This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/FGXlA6UVg4gAwt0-6eXZrReUgS8.roa File: FGXlA6UVg4gAwt0-6eXZrReUgS8.roa (raw, json) Hash identifier: 0eUHM++ZY3T8J++w0MzORMUGNOUzM3SPmGXZ94wcHik= Subject key identifier: 14:65:E5:03:A5:15:83:88:00:C2:DD:3E:E9:E5:D9:AD:17:94:81:2F Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20 Certificate serial: 019B15417377EC53FFD42A092F0FA34A3972 Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/FGXlA6UVg4gAwt0-6eXZrReUgS8.roa Signing time: Sat 13 Dec 2025 01:09:29 +0000 ROA not before: Sat 13 Dec 2025 01:09:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 14618 IP address blocks: 87.58.64.0/24 maxlen: 24 87.58.65.0/24 maxlen: 24 159.254.0.0/24 maxlen: 24 159.254.1.0/24 maxlen: 24 159.254.2.0/24 maxlen: 24 159.254.3.0/24 maxlen: 24 159.254.4.0/24 maxlen: 24 159.254.5.0/24 maxlen: 24 159.254.6.0/24 maxlen: 24 159.254.7.0/24 maxlen: 24 159.254.8.0/24 maxlen: 24 159.254.9.0/24 maxlen: 24 159.254.10.0/24 maxlen: 24 159.254.11.0/24 maxlen: 24 159.254.12.0/24 maxlen: 24 159.254.80.0/24 maxlen: 24 159.254.81.0/24 maxlen: 24 159.254.82.0/24 maxlen: 24 159.254.186.0/24 maxlen: 24 159.254.187.0/24 maxlen: 24 159.254.188.0/24 maxlen: 24 159.254.189.0/24 maxlen: 24 159.254.190.0/24 maxlen: 24 159.254.191.0/24 maxlen: 24 159.254.255.0/24 maxlen: 24 194.9.116.0/24 maxlen: 24 2a03:eec0:3601::/48 maxlen: 48 2a03:eec0:3602::/48 maxlen: 48 2a03:eec0:3603::/48 maxlen: 48 2a03:eec0:3604::/48 maxlen: 48 2a03:eec0:3605::/48 maxlen: 48 2a03:eec0:3606::/48 maxlen: 48 2a03:eec0:3607::/48 maxlen: 48 2a03:eec0:3608::/48 maxlen: 48 2a03:eec0:3609::/48 maxlen: 48 2a03:eec0:360a::/48 maxlen: 48 2a03:eec0:360b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:15:41:73:77:ec:53:ff:d4:2a:09:2f:0f:a3:4a:39:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20 Validity Not Before: Dec 13 01:09:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1465e503a515838800c2dd3ee9e5d9ad1794812f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4c:39:7a:76:3c:76:b6:ce:7a:72:e5:1c:6b: 09:f3:9b:a4:37:d8:c3:ff:78:f3:96:9b:d4:13:a8: 0c:84:b0:34:d0:4b:4a:37:25:69:02:b1:ee:24:24: 8a:12:8a:f9:14:b1:bc:7f:f0:f9:03:00:3b:dd:49: 75:ad:8b:8e:5d:59:4a:ea:d7:58:51:95:77:4e:98: 3a:5e:4a:54:ad:cf:a7:ee:cc:62:ea:1a:14:2f:e7: e5:f4:51:29:de:0d:37:7f:2f:a8:4d:b0:aa:4b:d9: 67:b2:ec:5a:42:c6:22:5f:37:16:31:fd:75:28:06: ac:45:81:32:4c:26:7b:47:87:a3:8b:b2:56:4a:c8: 45:21:df:84:6e:d0:63:76:7d:07:c9:20:dc:bb:cf: 6b:e7:82:f5:58:44:6d:66:60:42:f9:6b:a6:2b:7e: be:7f:31:4f:d8:6e:7a:99:dd:e6:b8:16:7f:34:d3: c6:26:9a:62:0f:6b:e2:75:c8:a0:b5:50:94:34:46: 3c:54:8c:71:ac:a5:25:40:9a:9c:77:69:3f:32:7b: 98:dd:11:18:b3:54:df:4d:c7:af:dc:49:42:73:4d: 58:05:ca:b7:7d:d2:25:be:f6:93:23:3d:77:b6:cd: fb:15:80:5a:a4:e0:57:17:3e:37:6d:32:61:d9:8a: fa:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:65:E5:03:A5:15:83:88:00:C2:DD:3E:E9:E5:D9:AD:17:94:81:2F X509v3 Authority Key Identifier: keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/FGXlA6UVg4gAwt0-6eXZrReUgS8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.58.64.0/23 159.254.0.0-159.254.12.255 159.254.80.0-159.254.82.255 159.254.186.0-159.254.191.255 159.254.255.0/24 194.9.116.0/24 IPv6: 2a03:eec0:3601::-2a03:eec0:360b:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 7d:dd:5d:32:f6:a7:f1:3f:71:68:71:a5:9c:74:bf:57:df:5e: bb:50:4e:f9:79:09:4f:4c:1d:34:7f:7b:15:a2:34:81:1b:4b: 10:30:04:62:e0:79:7e:ba:51:7a:38:92:f7:d1:16:f5:de:7d: 72:4f:ee:99:df:a7:66:38:4b:2d:f5:8e:1e:70:b6:5d:9c:ca: 21:c9:80:ee:0d:eb:d7:bc:5a:a1:75:54:2b:97:53:29:0d:89: c1:1f:b2:4e:66:f5:d1:d6:ac:5c:03:b9:c9:77:18:8c:ba:f0: b5:93:22:cf:d8:cf:92:d8:40:ed:1d:e8:2f:a8:4e:3c:87:13: 26:69:7d:ec:b4:5f:4c:a3:51:20:92:07:64:21:dc:0d:f0:4c: 33:36:a4:da:20:0c:37:c7:8a:03:11:de:57:29:74:a8:43:f5: e9:92:47:b5:2d:3f:b5:05:04:4d:6f:e4:7f:24:28:b7:5a:72: 53:6f:0e:b9:07:bd:be:87:5f:ce:49:52:05:b9:dd:d3:ad:76: e0:0c:7b:3b:46:23:a8:ec:4e:2e:33:b2:5e:67:a5:29:05:ea: 91:7f:5e:78:43:30:cf:1d:0c:2a:44:e5:c5:c6:9a:eb:42:f8: a4:2c:9e:a2:f3:3d:80:81:2c:ce:6c:fa:c7:da:0d:9f:e2:68: a3:de:5c:cb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgISAZsVQXN37FP/1CoJLw+jSjlyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYTY2YTU5MzhhZjU2N2E5ZTI5YjRmNzZmMTE1NjA3YzJi OGFhMjAwHhcNMjUxMjEzMDEwOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDY1ZTUwM2E1MTU4Mzg4MDBjMmRkM2VlOWU1ZDlhZDE3OTQ4MTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ew5enY8drbOenLlHGsJ85ukN9jD /3jzlpvUE6gMhLA00EtKNyVpArHuJCSKEor5FLG8f/D5AwA73Ul1rYuOXVlK6tdY UZV3Tpg6XkpUrc+n7sxi6hoUL+fl9FEp3g03fy+oTbCqS9lnsuxaQsYiXzcWMf11 KAasRYEyTCZ7R4eji7JWSshFId+EbtBjdn0HySDcu89r54L1WERtZmBC+WumK36+ fzFP2G56md3muBZ/NNPGJppiD2vidcigtVCUNEY8VIxxrKUlQJqcd2k/MnuY3REY s1TfTcev3ElCc01YBcq3fdIlvvaTIz13ts37FYBapOBXFz43bTJh2Yr6jQIDAQAB o4ICWjCCAlYwHQYDVR0OBBYEFBRl5QOlFYOIAMLdPunl2a0XlIEvMB8GA1UdIwQY MBaAFKymalk4r1Z6nim0928RVgfCuKogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgt YjliNjU0MDJiOTI4LzEvRkdYbEE2VVZnNGdBd3QwLTZlWFpyUmVVZ1M4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgtYjliNjU0MDJiOTI4 LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBBBAIAATA7AwQBVzpAMAsD AwGf/gMEAJ/+DDAMAwQEn/5QAwQAn/5SMAwDBAGf/roDBAaf/oADBACf/v8DBADC CXQwGgQCAAIwFDASAwcAKgPuwDYBAwcCKgPuwDYIMA0GCSqGSIb3DQEBCwUAA4IB AQB93V0y9qfxP3FocaWcdL9X3167UE75eQlPTB00f3sVojSBG0sQMARi4Hl+ulF6 OJL30Rb13n1yT+6Z36dmOEst9Y4ecLZdnMohyYDuDevXvFqhdVQrl1MpDYnBH7JO ZvXR1qxcA7nJdxiMuvC1kyLP2M+S2EDtHegvqE48hxMmaX3stF9Mo1EgkgdkIdwN 8EwzNqTaIAw3x4oDEd5XKXSoQ/Xpkke1LT+1BQRNb+R/JCi3WnJTbw65B72+h1/O SVIFud3TrXbgDHs7RiOo7E4uM7JeZ6UpBeqRf154QzDPHQwqROXFxprrQvikLJ6i 8z2AgSzObPrH2g2f4mij3lzL -----END CERTIFICATE-----Generated at Sat Dec 20 02:37:37 2025 by rpki-client