This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/fC4IphJDgaxk1ozoGhU8BmcLrhg.roa File: fC4IphJDgaxk1ozoGhU8BmcLrhg.roa (raw, json) Hash identifier: N7XoWkcB3kC5IT0irHQ74vIvhnjeo/y052R9T7FnOyU= Subject key identifier: 7C:2E:08:A6:12:43:81:AC:64:D6:8C:E8:1A:15:3C:06:67:0B:AE:18 Certificate issuer: /CN=af48f67f53fce9891d41593ac84cae304abfcbcf Certificate serial: 019B7C123409671DBD236A4608421E6C4998 Authority key identifier: AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/fC4IphJDgaxk1ozoGhU8BmcLrhg.roa Signing time: Fri 02 Jan 2026 00:18:46 +0000 ROA not before: Fri 02 Jan 2026 00:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202796 IP address blocks: 193.169.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:34:09:67:1d:bd:23:6a:46:08:42:1e:6c:49:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af48f67f53fce9891d41593ac84cae304abfcbcf Validity Not Before: Jan 2 00:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c2e08a6124381ac64d68ce81a153c06670bae18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:62:20:93:62:0e:cd:bc:30:e3:b9:c3:83:5f: 33:75:0d:db:cb:85:43:02:43:7b:3d:03:14:32:65: 8f:ce:a5:f2:b4:43:6a:53:df:12:21:23:b6:f8:27: 70:ee:2c:e5:17:a4:b2:e2:70:b9:ef:34:6c:a4:0c: 54:bb:60:0c:56:c5:72:0b:46:6a:f7:15:aa:12:dc: 2b:c0:38:4c:1c:12:36:af:82:3e:62:a2:44:af:67: 0f:ad:91:1d:44:94:02:61:7b:ec:c0:b5:3f:21:1a: 74:a2:1d:5a:64:83:b8:38:38:64:09:e5:48:0f:73: 63:e3:71:76:c0:65:30:f2:3d:f1:6b:37:eb:3b:50: 36:c7:ee:9e:e8:e0:e5:f1:af:d7:68:6e:2f:a0:0b: 61:94:d5:ad:d2:5e:8f:72:57:06:6f:3a:78:3e:63: 53:a8:c2:03:d5:4b:eb:d2:65:49:ae:ed:65:80:e8: 2c:21:bf:fe:99:b0:a8:85:99:83:67:15:38:f4:87: af:0a:a9:aa:6b:db:21:1b:16:8f:2c:3e:a2:0b:d4: f1:72:76:16:6f:34:0f:05:13:39:d6:10:46:97:24: ed:f5:f0:42:1b:1b:5f:6f:e6:5e:a5:f0:27:a6:4d: a0:27:23:aa:22:0d:ff:e3:70:04:13:17:8d:e3:68: 9c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:2E:08:A6:12:43:81:AC:64:D6:8C:E8:1A:15:3C:06:67:0B:AE:18 X509v3 Authority Key Identifier: keyid:AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/fC4IphJDgaxk1ozoGhU8BmcLrhg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.169.171.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:c9:ff:72:eb:b8:9b:3f:df:44:d5:5a:5c:7e:8d:49:58:a1: aa:0c:18:d2:29:18:21:3f:7d:75:23:63:17:94:f4:f7:1b:24: 6f:11:ba:c5:3b:d9:74:9b:a8:0f:cc:db:82:69:26:60:b6:f4: 41:91:0e:f3:c2:4e:b2:79:a9:a1:3f:51:88:be:16:90:9c:99: d4:a1:50:ca:99:a6:56:28:e8:69:c4:3e:ab:ed:13:e9:43:bd: ab:67:c9:ba:c8:05:3b:74:6d:43:fc:a5:53:ed:cd:ed:16:96: d2:4a:98:a0:1c:b6:f8:a6:ef:c4:38:6e:70:25:18:83:da:4d: 05:ce:e0:c5:65:aa:5d:45:8d:21:c1:80:7b:58:be:a0:85:ba: 9e:71:05:ef:c1:44:c7:6c:fb:ab:d0:cd:77:59:7f:70:16:11: c9:ea:cc:be:83:7e:db:ff:b6:49:af:03:94:d3:93:5e:e4:ec: 39:e1:7b:75:4a:9a:de:69:31:7b:69:40:29:d9:69:d7:4a:18: 2a:97:cd:46:c3:5d:53:6a:de:f9:74:a9:0b:cb:e7:51:fc:cd: ba:11:8e:d8:ad:c2:38:27:dc:47:3f:4d:e0:e2:bf:7a:d2:b8: 7b:b1:ff:b7:63:a4:b7:ae:30:83:ca:d6:ad:b1:2a:c0:2a:07: dd:7a:64:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EjQJZx29I2pGCEIebEmYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNDhmNjdmNTNmY2U5ODkxZDQxNTkzYWM4NGNhZTMwNGFi ZmNiY2YwHhcNMjYwMTAyMDAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzJlMDhhNjEyNDM4MWFjNjRkNjhjZTgxYTE1M2MwNjY3MGJhZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGIgk2IOzbww47nDg18zdQ3by4VD AkN7PQMUMmWPzqXytENqU98SISO2+Cdw7izlF6Sy4nC57zRspAxUu2AMVsVyC0Zq 9xWqEtwrwDhMHBI2r4I+YqJEr2cPrZEdRJQCYXvswLU/IRp0oh1aZIO4ODhkCeVI D3Nj43F2wGUw8j3xazfrO1A2x+6e6ODl8a/XaG4voAthlNWt0l6PclcGbzp4PmNT qMID1Uvr0mVJru1lgOgsIb/+mbCohZmDZxU49IevCqmqa9shGxaPLD6iC9TxcnYW bzQPBRM51hBGlyTt9fBCGxtfb+ZepfAnpk2gJyOqIg3/43AEExeN42icDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHwuCKYSQ4GsZNaM6BoVPAZnC64YMB8GA1UdIwQY MBaAFK9I9n9T/OmJHUFZOshMrjBKv8vPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjBqMmYxUDg2WWtkUVZrNnlFeXVNRXFfeTg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lMTU0NWItZmM1Mi00NGMwLThmNTct Mjg4NGRkODI0OGQ2LzEvZkM0SXBoSkRnYXhrMW96b0doVThCbWNMcmhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9lMTU0NWItZmM1Mi00NGMwLThmNTctMjg4NGRkODI0OGQ2 LzEvcjBqMmYxUDg2WWtkUVZrNnlFeXVNRXFfeTg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwamrMA0G CSqGSIb3DQEBCwUAA4IBAQCPyf9y67ibP99E1Vpcfo1JWKGqDBjSKRghP311I2MX lPT3GyRvEbrFO9l0m6gPzNuCaSZgtvRBkQ7zwk6yeamhP1GIvhaQnJnUoVDKmaZW KOhpxD6r7RPpQ72rZ8m6yAU7dG1D/KVT7c3tFpbSSpigHLb4pu/EOG5wJRiD2k0F zuDFZapdRY0hwYB7WL6ghbqecQXvwUTHbPur0M13WX9wFhHJ6sy+g37b/7ZJrwOU 05Ne5Ow54Xt1SpreaTF7aUAp2WnXShgql81Gw11Tat75dKkLy+dR/M26EY7YrcI4 J9xHP03g4r960rh7sf+3Y6S3rjCDytatsSrAKgfdemQa -----END CERTIFICATE-----Generated at Tue Feb 10 07:12:50 2026 by rpki-client