd:eb:73:2e:ac:e6:0a:c5: 73:c8:ab:d0:16:e4:15:3f:28:b4:88:1d:06:f0:db: 06:0f:2c:48:8f:49:09:b7:55:67:f2:2a:f3:d2:43: 89:f7:2f:76:ca:dd:e2:e4:37:6d:c8:42:78:e6:89: e7:cf:32:82:5b:31:52:a3:00:97:8b:ea:00:20:c3: a6:a3:5a:2e:5c:33:e2:2e:f7:70:44:01:73:ab:14: 95:a0:77:43:72:18:f4:ac:0f:16:94:e9:39:4e:04: 95:a2:6f:f3:1c:34:96:64:71:87:97:ae:6f:7f:1c: 70:ba:13:6c:0c:94:f6:2d:99:43:a2:d9:15:a8:bc: c5:68:94:a3:0c:32:fc:32:c3:b5:b4:d5:6f:f1:e4: a5:30:40:81:ac:88:55:a6:f5:5c:85:f5:53:f4:a6: 75:1e:40:cb:01:b8:18:55:96:8a:a3:90:29:8d:4e: 7c:f0:a6:a7:fb:b3:00:ff:db:53:8e:ca:a6:8b:97: e8:32:fa:2e:a7:4b:b0:a8:dd:1c:db:1c:65:8c:4c: b4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E2:25:76:35:B0:0B:BE:F5:75:C1:49:67:60:57:5E:0E:D0:36:D1 X509v3 Authority Key Identifier: keyid:6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/FuIldjWwC771dcFJZ2BXXg7QNtE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.75.0.0/21 Signature Algorithm: sha256WithRSAEncryption c0:5c:bc:a7:de:d6:21:a3:3e:f8:7c:2e:1e:0a:a3:ef:1f:36: df:f2:bf:6e:14:f4:ec:c9:ce:61:1f:ca:84:19:d0:c9:a2:b9: 62:e1:b1:c6:83:d9:9a:a3:26:0e:e3:f1:49:2f:91:06:af:a0: 5a:9a:ad:98:96:0d:68:28:a7:57:b0:70:61:4a:d2:e5:b2:d1: 25:f9:ad:fb:92:20:63:9e:e6:62:86:f2:c5:c6:ee:b2:89:f5: e6:66:e2:78:92:fb:49:ba:4e:93:d0:6f:8a:a3:a1:4a:6c:f6: c5:2d:4c:18:46:d8:c2:92:92:2f:cc:3f:05:b5:84:80:01:d6: bb:d3:1d:5a:24:61:7e:49:63:de:bd:22:3e:10:f8:0c:90:4a: bc:16:d8:65:5f:e0:5b:5d:08:e0:f8:09:55:ae:2a:47:14:ae: 38:f5:4a:62:3c:bb:f6:97:ca:58:09:bc:21:38:68:0d:d0:18: b2:62:83:af:49:f6:75:f0:14:7b:c1:fe:78:67:ae:00:49:90: a9:17:ce:84:ca:d1:cf:47:14:47:5a:ea:75:e3:47:de:d2:ed: f1:2b:99:f2:ff:ce:fc:9f:13:e0:5e:a2:49:ac:fb:ac:79:d3: c7:2d:fa:0c:55:6f:33:86:92:73:00:d1:0f:78:37:76:77:1b: c7:e3:1e:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FZLvSEIyse+Kwlg3igjJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYTRlMzYzOTc0YjJlZjkwZWNiMDUzNDBhZjVkYWY2YjI0 MTYwY2IwHhcNMjYwMTAyMTQyMTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmUyMjU3NjM1YjAwYmJlZjU3NWMxNDk2NzYwNTc1ZTBlZDAzNmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8lS872WvQ10QiZd6PVWG1rZG3c+ SQ+IRF91+dqppxorYUmu4MtkIyp/qfypM1wCGwhk/etzLqzmCsVzyKvQFuQVPyi0 iB0G8NsGDyxIj0kJt1Vn8irz0kOJ9y92yt3i5DdtyEJ45onnzzKCWzFSowCXi+oA IMOmo1ouXDPiLvdwRAFzqxSVoHdDchj0rA8WlOk5TgSVom/zHDSWZHGHl65vfxxw uhNsDJT2LZlDotkVqLzFaJSjDDL8MsO1tNVv8eSlMECBrIhVpvVchfVT9KZ1HkDL AbgYVZaKo5ApjU588Kan+7MA/9tTjsqmi5foMvoup0uwqN0c2xxljEy0OwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBbiJXY1sAu+9XXBSWdgV14O0DbRMB8GA1UdIwQY MBaAFGuk42OXSy75DssFNAr12vayQWDLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTZUalk1ZExMdmtPeXdVMEN2WGE5ckpCWU1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi84YTQ5NWQtYzQzNS00MmRjLTkxMjMt ZWNkN2ZlZTdjMWIwLzEvRnVJbGRqV3dDNzcxZGNGSloyQlhYZzdRTnRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi84YTQ5NWQtYzQzNS00MmRjLTkxMjMtZWNkN2ZlZTdjMWIw LzEvYTZUalk1ZExMdmtPeXdVMEN2WGE5ckpCWU1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbUsAMA0G CSqGSIb3DQEBCwUAA4IBAQDAXLyn3tYhoz74fC4eCqPvHzbf8r9uFPTsyc5hH8qE GdDJorli4bHGg9maoyYO4/FJL5EGr6Bamq2Ylg1oKKdXsHBhStLlstEl+a37kiBj nuZihvLFxu6yifXmZuJ4kvtJuk6T0G+Ko6FKbPbFLUwYRtjCkpIvzD8FtYSAAda7 0x1aJGF+SWPevSI+EPgMkEq8FthlX+BbXQjg+AlVripHFK449UpiPLv2l8pYCbwh OGgN0BiyYoOvSfZ18BR7wf54Z64ASZCpF86EytHPRxRHWup140fe0u3xK5ny/878 nxPgXqJJrPusedPHLfoMVW8zhpJzANEPeDd2dxvH4x5J -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:44 2026 by rpki-client