This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/FvKj3Djs8TT6ypv05g8sMqJXOlA.roa File: FvKj3Djs8TT6ypv05g8sMqJXOlA.roa (raw, json) Hash identifier: tfDMARTocl58JXc9IeJSQaWJFyjzzrUR3p+6fLmC9V4= Subject key identifier: 16:F2:A3:DC:38:EC:F1:34:FA:CA:9B:F4:E6:0F:2C:32:A2:57:3A:50 Certificate issuer: /CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd Certificate serial: 019B7DCAE923665137DA9B2E36388ED6D408 Authority key identifier: 4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/FvKj3Djs8TT6ypv05g8sMqJXOlA.roa Signing time: Fri 02 Jan 2026 08:20:08 +0000 ROA not before: Fri 02 Jan 2026 08:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202311 IP address blocks: 195.26.68.0/24 maxlen: 24 195.26.70.0/24 maxlen: 24 195.26.71.0/24 maxlen: 24 2a07:f680::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:e9:23:66:51:37:da:9b:2e:36:38:8e:d6:d4:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd Validity Not Before: Jan 2 08:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16f2a3dc38ecf134faca9bf4e60f2c32a2573a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f3:0b:b5:76:d7:85:ec:ca:ca:95:8d:d3:0d: d8:cc:c3:67:0e:cf:cb:64:26:a8:a0:f2:5c:2e:9a: f9:0a:3e:e9:50:04:dd:32:23:e2:53:41:68:96:00: 26:1a:ef:6c:f7:83:0f:74:20:b2:4b:92:00:7e:64: 0c:10:c7:28:a4:4c:50:39:c9:6d:69:3c:de:b5:f9: 7e:26:57:f5:3e:f7:de:11:15:0a:8e:a4:a4:54:93: 6e:12:12:41:11:fd:56:7d:f0:78:b5:a4:16:a0:91: 44:81:ea:7d:55:04:f9:97:7a:39:14:8f:ad:a4:56: 91:2a:2d:2b:d3:d7:da:18:e2:df:9c:20:01:fe:3a: 08:11:5a:a9:ac:62:d5:c2:ae:18:d3:61:8f:18:48: 8d:b6:bd:d2:59:c0:e9:1c:df:99:bd:5e:f5:73:e0: 38:74:38:a5:57:85:cc:f7:81:e0:19:aa:53:80:61: 3a:39:b1:19:9c:21:e5:4d:dd:ca:a7:89:f3:f0:ac: a0:25:d2:92:26:44:ed:8d:ab:e7:2a:38:f1:9b:cf: 1b:9a:9c:bc:f5:94:d0:26:b8:18:38:76:46:1e:04: 1d:42:48:dc:c0:40:e3:cc:f1:e0:aa:fb:aa:6c:3a: 5d:93:fc:d1:43:ee:48:f7:ac:7b:4f:8c:ac:18:5d: e5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F2:A3:DC:38:EC:F1:34:FA:CA:9B:F4:E6:0F:2C:32:A2:57:3A:50 X509v3 Authority Key Identifier: keyid:4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/FvKj3Djs8TT6ypv05g8sMqJXOlA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.26.68.0/24 195.26.70.0/23 IPv6: 2a07:f680::/29 Signature Algorithm: sha256WithRSAEncryption 94:b9:52:ba:75:bf:95:30:ff:50:a4:65:4e:3c:10:d8:a8:b1: 70:af:53:73:e1:b9:db:42:d5:a8:b9:31:8d:46:2c:b7:32:26: 81:f3:3f:a8:b3:3b:89:9e:fb:f4:ea:bc:c3:8c:84:73:be:8b: 41:0c:dd:cf:d9:5f:55:af:03:db:46:c3:39:c3:70:6b:48:01: e7:99:fd:0a:98:fb:4c:fd:67:8b:25:6c:e7:e4:97:61:c0:ba: 86:a5:9e:a7:d1:56:a0:d5:e8:bc:b4:87:b0:cb:8b:4f:81:b3: 30:61:be:86:65:de:ee:88:b9:aa:b9:3b:76:de:71:7d:7b:2e: 91:06:d1:ad:af:7b:3b:cc:64:1d:6c:b7:98:6d:4d:76:dc:00: af:7c:2d:53:98:0a:7c:bb:4d:8e:f8:5f:64:a7:d6:f3:72:dc: 0c:13:b4:c9:de:d8:d5:63:e5:a6:05:df:ad:9a:b6:b3:74:ec: d8:54:ad:5d:62:64:f8:f5:2e:be:bd:ed:b3:a1:0e:3d:4d:60: 93:ee:a7:f5:f4:d4:11:32:48:d5:42:1e:7d:f0:a6:f0:f3:ab: c8:41:0e:45:14:b6:5e:f0:85:00:51:ef:a0:2e:9c:6f:cf:e4: bb:c7:44:6c:91:8a:0f:01:db:4f:e1:34:71:72:5e:8d:47:3e: 60:62:6e:d5 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9yukjZlE32psuNjiO1tQIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQ5Yjg0N2QzMTI5M2Y3MDFlMWNmOTlkZDhjYTBlYmJi MGI1YmQwHhcNMjYwMTAyMDgyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmYyYTNkYzM4ZWNmMTM0ZmFjYTliZjRlNjBmMmMzMmEyNTczYTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufMLtXbXhezKypWN0w3YzMNnDs/L ZCaooPJcLpr5Cj7pUATdMiPiU0FolgAmGu9s94MPdCCyS5IAfmQMEMcopExQOclt aTzetfl+Jlf1PvfeERUKjqSkVJNuEhJBEf1WffB4taQWoJFEgep9VQT5l3o5FI+t pFaRKi0r09faGOLfnCAB/joIEVqprGLVwq4Y02GPGEiNtr3SWcDpHN+ZvV71c+A4 dDilV4XM94HgGapTgGE6ObEZnCHlTd3Kp4nz8KygJdKSJkTtjavnKjjxm88bmpy8 9ZTQJrgYOHZGHgQdQkjcwEDjzPHgqvuqbDpdk/zRQ+5I96x7T4ysGF3lnwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBbyo9w47PE0+sqb9OYPLDKiVzpQMB8GA1UdIwQY MBaAFE8Um4R9MSk/cB4c+Z3Yyg67sLW9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhTYmhIMHhLVDl3SGh6NW5kaktEcnV3dGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83MzFmODItYjE4Zi00ZDVjLWIxMjIt NDUyYmFkZmQ1YTZkLzEvRnZLajNEanM4VFQ2eXB2MDVnOHNNcUpYT2xBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy83MzFmODItYjE4Zi00ZDVjLWIxMjItNDUyYmFkZmQ1YTZk LzEvVHhTYmhIMHhLVDl3SGh6NW5kaktEcnV3dGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAwxpEAwQB wxpGMA0EAgACMAcDBQMqB/aAMA0GCSqGSIb3DQEBCwUAA4IBAQCUuVK6db+VMP9Q pGVOPBDYqLFwr1Nz4bnbQtWouTGNRiy3MiaB8z+oszuJnvv06rzDjIRzvotBDN3P 2V9VrwPbRsM5w3BrSAHnmf0KmPtM/WeLJWzn5JdhwLqGpZ6n0Vag1ei8tIewy4tP gbMwYb6GZd7uiLmquTt23nF9ey6RBtGtr3s7zGQdbLeYbU123ACvfC1TmAp8u02O +F9kp9bzctwME7TJ3tjVY+WmBd+tmrazdOzYVK1dYmT49S6+ve2zoQ49TWCT7qf1 9NQRMkjVQh598Kbw86vIQQ5FFLZe8IUAUe+gLpxvz+S7x0RskYoPAdtP4TRxcl6N Rz5gYm7V -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:21 2026 by rpki-client