This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/fIIU9k6jVWL_qDJoWSJUVk1b8Ws.roa File: fIIU9k6jVWL_qDJoWSJUVk1b8Ws.roa (raw, json) Hash identifier: T+HPhf6wcVeMFjxWumXwdq4bn9w15XeWNGlJ9X77NUc= Subject key identifier: 7C:82:14:F6:4E:A3:55:62:FF:A8:32:68:59:22:54:56:4D:5B:F1:6B Certificate issuer: /CN=ef7fd5d33061a9de920af1c2a13513d46dd24612 Certificate serial: 019B7E37683BB2A7566A99331D9D26C1B2D0 Authority key identifier: EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/fIIU9k6jVWL_qDJoWSJUVk1b8Ws.roa Signing time: Fri 02 Jan 2026 10:18:38 +0000 ROA not before: Fri 02 Jan 2026 10:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 193.32.244.0/24 maxlen: 24 217.28.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.mft rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:68:3b:b2:a7:56:6a:99:33:1d:9d:26:c1:b2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef7fd5d33061a9de920af1c2a13513d46dd24612 Validity Not Before: Jan 2 10:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c8214f64ea35562ffa83268592254564d5bf16b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:de:92:0d:61:a9:f2:eb:26:89:86:8c:83:a4: 24:38:c4:4e:89:8a:d7:c4:a3:98:48:c6:aa:d5:69: 5f:66:f4:3b:87:fe:a6:55:46:d7:d1:ef:c1:ac:75: 92:a4:cc:b7:b1:2c:80:74:42:7e:2e:99:34:48:49: 57:b1:7e:cd:10:3f:ff:8a:10:62:ab:aa:5e:38:11: 36:f5:78:fd:9e:c5:b0:1b:67:61:0b:67:96:11:1b: ce:3b:19:ac:aa:d8:6f:8a:d3:c9:43:46:5e:ef:9a: df:41:49:36:95:59:88:32:90:b2:66:15:68:70:de: ac:4a:72:43:89:62:d6:a9:f8:b3:e5:9c:75:aa:7c: 10:5d:50:29:98:b0:9c:b9:2a:e0:17:ce:10:75:19: ed:6d:89:22:2c:1c:4f:8b:d3:07:a7:c0:2e:4f:31: ee:3c:2c:a5:a2:e8:0c:95:e2:fc:cc:ec:40:83:21: fb:eb:60:cd:4a:4a:ee:de:07:20:51:ff:54:18:3e: 75:fe:a3:07:14:2b:51:8e:10:25:bb:3d:6b:e2:32: c5:b9:93:c0:dd:81:25:5a:18:1b:c7:50:be:ef:41: 36:01:62:35:ce:8b:5c:ab:f3:5e:01:88:63:de:fe: 19:3e:b9:e0:6e:18:37:82:f4:03:d4:d8:52:f3:da: 1a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:82:14:F6:4E:A3:55:62:FF:A8:32:68:59:22:54:56:4D:5B:F1:6B X509v3 Authority Key Identifier: keyid:EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/fIIU9k6jVWL_qDJoWSJUVk1b8Ws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.32.244.0/24 217.28.163.0/24 Signature Algorithm: sha256WithRSAEncryption 32:02:90:95:ef:93:f8:67:95:40:91:53:c8:ec:5d:e8:e8:19: cd:bc:23:0f:45:22:51:d4:f5:37:e1:77:16:e2:2a:66:5e:61: fa:71:45:44:32:99:e9:42:7a:2a:b6:f4:8d:33:05:94:fc:17: 96:a6:4d:3d:a3:7e:7c:1c:9c:08:d5:23:c3:03:84:2c:69:48: 15:41:7c:63:48:24:bd:6c:f5:64:7e:24:1c:4e:26:e1:07:19: 2e:20:4a:8c:f8:b6:f4:79:5f:bd:e0:a4:ea:76:56:f6:eb:c8: 80:60:40:ee:1e:8c:0d:fb:f2:8a:d7:7b:70:a5:b8:40:72:ee: 02:78:0f:53:d9:32:6f:01:59:40:11:6c:e6:e1:23:49:3b:07: 6d:a1:5e:f4:96:80:0a:60:5c:39:e5:8b:e5:48:f4:c8:3c:07: e7:46:fc:32:ba:7c:9e:00:c4:6a:69:30:40:aa:32:b8:49:6f: 7b:b7:68:b9:41:49:ff:e8:b1:1a:4f:e4:86:2c:9b:33:6f:b0: 13:0a:11:8b:66:29:2b:76:27:66:9d:e4:ba:ac:0c:f5:3b:ac: b3:8e:27:76:0a:09:ec:b7:7f:53:a3:76:01:a3:2c:5f:72:21: 60:bc:ba:f9:33:1d:e4:f5:54:06:14:e6:61:4d:ff:65:33:0a: e3:bb:84:22 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N2g7sqdWapkzHZ0mwbLQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmN2ZkNWQzMzA2MWE5ZGU5MjBhZjFjMmExMzUxM2Q0NmRk MjQ2MTIwHhcNMjYwMTAyMTAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzgyMTRmNjRlYTM1NTYyZmZhODMyNjg1OTIyNTQ1NjRkNWJmMTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyt6SDWGp8usmiYaMg6QkOMROiYrX xKOYSMaq1WlfZvQ7h/6mVUbX0e/BrHWSpMy3sSyAdEJ+Lpk0SElXsX7NED//ihBi q6peOBE29Xj9nsWwG2dhC2eWERvOOxmsqthvitPJQ0Ze75rfQUk2lVmIMpCyZhVo cN6sSnJDiWLWqfiz5Zx1qnwQXVApmLCcuSrgF84QdRntbYkiLBxPi9MHp8AuTzHu PCylougMleL8zOxAgyH762DNSkru3gcgUf9UGD51/qMHFCtRjhAluz1r4jLFuZPA 3YElWhgbx1C+70E2AWI1zotcq/NeAYhj3v4ZPrngbhg3gvQD1NhS89oaZwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHyCFPZOo1Vi/6gyaFkiVFZNW/FrMB8GA1UdIwQY MBaAFO9/1dMwYanekgrxwqE1E9Rt0kYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzNfVjB6QmhxZDZTQ3ZIQ29UVVQxRzNTUmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMzE5MGMtZTFhMC00YmE0LWIxZDgt YTEwMmJlMzgyZTUxLzEvZklJVTlrNmpWV0xfcURKb1dTSlVWazFiOFdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yMzE5MGMtZTFhMC00YmE0LWIxZDgtYTEwMmJlMzgyZTUx LzEvNzNfVjB6QmhxZDZTQ3ZIQ29UVVQxRzNTUmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwSD0AwQA 2RyjMA0GCSqGSIb3DQEBCwUAA4IBAQAyApCV75P4Z5VAkVPI7F3o6BnNvCMPRSJR 1PU34XcW4ipmXmH6cUVEMpnpQnoqtvSNMwWU/BeWpk09o358HJwI1SPDA4QsaUgV QXxjSCS9bPVkfiQcTibhBxkuIEqM+Lb0eV+94KTqdlb268iAYEDuHowN+/KK13tw pbhAcu4CeA9T2TJvAVlAEWzm4SNJOwdtoV70loAKYFw55YvlSPTIPAfnRvwyunye AMRqaTBAqjK4SW97t2i5QUn/6LEaT+SGLJszb7ATChGLZikrdidmneS6rAz1O6yz jid2Cgnst39To3YBoyxfciFgvLr5Mx3k9VQGFOZhTf9lMwrju4Qi -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:08 2026 by rpki-client