This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/fJN7PYZX9Sr-HX_3erhR56oW5z4.roa File: fJN7PYZX9Sr-HX_3erhR56oW5z4.roa (raw, json) Hash identifier: 62V7rj0IiHO0OW2XHO1iINDHqaR8ItLLbYMYozGGFjw= Subject key identifier: 7C:93:7B:3D:86:57:F5:2A:FE:1D:7F:F7:7A:B8:51:E7:AA:16:E7:3E Certificate issuer: /CN=b822de6c5d9ec086d9d201ab6da56bd3cfeff243 Certificate serial: 019BFA438F822F00F5027E94954E5E167D2E Authority key identifier: B8:22:DE:6C:5D:9E:C0:86:D9:D2:01:AB:6D:A5:6B:D3:CF:EF:F2:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCLebF2ewIbZ0gGrbaVr08_v8kM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/fJN7PYZX9Sr-HX_3erhR56oW5z4.roa Signing time: Mon 26 Jan 2026 12:24:50 +0000 ROA not before: Mon 26 Jan 2026 12:24:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20570 IP address blocks: 193.105.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.crl rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.mft rsync://rpki.ripe.net/repository/DEFAULT/uCLebF2ewIbZ0gGrbaVr08_v8kM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 21:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:43:8f:82:2f:00:f5:02:7e:94:95:4e:5e:16:7d:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b822de6c5d9ec086d9d201ab6da56bd3cfeff243 Validity Not Before: Jan 26 12:24:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c937b3d8657f52afe1d7ff77ab851e7aa16e73e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0a:46:6f:11:44:3f:fa:01:06:a2:79:22:77: 59:d4:12:0f:77:b8:3e:54:09:3d:72:8d:c0:19:09: a2:99:9d:fe:c7:01:0c:47:d0:f7:e2:94:26:d4:62: 42:09:07:e6:5d:59:f8:6b:4b:e5:39:f6:a1:5c:eb: 97:38:fb:b2:0a:d4:7f:e8:3a:a3:cd:6e:fc:5c:11: 35:30:a5:59:07:e5:31:a3:53:dd:13:68:99:b7:79: 6f:20:3a:1a:f9:eb:41:02:97:5c:3f:64:c6:66:47: 44:3e:b2:e7:12:22:a2:9a:5e:f2:a5:75:9d:1d:4d: 76:95:cd:f4:db:63:a1:33:04:83:ad:08:ff:f8:f0: 02:53:d3:e8:d1:54:3f:e7:3b:9f:cc:e6:3b:98:f5: 67:66:ad:4d:26:72:59:a0:9e:b0:48:28:db:a0:22: 62:5a:6b:09:eb:90:2f:be:a5:41:35:5e:e1:ec:67: 69:80:fd:fd:6f:73:af:26:bc:62:b4:a6:bc:3e:e0: df:24:6c:63:04:16:13:5a:89:d4:9b:d0:f1:b5:d0: b0:f0:1a:0d:13:cc:04:29:de:15:6a:bf:2d:ea:78: bd:b7:09:63:52:b5:5c:8a:a0:30:54:93:b7:51:56: 81:ce:66:fc:cf:b5:04:c5:49:fd:9f:66:13:c0:40: 86:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:93:7B:3D:86:57:F5:2A:FE:1D:7F:F7:7A:B8:51:E7:AA:16:E7:3E X509v3 Authority Key Identifier: keyid:B8:22:DE:6C:5D:9E:C0:86:D9:D2:01:AB:6D:A5:6B:D3:CF:EF:F2:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCLebF2ewIbZ0gGrbaVr08_v8kM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/fJN7PYZX9Sr-HX_3erhR56oW5z4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.147.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:4d:13:a1:2e:61:b1:9e:46:a5:f4:32:a4:18:60:cb:39:ea: 6f:56:a2:66:70:98:9b:90:59:49:5e:8a:b7:ce:2c:dd:c8:28: 2c:6f:68:39:91:9a:ff:59:32:47:b1:95:dd:a0:ee:77:3a:23: 3e:f0:32:6a:a3:7a:e1:8a:99:97:e6:13:2d:74:77:53:cf:73: ac:f3:ab:02:d3:47:f8:76:83:59:a7:87:81:4d:7d:cf:f9:88: be:6b:67:0c:72:52:56:43:fc:8f:7f:e8:63:d2:89:1a:8e:73: 31:97:21:14:81:f3:1f:92:bb:a4:fd:63:a1:86:a9:59:2d:89: 7e:bf:5b:83:bf:05:c1:e7:71:f6:95:54:88:3f:5d:2c:c4:cd: 6e:86:c2:26:7e:c6:dc:8b:bc:93:2e:a7:c5:da:62:e2:32:ba: 5d:9d:0e:af:ea:f2:f2:09:b4:e8:a8:c6:7c:d4:a2:f1:8b:03: 16:22:74:31:98:a8:9a:8e:5d:5e:83:8e:93:e9:d5:47:4a:7b: c9:94:ac:a3:f9:aa:d1:9f:8e:d2:30:4d:fb:9f:26:46:ee:27: e0:ea:32:79:94:ce:23:c2:73:9b:9b:3d:f6:7f:a2:1b:4f:d1: c5:f6:40:7c:06:ea:87:5c:55:4c:f9:0c:d2:cc:22:38:f4:d2: fa:85:f0:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv6Q4+CLwD1An6UlU5eFn0uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MjJkZTZjNWQ5ZWMwODZkOWQyMDFhYjZkYTU2YmQzY2Zl ZmYyNDMwHhcNMjYwMTI2MTIyNDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzkzN2IzZDg2NTdmNTJhZmUxZDdmZjc3YWI4NTFlN2FhMTZlNzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqApGbxFEP/oBBqJ5IndZ1BIPd7g+ VAk9co3AGQmimZ3+xwEMR9D34pQm1GJCCQfmXVn4a0vlOfahXOuXOPuyCtR/6Dqj zW78XBE1MKVZB+Uxo1PdE2iZt3lvIDoa+etBApdcP2TGZkdEPrLnEiKiml7ypXWd HU12lc3022OhMwSDrQj/+PACU9Po0VQ/5zufzOY7mPVnZq1NJnJZoJ6wSCjboCJi WmsJ65AvvqVBNV7h7GdpgP39b3OvJrxitKa8PuDfJGxjBBYTWonUm9DxtdCw8BoN E8wEKd4Var8t6ni9twljUrVciqAwVJO3UVaBzmb8z7UExUn9n2YTwECG+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHyTez2GV/Uq/h1/93q4UeeqFuc+MB8GA1UdIwQY MBaAFLgi3mxdnsCG2dIBq22la9PP7/JDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUNMZWJGMmV3SWJaMGdHcmJhVnIwOF92OGtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8zYjBmNjAtMzdlNC00NWI5LThhMmMt YWYzOGJmNzA2ZjM3LzEvZkpON1BZWlg5U3ItSFhfM2VyaFI1Nm9XNXo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8zYjBmNjAtMzdlNC00NWI5LThhMmMtYWYzOGJmNzA2ZjM3 LzEvdUNMZWJGMmV3SWJaMGdHcmJhVnIwOF92OGtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWmTMA0G CSqGSIb3DQEBCwUAA4IBAQCdTROhLmGxnkal9DKkGGDLOepvVqJmcJibkFlJXoq3 zizdyCgsb2g5kZr/WTJHsZXdoO53OiM+8DJqo3rhipmX5hMtdHdTz3Os86sC00f4 doNZp4eBTX3P+Yi+a2cMclJWQ/yPf+hj0okajnMxlyEUgfMfkruk/WOhhqlZLYl+ v1uDvwXB53H2lVSIP10sxM1uhsImfsbci7yTLqfF2mLiMrpdnQ6v6vLyCbToqMZ8 1KLxiwMWInQxmKiajl1eg46T6dVHSnvJlKyj+arRn47SME37nyZG7ifg6jJ5lM4j wnObmz32f6IbT9HF9kB8BuqHXFVM+QzSzCI49NL6hfCD -----END CERTIFICATE-----Generated at Tue Jan 27 07:10:55 2026 by rpki-client