This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/fxFIclzOclkDebowO2HCdBIp7JU.roa File: fxFIclzOclkDebowO2HCdBIp7JU.roa (raw, json) Hash identifier: kKrwCtFqATS4Q0FX0wGNL2DdvolnBDZchK0yi2jbTGw= Subject key identifier: 7F:11:48:72:5C:CE:72:59:03:79:BA:30:3B:61:C2:74:12:29:EC:95 Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 019B7C13172985A7D279098671C4DDF602D4 Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/fxFIclzOclkDebowO2HCdBIp7JU.roa Signing time: Fri 02 Jan 2026 00:19:44 +0000 ROA not before: Fri 02 Jan 2026 00:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209588 IP address blocks: 92.51.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:17:29:85:a7:d2:79:09:86:71:c4:dd:f6:02:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Jan 2 00:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f1148725cce72590379ba303b61c2741229ec95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:5c:8e:89:c8:34:4f:93:53:0d:82:ae:f3:ee: 21:36:12:b5:ea:6f:57:16:c5:6a:1e:41:a0:dd:95: 14:d6:fa:9c:84:e3:70:f7:d4:ac:ee:39:76:d2:89: 70:4a:c5:7a:53:98:3e:c0:76:26:a0:ad:62:e0:9a: 42:5e:d1:e0:fa:4e:95:c0:b2:2d:8a:41:e2:86:94: b3:69:b6:89:a8:a1:b2:73:a0:38:22:01:fa:ea:ea: c4:56:2a:ed:69:50:27:33:5c:eb:e5:4e:31:42:60: 20:78:09:ea:1d:a2:de:53:7d:88:70:49:d2:27:af: 2d:ba:4f:40:87:53:01:af:8e:b1:3a:a1:9c:5f:a3: 33:de:86:1c:a9:a3:5f:31:9f:35:60:f7:25:83:60: 08:32:cd:f9:15:39:c2:e7:95:22:2e:09:81:76:98: 58:de:c3:2d:97:8e:52:58:ee:21:ca:7c:ee:eb:e1: 2a:a1:b9:fb:35:8c:9e:36:4c:1d:16:fe:6d:e1:c7: 38:c4:8c:2e:77:99:e5:f4:9a:93:9e:21:da:45:0d: 87:ed:b3:57:28:a3:e0:ad:4b:98:0a:f4:2e:0f:33: 5a:9d:83:60:25:6e:03:cd:a9:77:39:50:8c:6b:fa: 00:86:4d:62:7b:a4:6d:31:59:f5:ca:4e:09:88:ce: 6b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:11:48:72:5C:CE:72:59:03:79:BA:30:3B:61:C2:74:12:29:EC:95 X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/fxFIclzOclkDebowO2HCdBIp7JU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.51.2.0/24 Signature Algorithm: sha256WithRSAEncryption 33:3e:0d:79:f7:b2:7f:dc:d4:36:91:e0:1c:e2:07:df:00:80: 19:14:2a:81:a4:73:e1:5e:12:d8:d6:4f:25:a5:a1:97:7d:b2: de:4d:8d:c7:66:7c:a3:de:15:90:71:0a:47:4b:39:89:ce:09: 45:b3:35:ba:4a:7f:64:4a:c6:a6:7b:da:95:96:b2:58:d9:13: 4c:b0:97:ef:6e:e2:1e:2c:80:6b:58:a1:05:45:06:0e:bd:c5: 06:dd:cf:9f:90:16:10:1d:a6:5e:b2:56:a7:b9:c2:cb:1e:dc: 81:93:ad:46:ca:a7:fd:c6:9e:e0:ab:9c:6b:79:89:95:68:54: 3f:88:21:f6:42:56:ca:92:e3:d6:b1:db:10:dd:71:fe:b4:21: 7d:bd:f1:6b:c0:05:71:63:cc:42:2f:0f:f0:3f:f5:75:c5:ea: b5:21:f6:f9:de:3c:db:81:e0:a5:bc:87:83:7c:29:50:1c:17: c3:1e:8f:4c:32:7a:60:d4:13:9d:41:45:09:f1:f8:b3:07:f2: cb:a3:47:06:52:51:10:3f:14:c3:a4:89:60:db:5e:24:47:be: bd:01:87:d7:2a:3d:86:ad:71:d7:08:50:4c:cd:2e:aa:8b:31: 10:dc:a2:5f:59:e4:3d:82:af:6f:33:da:70:11:45:2d:14:30: 72:97:59:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ExcphafSeQmGccTd9gLUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjYwMTAyMDAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjExNDg3MjVjY2U3MjU5MDM3OWJhMzAzYjYxYzI3NDEyMjllYzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8FyOicg0T5NTDYKu8+4hNhK16m9X FsVqHkGg3ZUU1vqchONw99Ss7jl20olwSsV6U5g+wHYmoK1i4JpCXtHg+k6VwLIt ikHihpSzabaJqKGyc6A4IgH66urEVirtaVAnM1zr5U4xQmAgeAnqHaLeU32IcEnS J68tuk9Ah1MBr46xOqGcX6Mz3oYcqaNfMZ81YPclg2AIMs35FTnC55UiLgmBdphY 3sMtl45SWO4hynzu6+Eqobn7NYyeNkwdFv5t4cc4xIwud5nl9JqTniHaRQ2H7bNX KKPgrUuYCvQuDzNanYNgJW4Dzal3OVCMa/oAhk1ie6RtMVn1yk4JiM5rWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH8RSHJcznJZA3m6MDthwnQSKeyVMB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvZnhGSWNsek9jbGtEZWJvd08ySENkQklwN0pVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXDMCMA0G CSqGSIb3DQEBCwUAA4IBAQAzPg1597J/3NQ2keAc4gffAIAZFCqBpHPhXhLY1k8l paGXfbLeTY3HZnyj3hWQcQpHSzmJzglFszW6Sn9kSsame9qVlrJY2RNMsJfvbuIe LIBrWKEFRQYOvcUG3c+fkBYQHaZeslanucLLHtyBk61Gyqf9xp7gq5xreYmVaFQ/ iCH2QlbKkuPWsdsQ3XH+tCF9vfFrwAVxY8xCLw/wP/V1xeq1Ifb53jzbgeClvIeD fClQHBfDHo9MMnpg1BOdQUUJ8fizB/LLo0cGUlEQPxTDpIlg214kR769AYfXKj2G rXHXCFBMzS6qizEQ3KJfWeQ9gq9vM9pwEUUtFDByl1kl -----END CERTIFICATE-----Generated at Tue Jan 20 04:45:27 2026 by rpki-client