This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/FpVk8TrExM7qh1EJO4WIiE3lVyE.roa File: FpVk8TrExM7qh1EJO4WIiE3lVyE.roa (raw, json) Hash identifier: WexubyfSWld4FcW4VTmRPdxVwZX9FjWbZF4QKeBNJNA= Subject key identifier: 16:95:64:F1:3A:C4:C4:CE:EA:87:51:09:3B:85:88:88:4D:E5:57:21 Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02 Certificate serial: 019AB20D6CBBD0B8CC21C9D4B37297475E5B Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/FpVk8TrExM7qh1EJO4WIiE3lVyE.roa Signing time: Sun 23 Nov 2025 18:50:15 +0000 ROA not before: Sun 23 Nov 2025 18:50:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 5.102.36.0/24 maxlen: 24 195.5.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 22:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b2:0d:6c:bb:d0:b8:cc:21:c9:d4:b3:72:97:47:5e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02 Validity Not Before: Nov 23 18:50:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=169564f13ac4c4ceea8751093b8588884de55721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f0:ad:ae:a3:36:b5:41:6d:5e:23:57:30:dd: 06:e3:96:43:d0:73:f7:b2:93:ba:21:6b:e1:87:6f: ef:26:a9:92:57:5f:d5:fa:62:af:ac:e6:0b:be:13: bf:51:98:94:3e:9b:52:1b:d1:2c:6b:05:9e:c9:93: b4:ae:73:96:bc:ad:33:66:52:59:05:1f:f9:ce:31: 3d:f3:61:10:20:d4:e8:8b:29:43:08:b3:e7:4b:60: b9:75:74:4b:72:c0:e4:66:b7:5b:8f:2e:91:05:cd: a1:10:75:72:71:0c:f7:94:1d:f2:b2:e1:14:ac:ee: a4:63:ac:22:20:40:47:f2:d3:64:55:bb:aa:3d:3e: 9f:57:5f:01:ce:ab:f0:7a:24:d4:ef:e7:23:aa:87: ab:91:a2:d8:d2:44:e7:d9:95:0c:23:f7:cc:56:f4: f4:e0:56:d5:a1:4f:53:0f:7a:d7:00:65:3b:d3:72: af:f7:ec:09:13:4f:c5:01:11:e0:ba:69:9e:6d:d4: 79:91:fe:34:61:7d:91:62:32:8e:2e:8d:50:30:56: b0:fe:26:b3:49:c1:7c:bc:7a:e4:1c:41:51:09:06: b5:21:16:cd:fc:73:f6:82:18:d5:25:63:ce:f2:07: dc:06:7a:a7:e7:4c:7e:fc:ca:65:ee:a5:3c:f1:0d: df:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:95:64:F1:3A:C4:C4:CE:EA:87:51:09:3B:85:88:88:4D:E5:57:21 X509v3 Authority Key Identifier: keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/FpVk8TrExM7qh1EJO4WIiE3lVyE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.102.36.0/24 195.5.125.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:eb:43:91:9a:42:0a:5b:06:24:43:ec:b2:65:1e:e4:1d:ee: 52:4d:11:77:4d:43:9c:74:74:66:96:0c:a3:36:b7:9a:04:85: 85:b4:43:05:86:29:76:2e:04:dc:a0:22:11:95:2b:76:57:de: 5d:e7:92:ee:98:dc:19:22:9a:2e:bc:07:05:7c:fd:f2:2b:1e: 44:b6:ed:e4:2d:fd:8b:2e:9f:f2:2e:75:6e:d6:96:2a:ff:52: 62:67:2c:31:cd:d7:93:d4:3d:be:9b:aa:5c:21:3d:e9:e1:dc: 24:09:05:d5:6a:cb:3a:73:7b:32:24:83:5b:3d:5d:9c:b5:6a: ad:73:c4:89:d6:d8:1b:b8:77:58:64:8b:52:63:82:cf:95:8d: c7:16:24:ec:94:dd:f4:67:ae:16:16:c2:1f:55:08:d1:25:06: 25:75:2c:01:27:12:e2:7d:b5:dd:30:b7:52:5d:21:52:29:ab: f1:e1:99:8a:7a:b2:90:ba:23:19:e2:ac:b8:50:ad:f7:31:cc: ea:f7:ed:ae:b9:f4:2c:6d:8e:15:a9:e4:56:54:30:97:48:36: d3:9d:d6:e5:b9:9a:2b:b7:b0:0f:f2:9c:79:fd:2e:2e:c3:f5: 19:28:26:98:24:39:2c:b0:c0:f4:7c:14:c4:c5:c8:e5:bc:3f: 1e:19:9e:20 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqyDWy70LjMIcnUs3KXR15bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZGY3NmM1NGI5ZTY5MzVjMzBhOWI0YzliYTkzMDlhYzQ3 MGVjMDIwHhcNMjUxMTIzMTg1MDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjk1NjRmMTNhYzRjNGNlZWE4NzUxMDkzYjg1ODg4ODRkZTU1NzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvCtrqM2tUFtXiNXMN0G45ZD0HP3 spO6IWvhh2/vJqmSV1/V+mKvrOYLvhO/UZiUPptSG9EsawWeyZO0rnOWvK0zZlJZ BR/5zjE982EQINToiylDCLPnS2C5dXRLcsDkZrdbjy6RBc2hEHVycQz3lB3ysuEU rO6kY6wiIEBH8tNkVbuqPT6fV18BzqvweiTU7+cjqoerkaLY0kTn2ZUMI/fMVvT0 4FbVoU9TD3rXAGU703Kv9+wJE0/FARHgummebdR5kf40YX2RYjKOLo1QMFaw/iaz ScF8vHrkHEFRCQa1IRbN/HP2ghjVJWPO8gfcBnqn50x+/Mpl7qU88Q3f9wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBaVZPE6xMTO6odRCTuFiIhN5VchMB8GA1UdIwQY MBaAFIvfdsVLnmk1wwqbTJupMJrEcOwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgt OGQyMTg2NjUwMjdkLzEvRnBWazhUckV4TTdxaDFFSk80V0lpRTNsVnlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgtOGQyMTg2NjUwMjdk LzEvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABWYkAwQA wwV9MA0GCSqGSIb3DQEBCwUAA4IBAQB/60ORmkIKWwYkQ+yyZR7kHe5STRF3TUOc dHRmlgyjNreaBIWFtEMFhil2LgTcoCIRlSt2V95d55LumNwZIpouvAcFfP3yKx5E tu3kLf2LLp/yLnVu1pYq/1JiZywxzdeT1D2+m6pcIT3p4dwkCQXVass6c3syJINb PV2ctWqtc8SJ1tgbuHdYZItSY4LPlY3HFiTslN30Z64WFsIfVQjRJQYldSwBJxLi fbXdMLdSXSFSKavx4ZmKerKQuiMZ4qy4UK33Mczq9+2uufQsbY4VqeRWVDCXSDbT ndbluZort7AP8px5/S4uw/UZKCaYJDkssMD0fBTExcjlvD8eGZ4g -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:38 2025 by rpki-client