This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FKFDDkJWyzR1vGf3LFsrLdRGBnI.roa File: FKFDDkJWyzR1vGf3LFsrLdRGBnI.roa (raw, json) Hash identifier: 8vTZN/EXAhMuYOqvLSAhYOW4rSaIcmRAhesYu7cnxts= Subject key identifier: 14:A1:43:0E:42:56:CB:34:75:BC:67:F7:2C:5B:2B:2D:D4:46:06:72 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B01DF51469BE93854CC7E3C39BEDEF627 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FKFDDkJWyzR1vGf3LFsrLdRGBnI.roa Signing time: Tue 09 Dec 2025 06:49:31 +0000 ROA not before: Tue 09 Dec 2025 06:49:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215023 IP address blocks: 151.241.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:01:df:51:46:9b:e9:38:54:cc:7e:3c:39:be:de:f6:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 9 06:49:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=14a1430e4256cb3475bc67f72c5b2b2dd4460672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:76:e3:a0:ef:0b:ed:5f:eb:7e:40:0f:e5:ed: 92:cc:d6:f8:ab:a2:04:34:38:9e:5b:80:65:79:c1: e8:1d:70:9e:68:a6:f2:b7:4b:6e:4c:00:3d:4b:b0: 28:2f:fe:ca:54:1b:7d:0d:11:26:8b:3e:eb:3f:89: 18:73:b2:60:05:7a:ef:24:42:f6:e8:e5:f1:54:5d: 5a:8f:a9:02:c7:3f:31:4b:c9:fd:75:65:b9:2a:26: 97:c2:e8:7a:02:27:85:e8:27:2d:e0:ac:5a:41:bb: a1:03:fa:b0:fe:ac:7f:38:69:92:df:78:9d:74:40: 6f:33:82:19:eb:10:14:b1:e5:ac:2e:30:93:8b:bd: 94:7f:90:c5:f4:e5:2b:7b:67:d6:02:0e:b0:c2:14: 3e:64:fa:05:90:68:9f:c7:82:67:7a:73:33:46:2d: c3:c7:82:4d:63:23:29:f5:ee:58:d8:b8:d4:be:c2: a6:31:6a:42:29:52:9a:cb:45:db:80:58:a9:d6:3f: a4:24:3f:7c:64:0d:18:95:1e:32:ee:58:17:e5:dd: fc:fc:e6:79:69:37:13:ff:ae:b9:e4:95:fd:b9:48: 58:f8:27:94:95:cd:ce:e6:38:85:e2:c5:a8:80:09: fc:ce:08:9c:bb:a5:46:4c:6f:0c:82:12:2b:ad:6f: 98:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A1:43:0E:42:56:CB:34:75:BC:67:F7:2C:5B:2B:2D:D4:46:06:72 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FKFDDkJWyzR1vGf3LFsrLdRGBnI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.128.0/22 Signature Algorithm: sha256WithRSAEncryption 47:da:37:13:b6:7f:b3:d1:41:d7:c5:4b:70:b3:55:48:b5:d0: 43:15:b9:b9:8a:34:4d:0c:94:b8:e1:11:cc:7f:5d:bc:5b:42: 6e:1a:9b:4b:5b:a6:ac:fa:ee:e8:b7:51:a5:81:8b:33:ec:bb: 02:e0:b6:74:2f:c6:c7:00:2d:c2:00:07:e3:f9:89:2c:4f:74: 1b:b0:2f:7e:7d:a5:c8:05:88:23:24:4d:48:69:37:4c:fa:8c: 3e:59:89:f0:8d:1d:30:22:36:0e:db:b9:ee:f6:d2:b6:61:c3: ed:4f:c5:c8:30:eb:e7:62:4b:71:c8:13:01:fc:28:eb:b6:6d: 97:87:2c:ba:4b:91:4a:de:0c:f9:1a:9f:c7:98:54:79:89:5b: b3:fe:da:27:fd:8a:62:9e:f1:ca:c3:18:ea:3c:99:a7:fe:a3: 84:7e:ee:58:46:d4:62:b9:04:9d:ba:2d:44:db:39:e2:33:7a: 12:56:17:0a:c6:e4:5b:63:3b:18:67:43:91:9b:ec:06:4c:f5: 48:eb:26:dd:ff:4c:19:57:a8:7d:1b:e1:62:3a:ae:19:80:d2: 3b:df:09:7d:be:46:10:1d:13:da:12:73:69:79:a0:4f:f2:39: 72:59:97:88:40:6b:43:16:c8:bf:fa:b1:c7:61:d7:b3:50:5d: e4:4a:81:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsB31FGm+k4VMx+PDm+3vYnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjA5MDY0OTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGExNDMwZTQyNTZjYjM0NzViYzY3ZjcyYzViMmIyZGQ0NDYwNjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3bjoO8L7V/rfkAP5e2SzNb4q6IE NDieW4BlecHoHXCeaKbyt0tuTAA9S7AoL/7KVBt9DREmiz7rP4kYc7JgBXrvJEL2 6OXxVF1aj6kCxz8xS8n9dWW5KiaXwuh6AieF6Cct4KxaQbuhA/qw/qx/OGmS33id dEBvM4IZ6xAUseWsLjCTi72Uf5DF9OUre2fWAg6wwhQ+ZPoFkGifx4JnenMzRi3D x4JNYyMp9e5Y2LjUvsKmMWpCKVKay0XbgFip1j+kJD98ZA0YlR4y7lgX5d38/OZ5 aTcT/6655JX9uUhY+CeUlc3O5jiF4sWogAn8zgicu6VGTG8MghIrrW+YTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBShQw5CVss0dbxn9yxbKy3URgZyMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvRktGRERrSld5elIxdkdmM0xGc3JMZFJHQm5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl/GAMA0G CSqGSIb3DQEBCwUAA4IBAQBH2jcTtn+z0UHXxUtws1VItdBDFbm5ijRNDJS44RHM f128W0JuGptLW6as+u7ot1GlgYsz7LsC4LZ0L8bHAC3CAAfj+YksT3QbsC9+faXI BYgjJE1IaTdM+ow+WYnwjR0wIjYO27nu9tK2YcPtT8XIMOvnYktxyBMB/Cjrtm2X hyy6S5FK3gz5Gp/HmFR5iVuz/ton/YpinvHKwxjqPJmn/qOEfu5YRtRiuQSdui1E 2zniM3oSVhcKxuRbYzsYZ0ORm+wGTPVI6ybd/0wZV6h9G+FiOq4ZgNI73wl9vkYQ HRPaEnNpeaBP8jlyWZeIQGtDFsi/+rHHYdezUF3kSoF+ -----END CERTIFICATE-----Generated at Fri Dec 19 18:28:23 2025 by rpki-client