This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/fdwbgBklrjdovCeYbqvQYFGn8iQ.roa File: fdwbgBklrjdovCeYbqvQYFGn8iQ.roa (raw, json) Hash identifier: 8Me+/KWLgHoPwHgTQu4VQrh3NLbvTzJ2Ie0jnlhQSkk= Subject key identifier: 7D:DC:1B:80:19:25:AE:37:68:BC:27:98:6E:AB:D0:60:51:A7:F2:24 Certificate issuer: /CN=677d4ea2c016ce2797af7aeb737d132875669f12 Certificate serial: 019B7758DA100D9F6B8D7DB6CCA399047340 Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/fdwbgBklrjdovCeYbqvQYFGn8iQ.roa Signing time: Thu 01 Jan 2026 02:17:50 +0000 ROA not before: Thu 01 Jan 2026 02:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59554 IP address blocks: 193.160.92.0/24 maxlen: 24 193.160.93.0/24 maxlen: 24 193.160.94.0/24 maxlen: 24 193.160.95.0/24 maxlen: 24 2a0d:ed40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:da:10:0d:9f:6b:8d:7d:b6:cc:a3:99:04:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12 Validity Not Before: Jan 1 02:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ddc1b801925ae3768bc27986eabd06051a7f224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:58:35:91:0b:3c:8f:df:24:b4:7c:6e:89:2d: 8d:dd:9a:e0:29:c1:ee:57:c5:3e:bc:14:fe:cd:bd: dd:8b:d5:d6:1f:b0:b7:75:b8:cf:6e:91:92:84:49: bc:e0:73:c6:bf:ea:4a:3c:48:01:82:e1:66:b9:70: f6:bb:87:66:de:20:7e:6d:60:36:8f:95:14:f7:62: bd:95:0d:99:20:bc:97:a1:b3:cb:8e:85:1a:81:ce: ac:b4:96:f4:79:fe:b8:f2:53:7f:8a:af:fa:b2:04: 12:7e:de:f8:bb:7a:2d:90:9f:1d:96:82:cd:c6:f0: d7:77:ce:82:6d:5f:f3:77:cc:69:46:91:1c:12:87: b8:da:0c:16:89:9f:ca:03:80:25:81:cc:4b:0b:3c: 75:00:31:ef:3d:89:d2:89:6f:3b:d9:28:15:b2:e3: 23:32:d0:a3:82:0b:e3:ce:69:bf:35:05:65:93:24: 44:40:cd:91:df:5c:6b:dc:1e:e2:5a:1f:83:a8:ca: 6f:f9:44:61:eb:8a:1a:fa:0d:8d:ab:50:40:79:62: 8c:5d:be:51:68:28:b8:a5:c5:a3:ec:5c:6f:31:82: cb:1c:61:b0:96:98:13:9d:e4:b8:4f:6d:af:41:49: 49:28:13:27:2a:82:dc:63:8b:4a:ae:42:a9:b5:e1: 49:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DC:1B:80:19:25:AE:37:68:BC:27:98:6E:AB:D0:60:51:A7:F2:24 X509v3 Authority Key Identifier: keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/fdwbgBklrjdovCeYbqvQYFGn8iQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.160.92.0/22 IPv6: 2a0d:ed40::/32 Signature Algorithm: sha256WithRSAEncryption 05:e0:99:f1:56:32:0e:07:7f:77:01:fe:66:22:54:9b:65:22: 5e:2f:9d:45:29:e7:ea:6b:19:77:f1:78:9c:81:27:55:17:28: 3c:4a:f0:bf:21:1c:da:56:e4:19:9d:ed:4e:5a:d3:ae:27:1f: d8:d7:d3:20:78:56:87:fa:12:98:61:f1:f8:15:fc:7f:56:f3: 90:7f:a3:e8:c6:2e:6f:2a:d9:dc:af:fd:f0:76:6b:d4:22:d2: 94:57:97:e8:83:eb:d5:e3:75:57:7d:30:14:23:83:91:8b:c6: a6:f0:0c:19:9c:45:23:d9:3f:2f:40:bd:fd:8c:d1:7f:8d:5e: d6:25:3f:75:6e:ad:d7:53:d2:69:05:e8:4a:72:92:f9:d0:4f: 7a:f4:bc:fa:24:4c:99:58:c5:34:05:33:5d:1d:0b:15:dd:af: d1:0e:e8:9f:bd:7f:c7:98:78:3f:85:f2:44:6e:73:b6:73:92: 85:f8:fb:3e:db:9e:c5:0b:3b:59:55:35:34:49:3c:58:45:a9: 7d:60:97:8a:5d:19:5b:36:ee:e5:06:d5:36:a9:39:d5:2e:6e: 2d:8a:8f:c0:49:ca:3a:70:b7:b0:20:67:c1:3b:b0:83:89:56: 68:1f:9d:13:c1:71:2c:9a:46:80:3a:95:da:28:25:00:96:58: 15:36:cf:4d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WNoQDZ9rjX22zKOZBHNAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3N2Q0ZWEyYzAxNmNlMjc5N2FmN2FlYjczN2QxMzI4NzU2 NjlmMTIwHhcNMjYwMTAxMDIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGRjMWI4MDE5MjVhZTM3NjhiYzI3OTg2ZWFiZDA2MDUxYTdmMjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFg1kQs8j98ktHxuiS2N3ZrgKcHu V8U+vBT+zb3di9XWH7C3dbjPbpGShEm84HPGv+pKPEgBguFmuXD2u4dm3iB+bWA2 j5UU92K9lQ2ZILyXobPLjoUagc6stJb0ef648lN/iq/6sgQSft74u3otkJ8dloLN xvDXd86CbV/zd8xpRpEcEoe42gwWiZ/KA4AlgcxLCzx1ADHvPYnSiW872SgVsuMj MtCjggvjzmm/NQVlkyREQM2R31xr3B7iWh+DqMpv+URh64oa+g2Nq1BAeWKMXb5R aCi4pcWj7FxvMYLLHGGwlpgTneS4T22vQUlJKBMnKoLcY4tKrkKpteFJTwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFH3cG4AZJa43aLwnmG6r0GBRp/IkMB8GA1UdIwQY MBaAFGd9TqLAFs4nl69663N9Eyh1Zp8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80YWVlZTctNDVjMC00MjEzLTgwODUt YjhmM2YwOWVhYWRlLzEvZmR3YmdCa2xyamRvdkNlWWJxdlFZRkduOGlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi80YWVlZTctNDVjMC00MjEzLTgwODUtYjhmM2YwOWVhYWRl LzEvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwaBcMA0E AgACMAcDBQAqDe1AMA0GCSqGSIb3DQEBCwUAA4IBAQAF4JnxVjIOB393Af5mIlSb ZSJeL51FKefqaxl38XicgSdVFyg8SvC/IRzaVuQZne1OWtOuJx/Y19MgeFaH+hKY YfH4Ffx/VvOQf6Poxi5vKtncr/3wdmvUItKUV5fog+vV43VXfTAUI4ORi8am8AwZ nEUj2T8vQL39jNF/jV7WJT91bq3XU9JpBehKcpL50E969Lz6JEyZWMU0BTNdHQsV 3a/RDuifvX/HmHg/hfJEbnO2c5KF+Ps+257FCztZVTU0STxYRal9YJeKXRlbNu7l BtU2qTnVLm4tio/ASco6cLewIGfBO7CDiVZoH50TwXEsmkaAOpXaKCUAllgVNs9N -----END CERTIFICATE-----Generated at Mon Jan 26 16:22:19 2026 by rpki-client