This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/FnOWfDYcbqnXkJpTipQaFNmoJuI.roa File: FnOWfDYcbqnXkJpTipQaFNmoJuI.roa (raw, json) Hash identifier: x4PipE/X9nl6y/X2dlJtlfW1wrZz8kR30mZn+6h+rAw= Subject key identifier: 16:73:96:7C:36:1C:6E:A9:D7:90:9A:53:8A:94:1A:14:D9:A8:26:E2 Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c Certificate serial: 019B2286FADC0557A77617AD6E8394816597 Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/FnOWfDYcbqnXkJpTipQaFNmoJuI.roa Signing time: Mon 15 Dec 2025 15:00:29 +0000 ROA not before: Mon 15 Dec 2025 15:00:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9121 IP address blocks: 188.125.160.0/24 maxlen: 24 188.125.163.0/24 maxlen: 24 188.125.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 18:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:86:fa:dc:05:57:a7:76:17:ad:6e:83:94:81:65:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c Validity Not Before: Dec 15 15:00:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1673967c361c6ea9d7909a538a941a14d9a826e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1b:45:d1:1d:04:45:29:cd:37:f5:52:2d:62: ef:80:04:b2:b2:07:36:38:46:7f:24:4d:e1:f2:1a: 36:89:56:ff:87:50:51:c2:09:42:6c:a5:d2:69:17: d4:3c:08:3e:fa:4c:39:1f:c4:fa:1c:5a:fd:fe:34: 72:36:e9:b9:9b:c7:59:fc:a1:50:39:11:78:56:ad: 94:bd:77:7e:d0:d4:e3:bb:0c:c2:8d:8a:15:73:8e: e9:a6:7d:b0:99:56:49:80:88:8a:95:07:16:09:49: b8:fe:26:59:ec:b3:62:f1:5c:3b:26:36:f7:dc:6b: e1:e7:82:93:bf:bb:0e:7b:08:b1:d6:d1:1a:19:30: 47:38:28:94:94:40:ff:0c:fa:f4:bb:82:dd:dc:b2: 75:3b:88:0d:86:18:ec:08:e6:37:6e:69:6e:d6:e2: c6:b0:db:6a:3e:20:a7:bc:c6:e9:ac:28:03:5b:2a: a4:a1:56:5e:c2:05:4f:66:42:b2:b8:df:b7:76:d5: a2:83:19:3a:69:93:86:f1:e8:1b:27:49:be:ed:4f: 83:75:7b:f5:d1:d3:b8:3f:71:9e:89:e9:92:74:93: d2:26:db:1d:a4:15:3c:a4:f0:ce:b7:f6:a4:ad:91: 78:ea:57:53:d1:af:55:c0:2b:0c:51:8d:8c:3b:c9: c7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:73:96:7C:36:1C:6E:A9:D7:90:9A:53:8A:94:1A:14:D9:A8:26:E2 X509v3 Authority Key Identifier: keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/FnOWfDYcbqnXkJpTipQaFNmoJuI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.125.160.0/24 188.125.163.0/24 188.125.168.0/24 Signature Algorithm: sha256WithRSAEncryption 60:14:37:51:5a:55:5f:7b:62:5e:6c:e9:87:a5:3c:12:8c:aa: 2c:03:a5:66:91:6c:f6:c7:68:99:98:28:22:4c:84:6d:d0:de: 67:3e:5c:92:0d:fe:be:6f:96:d6:5d:b3:ba:9d:04:88:34:cc: ba:8a:bb:c3:7d:1b:42:42:c3:3f:1f:f1:b2:55:9a:80:0a:13: dd:40:17:1c:7f:e0:68:c6:0a:59:d5:d0:2e:14:f5:0f:24:08: 65:fc:3f:dc:57:33:b9:ac:05:d9:b4:8f:60:18:76:ca:bb:38: 56:46:f5:ee:fb:0d:7d:5e:d0:e7:7d:86:7b:3a:71:57:91:6c: 98:f7:58:a8:97:47:d0:46:72:a0:d3:fd:31:a8:35:75:c6:2d: 2e:96:26:b9:09:6a:7f:3f:35:53:24:f4:a3:20:f7:f4:e5:99: b0:05:78:2d:03:ed:41:2d:d8:f8:2e:dd:91:72:5a:1f:f9:24: fa:f3:20:da:f4:e3:21:21:9b:5c:33:dd:fe:53:47:1e:31:1b: 05:71:ab:21:ff:bf:36:8c:dd:6a:ae:58:e6:d7:c2:36:70:e6: 3a:f3:19:4a:7a:dc:fd:28:c3:8f:77:37:fc:f2:53:c1:6c:d9: 7b:e0:09:f2:93:e8:d4:5f:75:5d:6f:f0:01:61:df:f5:3b:cc: ba:a4:c9:95 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsihvrcBVendhetboOUgWWXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MmY2MzNmNzZlOGQ4YWFlYWEzMmI1YWNlMTZhM2RiMzk0 M2Q4MGMwHhcNMjUxMjE1MTUwMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjczOTY3YzM2MWM2ZWE5ZDc5MDlhNTM4YTk0MWExNGQ5YTgyNmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBtF0R0ERSnNN/VSLWLvgASysgc2 OEZ/JE3h8ho2iVb/h1BRwglCbKXSaRfUPAg++kw5H8T6HFr9/jRyNum5m8dZ/KFQ ORF4Vq2UvXd+0NTjuwzCjYoVc47ppn2wmVZJgIiKlQcWCUm4/iZZ7LNi8Vw7Jjb3 3Gvh54KTv7sOewix1tEaGTBHOCiUlED/DPr0u4Ld3LJ1O4gNhhjsCOY3bmlu1uLG sNtqPiCnvMbprCgDWyqkoVZewgVPZkKyuN+3dtWigxk6aZOG8egbJ0m+7U+DdXv1 0dO4P3GeiemSdJPSJtsdpBU8pPDOt/akrZF46ldT0a9VwCsMUY2MO8nH8wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBZzlnw2HG6p15CaU4qUGhTZqCbiMB8GA1UdIwQY MBaAFFQvYz926Niq6qMrWs4Wo9s5Q9gMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDIt NjliOTUzYzlkNWFhLzEvRm5PV2ZEWWNicW5Ya0pwVGlwUWFGTm1vSnVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDItNjliOTUzYzlkNWFh LzEvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAvH2gAwQA vH2jAwQAvH2oMA0GCSqGSIb3DQEBCwUAA4IBAQBgFDdRWlVfe2JebOmHpTwSjKos A6VmkWz2x2iZmCgiTIRt0N5nPlySDf6+b5bWXbO6nQSINMy6irvDfRtCQsM/H/Gy VZqAChPdQBccf+BoxgpZ1dAuFPUPJAhl/D/cVzO5rAXZtI9gGHbKuzhWRvXu+w19 XtDnfYZ7OnFXkWyY91iol0fQRnKg0/0xqDV1xi0ulia5CWp/PzVTJPSjIPf05Zmw BXgtA+1BLdj4Lt2Rclof+ST68yDa9OMhIZtcM93+U0ceMRsFcash/782jN1qrljm 18I2cOY68xlKetz9KMOPdzf88lPBbNl74Anyk+jUX3Vdb/ABYd/1O8y6pMmV -----END CERTIFICATE-----Generated at Sat Dec 20 03:59:37 2025 by rpki-client