This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/FG47vsukPFFVqGR7bOnjAT2rp7w.roa File: FG47vsukPFFVqGR7bOnjAT2rp7w.roa (raw, json) Hash identifier: awpRf5Q5mKob7svn8oYO+jlkoCbAPExf5Adoe8FOrnc= Subject key identifier: 14:6E:3B:BE:CB:A4:3C:51:55:A8:64:7B:6C:E9:E3:01:3D:AB:A7:BC Certificate issuer: /CN=ba0d738dd28ff2549456ce66e744898372fc503d Certificate serial: 019B7E37F4F772200DD143DF22C7D64E525F Authority key identifier: BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/FG47vsukPFFVqGR7bOnjAT2rp7w.roa Signing time: Fri 02 Jan 2026 10:19:14 +0000 ROA not before: Fri 02 Jan 2026 10:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60217 IP address blocks: 193.187.70.0/24 maxlen: 24 193.187.71.0/24 maxlen: 24 2a02:957::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:f4:f7:72:20:0d:d1:43:df:22:c7:d6:4e:52:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0d738dd28ff2549456ce66e744898372fc503d Validity Not Before: Jan 2 10:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=146e3bbecba43c5155a8647b6ce9e3013daba7bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:da:a4:ef:21:b0:7a:02:eb:f2:94:d6:fd:4a: c1:b2:f9:b8:5d:ff:0c:0d:01:a8:bd:54:42:88:75: ee:d6:4b:a4:d1:78:8c:9c:5a:bd:68:c8:a5:35:be: a8:3f:2f:f1:b7:e0:3a:b0:b3:93:95:0d:43:83:f0: 60:07:37:35:4a:9c:21:06:62:cd:5e:d3:eb:54:14: 5a:82:c4:9d:45:15:de:55:f3:cd:76:c4:32:b0:d1: 9f:f8:cb:e4:34:e4:cf:c2:46:ac:14:7d:7a:24:2a: 6f:79:63:12:cd:f7:d1:8a:6e:18:02:3c:36:f7:78: c3:06:61:c2:7d:37:97:7a:af:10:7f:cd:fb:f6:0d: 8f:4c:d4:02:5f:aa:e9:fc:b7:dd:11:a6:b1:be:12: e7:0a:4b:3a:1f:4f:87:b5:2d:a8:99:56:af:da:57: 82:20:58:63:3f:15:1d:4b:41:c4:a5:bf:fd:33:68: a1:17:2a:9e:50:43:5d:7e:da:5c:19:0c:c3:33:2d: 44:01:34:58:85:c4:eb:e3:96:f8:33:02:a1:01:5e: 4d:ad:06:8e:3b:02:6c:e9:5a:b4:c2:9d:21:5d:7f: 16:c7:69:b1:da:ac:c8:43:bb:18:a4:4c:47:8e:7f: e0:79:3d:60:35:a6:ea:c0:ee:de:c1:3c:fe:2c:20: 41:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6E:3B:BE:CB:A4:3C:51:55:A8:64:7B:6C:E9:E3:01:3D:AB:A7:BC X509v3 Authority Key Identifier: keyid:BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/FG47vsukPFFVqGR7bOnjAT2rp7w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.187.70.0/23 IPv6: 2a02:957::/48 Signature Algorithm: sha256WithRSAEncryption ba:ab:03:ec:2b:b0:66:a5:f4:a6:cc:b1:67:3f:85:e0:d7:55: 9b:88:e2:f0:a8:62:67:23:f2:5e:cc:9e:95:1d:ee:f0:5a:2e: c4:73:1a:7a:cc:a0:40:b3:6c:9a:06:df:6f:1f:74:53:b5:16: 8a:cd:dd:2e:31:0b:d0:d9:74:e9:11:4f:b8:7f:54:8d:2b:63: c1:ec:e5:ea:28:a6:61:fe:ca:f9:0d:a7:c2:98:3b:81:02:ae: 1b:16:67:12:21:ab:47:09:1c:58:73:be:19:c8:00:2a:ff:03: 64:84:79:87:79:49:66:ee:3c:57:18:8f:e5:f7:84:98:f3:08: 84:bd:87:c4:c4:dd:cc:ac:71:d5:d2:da:be:1c:06:0d:ad:c1: 41:0a:3b:dc:35:17:96:e0:20:72:b9:fd:6b:fd:ca:5e:7c:26: a0:8f:da:f0:99:47:45:84:51:5c:db:89:97:4d:e1:c2:09:c8: 0a:eb:b9:db:9d:f1:9e:87:8e:7c:16:4e:50:cf:44:30:5c:18: c7:95:c6:55:f7:8e:0c:e2:51:2b:8e:fc:87:fd:96:4d:75:36: 0b:03:c8:95:01:48:94:86:bc:96:2e:05:73:d4:7d:db:ad:cc: 73:41:d1:0c:91:51:53:cf:b4:c8:0b:58:0b:95:71:36:e0:59: 82:53:f7:74 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+N/T3ciAN0UPfIsfWTlJfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMGQ3MzhkZDI4ZmYyNTQ5NDU2Y2U2NmU3NDQ4OTgzNzJm YzUwM2QwHhcNMjYwMTAyMTAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDZlM2JiZWNiYTQzYzUxNTVhODY0N2I2Y2U5ZTMwMTNkYWJhN2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9qk7yGwegLr8pTW/UrBsvm4Xf8M DQGovVRCiHXu1kuk0XiMnFq9aMilNb6oPy/xt+A6sLOTlQ1Dg/BgBzc1SpwhBmLN XtPrVBRagsSdRRXeVfPNdsQysNGf+MvkNOTPwkasFH16JCpveWMSzffRim4YAjw2 93jDBmHCfTeXeq8Qf8379g2PTNQCX6rp/LfdEaaxvhLnCks6H0+HtS2omVav2leC IFhjPxUdS0HEpb/9M2ihFyqeUENdftpcGQzDMy1EATRYhcTr45b4MwKhAV5NrQaO OwJs6Vq0wp0hXX8Wx2mx2qzIQ7sYpExHjn/geT1gNabqwO7ewTz+LCBBDQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBRuO77LpDxRVahke2zp4wE9q6e8MB8GA1UdIwQY MBaAFLoNc43Sj/JUlFbOZudEiYNy/FA9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWcxempkS1A4bFNVVnM1bTUwU0pnM0w4VUQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8xY2Q3NmMtMDIwMS00NzAzLThlZDYt YmViNmRhMDM3NTVlLzEvRkc0N3ZzdWtQRkZWcUdSN2JPbmpBVDJycDd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8xY2Q3NmMtMDIwMS00NzAzLThlZDYtYmViNmRhMDM3NTVl LzEvdWcxempkS1A4bFNVVnM1bTUwU0pnM0w4VUQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwbtGMA8E AgACMAkDBwAqAglXAAAwDQYJKoZIhvcNAQELBQADggEBALqrA+wrsGal9KbMsWc/ heDXVZuI4vCoYmcj8l7MnpUd7vBaLsRzGnrMoECzbJoG328fdFO1ForN3S4xC9DZ dOkRT7h/VI0rY8Hs5eoopmH+yvkNp8KYO4ECrhsWZxIhq0cJHFhzvhnIACr/A2SE eYd5SWbuPFcYj+X3hJjzCIS9h8TE3cyscdXS2r4cBg2twUEKO9w1F5bgIHK5/Wv9 yl58JqCP2vCZR0WEUVzbiZdN4cIJyArrudud8Z6HjnwWTlDPRDBcGMeVxlX3jgzi USuO/If9lk11NgsDyJUBSJSGvJYuBXPUfdutzHNB0QyRUVPPtMgLWAuVcTbgWYJT 93Q= -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:07 2026 by rpki-client