This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/FNO4D7RVlaAM_PxKOtZx6Za9UaA.roa File: FNO4D7RVlaAM_PxKOtZx6Za9UaA.roa (raw, json) Hash identifier: RGivHKgUT/kxVFh2R582NZkS+c9o+IEr5q+YzBdM2sw= Subject key identifier: 14:D3:B8:0F:B4:55:95:A0:0C:FC:FC:4A:3A:D6:71:E9:96:BD:51:A0 Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Certificate serial: 019B0F0C19CC6747BBA6D40B3F1D261696A5 Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/FNO4D7RVlaAM_PxKOtZx6Za9UaA.roa Signing time: Thu 11 Dec 2025 20:13:29 +0000 ROA not before: Thu 11 Dec 2025 20:13:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215540 IP address blocks: 138.124.62.0/24 maxlen: 24 138.124.63.0/24 maxlen: 24 138.124.64.0/24 maxlen: 24 138.124.65.0/24 maxlen: 24 138.124.66.0/24 maxlen: 24 138.124.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 02:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:0c:19:cc:67:47:bb:a6:d4:0b:3f:1d:26:16:96:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Validity Not Before: Dec 11 20:13:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=14d3b80fb45595a00cfcfc4a3ad671e996bd51a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4b:b3:91:45:7f:90:b6:4f:fb:c4:1e:15:05: c3:42:f8:01:75:59:91:ee:53:42:64:de:b8:4c:73: 4a:d1:ca:45:57:51:90:74:07:48:5d:2a:f6:00:42: 3f:dc:b9:0b:00:41:bc:5b:db:19:34:ee:41:0b:1a: 33:f4:bf:fd:25:58:d7:4e:42:15:89:0d:20:ec:1c: 36:a9:65:84:1d:a2:93:30:d7:14:73:2f:b0:5a:79: e5:eb:fe:cb:54:9c:5a:e2:07:62:a7:5f:26:e2:a5: bb:c6:26:72:5e:ee:d0:22:7c:b0:83:39:5c:08:95: 32:e8:13:67:41:42:c2:e1:85:6a:d6:38:51:eb:6e: 07:e3:74:65:5a:c5:cc:bc:c3:f8:76:52:db:3d:5d: 06:4d:3d:a7:a8:94:fe:97:ae:96:c5:15:e3:55:fd: 62:f4:88:b0:35:eb:20:b7:1b:17:2b:b3:53:fb:e3: 4c:7b:db:5a:6d:ee:1b:f0:72:a6:cb:d4:c8:bb:e5: 5c:e8:e1:df:d5:e5:1a:45:4e:b6:70:bb:34:c4:d7: de:21:b8:8d:38:bf:84:d0:0c:4b:f3:ef:ce:ba:bf: ee:7b:66:05:de:2d:f4:dc:9f:48:16:b6:41:1e:c1: bb:62:34:87:63:04:39:56:50:3d:21:9c:76:3c:c6: af:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D3:B8:0F:B4:55:95:A0:0C:FC:FC:4A:3A:D6:71:E9:96:BD:51:A0 X509v3 Authority Key Identifier: keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/FNO4D7RVlaAM_PxKOtZx6Za9UaA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.124.62.0-138.124.67.255 Signature Algorithm: sha256WithRSAEncryption 82:91:8a:b9:d3:cd:18:45:3f:4d:8e:74:d7:8a:10:19:0b:de: 99:77:71:2c:ec:83:68:55:eb:fc:a2:fc:71:cc:7e:39:de:ed: 2d:25:78:83:d6:3f:32:f9:59:93:24:86:a4:47:2e:35:53:82: 49:ae:76:df:6b:52:57:59:b8:7b:4b:13:74:2e:7a:47:79:4d: 08:ef:8c:32:03:da:08:7f:75:32:04:cf:14:dc:b8:e1:44:fb: bb:aa:03:d6:b1:ed:fa:3b:24:3c:3a:6b:36:9d:0c:c2:67:7c: 2e:51:17:0f:00:48:78:cc:df:f7:3a:0b:76:df:26:3b:a4:14: ba:8e:42:8d:3e:bf:49:a2:bf:67:73:10:d3:d0:e1:a8:d7:9d: e4:30:59:fb:09:e1:b7:5b:9b:fa:1f:a4:2e:14:94:b8:0c:1e: 21:f8:a2:b3:44:be:14:42:7a:4c:86:e0:34:c2:4f:05:52:23: 24:98:9e:43:58:69:ae:ed:72:42:32:0f:47:85:e7:a3:3f:8e: ca:8a:c3:9b:f7:d0:d4:b1:a1:26:88:ae:33:0e:a7:02:36:9b: 19:5f:52:de:c2:51:0b:ea:1e:36:32:62:e5:41:e0:d4:27:9d: 7a:b9:0c:5e:f1:78:98:29:a9:78:a3:2a:55:4d:cb:65:e9:ce: 87:96:3b:12 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZsPDBnMZ0e7ptQLPx0mFpalMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx N2U1MmMwHhcNMjUxMjExMjAxMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGQzYjgwZmI0NTU5NWEwMGNmY2ZjNGEzYWQ2NzFlOTk2YmQ1MWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkuzkUV/kLZP+8QeFQXDQvgBdVmR 7lNCZN64THNK0cpFV1GQdAdIXSr2AEI/3LkLAEG8W9sZNO5BCxoz9L/9JVjXTkIV iQ0g7Bw2qWWEHaKTMNcUcy+wWnnl6/7LVJxa4gdip18m4qW7xiZyXu7QInywgzlc CJUy6BNnQULC4YVq1jhR624H43RlWsXMvMP4dlLbPV0GTT2nqJT+l66WxRXjVf1i 9IiwNesgtxsXK7NT++NMe9tabe4b8HKmy9TIu+Vc6OHf1eUaRU62cLs0xNfeIbiN OL+E0AxL8+/Our/ue2YF3i303J9IFrZBHsG7YjSHYwQ5VlA9IZx2PMavwwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFBTTuA+0VZWgDPz8SjrWcemWvVGgMB8GA1UdIwQY MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt ZTAxZTk0MTI0Njc0LzEvRk5PNEQ3UlZsYUFNX1B4S090Wng2WmE5VWFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0 LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGKfD4D BAKKfEAwDQYJKoZIhvcNAQELBQADggEBAIKRirnTzRhFP02OdNeKEBkL3pl3cSzs g2hV6/yi/HHMfjne7S0leIPWPzL5WZMkhqRHLjVTgkmudt9rUldZuHtLE3Quekd5 TQjvjDID2gh/dTIEzxTcuOFE+7uqA9ax7fo7JDw6azadDMJnfC5RFw8ASHjM3/c6 C3bfJjukFLqOQo0+v0miv2dzENPQ4ajXneQwWfsJ4bdbm/ofpC4UlLgMHiH4orNE vhRCekyG4DTCTwVSIySYnkNYaa7tckIyD0eF56M/jsqKw5v30NSxoSaIrjMOpwI2 mxlfUt7CUQvqHjYyYuVB4NQnnXq5DF7xeJgpqXijKlVNy2XpzoeWOxI= -----END CERTIFICATE-----Generated at Wed Dec 17 12:51:50 2025 by rpki-client