This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/Fps0S7Sn9x24RbjpA_m-Wjxe4X4.roa File: Fps0S7Sn9x24RbjpA_m-Wjxe4X4.roa (raw, json) Hash identifier: llVgeSirYRMnxHxg+jow3ZLNY2RJpGEBaB4uInwuLpg= Subject key identifier: 16:9B:34:4B:B4:A7:F7:1D:B8:45:B8:E9:03:F9:BE:5A:3C:5E:E1:7E Certificate issuer: /CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6 Certificate serial: 019B7B359AA1DFA04488B7DE94FE2F762671 Authority key identifier: F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/Fps0S7Sn9x24RbjpA_m-Wjxe4X4.roa Signing time: Thu 01 Jan 2026 20:17:49 +0000 ROA not before: Thu 01 Jan 2026 20:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 193.35.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:9a:a1:df:a0:44:88:b7:de:94:fe:2f:76:26:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6 Validity Not Before: Jan 1 20:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=169b344bb4a7f71db845b8e903f9be5a3c5ee17e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cd:8e:c2:3d:38:4a:b3:d4:db:00:3b:87:26: d7:e5:c4:30:9f:79:65:1d:7a:98:d7:f1:e5:47:62: 0c:3a:56:8d:b3:94:d1:1e:58:94:e7:db:03:80:08: 42:cf:dd:81:65:4f:93:8e:0e:02:44:04:03:d2:d1: 68:25:e9:a0:74:20:89:21:35:9a:79:8c:32:04:d5: 96:d2:0f:53:52:27:03:aa:8f:47:56:67:41:2e:b4: 37:6e:7b:d5:71:c7:e5:33:1a:a2:18:f9:86:17:69: 43:83:91:87:7f:a8:e6:59:f7:71:24:70:bc:94:07: 32:51:1e:c7:53:fd:2c:c5:d3:92:3d:72:f5:19:1d: 85:5c:89:4d:60:db:79:26:ed:29:1d:77:ec:d3:73: c8:4c:41:1b:35:ed:23:7f:56:03:76:2b:39:f2:a1: c0:37:74:b6:15:85:02:4f:59:84:bb:b7:0f:22:34: eb:01:30:80:34:cd:ec:6e:7d:1d:d2:27:31:92:d0: ce:10:eb:01:4e:01:85:60:da:9a:62:31:51:3f:e7: 52:32:94:cb:9b:56:a8:ef:c7:dc:8a:cf:b5:a3:f0: 4b:34:d8:8a:a8:43:cd:00:a1:45:ab:5e:cd:e8:dd: 4c:df:6b:83:0d:88:f5:60:f7:ee:06:85:97:4a:3b: 30:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9B:34:4B:B4:A7:F7:1D:B8:45:B8:E9:03:F9:BE:5A:3C:5E:E1:7E X509v3 Authority Key Identifier: keyid:F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/Fps0S7Sn9x24RbjpA_m-Wjxe4X4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.35.157.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:4d:2f:ac:78:93:38:44:92:b6:e2:a2:56:b9:a0:f2:5a:74: 73:15:a5:c9:bd:81:30:94:6e:8e:fb:2e:f6:43:66:7e:1e:4e: 5a:b2:c7:23:8e:42:c7:04:d2:72:84:01:a8:d8:6a:ee:e8:7a: a6:d9:46:ad:49:87:9f:9d:94:d7:7d:60:dd:ce:b5:86:57:41: 6b:19:d5:80:3b:72:63:0e:61:9d:0f:75:ae:de:6c:ee:58:61: 43:98:27:c0:78:2f:e5:73:06:76:9e:e5:15:59:32:6a:89:9f: 49:9f:93:18:0a:5b:3f:f7:45:32:a5:4f:7c:eb:47:20:fb:6d: a2:2a:44:98:5f:6f:69:ce:df:7a:41:fd:87:e0:d2:4b:c8:7c: a5:7f:a1:62:fb:99:a2:1d:e6:6e:75:f8:5d:e4:77:4c:00:2c: 60:7c:6f:ee:c0:ec:aa:5e:01:1b:85:ce:91:7f:b6:74:e6:1b: c8:3d:2c:4a:62:b5:9f:d8:e5:e3:c7:bb:d5:28:c0:23:b7:a9: c4:0e:a0:ec:67:bf:7d:a9:7b:c4:72:9b:5d:cd:5d:1c:56:67: c9:64:3c:86:f2:a2:19:ba:24:8b:77:b4:6d:cc:60:0d:fe:49: 9a:fb:0c:f2:db:18:66:ad:f9:41:51:ec:0f:6f:83:98:00:6d: b0:23:b0:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NZqh36BEiLfelP4vdiZxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2Mzg5NDdkZGI4OTJmNWYzYTQ4YTY5YWY5N2E4ZmI1MjEw M2EwZDYwHhcNMjYwMTAxMjAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjliMzQ0YmI0YTdmNzFkYjg0NWI4ZTkwM2Y5YmU1YTNjNWVlMTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc2Owj04SrPU2wA7hybX5cQwn3ll HXqY1/HlR2IMOlaNs5TRHliU59sDgAhCz92BZU+Tjg4CRAQD0tFoJemgdCCJITWa eYwyBNWW0g9TUicDqo9HVmdBLrQ3bnvVccflMxqiGPmGF2lDg5GHf6jmWfdxJHC8 lAcyUR7HU/0sxdOSPXL1GR2FXIlNYNt5Ju0pHXfs03PITEEbNe0jf1YDdis58qHA N3S2FYUCT1mEu7cPIjTrATCANM3sbn0d0icxktDOEOsBTgGFYNqaYjFRP+dSMpTL m1ao78fcis+1o/BLNNiKqEPNAKFFq17N6N1M32uDDYj1YPfuBoWXSjswuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBabNEu0p/cduEW46QP5vlo8XuF+MB8GA1UdIwQY MBaAFPY4lH3biS9fOkimmvl6j7UhA6DWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWppVWZkdUpMMTg2U0thYS1YcVB0U0VEb05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8yODliOGQtNzhkZS00MTYwLTkwZDMt NjFkMjY2MDNjMzdjLzEvRnBzMFM3U245eDI0UmJqcEFfbS1XanhlNFg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8yODliOGQtNzhkZS00MTYwLTkwZDMtNjFkMjY2MDNjMzdj LzEvOWppVWZkdUpMMTg2U0thYS1YcVB0U0VEb05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSOdMA0G CSqGSIb3DQEBCwUAA4IBAQAeTS+seJM4RJK24qJWuaDyWnRzFaXJvYEwlG6O+y72 Q2Z+Hk5asscjjkLHBNJyhAGo2Gru6Hqm2UatSYefnZTXfWDdzrWGV0FrGdWAO3Jj DmGdD3Wu3mzuWGFDmCfAeC/lcwZ2nuUVWTJqiZ9Jn5MYCls/90UypU9860cg+22i KkSYX29pzt96Qf2H4NJLyHylf6Fi+5miHeZudfhd5HdMACxgfG/uwOyqXgEbhc6R f7Z05hvIPSxKYrWf2OXjx7vVKMAjt6nEDqDsZ799qXvEcptdzV0cVmfJZDyG8qIZ uiSLd7RtzGAN/kma+wzy2xhmrflBUewPb4OYAG2wI7CF -----END CERTIFICATE-----Generated at Fri Jan 2 16:06:35 2026 by rpki-client