This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/fCJFqaSmlEUaHeJe6Nl29f553VQ.roa File: fCJFqaSmlEUaHeJe6Nl29f553VQ.roa (raw, json) Hash identifier: DBZpQG6cNb9N4NIAzi7S93mTg5IouP9LV1gaJIWMDnE= Subject key identifier: 7C:22:45:A9:A4:A6:94:45:1A:1D:E2:5E:E8:D9:76:F5:FE:79:DD:54 Certificate issuer: /CN=e86b4ed3317c92a34b76c8fad29ae97080f91f3b Certificate serial: 019B7D5BAC127E48412EDBE0F1F47ED8D688 Authority key identifier: E8:6B:4E:D3:31:7C:92:A3:4B:76:C8:FA:D2:9A:E9:70:80:F9:1F:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/fCJFqaSmlEUaHeJe6Nl29f553VQ.roa Signing time: Fri 02 Jan 2026 06:18:38 +0000 ROA not before: Fri 02 Jan 2026 06:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42510 IP address blocks: 193.106.56.0/22 maxlen: 22 193.106.56.0/23 maxlen: 23 193.106.56.0/24 maxlen: 24 193.106.57.0/24 maxlen: 24 193.106.58.0/23 maxlen: 23 193.106.58.0/24 maxlen: 24 193.106.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:ac:12:7e:48:41:2e:db:e0:f1:f4:7e:d8:d6:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e86b4ed3317c92a34b76c8fad29ae97080f91f3b Validity Not Before: Jan 2 06:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c2245a9a4a694451a1de25ee8d976f5fe79dd54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:66:99:da:6a:55:ad:28:2a:61:b3:90:85:1f: 31:c1:34:7d:b6:59:aa:e6:fd:1a:d9:c6:7c:e1:e1: e6:17:de:ed:b2:3b:79:9f:3b:75:a3:ba:8e:67:49: ea:3a:b6:98:c3:59:5c:8d:c8:78:47:62:95:63:67: e0:6b:3f:38:3f:d7:8f:07:23:b7:f1:4c:e6:8c:54: 05:0f:24:d0:19:7f:eb:ad:2f:dd:49:59:51:d9:c8: 1f:b1:5f:13:5e:ae:f4:1f:6c:ed:ff:97:c1:ec:d2: 54:37:3a:1f:3c:6e:c1:07:8b:63:19:1e:0d:f7:4d: b6:d8:55:fc:41:b3:06:ec:a8:1c:0b:54:13:c5:dd: d5:df:f5:6f:48:90:fd:53:9e:2b:87:c9:60:4f:e2: a9:5f:64:e6:04:33:c6:96:57:e6:ee:3d:fc:d1:c1: b3:0c:0d:06:55:a2:35:61:d7:39:8e:76:c9:73:2f: 56:9f:00:7d:e0:e1:db:6c:e3:90:e0:4c:3d:7e:69: be:14:55:75:2c:aa:a0:87:36:a7:e7:13:29:6b:2d: 05:61:ac:1b:ba:1e:14:a8:41:a8:23:0f:34:f0:ee: 65:d9:9c:25:07:88:5a:58:2c:d1:96:29:cb:92:7d: 25:49:80:03:95:c5:1b:d1:90:f8:27:60:81:0c:8b: 18:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:22:45:A9:A4:A6:94:45:1A:1D:E2:5E:E8:D9:76:F5:FE:79:DD:54 X509v3 Authority Key Identifier: keyid:E8:6B:4E:D3:31:7C:92:A3:4B:76:C8:FA:D2:9A:E9:70:80:F9:1F:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/fCJFqaSmlEUaHeJe6Nl29f553VQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.106.56.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:a1:09:dc:a8:50:b3:b9:5d:45:36:97:cd:8b:b3:be:20:eb: 6e:b6:47:70:d6:f5:c2:c2:7b:7c:59:f0:db:1b:01:4e:71:85: 1d:9d:30:8e:5e:15:f2:d7:5b:9f:50:1e:5c:d6:8d:ae:2c:6a: 22:c8:f5:13:7c:df:18:19:1e:c8:8e:ab:b5:c9:3d:2b:b4:e0: b9:30:65:b0:b3:ed:c1:ad:5e:c8:f6:56:e3:bd:df:86:95:51: f0:76:c5:01:1f:7e:5e:1d:45:57:e4:89:da:99:7a:31:42:22: 91:ac:88:b6:f7:a6:81:66:d4:cd:f9:df:c1:fc:50:00:7e:49: 42:93:5e:94:4c:2a:b9:46:8e:ae:1f:25:8d:28:28:e5:a3:e8: ec:f6:92:a0:23:56:ca:65:21:cf:0a:a4:22:e5:f2:28:c0:4f: 42:e2:a5:d7:10:fc:60:e3:2d:71:4e:6b:f3:ab:9a:27:9d:42: c0:ac:d2:f0:94:12:3a:a5:df:69:11:d5:78:95:0e:e5:38:bd: e4:95:da:9c:63:a5:ee:db:7f:ff:b4:62:00:eb:85:6d:ac:7b: 2b:ba:a2:36:3b:02:6f:8f:64:67:98:aa:12:e4:f3:d3:d5:43: 71:26:9c:2d:cf:0d:a1:5a:62:ec:dc:97:8b:24:8b:a3:4f:c8: 62:12:b2:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W6wSfkhBLtvg8fR+2NaIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NmI0ZWQzMzE3YzkyYTM0Yjc2YzhmYWQyOWFlOTcwODBm OTFmM2IwHhcNMjYwMTAyMDYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzIyNDVhOWE0YTY5NDQ1MWExZGUyNWVlOGQ5NzZmNWZlNzlkZDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWaZ2mpVrSgqYbOQhR8xwTR9tlmq 5v0a2cZ84eHmF97tsjt5nzt1o7qOZ0nqOraYw1lcjch4R2KVY2fgaz84P9ePByO3 8UzmjFQFDyTQGX/rrS/dSVlR2cgfsV8TXq70H2zt/5fB7NJUNzofPG7BB4tjGR4N 90222FX8QbMG7KgcC1QTxd3V3/VvSJD9U54rh8lgT+KpX2TmBDPGllfm7j380cGz DA0GVaI1Ydc5jnbJcy9WnwB94OHbbOOQ4Ew9fmm+FFV1LKqghzan5xMpay0FYawb uh4UqEGoIw808O5l2ZwlB4haWCzRlinLkn0lSYADlcUb0ZD4J2CBDIsY9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHwiRamkppRFGh3iXujZdvX+ed1UMB8GA1UdIwQY MBaAFOhrTtMxfJKjS3bI+tKa6XCA+R87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkd0TzB6RjhrcU5MZHNqNjBwcnBjSUQ1SHpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82YzVlYWYtOWM0NC00YTVhLWJhYTEt MzI1YWFkZDczM2MzLzEvZkNKRnFhU21sRVVhSGVKZTZObDI5ZjU1M1ZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy82YzVlYWYtOWM0NC00YTVhLWJhYTEtMzI1YWFkZDczM2Mz LzEvNkd0TzB6RjhrcU5MZHNqNjBwcnBjSUQ1SHpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwWo4MA0G CSqGSIb3DQEBCwUAA4IBAQANoQncqFCzuV1FNpfNi7O+IOtutkdw1vXCwnt8WfDb GwFOcYUdnTCOXhXy11ufUB5c1o2uLGoiyPUTfN8YGR7Ijqu1yT0rtOC5MGWws+3B rV7I9lbjvd+GlVHwdsUBH35eHUVX5InamXoxQiKRrIi296aBZtTN+d/B/FAAfklC k16UTCq5Ro6uHyWNKCjlo+js9pKgI1bKZSHPCqQi5fIowE9C4qXXEPxg4y1xTmvz q5onnULArNLwlBI6pd9pEdV4lQ7lOL3kldqcY6Xu23//tGIA64VtrHsruqI2OwJv j2RnmKoS5PPT1UNxJpwtzw2hWmLs3JeLJIujT8hiErJR -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:39 2026 by rpki-client