This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/4KVFT5rfCFpQJiwyphxd1Ug6J-g.roa File: 4KVFT5rfCFpQJiwyphxd1Ug6J-g.roa (raw, json) Hash identifier: H9IZSHKQQb+XSiam4n6FXPX7X+NUo4iyE9Bfz0ZsuCI= Subject key identifier: E0:A5:45:4F:9A:DF:08:5A:50:26:2C:32:A6:1C:5D:D5:48:3A:27:E8 Certificate issuer: /CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2 Certificate serial: 019B775913435FD1CB3951E22111CF189741 Authority key identifier: 16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/4KVFT5rfCFpQJiwyphxd1Ug6J-g.roa Signing time: Thu 01 Jan 2026 02:18:04 +0000 ROA not before: Thu 01 Jan 2026 02:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212613 IP address blocks: 193.176.120.0/22 maxlen: 22 193.176.120.0/24 maxlen: 24 193.176.121.0/24 maxlen: 24 193.176.122.0/24 maxlen: 24 193.176.123.0/24 maxlen: 24 2a05:5a00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:13:43:5f:d1:cb:39:51:e2:21:11:cf:18:97:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2 Validity Not Before: Jan 1 02:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0a5454f9adf085a50262c32a61c5dd5483a27e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:21:f6:d7:50:b1:3c:ac:ab:72:8b:5a:aa:42: 45:18:f0:69:c3:7b:89:10:ea:75:e4:2c:fd:2c:d9: e4:73:27:b6:08:40:38:dd:fa:39:38:66:2f:e8:77: a5:21:28:38:8c:31:7b:c6:a7:d1:e9:6f:fb:1d:02: 49:79:9a:c5:74:fa:87:ef:51:91:9c:dd:2b:23:a7: 02:1e:66:2e:9e:cd:7e:7c:0e:ae:a2:79:e0:09:e8: e1:9d:fc:22:57:aa:64:61:f9:0d:be:2e:de:64:d7: 58:c6:3b:69:67:a5:73:c7:49:ab:21:07:d2:f3:01: a0:a0:9e:38:4c:6c:96:1f:29:3e:ea:21:d1:c7:47: 77:bf:7a:e0:49:f0:c0:83:94:d8:25:78:2a:86:1f: 8b:34:60:2b:f0:fa:f6:c2:2a:01:76:48:1a:d9:e4: 7d:2f:f9:e4:65:22:7f:38:01:b6:79:7c:ea:a8:ce: e3:13:1e:bc:6f:06:35:dd:d7:ab:8f:a6:01:da:60: 2d:72:e0:d0:7a:a4:2f:0a:cd:c4:cf:f4:d0:df:8d: 93:21:d2:ab:06:34:a1:53:3b:e3:26:1c:46:c8:b1: 12:0d:d4:f8:c2:5f:62:ad:92:02:18:4a:b5:72:2b: 25:fe:f5:46:69:2d:8d:d4:16:2c:c9:84:e2:6e:52: 03:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A5:45:4F:9A:DF:08:5A:50:26:2C:32:A6:1C:5D:D5:48:3A:27:E8 X509v3 Authority Key Identifier: keyid:16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/4KVFT5rfCFpQJiwyphxd1Ug6J-g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.176.120.0/22 IPv6: 2a05:5a00::/29 Signature Algorithm: sha256WithRSAEncryption 84:3a:a9:a0:19:21:ef:92:98:0d:71:90:bf:4e:06:10:7b:9b: d5:f9:f3:d6:87:01:15:9b:cd:d8:aa:42:c1:ab:31:45:a5:63: 49:bf:97:21:1a:ba:08:f6:63:a1:d7:84:05:23:9d:a5:c7:6c: e8:8e:76:d3:b4:0b:9d:da:fa:e4:26:8d:b8:18:aa:f0:5d:3d: 91:1e:7e:9f:32:36:ee:c2:6f:fe:ae:49:cc:8d:2e:f6:07:8f: da:a4:d0:4d:0e:5d:c9:2f:2f:f2:36:51:e4:df:ca:b8:0e:db: 51:d3:0b:47:f9:02:4f:f0:48:5a:79:32:ca:57:54:0d:4f:80: d4:95:63:94:3f:bf:e8:ec:b6:6e:18:01:e8:2d:57:c3:0f:f0: 4d:a2:c3:79:62:33:0c:53:e1:bd:03:93:38:b3:6d:08:71:e7: 30:b5:77:9d:06:d7:7b:7b:6f:e8:7a:43:d7:7f:19:61:b4:23: 83:18:fc:32:99:6b:09:83:13:38:b7:a2:b4:ea:52:e2:32:66: 19:26:20:99:ec:08:40:cd:a4:f4:e0:99:1a:04:b5:5d:8e:c2: 7b:e6:07:4b:ac:dd:26:2a:75:7b:11:58:21:e3:d4:d7:f7:a5: 7a:a5:85:15:8b:29:2f:d8:49:d2:13:da:a9:8c:66:cc:94:62: d5:4c:55:e3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WRNDX9HLOVHiIRHPGJdBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZmNmNDg2NmI2Yzg1ZWIwY2I3Njg4ZWRkNDM4MzBmNDE5 ZDY2YTIwHhcNMjYwMTAxMDIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGE1NDU0ZjlhZGYwODVhNTAyNjJjMzJhNjFjNWRkNTQ4M2EyN2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiH211CxPKyrcotaqkJFGPBpw3uJ EOp15Cz9LNnkcye2CEA43fo5OGYv6HelISg4jDF7xqfR6W/7HQJJeZrFdPqH71GR nN0rI6cCHmYuns1+fA6uonngCejhnfwiV6pkYfkNvi7eZNdYxjtpZ6Vzx0mrIQfS 8wGgoJ44TGyWHyk+6iHRx0d3v3rgSfDAg5TYJXgqhh+LNGAr8Pr2wioBdkga2eR9 L/nkZSJ/OAG2eXzqqM7jEx68bwY13derj6YB2mAtcuDQeqQvCs3Ez/TQ342TIdKr BjShUzvjJhxGyLESDdT4wl9irZICGEq1cisl/vVGaS2N1BYsyYTiblIDWwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOClRU+a3whaUCYsMqYcXdVIOifoMB8GA1UdIwQY MBaAFBb89IZrbIXrDLdojt1Dgw9BnWaiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnZ6MGhtdHNoZXNNdDJpTzNVT0REMEdkWnFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mYzg4ODMtYWFkMi00MThiLTliODct ZWEyMTZiYTI1OTRkLzEvNEtWRlQ1cmZDRnBRSml3eXBoeGQxVWc2Si1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9mYzg4ODMtYWFkMi00MThiLTliODctZWEyMTZiYTI1OTRk LzEvRnZ6MGhtdHNoZXNNdDJpTzNVT0REMEdkWnFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwbB4MA0E AgACMAcDBQMqBVoAMA0GCSqGSIb3DQEBCwUAA4IBAQCEOqmgGSHvkpgNcZC/TgYQ e5vV+fPWhwEVm83YqkLBqzFFpWNJv5chGroI9mOh14QFI52lx2zojnbTtAud2vrk Jo24GKrwXT2RHn6fMjbuwm/+rknMjS72B4/apNBNDl3JLy/yNlHk38q4DttR0wtH +QJP8EhaeTLKV1QNT4DUlWOUP7/o7LZuGAHoLVfDD/BNosN5YjMMU+G9A5M4s20I cecwtXedBtd7e2/oekPXfxlhtCODGPwymWsJgxM4t6K06lLiMmYZJiCZ7AhAzaT0 4JkaBLVdjsJ75gdLrN0mKnV7EVgh49TX96V6pYUViykv2EnSE9qpjGbMlGLVTFXj -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:29 2026 by rpki-client