This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/FjE4X-9S2f633bbn-zDMPfxq9o0.roa File: FjE4X-9S2f633bbn-zDMPfxq9o0.roa (raw, json) Hash identifier: ppFkHYX490h54TG3Jehslzi6Dr7tF99lIGGey6w1cdk= Subject key identifier: 16:31:38:5F:EF:52:D9:FE:B7:DD:B6:E7:FB:30:CC:3D:FC:6A:F6:8D Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B35679581BEC70A0C6189788949E289 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/FjE4X-9S2f633bbn-zDMPfxq9o0.roa Signing time: Thu 01 Jan 2026 20:17:36 +0000 ROA not before: Thu 01 Jan 2026 20:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34648 IP address blocks: 217.156.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:67:95:81:be:c7:0a:0c:61:89:78:89:49:e2:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1631385fef52d9feb7ddb6e7fb30cc3dfc6af68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:80:93:cf:47:8c:23:30:3f:d1:2c:0b:5c:1c: f9:d9:58:4e:80:72:fc:eb:3e:a9:77:98:06:08:79: 5c:c3:55:c4:42:2e:26:57:e6:37:51:ff:ad:df:94: a7:46:fd:7e:ec:4a:c7:06:5a:ce:89:08:c3:08:9c: b6:c4:73:c9:26:aa:3b:56:1f:fe:92:ee:a3:1d:9c: 04:6b:73:78:00:ed:3a:de:1e:4c:12:9d:4c:5f:a5: 67:e3:16:7c:3c:9e:9e:70:73:9a:87:40:89:11:aa: d0:69:e2:39:7c:bb:cb:cd:26:1f:54:a5:90:ac:3e: 71:dd:8a:c8:a3:8a:1c:8c:15:d5:a5:62:3b:23:11: b2:ea:1d:b0:29:80:bc:cb:ef:70:75:80:2c:14:09: 63:35:08:9f:67:1d:e4:3b:df:9b:40:c0:b8:e3:6d: dc:e7:be:dc:b1:19:df:b7:4a:d1:3e:fe:8e:a2:b1: 56:5a:3b:7d:fb:be:6c:50:f9:c2:cc:4e:cd:83:bb: af:e6:9e:10:5d:3d:cf:7b:7d:26:bc:94:cd:2e:31: cb:c3:94:25:09:c5:bc:c5:62:01:88:fd:15:2e:bd: 1f:2b:ac:67:33:2d:72:82:63:92:36:fd:09:50:c6: 07:4d:60:30:ce:6b:0b:62:80:f9:57:b4:5f:fa:2b: e7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:31:38:5F:EF:52:D9:FE:B7:DD:B6:E7:FB:30:CC:3D:FC:6A:F6:8D X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/FjE4X-9S2f633bbn-zDMPfxq9o0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.156.36.0/24 Signature Algorithm: sha256WithRSAEncryption 89:16:92:9d:1a:c5:c6:1c:9a:b1:1d:b2:f5:5c:28:53:74:6e: 99:15:64:da:1d:96:43:7b:35:53:d1:e4:57:68:a6:8f:71:0b: a4:86:a0:3c:a5:b5:15:51:a9:f0:2d:99:7c:e1:00:f2:4c:a1: f7:e8:ec:e1:32:3a:02:d4:7d:ce:65:c5:cf:1d:d2:d0:b8:06: f9:44:3f:1a:57:59:b1:c0:cd:af:5b:59:48:4f:b9:fb:36:91: ab:91:a9:76:97:ac:6d:ca:d0:ac:51:7c:ef:fd:44:c0:62:f4: 80:30:65:53:f0:c1:5b:1a:f1:66:80:df:8b:91:c7:03:40:17: 77:69:86:53:dc:47:1c:e4:37:cc:47:8d:d5:90:39:8f:92:61: 94:1d:da:a7:29:5f:8e:63:82:05:a8:41:77:9e:d2:8f:75:3b: 49:d6:ee:40:25:6a:44:24:48:87:91:f2:b0:2e:b6:1d:64:9d: c0:3d:ed:8f:74:f4:8e:da:de:cb:7e:13:db:e1:e4:cd:5d:ce: c8:2e:51:08:76:4b:36:a1:ca:9b:fd:be:40:c0:ea:9e:0b:61: 64:0f:0b:82:56:8f:9f:37:0d:fd:1d:0f:1e:f1:6c:ea:a7:3d: e2:c3:c1:fb:9b:7d:cb:94:be:77:4f:67:8d:17:08:a0:d0:93: 48:da:29:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NWeVgb7HCgxhiXiJSeKJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjMxMzg1ZmVmNTJkOWZlYjdkZGI2ZTdmYjMwY2MzZGZjNmFmNjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlICTz0eMIzA/0SwLXBz52VhOgHL8 6z6pd5gGCHlcw1XEQi4mV+Y3Uf+t35SnRv1+7ErHBlrOiQjDCJy2xHPJJqo7Vh/+ ku6jHZwEa3N4AO063h5MEp1MX6Vn4xZ8PJ6ecHOah0CJEarQaeI5fLvLzSYfVKWQ rD5x3YrIo4ocjBXVpWI7IxGy6h2wKYC8y+9wdYAsFAljNQifZx3kO9+bQMC4423c 577csRnft0rRPv6OorFWWjt9+75sUPnCzE7Ng7uv5p4QXT3Pe30mvJTNLjHLw5Ql CcW8xWIBiP0VLr0fK6xnMy1ygmOSNv0JUMYHTWAwzmsLYoD5V7Rf+ivnywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBYxOF/vUtn+t9225/swzD38avaNMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvRmpFNFgtOVMyZjYzM2Jibi16RE1QZnhxOW8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZwkMA0G CSqGSIb3DQEBCwUAA4IBAQCJFpKdGsXGHJqxHbL1XChTdG6ZFWTaHZZDezVT0eRX aKaPcQukhqA8pbUVUanwLZl84QDyTKH36OzhMjoC1H3OZcXPHdLQuAb5RD8aV1mx wM2vW1lIT7n7NpGrkal2l6xtytCsUXzv/UTAYvSAMGVT8MFbGvFmgN+LkccDQBd3 aYZT3Ecc5DfMR43VkDmPkmGUHdqnKV+OY4IFqEF3ntKPdTtJ1u5AJWpEJEiHkfKw LrYdZJ3APe2PdPSO2t7LfhPb4eTNXc7ILlEIdks2ocqb/b5AwOqeC2FkDwuCVo+f Nw39HQ8e8Wzqpz3iw8H7m33LlL53T2eNFwig0JNI2ilx -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:57 2026 by rpki-client