This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/F6K0AMhDCsB1GOhZwP1LAvBxn-U.roa File: F6K0AMhDCsB1GOhZwP1LAvBxn-U.roa (raw, json) Hash identifier: 1fDwwlAjSpOtIIFVkTnVEbqYyBXnYG415TFYdUrUKtg= Subject key identifier: 17:A2:B4:00:C8:43:0A:C0:75:18:E8:59:C0:FD:4B:02:F0:71:9F:E5 Certificate issuer: /CN=cfe0df82121438271c913c24ff50fd3b62d40dc6 Certificate serial: 019A95D9E93C5696E5B3F91F75FD469C3678 Authority key identifier: CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/F6K0AMhDCsB1GOhZwP1LAvBxn-U.roa Signing time: Tue 18 Nov 2025 07:24:37 +0000 ROA not before: Tue 18 Nov 2025 07:24:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59807 IP address blocks: 193.40.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:95:d9:e9:3c:56:96:e5:b3:f9:1f:75:fd:46:9c:36:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfe0df82121438271c913c24ff50fd3b62d40dc6 Validity Not Before: Nov 18 07:24:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=17a2b400c8430ac07518e859c0fd4b02f0719fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:32:88:e4:64:38:b4:bf:99:31:f6:f0:68:94: 84:25:40:35:3e:e5:b2:1c:b8:88:68:dc:2f:d3:4c: 18:d3:9b:a0:dd:1d:0f:48:b3:de:88:74:0d:9b:32: 08:92:29:a9:7f:12:08:42:8b:70:e9:62:cf:78:95: 06:83:85:0d:35:8c:78:99:6d:0c:fa:43:38:42:d9: ee:b5:71:65:14:c0:df:68:c8:8d:19:bb:cb:6b:c4: 8e:43:62:50:03:79:bb:8e:f9:fa:01:eb:92:6b:93: f2:a5:99:fa:e3:c0:69:fa:72:68:97:32:29:6c:0a: f7:9a:e4:eb:4e:2b:26:88:31:0a:75:e4:cf:6d:78: 12:ad:5a:a3:89:d1:9c:5b:4b:4f:37:ca:b9:e3:df: 71:5e:83:2d:c2:69:b7:30:5a:10:74:c4:aa:5e:eb: b0:50:3e:c8:1a:db:d0:e9:6b:67:7b:76:9e:88:92: 47:ec:11:57:b2:7d:ee:07:cb:88:cb:89:33:74:4e: f7:09:72:f2:8a:cd:83:bd:65:96:33:8c:17:6b:88: 15:6e:64:b9:3f:af:3a:69:4d:84:5a:26:f1:cc:76: 89:6e:70:e9:0e:47:44:43:6e:1f:99:34:39:1e:40: 4e:8b:5c:8f:b8:69:ad:a1:1c:ab:c9:9d:1d:1d:78: 3c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A2:B4:00:C8:43:0A:C0:75:18:E8:59:C0:FD:4B:02:F0:71:9F:E5 X509v3 Authority Key Identifier: keyid:CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/F6K0AMhDCsB1GOhZwP1LAvBxn-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.40.195.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:c1:a4:72:0a:cc:45:6e:2c:47:81:8f:9e:53:a2:85:46:87: 6c:73:5a:ea:9e:e1:46:bd:1c:0f:78:4d:45:45:8c:b5:5b:2f: b0:ab:d8:2e:b8:87:3c:2d:28:b9:70:01:8d:15:4e:8b:81:04: 07:6f:06:ed:48:b7:93:6a:9a:e9:42:18:30:19:71:f8:22:0d: 41:ab:f9:15:77:ec:16:8f:1d:43:5e:08:54:a3:07:b0:b4:b9: be:9e:41:8d:a3:6a:ad:ab:a1:d9:40:ac:e6:9b:5b:ea:93:3a: 57:ec:2a:13:27:e1:84:85:41:8f:74:f7:87:41:8a:93:86:a6: 35:3b:a3:b5:49:eb:f0:ad:21:6d:df:30:7b:45:af:5b:23:54: 3f:4c:0c:21:f8:a8:5e:bc:bd:ef:1a:93:2f:33:45:8c:51:ab: 92:58:db:a7:95:e7:90:54:b4:74:01:f1:be:92:f8:1c:0d:8c: d0:ab:4c:f4:09:2a:a2:c3:82:02:f7:9a:53:1a:c7:3c:4f:98: b7:db:7e:09:97:7a:de:63:02:bc:2f:36:b4:2e:94:ba:94:3b: 8a:db:26:98:25:bf:f0:44:3e:af:7a:74:df:1a:15:97:8c:9a: 44:c6:a1:a6:3d:10:9c:52:72:d1:b2:10:7f:34:31:2a:6e:3d: 15:fc:c0:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqV2ek8Vpbls/kfdf1GnDZ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZTBkZjgyMTIxNDM4MjcxYzkxM2MyNGZmNTBmZDNiNjJk NDBkYzYwHhcNMjUxMTE4MDcyNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2EyYjQwMGM4NDMwYWMwNzUxOGU4NTljMGZkNGIwMmYwNzE5ZmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzKI5GQ4tL+ZMfbwaJSEJUA1PuWy HLiIaNwv00wY05ug3R0PSLPeiHQNmzIIkimpfxIIQotw6WLPeJUGg4UNNYx4mW0M +kM4QtnutXFlFMDfaMiNGbvLa8SOQ2JQA3m7jvn6AeuSa5PypZn648Bp+nJolzIp bAr3muTrTismiDEKdeTPbXgSrVqjidGcW0tPN8q5499xXoMtwmm3MFoQdMSqXuuw UD7IGtvQ6Wtne3aeiJJH7BFXsn3uB8uIy4kzdE73CXLyis2DvWWWM4wXa4gVbmS5 P686aU2EWibxzHaJbnDpDkdEQ24fmTQ5HkBOi1yPuGmtoRyryZ0dHXg8gQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBeitADIQwrAdRjoWcD9SwLwcZ/lMB8GA1UdIwQY MBaAFM/g34ISFDgnHJE8JP9Q/Tti1A3GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yNjMzMWMtMzRhMS00YmM1LWI3NWMt ZjJjNzkyMmZhZjMyLzEvRjZLMEFNaERDc0IxR09oWndQMUxBdkJ4bi1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8yNjMzMWMtMzRhMS00YmM1LWI3NWMtZjJjNzkyMmZhZjMy LzEvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSjDMA0G CSqGSIb3DQEBCwUAA4IBAQAawaRyCsxFbixHgY+eU6KFRodsc1rqnuFGvRwPeE1F RYy1Wy+wq9guuIc8LSi5cAGNFU6LgQQHbwbtSLeTaprpQhgwGXH4Ig1Bq/kVd+wW jx1DXghUowewtLm+nkGNo2qtq6HZQKzmm1vqkzpX7CoTJ+GEhUGPdPeHQYqThqY1 O6O1SevwrSFt3zB7Ra9bI1Q/TAwh+KhevL3vGpMvM0WMUauSWNunleeQVLR0AfG+ kvgcDYzQq0z0CSqiw4IC95pTGsc8T5i3234Jl3reYwK8Lza0LpS6lDuK2yaYJb/w RD6venTfGhWXjJpExqGmPRCcUnLRshB/NDEqbj0V/MAT -----END CERTIFICATE-----Generated at Sat Dec 6 00:06:42 2025 by rpki-client