This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/fp6e1oWTW6ERgaYTNaPCSf0ibbk.roa File: fp6e1oWTW6ERgaYTNaPCSf0ibbk.roa (raw, json) Hash identifier: cfY9W6Oc4CWCMHNddhZlxoGOHOxJVO+wjS65/vUgYTs= Subject key identifier: 7E:9E:9E:D6:85:93:5B:A1:11:81:A6:13:35:A3:C2:49:FD:22:6D:B9 Certificate issuer: /CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707 Certificate serial: 019B77588E401D4F6BD83935AB63A68B584C Authority key identifier: B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/fp6e1oWTW6ERgaYTNaPCSf0ibbk.roa Signing time: Thu 01 Jan 2026 02:17:30 +0000 ROA not before: Thu 01 Jan 2026 02:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209815 IP address blocks: 194.31.136.0/22 maxlen: 22 2a09:1380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.crl rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:8e:40:1d:4f:6b:d8:39:35:ab:63:a6:8b:58:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707 Validity Not Before: Jan 1 02:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e9e9ed685935ba11181a61335a3c249fd226db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:45:e4:b6:51:68:81:b0:dc:fe:df:20:c9:1b: 7e:e9:bd:f2:64:fe:8f:f4:60:6e:b4:35:f3:c5:92: eb:1a:b2:56:d7:42:6a:42:4a:c7:5a:f2:64:59:8d: 1f:27:f8:4e:57:f9:d6:b7:77:dd:77:c8:e6:5d:a9: 38:0a:7f:dc:63:93:72:e5:10:5e:84:15:46:a5:43: fb:e0:05:30:eb:0c:c1:8b:69:5b:22:74:ca:e8:ce: 39:8d:ae:08:70:e2:ed:bf:bd:41:a6:0e:06:75:06: 77:f3:47:80:62:32:6f:f4:d9:c9:f5:56:97:8f:99: 3c:5d:b8:fb:76:79:69:44:a4:79:7e:81:ca:c1:c9: 5e:cb:12:1a:91:6e:06:66:21:cb:5b:fd:82:d8:60: b7:6d:d6:b5:ac:9f:d0:ba:75:32:b0:4a:60:6d:1a: a3:72:d4:52:f1:ab:2d:94:bf:fb:85:b4:88:df:f0: 0b:96:98:45:d3:4c:20:a5:4b:8a:cc:a2:d9:7e:da: 5f:7d:86:cb:7b:e3:2e:2d:c6:65:90:17:10:54:58: 5e:79:1c:07:0e:11:b2:70:9d:87:db:f3:b4:c6:52: 12:aa:49:73:02:46:10:9f:f4:7f:0d:21:6c:4d:97: 9a:74:8f:2b:cc:11:90:06:2a:3b:d3:ec:22:c2:16: e6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9E:9E:D6:85:93:5B:A1:11:81:A6:13:35:A3:C2:49:FD:22:6D:B9 X509v3 Authority Key Identifier: keyid:B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/fp6e1oWTW6ERgaYTNaPCSf0ibbk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.136.0/22 IPv6: 2a09:1380::/29 Signature Algorithm: sha256WithRSAEncryption 76:ad:5c:3e:91:a0:9a:bb:c1:0b:49:3b:e9:b1:44:8a:3c:83: 2e:dc:5f:fa:cd:70:47:04:72:34:a2:17:b4:4d:87:31:df:01: f4:45:f2:7d:44:4d:da:b7:db:85:7b:e4:fd:f1:02:22:a0:de: 8f:6c:d9:11:07:2c:6e:c4:12:41:d9:ad:7e:c0:d4:de:41:67: 00:0e:de:42:de:fe:3e:e8:ec:61:7f:48:d7:83:ea:74:19:f3: 39:ea:48:59:57:da:8b:cb:0e:ef:c1:62:0b:54:76:4b:97:44: 95:f8:a7:f2:54:f5:5f:50:65:68:42:8c:f2:b2:af:de:b3:5f: 86:9c:a6:bf:24:64:d3:d1:35:d1:f0:07:d3:46:cd:db:dd:9a: b6:54:b8:d5:77:07:8e:3c:e6:48:95:15:ae:ab:af:27:30:74: 72:65:b0:f8:69:0b:30:cd:27:58:2a:94:c2:dd:a7:c3:fa:a1: 14:ea:8f:0d:87:b2:54:80:16:95:cf:db:bb:89:85:3a:e7:33: 2a:dc:be:e2:cc:b1:44:b1:d9:bb:f8:ac:7d:b1:56:f4:de:72: 23:51:c3:e3:d0:e7:29:3c:47:f6:da:27:46:70:39:0a:ba:de: ec:a2:08:b2:d0:a2:87:0d:29:77:13:e2:e2:df:4f:5c:62:5f: b4:38:ad:5d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WI5AHU9r2Dk1q2Omi1hMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MzljNGUzZmU4NjlkOTc4M2JhMmRhZGY2NjBkY2NkMGZh NTM3MDcwHhcNMjYwMTAxMDIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTllOWVkNjg1OTM1YmExMTE4MWE2MTMzNWEzYzI0OWZkMjI2ZGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0XktlFogbDc/t8gyRt+6b3yZP6P 9GButDXzxZLrGrJW10JqQkrHWvJkWY0fJ/hOV/nWt3fdd8jmXak4Cn/cY5Ny5RBe hBVGpUP74AUw6wzBi2lbInTK6M45ja4IcOLtv71Bpg4GdQZ380eAYjJv9NnJ9VaX j5k8Xbj7dnlpRKR5foHKwcleyxIakW4GZiHLW/2C2GC3bda1rJ/QunUysEpgbRqj ctRS8astlL/7hbSI3/ALlphF00wgpUuKzKLZftpffYbLe+MuLcZlkBcQVFheeRwH DhGycJ2H2/O0xlISqklzAkYQn/R/DSFsTZeadI8rzBGQBio70+wiwhbm5QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFH6entaFk1uhEYGmEzWjwkn9Im25MB8GA1UdIwQY MBaAFLc5xOP+hp2Xg7otrfZg3M0PpTcHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHpuRTRfNkduWmVEdWkydDltRGN6US1sTndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8yMWI1NTgtN2U4OS00MWEyLTgyNWQt MDcyMjYyZTMwZmM1LzEvZnA2ZTFvV1RXNkVSZ2FZVE5hUENTZjBpYmJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8yMWI1NTgtN2U4OS00MWEyLTgyNWQtMDcyMjYyZTMwZmM1 LzEvdHpuRTRfNkduWmVEdWkydDltRGN6US1sTndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwh+IMA0E AgACMAcDBQMqCROAMA0GCSqGSIb3DQEBCwUAA4IBAQB2rVw+kaCau8ELSTvpsUSK PIMu3F/6zXBHBHI0ohe0TYcx3wH0RfJ9RE3at9uFe+T98QIioN6PbNkRByxuxBJB 2a1+wNTeQWcADt5C3v4+6Oxhf0jXg+p0GfM56khZV9qLyw7vwWILVHZLl0SV+Kfy VPVfUGVoQozysq/es1+GnKa/JGTT0TXR8AfTRs3b3Zq2VLjVdweOPOZIlRWuq68n MHRyZbD4aQswzSdYKpTC3afD+qEU6o8Nh7JUgBaVz9u7iYU65zMq3L7izLFEsdm7 +Kx9sVb03nIjUcPj0OcpPEf22idGcDkKut7sogiy0KKHDSl3E+Li309cYl+0OK1d -----END CERTIFICATE-----Generated at Mon Feb 9 23:55:03 2026 by rpki-client