This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FnDHuqmwD7hXrnHAI_ZtWK46ldk.roa File: FnDHuqmwD7hXrnHAI_ZtWK46ldk.roa (raw, json) Hash identifier: +ddn+GVFgrAGOJpqZ6VfTv7pzmRwE2UUnWC/E9bnHIE= Subject key identifier: 16:70:C7:BA:A9:B0:0F:B8:57:AE:71:C0:23:F6:6D:58:AE:3A:95:D9 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797E08FC08ADE0261DA4EB853FF5B05D Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FnDHuqmwD7hXrnHAI_ZtWK46ldk.roa Signing time: Thu 01 Jan 2026 12:17:41 +0000 ROA not before: Thu 01 Jan 2026 12:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214798 IP address blocks: 194.135.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:08:fc:08:ad:e0:26:1d:a4:eb:85:3f:f5:b0:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1670c7baa9b00fb857ae71c023f66d58ae3a95d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:99:21:7a:9f:dd:60:ee:d8:8c:4a:82:f8:34: 21:6e:72:dc:89:93:b9:9e:29:e3:bd:5a:0c:7d:38: 2c:ab:b4:3a:ed:ff:b5:b4:aa:4c:05:91:48:97:2c: b3:20:b2:d2:5c:bd:c1:c9:db:ae:c7:f0:71:29:22: 08:44:78:00:57:e4:1a:fe:e9:ef:13:32:5f:7e:bc: 47:4b:88:cc:4f:84:af:58:7a:aa:1b:24:15:90:6e: 53:a0:40:e5:90:eb:2e:34:8a:e5:63:41:d9:e1:a0: 48:d2:81:f9:74:c7:77:8d:f6:bb:16:f6:89:39:93: 28:76:1d:5c:f4:30:ca:d8:05:13:11:0c:ca:73:9b: 59:f0:32:fb:d6:d3:07:fe:e0:b8:7a:81:6f:f8:7f: 07:4c:aa:f5:f1:5a:b4:97:71:d3:c8:9d:d0:41:93: 69:95:b3:b0:ba:4a:73:3a:9e:01:c6:89:c1:4b:1f: 6f:28:38:90:cc:50:65:26:ab:85:06:c1:87:8d:42: 7e:1c:ff:13:fb:93:cd:87:bc:d0:0f:8d:42:07:c9: 1a:ef:64:6b:8a:12:a5:72:66:93:09:73:13:74:d1: eb:c1:b4:40:42:c2:51:fe:b2:88:59:cd:a6:5f:07: 5b:ca:3b:29:7f:55:9d:d0:d2:0e:ae:b7:0b:a2:33: 42:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:70:C7:BA:A9:B0:0F:B8:57:AE:71:C0:23:F6:6D:58:AE:3A:95:D9 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FnDHuqmwD7hXrnHAI_ZtWK46ldk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.135.46.0/24 Signature Algorithm: sha256WithRSAEncryption 32:e8:b7:54:05:bf:45:f9:9c:49:c2:9e:dc:58:af:79:6a:67: bb:db:30:f1:43:60:51:3d:ca:62:97:e7:e9:59:c8:6d:76:da: e7:2b:7d:8a:1a:a6:e4:8e:0c:ef:c0:e1:1c:c0:7e:9d:67:6d: 52:77:ee:54:d7:f0:de:f2:bb:82:d4:ba:fe:b1:e2:38:82:be: b4:22:4e:9a:6e:84:ed:c0:ef:59:fd:06:91:3c:3c:50:30:d8: 1c:0b:85:b8:da:fe:78:ee:b0:aa:9b:0c:0d:0b:d1:41:85:0e: 26:57:a5:06:e3:ee:74:f4:e8:10:3e:2d:a3:44:d6:58:dc:95: a1:a5:e4:e8:26:3c:05:a6:dc:9f:e1:f6:6f:09:de:a9:c8:da: f4:39:22:a7:7c:70:68:22:63:84:7b:77:1e:63:c0:c2:bc:da: 57:e5:c1:02:c4:df:c7:60:29:f4:ad:68:11:15:85:23:d8:9a: 74:30:fb:d2:96:cc:dd:eb:ac:9f:3c:c0:42:81:69:d1:44:33: fd:07:38:59:cc:06:d1:81:30:f5:8d:46:ef:66:28:ae:45:bf: 67:95:e4:b1:07:8e:9d:9e:f1:63:db:4f:6a:68:2d:94:57:94: ed:2b:f8:64:c9:88:66:db:8b:45:7d:1a:90:63:7f:bb:0c:7c: 4b:ab:92:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fgj8CK3gJh2k64U/9bBdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjcwYzdiYWE5YjAwZmI4NTdhZTcxYzAyM2Y2NmQ1OGFlM2E5NWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZkhep/dYO7YjEqC+DQhbnLciZO5 ninjvVoMfTgsq7Q67f+1tKpMBZFIlyyzILLSXL3Byduux/BxKSIIRHgAV+Qa/unv EzJffrxHS4jMT4SvWHqqGyQVkG5ToEDlkOsuNIrlY0HZ4aBI0oH5dMd3jfa7FvaJ OZModh1c9DDK2AUTEQzKc5tZ8DL71tMH/uC4eoFv+H8HTKr18Vq0l3HTyJ3QQZNp lbOwukpzOp4BxonBSx9vKDiQzFBlJquFBsGHjUJ+HP8T+5PNh7zQD41CB8ka72Rr ihKlcmaTCXMTdNHrwbRAQsJR/rKIWc2mXwdbyjspf1Wd0NIOrrcLojNC/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBZwx7qpsA+4V65xwCP2bViuOpXZMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvRm5ESHVxbXdEN2hYcm5IQUlfWnRXSzQ2bGRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwocuMA0G CSqGSIb3DQEBCwUAA4IBAQAy6LdUBb9F+ZxJwp7cWK95ame72zDxQ2BRPcpil+fp WchtdtrnK32KGqbkjgzvwOEcwH6dZ21Sd+5U1/De8ruC1Lr+seI4gr60Ik6aboTt wO9Z/QaRPDxQMNgcC4W42v547rCqmwwNC9FBhQ4mV6UG4+509OgQPi2jRNZY3JWh peToJjwFptyf4fZvCd6pyNr0OSKnfHBoImOEe3ceY8DCvNpX5cECxN/HYCn0rWgR FYUj2Jp0MPvSlszd66yfPMBCgWnRRDP9BzhZzAbRgTD1jUbvZiiuRb9nleSxB46d nvFj209qaC2UV5TtK/hkyYhm24tFfRqQY3+7DHxLq5Ks -----END CERTIFICATE-----Generated at Mon Jan 19 14:38:56 2026 by rpki-client