This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/fN0uhCdRqVz5yXtpmaJDqnfIm8s.roa File: fN0uhCdRqVz5yXtpmaJDqnfIm8s.roa (raw, json) Hash identifier: m9WfejVg9ON1shpnG8YUxspEx0wVxFw/ezN5l2XNM5E= Subject key identifier: 7C:DD:2E:84:27:51:A9:5C:F9:C9:7B:69:99:A2:43:AA:77:C8:9B:CB Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82C1F17D9300C0EA90B27E75802F47 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/fN0uhCdRqVz5yXtpmaJDqnfIm8s.roa Signing time: Fri 02 Jan 2026 16:20:34 +0000 ROA not before: Fri 02 Jan 2026 16:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62403 IP address blocks: 193.221.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:c1:f1:7d:93:00:c0:ea:90:b2:7e:75:80:2f:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cdd2e842751a95cf9c97b6999a243aa77c89bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8b:5a:c2:81:f6:6b:5c:ee:ba:ea:4f:5f:71: f9:04:e5:4c:d1:ab:82:be:6c:eb:0e:45:56:54:ef: 04:ab:2b:2c:22:fb:15:86:47:24:5f:5e:b1:c0:60: bd:30:d4:31:17:ee:c3:80:7c:22:68:0a:60:36:a4: a1:ca:ed:92:49:ba:b8:45:ce:aa:9e:13:34:3e:4b: f2:ff:75:08:ab:72:e1:64:39:23:bd:5e:43:24:b0: 1f:60:85:df:79:bc:f2:f6:24:a6:f7:af:a6:57:83: e9:42:35:d7:68:1a:a7:b7:bd:be:20:c2:75:29:16: e0:ed:3e:3b:ca:6f:ba:66:a5:a9:d1:bb:89:4e:89: e9:11:e8:32:84:e7:8f:ff:00:5b:83:70:f2:85:fe: 70:ed:72:f7:b0:96:d1:9c:c6:91:71:7a:31:f4:66: eb:1c:87:3c:4f:2f:7b:4f:20:18:e7:1c:80:26:35: ce:0f:f8:9f:d7:06:8a:7a:a4:50:31:69:b3:5b:dc: db:f0:cc:e8:61:cd:f1:2f:7f:1a:76:b8:e7:be:c6: 9f:14:6b:0f:87:02:07:9a:88:b7:c7:f4:5f:5f:54: bc:fd:49:7b:df:f3:c0:40:04:7d:c0:01:73:e8:38: 44:21:ef:4f:c1:19:76:76:dd:9c:ea:29:76:8f:22: 89:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DD:2E:84:27:51:A9:5C:F9:C9:7B:69:99:A2:43:AA:77:C8:9B:CB X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/fN0uhCdRqVz5yXtpmaJDqnfIm8s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.221.194.0/24 Signature Algorithm: sha256WithRSAEncryption d2:32:66:2c:1c:aa:ab:fa:89:31:5c:db:37:5b:fe:35:49:84: 37:68:70:c2:33:a9:2d:6c:34:71:05:eb:ef:ee:03:46:5e:57: e2:8c:43:9a:43:9f:3d:3e:e3:cb:a1:44:db:43:8c:0a:de:97: 6c:1b:c8:ba:0c:16:9e:1d:f9:b1:26:21:a2:b2:dc:16:7f:8a: 51:30:90:00:f3:40:3a:76:43:36:de:32:35:3b:3d:36:f6:2e: 27:b0:d5:3a:b2:24:ab:03:1c:8d:a4:1f:f7:dc:7d:b4:d1:db: a7:30:6c:6b:4d:56:a5:76:71:d5:10:6f:52:d2:e1:7e:30:5f: f2:d9:46:a9:ff:46:dc:0a:3e:7a:14:a1:0c:a0:b1:ba:0b:31: f5:a1:10:41:c9:cc:65:45:be:6a:8a:bb:8b:74:79:65:b6:5b: 68:33:e7:08:52:92:be:5c:15:f6:16:a8:76:1f:53:19:ac:65: 96:94:b9:ce:df:57:e1:94:9b:96:9e:cf:14:4c:1b:23:98:d4: ce:39:38:52:7d:91:70:f7:02:47:02:82:32:a8:9a:3a:9b:1d: 0c:81:9a:93:86:70:9f:67:00:6b:0a:9f:cd:64:2b:fc:26:77: e7:94:cd:f4:73:66:d3:d5:fb:ed:77:c0:e9:7a:9c:36:13:fa: 36:ee:ab:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gsHxfZMAwOqQsn51gC9HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2RkMmU4NDI3NTFhOTVjZjljOTdiNjk5OWEyNDNhYTc3Yzg5YmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYtawoH2a1zuuupPX3H5BOVM0auC vmzrDkVWVO8EqyssIvsVhkckX16xwGC9MNQxF+7DgHwiaApgNqShyu2SSbq4Rc6q nhM0Pkvy/3UIq3LhZDkjvV5DJLAfYIXfebzy9iSm96+mV4PpQjXXaBqnt72+IMJ1 KRbg7T47ym+6ZqWp0buJTonpEegyhOeP/wBbg3Dyhf5w7XL3sJbRnMaRcXox9Gbr HIc8Ty97TyAY5xyAJjXOD/if1waKeqRQMWmzW9zb8MzoYc3xL38adrjnvsafFGsP hwIHmoi3x/RfX1S8/Ul73/PAQAR9wAFz6DhEIe9PwRl2dt2c6il2jyKJHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHzdLoQnUalc+cl7aZmiQ6p3yJvLMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvZk4wdWhDZFJxVno1eVh0cG1hSkRxbmZJbThzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwd3CMA0G CSqGSIb3DQEBCwUAA4IBAQDSMmYsHKqr+okxXNs3W/41SYQ3aHDCM6ktbDRxBevv 7gNGXlfijEOaQ589PuPLoUTbQ4wK3pdsG8i6DBaeHfmxJiGistwWf4pRMJAA80A6 dkM23jI1Oz029i4nsNU6siSrAxyNpB/33H200dunMGxrTValdnHVEG9S0uF+MF/y 2Uap/0bcCj56FKEMoLG6CzH1oRBBycxlRb5qiruLdHlltltoM+cIUpK+XBX2Fqh2 H1MZrGWWlLnO31fhlJuWns8UTBsjmNTOOThSfZFw9wJHAoIyqJo6mx0MgZqThnCf ZwBrCp/NZCv8JnfnlM30c2bT1fvtd8Dpepw2E/o27qs7 -----END CERTIFICATE-----Generated at Tue Jan 20 15:19:00 2026 by rpki-client