This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e06dcf-b520-4b65-9cac-bc61cb1f8610/1/FpyLjfGskJqTECSY4yNSBWazcF8.roa File: FpyLjfGskJqTECSY4yNSBWazcF8.roa (raw, json) Hash identifier: VKZIWRGA4vG8x5TlzX1hh8RiuUOykSQ87donezq9FJw= Subject key identifier: 16:9C:8B:8D:F1:AC:90:9A:93:10:24:98:E3:23:52:05:66:B3:70:5F Certificate issuer: /CN=2a92939e3baffe6ab8d9a7962051d85ce2a368ba Certificate serial: 019C04979923B58E028797560FC13A61279E Authority key identifier: 2A:92:93:9E:3B:AF:FE:6A:B8:D9:A7:96:20:51:D8:5C:E2:A3:68:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpKTnjuv_mq42aeWIFHYXOKjaLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e06dcf-b520-4b65-9cac-bc61cb1f8610/1/FpyLjfGskJqTECSY4yNSBWazcF8.roa Signing time: Wed 28 Jan 2026 12:32:49 +0000 ROA not before: Wed 28 Jan 2026 12:32:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199282 IP address blocks: 193.111.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e06dcf-b520-4b65-9cac-bc61cb1f8610/1/KpKTnjuv_mq42aeWIFHYXOKjaLo.crl rsync://rpki.ripe.net/repository/DEFAULT/44/e06dcf-b520-4b65-9cac-bc61cb1f8610/1/KpKTnjuv_mq42aeWIFHYXOKjaLo.mft rsync://rpki.ripe.net/repository/DEFAULT/KpKTnjuv_mq42aeWIFHYXOKjaLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:97:99:23:b5:8e:02:87:97:56:0f:c1:3a:61:27:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a92939e3baffe6ab8d9a7962051d85ce2a368ba Validity Not Before: Jan 28 12:32:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=169c8b8df1ac909a93102498e323520566b3705f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d6:05:55:24:bc:0a:d8:5e:1b:19:8b:f7:d9: 9d:77:e9:49:09:6b:ea:50:f2:4a:f4:1a:9e:1c:56: 18:be:35:a4:d9:b8:1a:c1:86:37:11:98:54:f2:da: 07:4f:d6:30:0e:5c:9d:c2:9f:93:82:89:7a:f7:24: a3:d9:59:80:9b:b4:69:ee:73:5a:13:a3:0b:d2:ca: ab:c9:a2:a5:83:e5:43:85:8b:4b:9c:20:16:d6:19: b2:80:24:2f:1c:d9:aa:38:bd:b0:49:05:82:70:31: 73:44:53:51:60:c7:53:ac:00:17:a2:98:02:8b:59: 6c:5f:8c:0d:9e:a9:20:44:1e:b3:f9:ad:f1:e9:fc: a3:5a:ad:44:54:af:ef:58:df:da:bd:3c:1d:ef:b9: c2:30:3b:c8:b0:f5:25:9b:5e:f4:6d:72:2a:91:a5: 49:15:9b:13:fb:60:74:c5:ee:ae:df:d5:bf:92:63: c1:55:1f:ae:2c:43:85:7b:b2:bb:2a:65:7f:41:25: ef:6f:93:8e:50:fc:24:95:00:ed:f5:ba:1a:39:2c: 07:03:d7:75:e6:01:b0:0a:6f:83:32:66:c4:c9:8b: 81:c2:78:e8:e9:10:a1:ec:da:77:7b:67:30:e9:c5: de:c5:4c:7b:52:13:aa:14:e0:58:e0:c8:86:3a:44: b7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9C:8B:8D:F1:AC:90:9A:93:10:24:98:E3:23:52:05:66:B3:70:5F X509v3 Authority Key Identifier: keyid:2A:92:93:9E:3B:AF:FE:6A:B8:D9:A7:96:20:51:D8:5C:E2:A3:68:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpKTnjuv_mq42aeWIFHYXOKjaLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e06dcf-b520-4b65-9cac-bc61cb1f8610/1/FpyLjfGskJqTECSY4yNSBWazcF8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e06dcf-b520-4b65-9cac-bc61cb1f8610/1/KpKTnjuv_mq42aeWIFHYXOKjaLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.89.0/24 Signature Algorithm: sha256WithRSAEncryption 11:84:eb:4d:8e:3a:b9:f0:03:b9:7a:13:69:ae:47:72:ad:3a: e8:94:8d:32:ef:c4:e8:01:d2:98:f4:39:52:9b:b5:59:94:e9: c0:8f:11:fd:75:9c:30:16:ff:c5:09:a6:0f:1b:28:af:91:bf: 73:e3:0b:78:40:bf:0a:28:14:9e:df:72:4c:9d:7e:65:b0:96: 39:c6:3d:c5:e8:ab:bc:26:91:0f:24:02:62:a3:ae:f4:80:04: 61:06:4e:9a:43:0a:b8:58:c4:5e:2b:c1:27:67:2e:99:a8:bd: c6:d5:04:31:6c:ea:54:70:9b:ff:a2:7f:92:a1:4c:38:af:05: 84:61:07:cc:3b:59:82:1a:46:1a:1d:3d:c3:ff:12:bf:4a:66: 75:a1:1f:ad:06:0e:b9:92:ae:85:75:5a:ba:4f:17:75:59:38: ae:eb:1d:76:0b:67:bb:fa:69:4b:f8:d8:ac:22:72:dd:8b:ef: 18:e6:7f:f3:78:74:e1:33:8d:8d:1f:53:8c:3e:03:18:ed:e4: 9b:e7:c7:d7:00:45:a3:41:b8:4b:88:a1:e5:e9:97:3b:ed:9b: dd:df:f0:38:9e:df:87:ce:1e:99:82:c8:72:cb:09:1d:3a:03: 1e:e7:ef:ea:d0:bf:a5:c6:69:be:ae:69:a1:c7:6d:0e:7e:8f: 83:b8:1d:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwEl5kjtY4Ch5dWD8E6YSeeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTI5MzllM2JhZmZlNmFiOGQ5YTc5NjIwNTFkODVjZTJh MzY4YmEwHhcNMjYwMTI4MTIzMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjljOGI4ZGYxYWM5MDlhOTMxMDI0OThlMzIzNTIwNTY2YjM3MDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59YFVSS8CtheGxmL99mdd+lJCWvq UPJK9BqeHFYYvjWk2bgawYY3EZhU8toHT9YwDlydwp+Tgol69ySj2VmAm7Rp7nNa E6ML0sqryaKlg+VDhYtLnCAW1hmygCQvHNmqOL2wSQWCcDFzRFNRYMdTrAAXopgC i1lsX4wNnqkgRB6z+a3x6fyjWq1EVK/vWN/avTwd77nCMDvIsPUlm170bXIqkaVJ FZsT+2B0xe6u39W/kmPBVR+uLEOFe7K7KmV/QSXvb5OOUPwklQDt9boaOSwHA9d1 5gGwCm+DMmbEyYuBwnjo6RCh7Np3e2cw6cXexUx7UhOqFOBY4MiGOkS3TQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBaci43xrJCakxAkmOMjUgVms3BfMB8GA1UdIwQY MBaAFCqSk547r/5quNmnliBR2Fzio2i6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3BLVG5qdXZfbXE0MmFlV0lGSFlYT0tqYUxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9lMDZkY2YtYjUyMC00YjY1LTljYWMt YmM2MWNiMWY4NjEwLzEvRnB5TGpmR3NrSnFURUNTWTR5TlNCV2F6Y0Y4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9lMDZkY2YtYjUyMC00YjY1LTljYWMtYmM2MWNiMWY4NjEw LzEvS3BLVG5qdXZfbXE0MmFlV0lGSFlYT0tqYUxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW9ZMA0G CSqGSIb3DQEBCwUAA4IBAQARhOtNjjq58AO5ehNprkdyrTrolI0y78ToAdKY9DlS m7VZlOnAjxH9dZwwFv/FCaYPGyivkb9z4wt4QL8KKBSe33JMnX5lsJY5xj3F6Ku8 JpEPJAJio670gARhBk6aQwq4WMReK8EnZy6ZqL3G1QQxbOpUcJv/on+SoUw4rwWE YQfMO1mCGkYaHT3D/xK/SmZ1oR+tBg65kq6FdVq6Txd1WTiu6x12C2e7+mlL+Nis InLdi+8Y5n/zeHThM42NH1OMPgMY7eSb58fXAEWjQbhLiKHl6Zc77Zvd3/A4nt+H zh6ZgshyywkdOgMe5+/q0L+lxmm+rmmhx20Ofo+DuB2G -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:42 2026 by rpki-client