This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/FDuGSJMWQl-EUgeMprPqhHrKAr8.roa File: FDuGSJMWQl-EUgeMprPqhHrKAr8.roa (raw, json) Hash identifier: 4yjpmX21fwrURb6LQjvcx3RscxeW1IuTvZPzTDBGeqc= Subject key identifier: 14:3B:86:48:93:16:42:5F:84:52:07:8C:A6:B3:EA:84:7A:CA:02:BF Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019BFB55EC935281633FA41875547D10CB05 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/FDuGSJMWQl-EUgeMprPqhHrKAr8.roa Signing time: Mon 26 Jan 2026 17:24:30 +0000 ROA not before: Mon 26 Jan 2026 17:24:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9457 IP address blocks: 43.242.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 01 Feb 2026 02:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:55:ec:93:52:81:63:3f:a4:18:75:54:7d:10:cb:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 26 17:24:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=143b86489316425f8452078ca6b3ea847aca02bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d3:17:c2:c4:e5:f5:95:87:2a:1f:81:a3:92: 20:a7:4e:fe:4f:c5:86:55:0d:19:5d:13:75:e2:f6: fa:c6:e0:0d:38:d4:1e:05:7e:57:22:9f:2c:33:8a: 1f:3b:e4:a5:95:bc:00:dd:b6:6d:d3:f4:1b:46:d3: 77:8b:ce:fc:64:e2:52:61:15:9c:42:bd:f2:a6:a8: 3b:94:77:75:69:9a:ec:3e:c2:cc:76:33:ec:5f:6b: 34:e4:35:48:aa:aa:03:fb:5a:a0:ce:2f:8b:81:fa: 7e:1c:79:5c:0c:e6:e5:e0:2e:55:19:cf:51:f0:f3: f9:c9:0f:cb:b2:b5:26:50:e9:68:12:e4:88:b2:19: 88:82:4c:3e:b2:3c:fe:51:e4:1c:af:e0:cd:9b:7c: 98:b8:92:b8:c4:ed:80:dd:53:46:43:c5:93:7d:a2: 5d:e5:2b:37:21:52:58:4d:16:7a:6d:fb:03:a8:3c: 37:2b:77:04:23:2a:20:a9:0d:50:1e:c6:cc:65:93: 84:ca:7d:05:4b:9b:07:f2:85:70:31:68:c1:66:f1: 73:cd:78:62:4e:1b:92:96:28:b7:a7:4f:1a:e0:eb: 7d:d0:60:67:49:39:e9:77:7d:7d:cd:17:db:d9:c8: f0:98:45:b4:ac:b2:eb:28:a9:d9:ce:3f:03:7e:7f: c5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:3B:86:48:93:16:42:5F:84:52:07:8C:A6:B3:EA:84:7A:CA:02:BF X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/FDuGSJMWQl-EUgeMprPqhHrKAr8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.242.138.0/24 Signature Algorithm: sha256WithRSAEncryption ab:2e:7b:3f:21:79:1b:45:11:9c:e6:c4:78:b5:53:63:c0:14: 22:a8:1b:af:e1:46:9b:8f:ac:52:7a:85:2d:85:3b:5e:8e:95: 5d:be:6f:8f:d5:0e:0e:f0:0f:6b:16:ce:3a:26:4a:a8:1e:73: a5:e4:8c:48:94:b7:e8:1d:7f:47:24:ce:a5:62:eb:24:03:81: 23:ce:39:e4:b3:b8:4c:f0:46:a2:2d:91:20:46:9e:05:52:19: db:41:d8:83:c8:38:27:d4:54:7d:55:a0:1d:df:f5:fc:17:4f: 02:88:33:d6:0e:08:08:0f:5f:b3:23:1f:ce:f3:bc:cf:3f:6c: 57:b6:46:c0:bc:06:fe:1a:84:f5:20:14:dd:37:36:e5:41:c3: 61:46:ef:68:58:69:32:1c:d8:c2:e8:e6:b8:3d:8d:65:b5:ee: 4b:92:4b:7a:db:b3:ab:ef:ee:62:d4:71:20:cc:d5:4f:a6:68: be:06:5a:5d:51:1e:a1:f4:d0:3e:0d:69:11:b5:2f:d1:4b:bc: 4e:72:38:50:c9:8d:cc:74:40:d5:66:4b:f3:78:aa:34:ab:f8: 7c:3a:2a:67:bf:3c:6a:ab:2a:f8:e3:e9:b5:2a:11:90:53:14: c1:fc:a5:00:5b:b3:7c:d3:f6:6b:21:3d:67:b2:8c:10:2e:eb: 39:87:35:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv7VeyTUoFjP6QYdVR9EMsFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTI2MTcyNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDNiODY0ODkzMTY0MjVmODQ1MjA3OGNhNmIzZWE4NDdhY2EwMmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtMXwsTl9ZWHKh+Bo5Igp07+T8WG VQ0ZXRN14vb6xuANONQeBX5XIp8sM4ofO+SllbwA3bZt0/QbRtN3i878ZOJSYRWc Qr3ypqg7lHd1aZrsPsLMdjPsX2s05DVIqqoD+1qgzi+Lgfp+HHlcDObl4C5VGc9R 8PP5yQ/LsrUmUOloEuSIshmIgkw+sjz+UeQcr+DNm3yYuJK4xO2A3VNGQ8WTfaJd 5Ss3IVJYTRZ6bfsDqDw3K3cEIyogqQ1QHsbMZZOEyn0FS5sH8oVwMWjBZvFzzXhi ThuSlii3p08a4Ot90GBnSTnpd319zRfb2cjwmEW0rLLrKKnZzj8Dfn/FsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBQ7hkiTFkJfhFIHjKaz6oR6ygK/MB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvRkR1R1NKTVdRbC1FVWdlTXByUHFoSHJLQXI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK/KKMA0G CSqGSIb3DQEBCwUAA4IBAQCrLns/IXkbRRGc5sR4tVNjwBQiqBuv4Uabj6xSeoUt hTtejpVdvm+P1Q4O8A9rFs46JkqoHnOl5IxIlLfoHX9HJM6lYuskA4Ejzjnks7hM 8EaiLZEgRp4FUhnbQdiDyDgn1FR9VaAd3/X8F08CiDPWDggID1+zIx/O87zPP2xX tkbAvAb+GoT1IBTdNzblQcNhRu9oWGkyHNjC6Oa4PY1lte5Lkkt627Or7+5i1HEg zNVPpmi+BlpdUR6h9NA+DWkRtS/RS7xOcjhQyY3MdEDVZkvzeKo0q/h8Oipnvzxq qyr44+m1KhGQUxTB/KUAW7N80/ZrIT1nsowQLus5hzWR -----END CERTIFICATE-----Generated at Sat Jan 31 11:50:40 2026 by rpki-client