This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_KX5px9_8t4gmUQxbL9xxFEe0EQ.roa File: _KX5px9_8t4gmUQxbL9xxFEe0EQ.roa (raw, json) Hash identifier: Ce1QjD72lAMkVrk9tsAIYNVsMGWhveRz8PigeWgSs88= Subject key identifier: FC:A5:F9:A7:1F:7F:F2:DE:20:99:44:31:6C:BF:71:C4:51:1E:D0:44 Certificate issuer: /CN=ffb2627672877d0f6de9bc4e7e186eedd1356110 Certificate serial: 019C1A863AEC10BF497A07D5BE8D978D5EA8 Authority key identifier: FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_KX5px9_8t4gmUQxbL9xxFEe0EQ.roa Signing time: Sun 01 Feb 2026 18:45:30 +0000 ROA not before: Sun 01 Feb 2026 18:45:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 193.17.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 15:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1a:86:3a:ec:10:bf:49:7a:07:d5:be:8d:97:8d:5e:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffb2627672877d0f6de9bc4e7e186eedd1356110 Validity Not Before: Feb 1 18:45:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fca5f9a71f7ff2de209944316cbf71c4511ed044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:eb:8d:ae:b9:43:20:d1:9b:69:5e:07:b8:35: 62:e4:09:04:05:46:73:2b:24:d8:3d:ce:a9:9e:d5: 0a:7e:32:2a:a2:f8:4c:de:1f:6c:98:39:02:23:d5: 57:b2:98:c7:16:35:98:57:02:89:a2:c6:27:25:85: 48:18:c6:32:67:ad:fb:ba:b1:25:ca:45:c8:fb:7d: fc:51:4b:fe:a7:d2:4b:5e:6a:43:26:16:b0:50:5f: 9b:19:72:20:06:00:7a:29:58:31:d0:b0:40:53:a2: 32:bb:18:e1:12:3a:a0:44:df:23:e9:12:12:2b:6b: f8:49:f5:f2:b2:ba:6d:b7:09:1e:20:ca:41:14:92: 8c:4c:8e:eb:ec:2d:a0:5c:10:a6:11:1b:14:52:b0: 3b:ae:00:33:c6:1b:13:89:35:dc:a7:ac:40:c1:b1: 03:7e:ab:23:de:9d:d9:91:a4:d5:69:ae:ca:5d:46: 34:18:84:a1:2c:19:d8:76:0c:4a:80:90:5b:73:77: 01:49:68:78:35:a7:4c:6c:05:3a:9b:81:0f:e6:f8: b8:5b:93:3e:f6:26:56:92:36:c5:df:60:87:e6:26: 2c:b2:2b:06:4a:49:b5:df:2d:84:6b:e2:bc:cc:b8: 6c:b8:85:04:69:f3:5e:00:d2:b2:dd:fb:99:7a:a3: 25:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A5:F9:A7:1F:7F:F2:DE:20:99:44:31:6C:BF:71:C4:51:1E:D0:44 X509v3 Authority Key Identifier: keyid:FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_KX5px9_8t4gmUQxbL9xxFEe0EQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.42.0/24 Signature Algorithm: sha256WithRSAEncryption 00:c2:6d:39:9f:c4:a4:18:d7:1b:1d:47:05:2c:ad:7e:b7:c9: ea:d5:0b:b2:f4:e1:43:f5:18:5c:9e:31:8d:34:03:a6:14:22: 8f:bc:c5:e4:12:15:ba:ba:83:56:f7:3a:2d:6f:c6:c5:48:18: 4d:7b:3c:4c:0c:7e:a5:08:71:48:99:55:69:e0:b4:c4:f2:72: 6b:b6:5f:93:b7:6e:48:8c:6c:6b:62:24:fc:47:a0:9f:1b:b5: 5b:fd:d5:8b:01:a3:b3:9a:62:19:bc:f1:e1:b5:fc:f8:bf:f0: 32:19:a9:e8:5f:c4:e9:52:8d:29:bc:68:f3:d7:de:73:d3:a3: 37:ff:bc:6b:81:79:bf:a8:4b:45:30:09:96:e0:7c:c6:3d:97: 67:02:f1:eb:0c:06:14:39:ce:27:f0:61:10:e1:73:6e:f6:bc: 2c:ef:ae:61:cb:31:7e:dd:b9:2f:29:fd:fd:bd:8f:22:ce:72: d7:d4:b9:1b:ec:32:f1:7e:de:d9:e6:aa:a8:78:84:f2:bc:16: c2:79:de:ba:c6:7f:66:72:b4:23:04:c3:50:ed:94:55:33:fb: f9:e8:e6:b5:e3:b7:4b:79:2b:d4:b1:1e:83:ba:fa:f0:85:f4: 4d:15:1d:35:a4:f6:bb:68:92:ff:2a:2e:4f:a7:4e:7d:79:06: 00:92:eb:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwahjrsEL9JegfVvo2XjV6oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYjI2Mjc2NzI4NzdkMGY2ZGU5YmM0ZTdlMTg2ZWVkZDEz NTYxMTAwHhcNMjYwMjAxMTg0NTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2E1ZjlhNzFmN2ZmMmRlMjA5OTQ0MzE2Y2JmNzFjNDUxMWVkMDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOuNrrlDINGbaV4HuDVi5AkEBUZz KyTYPc6pntUKfjIqovhM3h9smDkCI9VXspjHFjWYVwKJosYnJYVIGMYyZ637urEl ykXI+338UUv+p9JLXmpDJhawUF+bGXIgBgB6KVgx0LBAU6IyuxjhEjqgRN8j6RIS K2v4SfXysrpttwkeIMpBFJKMTI7r7C2gXBCmERsUUrA7rgAzxhsTiTXcp6xAwbED fqsj3p3ZkaTVaa7KXUY0GIShLBnYdgxKgJBbc3cBSWh4NadMbAU6m4EP5vi4W5M+ 9iZWkjbF32CH5iYssisGSkm13y2Ea+K8zLhsuIUEafNeANKy3fuZeqMlBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPyl+acff/LeIJlEMWy/ccRRHtBEMB8GA1UdIwQY MBaAFP+yYnZyh30Pbem8Tn4Ybu3RNWEQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzdKaWRuS0hmUTl0NmJ4T2ZoaHU3ZEUxWVJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8yMmM1MTAtMzQ4MC00Y2UxLThkZDgt MTk3NDY5NDc1NThkLzEvX0tYNXB4OV84dDRnbVVReGJMOXh4RkVlMEVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8yMmM1MTAtMzQ4MC00Y2UxLThkZDgtMTk3NDY5NDc1NThk LzEvXzdKaWRuS0hmUTl0NmJ4T2ZoaHU3ZEUxWVJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwREqMA0G CSqGSIb3DQEBCwUAA4IBAQAAwm05n8SkGNcbHUcFLK1+t8nq1Quy9OFD9RhcnjGN NAOmFCKPvMXkEhW6uoNW9zotb8bFSBhNezxMDH6lCHFImVVp4LTE8nJrtl+Tt25I jGxrYiT8R6CfG7Vb/dWLAaOzmmIZvPHhtfz4v/AyGanoX8TpUo0pvGjz195z06M3 /7xrgXm/qEtFMAmW4HzGPZdnAvHrDAYUOc4n8GEQ4XNu9rws765hyzF+3bkvKf39 vY8iznLX1Lkb7DLxft7Z5qqoeITyvBbCed66xn9mcrQjBMNQ7ZRVM/v56Oa147dL eSvUsR6DuvrwhfRNFR01pPa7aJL/Ki5Pp059eQYAkuvU -----END CERTIFICATE-----Generated at Sat Feb 14 22:37:33 2026 by rpki-client