This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/FQ8IH5cBqg-duSc2imKOt1dr3gc.roa File: FQ8IH5cBqg-duSc2imKOt1dr3gc.roa (raw, json) Hash identifier: zLx5O2JcZIf3WeCO72jwVB0rL1h+cp1I4W0w1x3rEC8= Subject key identifier: 15:0F:08:1F:97:01:AA:0F:9D:B9:27:36:8A:62:8E:B7:57:6B:DE:07 Certificate issuer: /CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a Certificate serial: 019B76EB85BE538ED3F3AAD3BC6368189233 Authority key identifier: A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/FQ8IH5cBqg-duSc2imKOt1dr3gc.roa Signing time: Thu 01 Jan 2026 00:18:25 +0000 ROA not before: Thu 01 Jan 2026 00:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8278 IP address blocks: 147.27.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:85:be:53:8e:d3:f3:aa:d3:bc:63:68:18:92:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a Validity Not Before: Jan 1 00:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=150f081f9701aa0f9db927368a628eb7576bde07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:78:7d:c6:3f:0d:3b:9c:61:5e:75:f3:95:74: d4:22:7c:58:72:90:c6:0e:18:be:d5:be:d3:6e:a5: e2:08:3e:81:bb:e7:97:a6:4d:c7:d6:97:8e:dc:96: ba:9d:46:c1:53:00:58:c2:7a:68:3c:7b:35:c5:c4: 80:59:e1:46:97:de:44:6c:63:4f:52:05:9e:1e:02: 52:7e:8d:60:20:96:23:49:61:0c:b5:c0:dc:15:71: 48:e7:29:41:73:04:ea:a0:cf:3d:ae:4e:75:eb:6b: e3:83:0f:5a:47:d3:14:1a:36:3c:27:2d:f6:19:47: 5d:af:f9:3c:53:53:c5:55:55:68:19:bb:74:99:8f: 0d:0e:5d:95:8b:eb:b0:3f:90:b1:b1:8c:9d:4e:dc: 5a:94:f7:33:2b:b7:e8:ea:af:45:0d:34:e5:5d:a2: 09:fa:5c:36:2e:bc:2c:b7:45:db:d0:38:46:05:de: e8:30:44:64:e9:1d:5a:0c:55:5e:c2:a1:21:6a:1b: 20:35:c2:a3:30:67:40:7b:e3:ba:d2:2f:8d:13:1d: 3b:a3:8f:b4:e4:47:3e:62:e3:7d:0a:aa:f1:1b:47: 8c:ba:8a:18:d9:85:61:ce:45:33:c9:0e:22:41:b0: 7e:d9:ae:a1:ef:23:ed:c8:3f:59:3f:23:61:20:ba: 98:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:0F:08:1F:97:01:AA:0F:9D:B9:27:36:8A:62:8E:B7:57:6B:DE:07 X509v3 Authority Key Identifier: keyid:A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/FQ8IH5cBqg-duSc2imKOt1dr3gc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.27.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4c:09:f0:7c:28:b9:ee:b7:02:40:d5:a0:cb:1f:d2:a9:30:86: 2c:24:c8:24:7e:a4:b8:79:fd:0a:ed:0c:68:83:29:93:78:c3: 38:70:db:a2:c0:f2:a6:e7:1e:65:60:36:5e:00:3e:87:a1:59: 40:27:1b:98:de:d5:8a:3f:cd:3b:22:f3:eb:85:d5:f1:70:c9: bc:66:4f:bf:56:29:84:06:ee:dc:63:c4:61:5d:92:69:0c:86: 1a:ca:28:66:f4:5f:87:e6:ad:5c:a6:a1:c9:ae:dd:e9:57:2f: f8:a2:3a:33:81:e4:7d:43:17:0a:04:d5:24:55:d8:9b:e7:01: 17:9e:5f:03:06:f4:ae:07:b9:24:97:15:a8:0b:8e:d1:dd:9d: 43:27:ba:92:24:e1:8d:88:9e:07:22:4b:e0:0c:a3:46:3a:ba: 35:13:9b:88:93:f9:58:96:f4:49:b4:53:c7:71:3c:4d:f1:11: 49:f8:24:40:c9:67:b5:b2:8a:fb:9b:49:74:5c:4c:82:8d:39: e9:f8:05:9e:ba:02:8e:b4:e1:ef:9d:4f:8c:26:02:9b:d9:28: 54:16:62:7f:8b:08:7e:97:65:76:06:cb:59:38:2f:09:1a:53: 5c:9b:16:79:22:52:f3:00:18:a9:af:62:88:db:d3:43:9d:25: cf:d2:d0:e3 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt264W+U47T86rTvGNoGJIzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YWQyM2Y2ZGNlNGQ5NjgzYzJhNDk0M2JkMzdjMTczMzVj NzYxOGEwHhcNMjYwMTAxMDAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTBmMDgxZjk3MDFhYTBmOWRiOTI3MzY4YTYyOGViNzU3NmJkZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Hh9xj8NO5xhXnXzlXTUInxYcpDG Dhi+1b7TbqXiCD6Bu+eXpk3H1peO3Ja6nUbBUwBYwnpoPHs1xcSAWeFGl95EbGNP UgWeHgJSfo1gIJYjSWEMtcDcFXFI5ylBcwTqoM89rk5162vjgw9aR9MUGjY8Jy32 GUddr/k8U1PFVVVoGbt0mY8NDl2Vi+uwP5CxsYydTtxalPczK7fo6q9FDTTlXaIJ +lw2Lrwst0Xb0DhGBd7oMERk6R1aDFVewqEhahsgNcKjMGdAe+O60i+NEx07o4+0 5Ec+YuN9CqrxG0eMuooY2YVhzkUzyQ4iQbB+2a6h7yPtyD9ZPyNhILqYqQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFBUPCB+XAaoPnbknNopijrdXa94HMB8GA1UdIwQY MBaAFKStI/bc5NloPCpJQ703wXM1x2GKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEswajl0emsyV2c4S2tsRHZUZkJjelhIWVlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kMTgzN2EtNjA2ZS00MTgwLWE3ZjAt NzI4ZTBkZmI4NDBkLzEvRlE4SUg1Y0JxZy1kdVNjMmltS090MWRyM2djLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9kMTgzN2EtNjA2ZS00MTgwLWE3ZjAtNzI4ZTBkZmI4NDBk LzEvcEswajl0emsyV2c4S2tsRHZUZkJjelhIWVlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkxswDQYJ KoZIhvcNAQELBQADggEBAEwJ8Hwoue63AkDVoMsf0qkwhiwkyCR+pLh5/QrtDGiD KZN4wzhw26LA8qbnHmVgNl4APoehWUAnG5je1Yo/zTsi8+uF1fFwybxmT79WKYQG 7txjxGFdkmkMhhrKKGb0X4fmrVymocmu3elXL/iiOjOB5H1DFwoE1SRV2JvnARee XwMG9K4HuSSXFagLjtHdnUMnupIk4Y2IngciS+AMo0Y6ujUTm4iT+ViW9Em0U8dx PE3xEUn4JEDJZ7WyivubSXRcTIKNOen4BZ66Ao604e+dT4wmApvZKFQWYn+LCH6X ZXYGy1k4LwkaU1ybFnkiUvMAGKmvYojb00OdJc/S0OM= -----END CERTIFICATE-----Generated at Mon Feb 2 14:16:09 2026 by rpki-client