This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/FV5agwPefu87z1wCtIqkpK0uL6w.roa File: FV5agwPefu87z1wCtIqkpK0uL6w.roa (raw, json) Hash identifier: kbaz5ecyqtDRdizdZmskpU3ubOJCJzahx05LTnstX4A= Subject key identifier: 15:5E:5A:83:03:DE:7E:EF:3B:CF:5C:02:B4:8A:A4:A4:AD:2E:2F:AC Certificate issuer: /CN=d826ca5d53c1b5308e2c9c791c630a0f22337943 Certificate serial: 019B7C7F2E0A41B93C4D390FCA52573A5E34 Authority key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/FV5agwPefu87z1wCtIqkpK0uL6w.roa Signing time: Fri 02 Jan 2026 02:17:48 +0000 ROA not before: Fri 02 Jan 2026 02:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 109.68.67.0/24 maxlen: 24 109.68.70.0/24 maxlen: 24 109.68.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:20:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:2e:0a:41:b9:3c:4d:39:0f:ca:52:57:3a:5e:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943 Validity Not Before: Jan 2 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=155e5a8303de7eef3bcf5c02b48aa4a4ad2e2fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ce:44:ba:0a:c4:cf:6e:28:6c:3c:da:db:65: 9b:ca:d9:29:5f:3e:65:07:52:ce:e6:e9:4d:17:d7: ff:33:4f:2f:ec:b9:65:53:e3:95:6f:e5:2a:d4:41: 23:33:cc:42:6f:65:87:a5:9f:d1:4e:33:e6:7a:a3: 27:ac:c8:20:fc:79:48:89:c5:b1:84:6b:9b:46:b9: 96:5c:e0:69:2d:8e:8b:8a:64:44:98:6e:c9:8f:46: 90:47:0a:fa:50:12:72:b0:80:da:78:50:48:2c:fe: 2c:5f:7f:36:e1:6d:02:a3:1c:8c:c1:04:38:e8:11: 6a:f9:9d:fd:58:12:e2:dd:25:b5:67:4c:0e:af:c0: 39:c5:a4:8f:01:f3:3b:ff:12:83:4b:72:92:16:dd: 2f:45:c1:a2:70:6e:00:91:fa:46:e5:4d:f0:c5:f8: b5:75:96:bb:be:ca:73:8e:d9:22:e5:c8:a3:e0:75: 6a:00:5f:ae:63:8c:fb:20:ff:f9:e3:75:8b:53:9b: 61:f4:47:4c:91:1f:ad:40:cd:cf:23:58:ec:a6:90: 73:bb:40:ed:49:73:a0:a7:c3:30:bc:8a:47:69:7a: 51:bc:c4:22:1d:af:ea:8f:b0:ff:2e:2e:f8:c3:e7: ad:09:7f:b8:67:88:34:75:53:0b:cd:95:7c:6e:c3: 40:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5E:5A:83:03:DE:7E:EF:3B:CF:5C:02:B4:8A:A4:A4:AD:2E:2F:AC X509v3 Authority Key Identifier: keyid:D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/FV5agwPefu87z1wCtIqkpK0uL6w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.68.67.0/24 109.68.70.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:89:34:c8:10:85:b9:6c:7c:96:58:7c:b2:27:18:7a:a8:ad: 37:8e:e8:1e:ca:b8:b1:08:ad:63:d0:c3:50:b6:71:bf:14:4e: 0f:ed:f3:27:66:8c:5b:3d:d2:26:30:a7:bc:2f:71:6a:55:2a: c7:24:18:42:b9:56:a6:f6:1a:87:18:19:34:1d:b8:45:aa:7b: 1d:50:ae:34:20:2f:f0:cb:93:46:4c:c7:3e:c4:f2:02:84:90: 16:92:64:70:f7:a1:c4:99:2d:83:98:75:00:19:92:6a:38:2c: 44:49:dc:83:ca:3d:96:e7:a2:2a:71:f3:dd:71:16:d2:49:ab: c7:4a:7a:df:a5:b7:c2:ae:05:13:73:00:48:a7:6e:4b:f5:3a: f6:3c:79:bc:f5:a7:49:fd:d5:29:c5:cd:b5:6f:d5:e4:f6:de: 3f:8f:2c:e0:49:d9:05:b0:58:0b:5f:2f:14:ca:be:cb:16:3b: a7:09:51:fa:c9:b6:e6:14:04:6d:32:d8:99:6e:0d:f1:1d:ad: 0e:81:25:3c:3d:1b:b6:4c:50:1d:45:94:8b:1a:a3:5f:19:91: e6:56:34:c8:25:bd:5a:e5:f2:39:d7:3b:28:1e:29:be:61:80: 46:7f:4d:b8:0f:f7:44:6e:b8:cb:18:89:5d:d6:5b:a8:94:ca: de:0a:e1:07 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8fy4KQbk8TTkPylJXOl40MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MjZjYTVkNTNjMWI1MzA4ZTJjOWM3OTFjNjMwYTBmMjIz Mzc5NDMwHhcNMjYwMTAyMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTVlNWE4MzAzZGU3ZWVmM2JjZjVjMDJiNDhhYTRhNGFkMmUyZmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM5EugrEz24obDza22WbytkpXz5l B1LO5ulNF9f/M08v7LllU+OVb+Uq1EEjM8xCb2WHpZ/RTjPmeqMnrMgg/HlIicWx hGubRrmWXOBpLY6LimREmG7Jj0aQRwr6UBJysIDaeFBILP4sX3824W0CoxyMwQQ4 6BFq+Z39WBLi3SW1Z0wOr8A5xaSPAfM7/xKDS3KSFt0vRcGicG4AkfpG5U3wxfi1 dZa7vspzjtki5cij4HVqAF+uY4z7IP/543WLU5th9EdMkR+tQM3PI1jsppBzu0Dt SXOgp8MwvIpHaXpRvMQiHa/qj7D/Li74w+etCX+4Z4g0dVMLzZV8bsNA3wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBVeWoMD3n7vO89cArSKpKStLi+sMB8GA1UdIwQY MBaAFNgmyl1TwbUwjiyceRxjCg8iM3lDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80YjU0NGUtNjUzNS00YWY4LWJiZGIt NThkMmVlOTgyODc5LzEvRlY1YWd3UGVmdTg3ejF3Q3RJcWtwSzB1TDZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS80YjU0NGUtNjUzNS00YWY4LWJiZGItNThkMmVlOTgyODc5 LzEvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbURDAwQB bURGMA0GCSqGSIb3DQEBCwUAA4IBAQAbiTTIEIW5bHyWWHyyJxh6qK03jugeyrix CK1j0MNQtnG/FE4P7fMnZoxbPdImMKe8L3FqVSrHJBhCuVam9hqHGBk0HbhFqnsd UK40IC/wy5NGTMc+xPIChJAWkmRw96HEmS2DmHUAGZJqOCxESdyDyj2W56IqcfPd cRbSSavHSnrfpbfCrgUTcwBIp25L9Tr2PHm89adJ/dUpxc21b9Xk9t4/jyzgSdkF sFgLXy8Uyr7LFjunCVH6ybbmFARtMtiZbg3xHa0OgSU8PRu2TFAdRZSLGqNfGZHm VjTIJb1a5fI51zsoHim+YYBGf024D/dEbrjLGIld1luolMreCuEH -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:16 2026 by rpki-client