This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/FUJsXxiOTQX7pzaDkL5Jbj6ETSk.roa File: FUJsXxiOTQX7pzaDkL5Jbj6ETSk.roa (raw, json) Hash identifier: Uv+Y92AvX9M/f9d8WVX2zm/JR3SnMp+hpIYMHfKMlJ0= Subject key identifier: 15:42:6C:5F:18:8E:4D:05:FB:A7:36:83:90:BE:49:6E:3E:84:4D:29 Certificate issuer: /CN=659c356633388e9bd897d000a3f38bc1e546ef4a Certificate serial: 019B797E17C03D2829C0C242AD826F32B3C9 Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/FUJsXxiOTQX7pzaDkL5Jbj6ETSk.roa Signing time: Thu 01 Jan 2026 12:17:45 +0000 ROA not before: Thu 01 Jan 2026 12:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2386 IP address blocks: 193.38.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:17:c0:3d:28:29:c0:c2:42:ad:82:6f:32:b3:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a Validity Not Before: Jan 1 12:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15426c5f188e4d05fba7368390be496e3e844d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:be:c8:85:b3:55:7d:83:49:05:f1:bc:4e:3c: 30:f2:87:92:46:66:db:93:4c:2d:5b:8b:01:5d:de: db:a0:11:c0:09:c3:7d:94:62:80:25:31:e2:2d:95: 58:24:e7:16:e6:66:8f:40:b8:58:07:20:ec:0e:08: 25:da:a0:93:a5:f8:d3:b8:3e:16:aa:e1:8d:a0:38: 22:44:18:1d:7d:86:27:9b:9f:6d:ea:7e:5c:22:63: 45:03:e7:0f:d8:c6:f6:9e:7d:81:2a:1b:fb:b2:8a: 1f:f8:36:e6:35:33:41:d9:72:61:f4:13:36:17:92: d5:e8:4c:56:80:41:00:fc:08:21:91:99:f2:27:49: 65:92:a1:b8:23:d0:f0:ca:87:e2:4f:29:c3:76:dd: ab:7a:30:61:bc:b7:f5:3b:67:23:6d:e6:35:df:1d: d5:07:d9:57:7a:c1:aa:62:1e:e3:af:30:a0:b9:ce: 92:b9:cb:aa:be:a0:e8:60:ce:ba:a5:2f:a5:37:f1: 22:c4:05:a1:f0:c0:8b:0f:f9:b4:72:ad:87:23:f0: 2f:57:b8:7b:fe:67:d9:7b:3f:94:25:5d:2a:95:e8: 19:a1:07:e4:c4:43:1f:f1:f7:c3:55:10:b7:5d:a4: 64:ca:2c:a5:e9:68:0c:10:5c:5a:07:c2:c1:27:74: 60:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:42:6C:5F:18:8E:4D:05:FB:A7:36:83:90:BE:49:6E:3E:84:4D:29 X509v3 Authority Key Identifier: keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/FUJsXxiOTQX7pzaDkL5Jbj6ETSk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.38.171.0/24 Signature Algorithm: sha256WithRSAEncryption 13:67:1b:17:7d:7f:9c:a1:c0:79:eb:1c:4f:6b:dc:8f:2b:23: ef:86:7c:34:5f:e2:bd:f3:65:8a:5b:f9:30:28:33:26:5b:3c: fc:f1:cf:62:16:df:bc:c6:67:c9:97:f2:fc:3a:94:29:ff:24: fd:e8:f7:5f:dd:82:22:42:49:28:77:33:6f:2d:a1:77:71:38: f5:a3:08:87:5f:d8:0a:a3:03:86:39:26:3a:65:d6:58:2e:2f: ea:8c:10:37:0a:10:3c:45:d6:f0:8e:ca:90:50:1b:94:82:30: 1a:c9:71:e2:58:c9:bb:75:2f:cb:3d:4d:97:0d:01:56:a5:a8: 96:d9:ca:a4:94:87:06:7e:14:33:c1:9b:62:ca:a9:78:28:72: 5a:c8:5a:4a:ac:6a:82:6b:97:ba:e6:36:f6:5c:02:ec:f2:62: 5b:73:f5:63:89:b1:d0:f5:95:8c:56:b4:7e:12:a2:e5:ed:6f: cc:b2:8e:70:b5:59:9a:e8:22:3e:c6:a8:a5:7f:60:7b:b2:1d: 67:ae:ef:44:32:e8:97:8e:a7:9d:30:0d:bb:4f:42:b9:33:7e: 73:bc:28:0c:f5:3c:cd:75:a9:e7:3a:a7:da:bd:fd:57:73:3b: 1b:61:09:c1:d5:09:bd:30:8b:a9:ca:bd:7d:9a:59:c8:4b:e7: c0:0a:a9:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fhfAPSgpwMJCrYJvMrPJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1OWMzNTY2MzMzODhlOWJkODk3ZDAwMGEzZjM4YmMxZTU0 NmVmNGEwHhcNMjYwMTAxMTIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTQyNmM1ZjE4OGU0ZDA1ZmJhNzM2ODM5MGJlNDk2ZTNlODQ0ZDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL7IhbNVfYNJBfG8Tjww8oeSRmbb k0wtW4sBXd7boBHACcN9lGKAJTHiLZVYJOcW5maPQLhYByDsDggl2qCTpfjTuD4W quGNoDgiRBgdfYYnm59t6n5cImNFA+cP2Mb2nn2BKhv7soof+DbmNTNB2XJh9BM2 F5LV6ExWgEEA/AghkZnyJ0llkqG4I9DwyofiTynDdt2rejBhvLf1O2cjbeY13x3V B9lXesGqYh7jrzCguc6SucuqvqDoYM66pS+lN/EixAWh8MCLD/m0cq2HI/AvV7h7 /mfZez+UJV0qlegZoQfkxEMf8ffDVRC3XaRkyiyl6WgMEFxaB8LBJ3Rg+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBVCbF8Yjk0F+6c2g5C+SW4+hE0pMB8GA1UdIwQY MBaAFGWcNWYzOI6b2JfQAKPzi8HlRu9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTkt M2M3ZTRmOTNlNDJiLzEvRlVKc1h4aU9UUVg3cHphRGtMNUpiajZFVFNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTktM2M3ZTRmOTNlNDJi LzEvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSarMA0G CSqGSIb3DQEBCwUAA4IBAQATZxsXfX+cocB56xxPa9yPKyPvhnw0X+K982WKW/kw KDMmWzz88c9iFt+8xmfJl/L8OpQp/yT96Pdf3YIiQkkodzNvLaF3cTj1owiHX9gK owOGOSY6ZdZYLi/qjBA3ChA8RdbwjsqQUBuUgjAayXHiWMm7dS/LPU2XDQFWpaiW 2cqklIcGfhQzwZtiyql4KHJayFpKrGqCa5e65jb2XALs8mJbc/VjibHQ9ZWMVrR+ EqLl7W/Mso5wtVma6CI+xqilf2B7sh1nru9EMuiXjqedMA27T0K5M35zvCgM9TzN dannOqfavf1XczsbYQnB1Qm9MIupyr19mlnIS+fACqkw -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:37 2026 by rpki-client