This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/F-M_Dbb2L6tcSdeWJ7Oy2HrJOC4.roa File: F-M_Dbb2L6tcSdeWJ7Oy2HrJOC4.roa (raw, json) Hash identifier: BGnC69CpqiSAFUqMIgAkLbDOLnnsUTPqZ+RBKIpsT2E= Subject key identifier: 17:E3:3F:0D:B6:F6:2F:AB:5C:49:D7:96:27:B3:B2:D8:7A:C9:38:2E Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8 Certificate serial: 019B22608690519BDE2136C80C76FBFB5550 Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/F-M_Dbb2L6tcSdeWJ7Oy2HrJOC4.roa Signing time: Mon 15 Dec 2025 14:18:29 +0000 ROA not before: Mon 15 Dec 2025 14:18:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208203 IP address blocks: 72.251.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:60:86:90:51:9b:de:21:36:c8:0c:76:fb:fb:55:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8 Validity Not Before: Dec 15 14:18:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=17e33f0db6f62fab5c49d79627b3b2d87ac9382e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e1:19:35:55:8f:f5:c9:fc:37:53:46:c0:9a: 47:d5:e2:18:99:a3:8c:27:60:73:d0:8b:09:b2:e4: eb:36:df:f5:8a:00:1c:4e:f9:fe:ff:d4:7b:8e:ca: 91:5a:41:f4:0a:77:4a:ad:54:11:b6:27:a6:0d:07: a9:d5:cf:5d:82:28:35:70:8c:24:eb:1e:83:65:45: 2d:dd:74:94:00:77:09:1d:ab:67:af:c7:1e:79:57: a3:8e:a9:bb:a0:3d:ed:aa:7d:5b:6b:6e:c3:6e:d6: 41:1b:7c:87:fc:5b:c8:ae:62:de:44:3d:f8:3e:49: 51:97:db:89:8f:0b:bb:36:a3:4c:6f:08:6b:a1:db: d3:a1:cf:cc:17:c0:3c:50:a9:f0:c7:8c:aa:50:18: f4:2c:79:f0:30:36:f6:be:fa:8a:f1:d4:83:99:5a: 8a:7c:23:b4:f0:82:41:ba:5e:4c:23:43:6b:d1:1b: 8a:c0:c8:71:9b:7a:62:42:38:9f:3c:3a:3c:e5:ff: 63:83:86:39:2c:b7:14:1a:60:ea:90:b6:b0:21:1a: 3e:73:ae:8c:6f:b2:18:5c:18:9f:a3:e3:33:70:93: 05:40:2a:59:2c:15:d3:a6:be:2f:41:dc:09:28:bb: 60:a3:4c:61:31:ec:16:e4:1b:4b:4d:cb:22:df:5a: a4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E3:3F:0D:B6:F6:2F:AB:5C:49:D7:96:27:B3:B2:D8:7A:C9:38:2E X509v3 Authority Key Identifier: keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/F-M_Dbb2L6tcSdeWJ7Oy2HrJOC4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.251.252.0/22 Signature Algorithm: sha256WithRSAEncryption 39:33:8a:b0:48:e6:8a:91:2f:45:f9:14:72:87:b0:0d:0f:17: e7:5d:87:e7:60:79:8d:f5:bb:ce:1e:ab:33:7a:e7:ed:93:4a: b2:8a:1d:7c:c7:04:39:5c:d6:61:39:37:0a:cc:0e:93:e9:1f: 7d:12:a5:db:0b:98:33:fd:6c:8e:ab:a7:c8:19:05:55:f1:c3: 2d:33:b6:e1:9a:45:60:94:e4:78:fb:e2:9e:70:70:64:b2:e8: 96:2e:96:33:02:7e:32:46:9c:52:ea:d6:30:c2:88:31:ae:13: 02:5a:e0:9c:d6:33:b5:0a:1d:32:8f:f2:7a:09:62:47:fa:cd: ae:ee:4f:17:84:b0:8b:19:9f:05:46:c6:e6:5d:32:6d:5b:de: 4c:31:46:15:43:59:b7:d8:8f:67:35:2b:d2:da:57:77:9e:e4: da:02:07:33:c5:ae:f9:a3:86:77:89:53:66:24:15:33:95:ef: c0:6d:78:ca:59:9f:d8:69:90:79:28:57:6a:e0:ee:6a:ef:d4: 06:2d:e0:0b:94:ee:33:13:13:44:fa:a3:24:32:9d:36:ba:8a: 35:5b:61:d1:0d:02:42:19:08:fc:6d:53:c6:aa:fc:21:28:f0: d3:c1:54:d8:67:51:19:78:d8:2d:d1:7c:fa:3c:f9:2e:ac:a7: 2d:f5:aa:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsiYIaQUZveITbIDHb7+1VQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1Zjg4OWZlZDAwODVmYzIxYjA4ZmNiYmIyNTJjMzEwNmRm OTlhYTgwHhcNMjUxMjE1MTQxODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2UzM2YwZGI2ZjYyZmFiNWM0OWQ3OTYyN2IzYjJkODdhYzkzODJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8eEZNVWP9cn8N1NGwJpH1eIYmaOM J2Bz0IsJsuTrNt/1igAcTvn+/9R7jsqRWkH0CndKrVQRtiemDQep1c9dgig1cIwk 6x6DZUUt3XSUAHcJHatnr8ceeVejjqm7oD3tqn1ba27DbtZBG3yH/FvIrmLeRD34 PklRl9uJjwu7NqNMbwhrodvToc/MF8A8UKnwx4yqUBj0LHnwMDb2vvqK8dSDmVqK fCO08IJBul5MI0Nr0RuKwMhxm3piQjifPDo85f9jg4Y5LLcUGmDqkLawIRo+c66M b7IYXBifo+MzcJMFQCpZLBXTpr4vQdwJKLtgo0xhMewW5BtLTcsi31qkjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBfjPw229i+rXEnXliezsth6yTguMB8GA1UdIwQY MBaAFBX4if7QCF/CGwj8u7JSwxBt+ZqoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mOTUyZmItOTMxOC00OWI2LWI5NDYt MWUzYTE5NTQ3OGUwLzEvRi1NX0RiYjJMNnRjU2RlV0o3T3kySHJKT0M0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9mOTUyZmItOTMxOC00OWI2LWI5NDYtMWUzYTE5NTQ3OGUw LzEvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPv8MA0G CSqGSIb3DQEBCwUAA4IBAQA5M4qwSOaKkS9F+RRyh7ANDxfnXYfnYHmN9bvOHqsz euftk0qyih18xwQ5XNZhOTcKzA6T6R99EqXbC5gz/WyOq6fIGQVV8cMtM7bhmkVg lOR4++KecHBksuiWLpYzAn4yRpxS6tYwwogxrhMCWuCc1jO1Ch0yj/J6CWJH+s2u 7k8XhLCLGZ8FRsbmXTJtW95MMUYVQ1m32I9nNSvS2ld3nuTaAgczxa75o4Z3iVNm JBUzle/AbXjKWZ/YaZB5KFdq4O5q79QGLeALlO4zExNE+qMkMp02uoo1W2HRDQJC GQj8bVPGqvwhKPDTwVTYZ1EZeNgt0Xz6PPkurKct9ar5 -----END CERTIFICATE-----Generated at Wed Dec 17 19:51:11 2025 by rpki-client