This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FcA3zsFQad2tJWrzvef5HaBQlHU.roa File: FcA3zsFQad2tJWrzvef5HaBQlHU.roa (raw, json) Hash identifier: 13Xoidy5Eqjxo1pJMBT3VjkyuUOPcQjmfWkHlwqiALY= Subject key identifier: 15:C0:37:CE:C1:50:69:DD:AD:25:6A:F3:BD:E7:F9:1D:A0:50:94:75 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F8546CE433AD5222BD199A1FD430996 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FcA3zsFQad2tJWrzvef5HaBQlHU.roa Signing time: Fri 02 Jan 2026 16:23:19 +0000 ROA not before: Fri 02 Jan 2026 16:23:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29076 IP address blocks: 193.124.158.0/23 maxlen: 23 193.124.158.0/24 maxlen: 24 193.124.159.0/24 maxlen: 24 195.133.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:46:ce:43:3a:d5:22:2b:d1:99:a1:fd:43:09:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15c037cec15069ddad256af3bde7f91da0509475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8b:6b:00:3c:68:44:58:00:ff:10:00:02:46: 9b:7e:a0:09:75:7f:bd:56:d9:51:ca:18:b8:95:f4: 82:21:8b:9c:ca:b3:44:ff:47:36:0b:ff:97:ea:2e: da:58:a9:15:74:f2:2d:04:69:a2:d6:b4:8d:f0:64: b9:06:4f:52:a8:4e:c0:33:c6:0d:d4:13:1b:2c:38: cd:08:d0:1c:30:4c:28:56:ce:04:37:a4:aa:f3:22: ff:74:84:43:85:fd:8a:ef:c9:ba:44:21:cd:9a:91: 10:b1:69:23:4c:53:6a:73:6b:f0:f4:6f:7a:99:ee: f4:22:50:9f:ad:26:b8:10:90:b3:3f:b1:30:ad:50: 82:7e:07:90:1b:4d:f7:7d:bf:2c:1f:f5:2f:8c:4e: b3:67:ce:9f:60:3a:75:db:06:a2:d6:7d:15:8d:d7: d8:66:5b:bf:b6:9a:18:df:d2:f3:01:9d:29:61:ef: a9:b8:70:4a:a1:06:52:47:c8:75:ef:99:85:21:1e: 46:88:b6:01:6a:c6:ec:ec:53:3a:f2:bf:27:79:9f: 5a:cf:74:92:89:83:78:b6:51:82:87:3d:e7:9a:09: 86:80:9f:72:60:48:be:6e:2f:5a:7a:b3:f3:17:22: 8f:2c:2a:cf:33:1f:bc:4f:38:75:57:88:ea:de:b6: b9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C0:37:CE:C1:50:69:DD:AD:25:6A:F3:BD:E7:F9:1D:A0:50:94:75 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FcA3zsFQad2tJWrzvef5HaBQlHU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.124.158.0/23 195.133.200.0/24 Signature Algorithm: sha256WithRSAEncryption 28:f3:26:b4:dd:a1:b9:50:e5:c5:be:4b:f2:f5:ec:e5:c4:db: fa:0c:b0:54:59:8a:68:b5:59:67:02:6b:68:07:24:ae:f7:43: d9:6b:54:1f:09:13:c9:84:df:ae:b5:d6:f9:b8:1a:3e:68:88: 0d:d9:38:43:e8:80:3e:cc:11:d3:d7:90:63:7f:fa:4e:66:7c: f7:26:91:66:67:f6:63:a6:7c:53:51:24:5c:32:f0:3f:22:9b: 35:12:a3:f7:a3:b9:6d:78:cd:6c:46:bf:0a:f1:7f:98:36:66: 9d:66:ab:f9:cf:8b:f5:25:1c:6a:83:ec:e1:22:45:13:65:28: d8:74:14:50:61:07:a0:32:0a:72:04:37:1f:1e:8c:5d:29:b4: 20:97:29:10:f7:f1:f4:59:4e:7d:6e:01:29:81:0e:1d:aa:7f: 48:a1:ab:1f:13:d1:e3:69:75:7d:58:7f:45:10:d7:d5:2d:cf: 1f:c4:09:42:ae:6a:7a:a9:e2:68:22:53:4e:e6:0b:18:94:31: 29:65:8d:fb:70:31:bc:0c:b3:38:ba:73:de:98:38:f8:ee:72: 25:b3:11:50:49:b3:69:e1:fc:9a:81:6d:75:e8:11:99:fe:83: 4b:fe:25:5b:41:55:a6:f5:53:82:68:3f:34:70:a5:cd:38:5c: 10:5d:62:2b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hUbOQzrVIivRmaH9QwmWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWMwMzdjZWMxNTA2OWRkYWQyNTZhZjNiZGU3ZjkxZGEwNTA5NDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsItrADxoRFgA/xAAAkabfqAJdX+9 VtlRyhi4lfSCIYucyrNE/0c2C/+X6i7aWKkVdPItBGmi1rSN8GS5Bk9SqE7AM8YN 1BMbLDjNCNAcMEwoVs4EN6Sq8yL/dIRDhf2K78m6RCHNmpEQsWkjTFNqc2vw9G96 me70IlCfrSa4EJCzP7EwrVCCfgeQG033fb8sH/UvjE6zZ86fYDp12wai1n0VjdfY Zlu/tpoY39LzAZ0pYe+puHBKoQZSR8h175mFIR5GiLYBasbs7FM68r8neZ9az3SS iYN4tlGChz3nmgmGgJ9yYEi+bi9aerPzFyKPLCrPMx+8Tzh1V4jq3ra53QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBXAN87BUGndrSVq873n+R2gUJR1MB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvRmNBM3pzRlFhZDJ0SldyenZlZjVIYUJRbEhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwXyeAwQA w4XIMA0GCSqGSIb3DQEBCwUAA4IBAQAo8ya03aG5UOXFvkvy9ezlxNv6DLBUWYpo tVlnAmtoBySu90PZa1QfCRPJhN+utdb5uBo+aIgN2ThD6IA+zBHT15Bjf/pOZnz3 JpFmZ/ZjpnxTUSRcMvA/Ips1EqP3o7lteM1sRr8K8X+YNmadZqv5z4v1JRxqg+zh IkUTZSjYdBRQYQegMgpyBDcfHoxdKbQglykQ9/H0WU59bgEpgQ4dqn9IoasfE9Hj aXV9WH9FENfVLc8fxAlCrmp6qeJoIlNO5gsYlDEpZY37cDG8DLM4unPemDj47nIl sxFQSbNp4fyagW116BGZ/oNL/iVbQVWm9VOCaD80cKXNOFwQXWIr -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:42 2026 by rpki-client