This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/Fa0_pCO7edUxvrCKqxCnl3Eg7yc.roa File: Fa0_pCO7edUxvrCKqxCnl3Eg7yc.roa (raw, json) Hash identifier: 36LrcBwniEHOjoXJRsH/qwf+/nx5Ak7UG8GvZC8h3q4= Subject key identifier: 15:AD:3F:A4:23:BB:79:D5:31:BE:B0:8A:AB:10:A7:97:71:20:EF:27 Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2 Certificate serial: 019B14B38B7AA97BFD185CDB20CB010E6107 Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/Fa0_pCO7edUxvrCKqxCnl3Eg7yc.roa Signing time: Fri 12 Dec 2025 22:34:29 +0000 ROA not before: Fri 12 Dec 2025 22:34:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203324 IP address blocks: 5.59.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:14:b3:8b:7a:a9:7b:fd:18:5c:db:20:cb:01:0e:61:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2 Validity Not Before: Dec 12 22:34:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=15ad3fa423bb79d531beb08aab10a7977120ef27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d2:f3:4a:c2:8a:fd:e0:ff:f9:a5:63:08:85: 4d:0b:bf:cc:be:b8:c8:3b:91:c1:90:3d:e9:2f:5d: af:d4:69:d5:a5:00:5e:5d:e5:4b:c6:63:9e:03:e9: 9e:6a:32:6d:34:98:66:bd:2a:89:d5:35:bd:64:7c: 0b:98:51:fd:3c:30:b0:66:74:9b:9b:da:57:98:4b: 3c:fc:a1:fd:94:4b:29:1c:4f:b4:96:07:87:d2:6e: 0d:df:75:0a:e9:9f:bc:32:bf:72:e9:2c:42:94:6b: b8:b6:3b:6f:55:c2:1f:09:83:c4:33:da:51:fa:be: 96:c0:9b:53:20:97:88:0f:e7:fd:f8:d5:6a:7e:99: 07:f7:fe:b5:42:e5:50:07:b6:2d:f0:02:8f:6f:2e: 63:67:c7:01:1c:43:a9:d7:52:ee:58:b3:ab:c0:fb: 5d:f7:9c:6a:10:63:1a:a0:ef:51:70:a0:a8:c9:da: d2:69:72:79:52:7d:5e:50:ef:c0:5e:18:68:d2:3e: f9:d8:f4:1d:c5:9c:1a:f5:db:af:68:d7:44:1d:68: d4:4a:de:88:d9:2d:5d:30:43:4e:3c:69:b7:4b:36: 4b:c0:80:17:fd:7e:90:81:5f:8f:61:f3:96:dd:f8: ea:e6:4b:20:c1:48:d2:e7:a1:e3:1a:ed:18:32:ca: 85:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:AD:3F:A4:23:BB:79:D5:31:BE:B0:8A:AB:10:A7:97:71:20:EF:27 X509v3 Authority Key Identifier: keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/Fa0_pCO7edUxvrCKqxCnl3Eg7yc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.59.118.0/23 Signature Algorithm: sha256WithRSAEncryption 94:86:b4:57:56:21:28:0e:1e:de:fc:04:2e:c3:fb:31:54:0e: 9c:88:05:05:9a:8c:c0:ec:8c:f1:35:09:5c:11:61:ef:9c:89: 20:96:6e:d3:05:88:68:df:89:4e:51:1e:c8:47:59:09:72:a4: 23:a1:f4:7e:8a:84:2f:63:17:7c:ce:c7:cb:17:0e:58:3b:09: d7:e3:55:9a:66:28:31:2d:80:57:b5:f9:66:a1:ee:14:8a:ce: 71:b1:17:2c:79:00:a2:91:91:e4:10:0f:7e:c6:7c:70:92:30: b2:5f:a2:97:46:ef:f2:1a:69:79:1f:85:86:ca:7d:cb:9a:ba: 01:8f:15:f6:3b:90:54:46:d5:61:98:a7:7b:a1:28:e4:eb:69: 7a:4e:32:c8:d4:0f:5d:a0:79:5d:f2:0a:8e:bf:e9:58:86:61: ba:18:78:97:dc:85:1e:c7:ca:6f:13:b4:cc:c8:f2:0c:7e:61: 8a:23:e7:21:ab:42:62:92:e4:37:24:81:b2:a1:80:3b:24:09: 4e:92:8a:e6:ba:7c:a4:3a:80:e6:47:d7:e9:d2:1d:f1:68:64: 53:58:a3:c6:23:94:3a:4c:ba:9e:31:29:a5:5b:4c:b1:64:e1: 27:f7:38:7e:9b:8f:78:c8:70:d7:c9:ab:41:59:c9:84:71:a2: f3:67:ea:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsUs4t6qXv9GFzbIMsBDmEHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDgxMTE5YWZlMWJmZjIyOWZhY2Q0ZWY5YzhjNjFiMGZh YmVhZjIwHhcNMjUxMjEyMjIzNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWFkM2ZhNDIzYmI3OWQ1MzFiZWIwOGFhYjEwYTc5NzcxMjBlZjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttLzSsKK/eD/+aVjCIVNC7/MvrjI O5HBkD3pL12v1GnVpQBeXeVLxmOeA+meajJtNJhmvSqJ1TW9ZHwLmFH9PDCwZnSb m9pXmEs8/KH9lEspHE+0lgeH0m4N33UK6Z+8Mr9y6SxClGu4tjtvVcIfCYPEM9pR +r6WwJtTIJeID+f9+NVqfpkH9/61QuVQB7Yt8AKPby5jZ8cBHEOp11LuWLOrwPtd 95xqEGMaoO9RcKCoydrSaXJ5Un1eUO/AXhho0j752PQdxZwa9duvaNdEHWjUSt6I 2S1dMENOPGm3SzZLwIAX/X6QgV+PYfOW3fjq5ksgwUjS56HjGu0YMsqF9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBWtP6Qju3nVMb6wiqsQp5dxIO8nMB8GA1UdIwQY MBaAFLlIERmv4b/yKfrNTvnIxhsPq+ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAt OWI5YmNlMTVlMGM2LzEvRmEwX3BDTzdlZFV4dnJDS3F4Q25sM0VnN3ljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAtOWI5YmNlMTVlMGM2 LzEvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBTt2MA0G CSqGSIb3DQEBCwUAA4IBAQCUhrRXViEoDh7e/AQuw/sxVA6ciAUFmozA7IzxNQlc EWHvnIkglm7TBYho34lOUR7IR1kJcqQjofR+ioQvYxd8zsfLFw5YOwnX41WaZigx LYBXtflmoe4Uis5xsRcseQCikZHkEA9+xnxwkjCyX6KXRu/yGml5H4WGyn3LmroB jxX2O5BURtVhmKd7oSjk62l6TjLI1A9doHld8gqOv+lYhmG6GHiX3IUex8pvE7TM yPIMfmGKI+chq0JikuQ3JIGyoYA7JAlOkormunykOoDmR9fp0h3xaGRTWKPGI5Q6 TLqeMSmlW0yxZOEn9zh+m494yHDXyatBWcmEcaLzZ+q1 -----END CERTIFICATE-----Generated at Wed Dec 17 19:34:53 2025 by rpki-client