This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/FB6XhAljb_Cq4OzW1NxhRMI8uX8.roa File: FB6XhAljb_Cq4OzW1NxhRMI8uX8.roa (raw, json) Hash identifier: oRoqHHkjJ5NsUTcwkAs7nSs4mia9Uv979j7dFZIGR9Y= Subject key identifier: 14:1E:97:84:09:63:6F:F0:AA:E0:EC:D6:D4:DC:61:44:C2:3C:B9:7F Certificate issuer: /CN=bdf960b0ee6bc5d0f6a0c64a69f2f86259fdcd58 Certificate serial: 019B7C7F910E9E96014769A1DF5E25D12A70 Authority key identifier: BD:F9:60:B0:EE:6B:C5:D0:F6:A0:C6:4A:69:F2:F8:62:59:FD:CD:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vflgsO5rxdD2oMZKafL4Yln9zVg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/FB6XhAljb_Cq4OzW1NxhRMI8uX8.roa Signing time: Fri 02 Jan 2026 02:18:13 +0000 ROA not before: Fri 02 Jan 2026 02:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49369 IP address blocks: 193.169.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.mft rsync://rpki.ripe.net/repository/DEFAULT/vflgsO5rxdD2oMZKafL4Yln9zVg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:91:0e:9e:96:01:47:69:a1:df:5e:25:d1:2a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdf960b0ee6bc5d0f6a0c64a69f2f86259fdcd58 Validity Not Before: Jan 2 02:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=141e978409636ff0aae0ecd6d4dc6144c23cb97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e3:8c:ca:98:51:df:2a:70:8e:88:07:f3:15: 8c:37:43:3d:d0:b0:47:da:fc:c0:44:12:7e:02:54: c3:a5:33:ef:a8:26:b6:e7:5e:6b:2a:11:2e:c7:2d: 54:f3:1f:15:a3:e5:cb:b0:7b:e3:64:74:9a:a0:da: b5:68:2e:70:09:9c:02:b1:09:18:12:b6:f0:4b:7b: 0a:0a:d6:7e:00:bf:73:23:20:7e:71:bb:87:e1:23: bf:30:d2:07:32:39:f0:41:09:93:18:53:6f:cb:1c: 50:4a:32:24:e1:a4:fc:95:45:3d:3c:a3:eb:32:c0: 0e:b8:d8:39:f9:51:c7:41:bd:7b:f2:ad:34:f5:8c: 4b:7c:5b:96:86:81:7c:d0:ea:9f:ea:86:5a:e1:a7: e3:2b:b7:a6:1f:89:43:49:6d:ff:95:61:ad:fd:e4: 16:65:61:f2:10:be:36:43:4d:34:01:bf:b3:fc:ca: 50:fa:6d:20:06:0a:96:78:6f:24:6f:cc:bc:25:dd: 2d:33:b1:87:21:23:a8:4c:53:05:f0:40:a3:38:ca: 9c:d7:7c:be:68:81:83:73:d2:8d:2a:31:76:e2:43: b4:96:5d:47:88:0a:6b:38:be:52:7e:2d:af:62:a4: 9a:0b:30:7c:cc:29:f3:85:72:03:3f:79:55:bc:d9: 2b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1E:97:84:09:63:6F:F0:AA:E0:EC:D6:D4:DC:61:44:C2:3C:B9:7F X509v3 Authority Key Identifier: keyid:BD:F9:60:B0:EE:6B:C5:D0:F6:A0:C6:4A:69:F2:F8:62:59:FD:CD:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vflgsO5rxdD2oMZKafL4Yln9zVg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/FB6XhAljb_Cq4OzW1NxhRMI8uX8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.169.34.0/23 Signature Algorithm: sha256WithRSAEncryption 68:a1:41:9d:3a:98:2b:23:59:70:07:1a:1b:71:e9:df:b0:0c: 4d:ba:36:5e:d4:76:55:c0:15:ca:fd:9a:8b:7a:45:ed:31:c4: 2b:d3:ef:a7:25:15:2a:43:1a:36:c6:56:45:f3:04:56:15:15: b0:44:cc:09:a9:88:03:b0:3f:cb:7a:07:71:29:a6:16:b3:28: 6f:62:fe:28:ce:af:d5:c9:9e:08:94:07:44:48:6f:1a:c0:f6: c3:e8:dd:c5:71:71:37:8b:a6:32:43:43:72:b6:f2:2f:99:66: 16:ae:4d:ca:b2:ec:50:d2:ad:5e:37:36:fd:b5:16:e3:32:e3: da:69:4e:fa:f5:30:b8:c6:e5:cc:12:78:1e:ef:bf:6b:41:51: 93:37:fd:37:ca:9e:a8:d9:ed:82:80:c0:7e:df:f0:43:f4:df: ed:0b:33:b7:d2:3e:c3:21:8f:09:ff:9c:ee:16:d0:59:1e:7f: c4:3b:b4:82:d1:0c:6a:0e:4a:54:bf:f5:1e:ab:3a:f8:b4:56: 39:54:50:1e:1a:64:42:8f:00:1f:bd:fe:7b:1d:fa:d7:90:fe: 41:ca:62:38:d1:b8:06:78:12:2f:c2:a6:dc:ab:40:f0:35:a2: 8b:49:83:3b:e4:8b:99:65:d7:a0:a1:db:2b:ed:88:19:02:01: 89:a0:48:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f5EOnpYBR2mh314l0SpwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZjk2MGIwZWU2YmM1ZDBmNmEwYzY0YTY5ZjJmODYyNTlm ZGNkNTgwHhcNMjYwMTAyMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDFlOTc4NDA5NjM2ZmYwYWFlMGVjZDZkNGRjNjE0NGMyM2NiOTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+OMyphR3ypwjogH8xWMN0M90LBH 2vzARBJ+AlTDpTPvqCa2515rKhEuxy1U8x8Vo+XLsHvjZHSaoNq1aC5wCZwCsQkY ErbwS3sKCtZ+AL9zIyB+cbuH4SO/MNIHMjnwQQmTGFNvyxxQSjIk4aT8lUU9PKPr MsAOuNg5+VHHQb178q009YxLfFuWhoF80Oqf6oZa4afjK7emH4lDSW3/lWGt/eQW ZWHyEL42Q000Ab+z/MpQ+m0gBgqWeG8kb8y8Jd0tM7GHISOoTFMF8ECjOMqc13y+ aIGDc9KNKjF24kO0ll1HiAprOL5Sfi2vYqSaCzB8zCnzhXIDP3lVvNkrrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBQel4QJY2/wquDs1tTcYUTCPLl/MB8GA1UdIwQY MBaAFL35YLDua8XQ9qDGSmny+GJZ/c1YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZsZ3NPNXJ4ZEQyb01aS2FmTDRZbG45elZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zMzY4NGEtMTJjMi00MjNhLWJkM2Et M2RkZmZkZWI5MjA3LzEvRkI2WGhBbGpiX0NxNE96VzFOeGhSTUk4dVg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8zMzY4NGEtMTJjMi00MjNhLWJkM2EtM2RkZmZkZWI5MjA3 LzEvdmZsZ3NPNXJ4ZEQyb01aS2FmTDRZbG45elZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwakiMA0G CSqGSIb3DQEBCwUAA4IBAQBooUGdOpgrI1lwBxobcenfsAxNujZe1HZVwBXK/ZqL ekXtMcQr0++nJRUqQxo2xlZF8wRWFRWwRMwJqYgDsD/LegdxKaYWsyhvYv4ozq/V yZ4IlAdESG8awPbD6N3FcXE3i6YyQ0NytvIvmWYWrk3KsuxQ0q1eNzb9tRbjMuPa aU769TC4xuXMEnge779rQVGTN/03yp6o2e2CgMB+3/BD9N/tCzO30j7DIY8J/5zu FtBZHn/EO7SC0QxqDkpUv/Ueqzr4tFY5VFAeGmRCjwAfvf57HfrXkP5BymI40bgG eBIvwqbcq0DwNaKLSYM75IuZZdegodsr7YgZAgGJoEg9 -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:01 2026 by rpki-client