This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/fN1BCGt6X78bmo40K4mqUHAHyNE.roa File: fN1BCGt6X78bmo40K4mqUHAHyNE.roa (raw, json) Hash identifier: 4u131ZUFsLjOVWZz34pEcO0mSEYVLQJpztQcoDh3/Iw= Subject key identifier: 7C:DD:41:08:6B:7A:5F:BF:1B:9A:8E:34:2B:89:AA:50:70:07:C8:D1 Certificate issuer: /CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718 Certificate serial: 019B7F158498037FEE4E49DDDFFF6A4FAF9C Authority key identifier: 5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/fN1BCGt6X78bmo40K4mqUHAHyNE.roa Signing time: Fri 02 Jan 2026 14:21:15 +0000 ROA not before: Fri 02 Jan 2026 14:21:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395003 IP address blocks: 193.46.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:84:98:03:7f:ee:4e:49:dd:df:ff:6a:4f:af:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718 Validity Not Before: Jan 2 14:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cdd41086b7a5fbf1b9a8e342b89aa507007c8d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e3:90:f4:be:73:69:a2:e5:4a:ca:4f:3f:bb: 30:7b:60:f8:3b:a7:04:1b:d5:51:a8:ad:38:a2:2b: fc:ca:c8:aa:a8:9d:00:50:a4:84:52:9a:0b:27:7e: 64:bc:93:5e:5e:17:f6:3c:82:b8:c5:d6:71:a1:bb: 25:1b:de:da:dc:a8:0a:12:6d:5d:98:df:22:9a:c1: fa:de:07:d1:5c:ed:81:58:87:4d:9f:b9:40:a2:a3: c2:08:96:e4:ff:b6:20:9e:e5:e9:cd:2f:61:24:c1: 3a:af:11:50:c8:ed:33:22:ea:9d:05:8b:80:e2:b9: ee:b1:a2:39:56:a3:b3:fd:41:27:43:35:b5:2c:fd: 35:91:ba:83:69:53:0c:c7:65:12:f5:4d:ac:8e:a5: 2c:43:8c:55:f3:47:ab:fb:0b:04:94:23:df:21:d4: a5:08:bd:b7:f1:69:f2:d0:1a:89:6e:e7:40:11:18: dc:24:8b:62:70:71:ae:06:32:c5:09:89:0c:d0:26: 36:16:1f:48:43:e7:d7:a7:a6:17:c0:15:b3:d6:be: fd:ee:ea:82:8e:bd:34:a2:35:fc:db:39:0e:74:7e: 5a:0a:d4:62:95:0c:49:7f:30:49:24:d7:14:89:0d: f1:0b:dc:24:c8:c0:86:2b:af:fc:cf:91:35:5a:69: 62:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DD:41:08:6B:7A:5F:BF:1B:9A:8E:34:2B:89:AA:50:70:07:C8:D1 X509v3 Authority Key Identifier: keyid:5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/fN1BCGt6X78bmo40K4mqUHAHyNE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.74.0/24 Signature Algorithm: sha256WithRSAEncryption ab:90:91:a0:19:47:68:78:ab:bc:31:34:f5:06:71:bd:9d:41: 95:25:87:26:dc:de:f9:20:47:38:9d:90:27:0e:38:de:1e:54: 1d:78:be:57:4d:a2:cd:b4:89:c2:40:e2:ba:a9:ca:8d:a5:f5: 4d:99:8b:7e:94:c0:01:af:3a:7d:fd:0b:f0:4c:9c:1f:a7:ec: 7b:5d:d3:df:b6:5a:75:1d:7e:d3:cd:ca:02:c1:e3:5e:42:32: ff:91:bd:dc:81:53:57:81:ec:e5:f6:03:bd:3e:37:bc:d2:15: 6e:6c:27:fe:7c:06:30:d7:dc:4d:d1:74:20:fb:49:4f:09:5f: 94:81:7c:56:42:96:f2:66:53:ae:82:0c:53:4d:bc:c4:16:53: 90:19:bd:59:10:9b:7c:f3:3b:c3:e7:10:4b:05:25:3b:dc:0f: 6c:34:4a:23:70:f4:84:ac:38:05:c0:ba:df:d1:88:26:9d:75: 58:5b:63:cd:a3:a8:6b:41:ed:11:fd:35:8a:b5:d9:a8:8e:e6: 2f:bc:57:6c:14:ef:b4:ed:50:fd:3e:ac:c3:ee:26:ff:35:95: 1b:ed:4b:d8:7f:41:bd:58:b1:eb:ec:1d:03:2d:82:55:41:c3: 8d:9d:ce:e1:41:56:cb:d4:a0:83:7f:2c:24:20:4b:36:15:91: cb:de:b2:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FYSYA3/uTknd3/9qT6+cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYmE2MjU1ZGVkYWExYTFiNmIxN2NiOGVhOTFlMDJkNDEy Yjg3MTgwHhcNMjYwMTAyMTQyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2RkNDEwODZiN2E1ZmJmMWI5YThlMzQyYjg5YWE1MDcwMDdjOGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouOQ9L5zaaLlSspPP7swe2D4O6cE G9VRqK04oiv8ysiqqJ0AUKSEUpoLJ35kvJNeXhf2PIK4xdZxobslG97a3KgKEm1d mN8imsH63gfRXO2BWIdNn7lAoqPCCJbk/7YgnuXpzS9hJME6rxFQyO0zIuqdBYuA 4rnusaI5VqOz/UEnQzW1LP01kbqDaVMMx2US9U2sjqUsQ4xV80er+wsElCPfIdSl CL238Wny0BqJbudAERjcJIticHGuBjLFCYkM0CY2Fh9IQ+fXp6YXwBWz1r797uqC jr00ojX82zkOdH5aCtRilQxJfzBJJNcUiQ3xC9wkyMCGK6/8z5E1WmliFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHzdQQhrel+/G5qONCuJqlBwB8jRMB8GA1UdIwQY MBaAFF+6YlXe2qGhtrF8uOqR4C1BK4cYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDdwaVZkN2FvYUcyc1h5NDZwSGdMVUVyaHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS85MWE3NzAtODI4ZC00ZTJiLWJkODEt NjFlNTEyYmEyNWI3LzEvZk4xQkNHdDZYNzhibW80MEs0bXFVSEFIeU5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS85MWE3NzAtODI4ZC00ZTJiLWJkODEtNjFlNTEyYmEyNWI3 LzEvWDdwaVZkN2FvYUcyc1h5NDZwSGdMVUVyaHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS5KMA0G CSqGSIb3DQEBCwUAA4IBAQCrkJGgGUdoeKu8MTT1BnG9nUGVJYcm3N75IEc4nZAn DjjeHlQdeL5XTaLNtInCQOK6qcqNpfVNmYt+lMABrzp9/QvwTJwfp+x7XdPftlp1 HX7TzcoCweNeQjL/kb3cgVNXgezl9gO9Pje80hVubCf+fAYw19xN0XQg+0lPCV+U gXxWQpbyZlOuggxTTbzEFlOQGb1ZEJt88zvD5xBLBSU73A9sNEojcPSErDgFwLrf 0YgmnXVYW2PNo6hrQe0R/TWKtdmojuYvvFdsFO+07VD9PqzD7ib/NZUb7UvYf0G9 WLHr7B0DLYJVQcONnc7hQVbL1KCDfywkIEs2FZHL3rLS -----END CERTIFICATE-----Generated at Wed Jan 21 18:20:42 2026 by rpki-client