This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/fQLdgyYM3tvuNVHUZIpaKxsjEZc.roa File: fQLdgyYM3tvuNVHUZIpaKxsjEZc.roa (raw, json) Hash identifier: 9sR/eMSi1iqqDAz/FqyHyeV4iHU6LW2Zpai7cg/dyoY= Subject key identifier: 7D:02:DD:83:26:0C:DE:DB:EE:35:51:D4:64:8A:5A:2B:1B:23:11:97 Certificate issuer: /CN=dfc2603437ef74117fa12272ec42c2527da800c7 Certificate serial: 019B78A37DC57799274C080C1C9FCB169A46 Authority key identifier: DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/fQLdgyYM3tvuNVHUZIpaKxsjEZc.roa Signing time: Thu 01 Jan 2026 08:18:59 +0000 ROA not before: Thu 01 Jan 2026 08:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51907 IP address blocks: 193.134.16.0/20 maxlen: 24 2a10:8244::/30 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7d:c5:77:99:27:4c:08:0c:1c:9f:cb:16:9a:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfc2603437ef74117fa12272ec42c2527da800c7 Validity Not Before: Jan 1 08:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d02dd83260cdedbee3551d4648a5a2b1b231197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d9:48:d9:39:34:f4:91:de:8b:c0:95:fe:e6: 76:8a:4d:64:6d:2f:30:05:9c:92:65:7f:5e:44:db: f1:e7:d2:94:e7:e4:c7:ab:af:1e:43:17:8c:e0:1e: 45:0a:4b:c9:e6:7f:55:ca:9f:5e:03:91:30:a8:0d: f2:71:32:07:aa:0c:ae:6f:b4:06:fb:4e:e2:9d:3c: bb:10:74:eb:11:e1:fa:e3:22:42:45:33:21:e0:88: 84:72:58:18:db:16:59:14:ce:76:2f:b1:33:53:6b: 65:10:8b:eb:cd:4c:30:50:4e:c4:68:44:e2:e0:63: 6f:c2:5d:c4:14:49:57:5d:1b:c6:63:97:c2:08:bb: c4:89:de:aa:84:fa:74:7a:90:4d:84:48:58:2a:f9: 98:13:a1:1e:1e:c7:7a:99:42:71:b7:69:43:74:6b: 88:ad:36:bb:83:e5:b9:79:4a:20:11:85:4f:d8:b3: 6a:44:6e:dc:8c:7a:93:f8:df:66:72:4e:bd:5e:fd: bf:09:18:a1:c1:dc:9f:4b:2d:e4:c8:f3:2a:76:a6: e8:3b:21:c8:ac:4a:79:46:c0:e8:cd:37:b2:66:ae: 87:e6:0d:a4:a6:27:5a:78:62:3e:2f:f5:9b:51:53: 27:07:3e:e9:61:76:69:ac:32:38:e3:db:3d:3b:76: ee:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:02:DD:83:26:0C:DE:DB:EE:35:51:D4:64:8A:5A:2B:1B:23:11:97 X509v3 Authority Key Identifier: keyid:DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/fQLdgyYM3tvuNVHUZIpaKxsjEZc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.134.16.0/20 IPv6: 2a10:8244::/30 Signature Algorithm: sha256WithRSAEncryption 9f:b8:b6:e2:0b:f7:da:ab:f3:25:80:6e:87:7e:8a:f1:01:a1: 67:6e:c9:07:ad:b8:b3:78:02:f3:21:8a:ba:20:18:41:d7:cf: 63:87:55:d1:9d:5e:10:8d:5b:c0:46:31:e2:17:ad:4f:04:70: 3d:9b:19:dc:1d:04:79:73:68:ae:02:a2:a1:00:66:21:ca:2c: b0:26:cf:e0:1b:c5:ba:b2:66:e5:76:6a:d0:05:b3:80:bf:03: cc:bc:a0:e8:a5:7a:ae:de:7e:3a:7c:a7:9c:f5:bb:d7:f8:b4: bf:7f:c8:38:1a:fb:ef:50:74:29:09:e5:50:ea:01:20:a9:67: 43:5c:1d:f1:77:46:ea:bc:ca:eb:8e:5c:6a:a7:f9:1c:65:84: 7d:40:52:ba:1f:a0:45:12:71:83:85:ef:9e:b8:c8:dd:9b:b9: 51:f3:0e:6a:e3:dc:70:e7:30:66:a2:4e:69:35:ee:a0:1e:37: b9:e2:95:61:c8:ed:f3:ba:fa:b3:28:8e:3a:83:1d:80:1d:67: e7:90:15:8f:10:3f:6e:d7:ea:dc:67:34:87:2e:18:a3:ef:2b: 81:c1:e6:6a:d8:df:6f:e2:e2:02:0d:c5:27:1e:c1:cb:e9:c7: 05:64:f6:13:75:64:c3:0d:84:a8:85:8e:0b:ab:16:a5:ab:48: 21:ce:19:ab -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4o33Fd5knTAgMHJ/LFppGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmYzI2MDM0MzdlZjc0MTE3ZmExMjI3MmVjNDJjMjUyN2Rh ODAwYzcwHhcNMjYwMTAxMDgxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDAyZGQ4MzI2MGNkZWRiZWUzNTUxZDQ2NDhhNWEyYjFiMjMxMTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptlI2Tk09JHei8CV/uZ2ik1kbS8w BZySZX9eRNvx59KU5+THq68eQxeM4B5FCkvJ5n9Vyp9eA5EwqA3ycTIHqgyub7QG +07inTy7EHTrEeH64yJCRTMh4IiEclgY2xZZFM52L7EzU2tlEIvrzUwwUE7EaETi 4GNvwl3EFElXXRvGY5fCCLvEid6qhPp0epBNhEhYKvmYE6EeHsd6mUJxt2lDdGuI rTa7g+W5eUogEYVP2LNqRG7cjHqT+N9mck69Xv2/CRihwdyfSy3kyPMqdqboOyHI rEp5RsDozTeyZq6H5g2kpidaeGI+L/WbUVMnBz7pYXZprDI449s9O3buAwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFH0C3YMmDN7b7jVR1GSKWisbIxGXMB8GA1UdIwQY MBaAFN/CYDQ373QRf6EicuxCwlJ9qADHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzhKZ05EZnZkQkZfb1NKeTdFTENVbjJvQU1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTVlNDAtZDhiZS00OGQ5LWJkNTUt YzgzMDA3MzI3NDQ5LzEvZlFMZGd5WU0zdHZ1TlZIVVpJcGFLeHNqRVpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iNTVlNDAtZDhiZS00OGQ5LWJkNTUtYzgzMDA3MzI3NDQ5 LzEvMzhKZ05EZnZkQkZfb1NKeTdFTENVbjJvQU1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEwYYQMA0E AgACMAcDBQIqEIJEMA0GCSqGSIb3DQEBCwUAA4IBAQCfuLbiC/faq/MlgG6Hforx AaFnbskHrbizeALzIYq6IBhB189jh1XRnV4QjVvARjHiF61PBHA9mxncHQR5c2iu AqKhAGYhyiywJs/gG8W6smbldmrQBbOAvwPMvKDopXqu3n46fKec9bvX+LS/f8g4 GvvvUHQpCeVQ6gEgqWdDXB3xd0bqvMrrjlxqp/kcZYR9QFK6H6BFEnGDhe+euMjd m7lR8w5q49xw5zBmok5pNe6gHje54pVhyO3zuvqzKI46gx2AHWfnkBWPED9u1+rc ZzSHLhij7yuBweZq2N9v4uICDcUnHsHL6ccFZPYTdWTDDYSohY4Lqxalq0ghzhmr -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:50 2026 by rpki-client