This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/fpHmAafjOGhBaMS1gbhoimd-T64.roa File: fpHmAafjOGhBaMS1gbhoimd-T64.roa (raw, json) Hash identifier: tNORG3Af35zgXnyNJfcnl9XFHgufLnvK+eM/0nmyONM= Subject key identifier: 7E:91:E6:01:A7:E3:38:68:41:68:C4:B5:81:B8:68:8A:67:7E:4F:AE Certificate issuer: /CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e Certificate serial: 019B78A37B398CC48B4F4E386D148B5E72B1 Authority key identifier: 41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/fpHmAafjOGhBaMS1gbhoimd-T64.roa Signing time: Thu 01 Jan 2026 08:18:58 +0000 ROA not before: Thu 01 Jan 2026 08:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34253 IP address blocks: 194.242.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7b:39:8c:c4:8b:4f:4e:38:6d:14:8b:5e:72:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e Validity Not Before: Jan 1 08:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e91e601a7e338684168c4b581b8688a677e4fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:72:42:0a:d7:28:8c:71:2a:b5:d5:a7:56:df: 48:da:c6:db:e6:f6:3a:a5:d3:84:af:68:49:70:81: a3:5c:74:e0:23:ee:28:bf:f7:b8:4e:b2:96:36:7b: 64:31:ca:30:2a:47:cf:6d:11:0c:4e:e8:e8:5f:6b: 58:cc:94:00:1d:42:90:8a:aa:b5:41:1a:23:c5:30: 01:9e:9f:b1:f9:47:2f:b3:b1:f6:03:e1:21:fb:a1: d9:74:e3:1a:ad:2d:ff:37:8d:12:07:43:a3:11:25: 2d:9b:bf:e4:f2:37:bc:5e:d4:37:9b:28:f6:b9:2a: 11:37:a4:33:9c:03:9e:79:82:cd:fd:1b:af:ca:91: e4:c3:30:fc:50:4a:bf:be:23:76:e9:89:56:58:f3: 03:bd:4d:ae:4d:50:c7:7e:6e:3f:ac:fa:5a:28:1b: 9a:43:40:06:14:27:20:7c:5e:b9:9e:f7:67:ba:a6: 27:be:ca:75:11:41:40:03:74:77:8d:aa:4b:e3:e8: 4d:28:f6:a2:15:00:e6:76:0f:ec:c3:b5:3e:e6:77: 0b:ea:94:df:2d:c9:cb:42:a5:a3:ac:1f:1b:e8:08: e8:0c:7a:88:e4:3d:c9:7c:c0:f8:0d:3c:54:14:08: c7:68:f1:91:f2:eb:47:d4:53:9d:52:92:8f:28:22: 19:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:91:E6:01:A7:E3:38:68:41:68:C4:B5:81:B8:68:8A:67:7E:4F:AE X509v3 Authority Key Identifier: keyid:41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/fpHmAafjOGhBaMS1gbhoimd-T64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.242.55.0/24 Signature Algorithm: sha256WithRSAEncryption 53:81:e1:d5:5d:bd:30:95:6a:ce:34:e2:5f:29:67:28:b8:fa: d0:eb:02:e7:67:65:90:fb:99:07:c5:e8:ec:40:08:3f:72:ba: e1:f4:60:db:b9:c9:12:8f:c5:f9:b7:67:9d:7a:cb:cb:d9:f7: d0:86:c2:a2:aa:e8:1e:d3:f4:c9:40:2b:86:a3:a1:b8:0d:c0: e5:b7:10:89:c6:d5:7b:2f:8b:73:5a:24:73:a9:8f:28:34:27: 03:48:6d:43:41:81:e7:3f:fe:f3:9f:1f:7a:34:5e:bb:bd:46: 42:62:8b:7d:d7:dc:26:df:a3:ee:4c:3b:d5:94:a5:e0:24:77: c0:01:68:ac:b9:65:23:8c:81:96:09:7e:e7:11:43:ea:b1:04: 7b:38:67:5f:39:3b:65:a9:51:b7:12:47:b9:0c:cc:78:b2:d0: fa:71:42:2b:74:fc:af:6a:65:5a:3f:c3:58:fd:bb:eb:40:dc: 82:b3:81:d4:aa:2c:35:eb:c3:b0:d6:0c:95:7b:23:0b:91:d7: 06:39:98:a4:61:4a:60:3d:d2:20:34:fd:63:b4:24:63:c9:f7: ee:85:cf:82:27:e2:70:d1:a3:19:59:d3:c0:94:ab:66:3b:c6: 28:4e:a4:a4:b4:40:1b:01:01:a2:21:5a:1c:dd:84:2f:bf:18: bc:df:fb:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o3s5jMSLT044bRSLXnKxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZDBmOTE1Yzk1NGQ4M2I0YTFiZjE4NGNmYmMxMzhjNDdl ZGE1MWUwHhcNMjYwMTAxMDgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTkxZTYwMWE3ZTMzODY4NDE2OGM0YjU4MWI4Njg4YTY3N2U0ZmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3JCCtcojHEqtdWnVt9I2sbb5vY6 pdOEr2hJcIGjXHTgI+4ov/e4TrKWNntkMcowKkfPbREMTujoX2tYzJQAHUKQiqq1 QRojxTABnp+x+Ucvs7H2A+Eh+6HZdOMarS3/N40SB0OjESUtm7/k8je8XtQ3myj2 uSoRN6QznAOeeYLN/RuvypHkwzD8UEq/viN26YlWWPMDvU2uTVDHfm4/rPpaKBua Q0AGFCcgfF65nvdnuqYnvsp1EUFAA3R3japL4+hNKPaiFQDmdg/sw7U+5ncL6pTf LcnLQqWjrB8b6AjoDHqI5D3JfMD4DTxUFAjHaPGR8utH1FOdUpKPKCIZXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH6R5gGn4zhoQWjEtYG4aIpnfk+uMB8GA1UdIwQY MBaAFEHQ+RXJVNg7ShvxhM+8E4xH7aUeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWRENUZjbFUyRHRLR19HRXo3d1RqRWZ0cFI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82NjYwM2QtM2NiNC00NzMwLWI4OWMt ZWU1MDBjM2ViODE5LzEvZnBIbUFhZmpPR2hCYU1TMWdiaG9pbWQtVDY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC82NjYwM2QtM2NiNC00NzMwLWI4OWMtZWU1MDBjM2ViODE5 LzEvUWRENUZjbFUyRHRLR19HRXo3d1RqRWZ0cFI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwvI3MA0G CSqGSIb3DQEBCwUAA4IBAQBTgeHVXb0wlWrONOJfKWcouPrQ6wLnZ2WQ+5kHxejs QAg/crrh9GDbuckSj8X5t2edesvL2ffQhsKiquge0/TJQCuGo6G4DcDltxCJxtV7 L4tzWiRzqY8oNCcDSG1DQYHnP/7znx96NF67vUZCYot919wm36PuTDvVlKXgJHfA AWisuWUjjIGWCX7nEUPqsQR7OGdfOTtlqVG3Eke5DMx4stD6cUIrdPyvamVaP8NY /bvrQNyCs4HUqiw168Ow1gyVeyMLkdcGOZikYUpgPdIgNP1jtCRjyffuhc+CJ+Jw 0aMZWdPAlKtmO8YoTqSktEAbAQGiIVoc3YQvvxi83/sN -----END CERTIFICATE-----Generated at Tue Feb 10 06:23:34 2026 by rpki-client