This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/FO_BHa3C_ibU6tWoofx2gZBsu-c.roa File: FO_BHa3C_ibU6tWoofx2gZBsu-c.roa (raw, json) Hash identifier: 4knsr4CvTkSKu4HRm7w4gWRm8V7CbR3qi8BWnkNBVow= Subject key identifier: 14:EF:C1:1D:AD:C2:FE:26:D4:EA:D5:A8:A1:FC:76:81:90:6C:BB:E7 Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Certificate serial: 019B3139B55829D059A9E23389FBC8869A0D Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/FO_BHa3C_ibU6tWoofx2gZBsu-c.roa Signing time: Thu 18 Dec 2025 11:30:24 +0000 ROA not before: Thu 18 Dec 2025 11:30:24 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210512 IP address blocks: 91.195.125.0/24 maxlen: 24 91.229.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:39:b5:58:29:d0:59:a9:e2:33:89:fb:c8:86:9a:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Validity Not Before: Dec 18 11:30:24 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=14efc11dadc2fe26d4ead5a8a1fc7681906cbbe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:74:ff:c1:d2:ce:8b:4b:6f:a7:94:d0:c9:1c: 00:3e:80:1a:d5:eb:04:bb:41:4a:fc:05:d0:51:97: b1:70:7c:cc:b0:90:64:5d:b0:76:70:0c:fb:bb:f1: 0f:1d:44:1e:54:c4:78:b4:31:e8:53:e5:1d:a3:ea: 31:c1:7c:1d:7c:47:ea:7c:51:d0:38:05:d0:97:33: 19:30:ac:ef:b0:a8:bf:1a:a3:ca:f9:9a:94:3b:b5: d4:8b:2d:88:5a:7f:e1:d3:78:be:2d:2d:b1:02:86: 04:eb:7d:8f:32:a6:3d:2d:be:64:ed:c9:d5:fa:c9: 94:bc:0b:1f:2b:a8:f8:7e:d8:41:d3:d8:33:02:ce: da:3b:44:d2:da:18:6a:b7:a1:2e:89:f5:bc:39:03: 25:28:f0:13:20:83:d7:9c:91:c2:d6:61:fd:92:77: 29:00:a0:68:0f:c1:79:ea:d3:2b:83:52:2f:c7:ee: 99:55:b6:d1:0a:f1:68:d6:86:29:5f:fa:d6:16:c1: 9e:ae:32:74:20:4e:ae:0d:c8:4a:18:7e:8d:0e:dd: bb:21:56:ea:57:7a:8c:39:56:68:f1:9d:00:e9:b0: a4:a3:ec:14:37:fd:a4:b7:7e:92:4c:e6:87:63:b0: aa:1f:28:b8:75:f8:a4:f6:6b:7d:3e:6f:49:da:51: 8f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:EF:C1:1D:AD:C2:FE:26:D4:EA:D5:A8:A1:FC:76:81:90:6C:BB:E7 X509v3 Authority Key Identifier: keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/FO_BHa3C_ibU6tWoofx2gZBsu-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.125.0/24 91.229.112.0/23 Signature Algorithm: sha256WithRSAEncryption 20:5e:cc:15:75:a5:4d:2f:6c:6c:42:26:50:b6:1d:ef:68:1d: 8a:24:68:4f:bd:60:13:ef:45:82:a3:41:5e:c9:bd:ea:a0:75: e2:a6:95:a2:18:c2:59:e5:6d:05:0a:8a:a0:d2:4e:0f:ab:b4: 63:59:96:b2:71:23:7b:47:71:14:59:61:f9:05:e4:46:65:1a: f3:8e:f6:48:7e:23:1c:03:10:ec:2c:80:9d:01:42:d4:1d:bc: 2d:9f:72:16:1b:55:e2:13:10:df:f5:95:aa:d0:98:9e:ed:b0: ed:dc:5b:23:ae:2b:db:44:f1:a5:98:f4:aa:5e:f1:51:e6:41: 37:0f:cf:b7:1b:ea:be:f2:fa:e4:0a:f4:5d:a3:c7:d5:24:75: 67:0e:bf:a1:2b:fc:61:82:76:c1:7a:66:73:81:e4:4b:6d:a5: 23:f2:76:d5:75:8f:08:14:7a:89:3b:7e:d7:0a:0a:60:54:ce: 76:db:1d:7f:cd:e6:13:d7:64:ff:74:9a:9f:fc:25:17:0d:61: f8:ce:95:b4:be:04:2b:99:7c:ec:63:15:09:a4:1c:9b:1d:74: 10:3e:30:e4:30:1f:c5:da:8f:c6:c0:8d:3b:07:a4:e6:d2:c0: 76:4e:7c:59:e6:b5:82:83:a6:e3:94:de:23:66:6e:58:f4:8d: 8c:6a:8d:cd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsxObVYKdBZqeIzifvIhpoNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2 Njk0NmYwHhcNMjUxMjE4MTEzMDI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGVmYzExZGFkYzJmZTI2ZDRlYWQ1YThhMWZjNzY4MTkwNmNiYmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3T/wdLOi0tvp5TQyRwAPoAa1esE u0FK/AXQUZexcHzMsJBkXbB2cAz7u/EPHUQeVMR4tDHoU+Udo+oxwXwdfEfqfFHQ OAXQlzMZMKzvsKi/GqPK+ZqUO7XUiy2IWn/h03i+LS2xAoYE632PMqY9Lb5k7cnV +smUvAsfK6j4fthB09gzAs7aO0TS2hhqt6EuifW8OQMlKPATIIPXnJHC1mH9kncp AKBoD8F56tMrg1Ivx+6ZVbbRCvFo1oYpX/rWFsGerjJ0IE6uDchKGH6NDt27IVbq V3qMOVZo8Z0A6bCko+wUN/2kt36STOaHY7CqHyi4dfik9mt9Pm9J2lGPxQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBTvwR2twv4m1OrVqKH8doGQbLvnMB8GA1UdIwQY MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct MDhhZDk0MTAxZDdlLzEvRk9fQkhhM0NfaWJVNnRXb29meDJnWkJzdS1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8N9AwQB W+VwMA0GCSqGSIb3DQEBCwUAA4IBAQAgXswVdaVNL2xsQiZQth3vaB2KJGhPvWAT 70WCo0Feyb3qoHXippWiGMJZ5W0FCoqg0k4Pq7RjWZaycSN7R3EUWWH5BeRGZRrz jvZIfiMcAxDsLICdAULUHbwtn3IWG1XiExDf9ZWq0Jie7bDt3FsjrivbRPGlmPSq XvFR5kE3D8+3G+q+8vrkCvRdo8fVJHVnDr+hK/xhgnbBemZzgeRLbaUj8nbVdY8I FHqJO37XCgpgVM522x1/zeYT12T/dJqf/CUXDWH4zpW0vgQrmXzsYxUJpBybHXQQ PjDkMB/F2o/GwI07B6Tm0sB2TnxZ5rWCg6bjlN4jZm5Y9I2Mao3N -----END CERTIFICATE-----Generated at Sat Dec 20 11:47:25 2025 by rpki-client