This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/Fjq3mkPKrbk3RsZ3yEGKBS9j2hk.roa File: Fjq3mkPKrbk3RsZ3yEGKBS9j2hk.roa (raw, json) Hash identifier: /klg+2watJuJzDdXKU5bRhHxFfZdYYFwf9mvG57YuS4= Subject key identifier: 16:3A:B7:9A:43:CA:AD:B9:37:46:C6:77:C8:41:8A:05:2F:63:DA:19 Certificate issuer: /CN=d75ba0594d065ab722465cfa305eff8d41617fa8 Certificate serial: 019B7F83D6EAEBC16AB615D797596A96F01A Authority key identifier: D7:5B:A0:59:4D:06:5A:B7:22:46:5C:FA:30:5E:FF:8D:41:61:7F:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11ugWU0GWrciRlz6MF7_jUFhf6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/Fjq3mkPKrbk3RsZ3yEGKBS9j2hk.roa Signing time: Fri 02 Jan 2026 16:21:45 +0000 ROA not before: Fri 02 Jan 2026 16:21:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48343 IP address blocks: 193.33.192.0/23 maxlen: 23 193.33.192.0/24 maxlen: 24 193.33.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.mft rsync://rpki.ripe.net/repository/DEFAULT/11ugWU0GWrciRlz6MF7_jUFhf6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:d6:ea:eb:c1:6a:b6:15:d7:97:59:6a:96:f0:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d75ba0594d065ab722465cfa305eff8d41617fa8 Validity Not Before: Jan 2 16:21:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=163ab79a43caadb93746c677c8418a052f63da19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a3:b0:6c:5a:f6:2d:12:7e:d5:e7:89:5f:b4: 53:08:c4:59:df:28:dd:80:0a:12:d6:4b:cf:91:91: 3f:96:04:26:06:29:0d:6e:ce:92:47:8d:22:53:0a: 1b:e7:db:06:43:47:62:1d:1f:bf:4e:2f:4d:44:76: be:4a:59:ba:4a:df:b8:63:09:15:f7:9a:e1:5f:47: 60:f1:ca:cf:50:9a:d8:78:80:c3:a2:71:76:d0:cc: 4c:48:50:0b:8c:b5:b4:06:00:eb:11:49:d3:34:d8: 4c:07:81:dc:74:2a:4f:5e:df:0e:ec:76:a7:a2:9c: fc:aa:7b:56:82:ed:ec:13:83:05:26:aa:d5:13:67: be:a6:94:da:4c:57:c7:bc:2a:62:e7:b6:6e:b9:b4: e0:93:d0:ce:bb:ff:84:53:31:61:f1:5e:77:51:cd: 72:fe:1a:dd:e3:f6:98:7a:ca:29:f6:fb:67:57:a4: 5d:9a:38:35:ad:3d:de:0c:51:e1:e2:c6:68:9d:dd: 06:37:c7:7e:cd:3d:78:b8:1e:f6:8c:db:89:07:06: 83:16:33:30:ae:04:ff:8a:c7:40:b5:55:2c:08:22: 7b:c6:7e:ee:92:ba:ee:16:a6:4d:c4:3c:10:03:40: 4b:af:85:e1:04:ca:13:59:41:99:9e:2a:bd:de:0b: 68:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3A:B7:9A:43:CA:AD:B9:37:46:C6:77:C8:41:8A:05:2F:63:DA:19 X509v3 Authority Key Identifier: keyid:D7:5B:A0:59:4D:06:5A:B7:22:46:5C:FA:30:5E:FF:8D:41:61:7F:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11ugWU0GWrciRlz6MF7_jUFhf6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/Fjq3mkPKrbk3RsZ3yEGKBS9j2hk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.192.0/23 Signature Algorithm: sha256WithRSAEncryption 22:ad:05:34:e0:a7:de:ea:86:25:bf:2b:1d:5f:ef:09:32:2f: 0d:8d:ac:db:4e:dd:fb:a4:58:63:b4:c4:32:83:98:3b:9e:5c: 0b:c2:f4:6e:97:dc:40:c5:fa:01:3c:1e:91:3b:1d:9b:21:48: 82:ad:06:fa:f8:bd:63:b6:f8:f2:7d:d7:ff:b7:c8:4e:bc:ca: 77:a8:2b:2e:b9:3d:e2:d6:13:0c:09:ae:8c:d5:4b:46:ab:39: a1:c1:99:0e:6a:ac:b6:d6:d2:f9:4a:08:56:3f:85:95:45:07: e6:e8:14:8d:73:41:a0:5b:33:92:d9:2a:d6:3a:97:f6:a6:72: fc:84:ed:6c:44:a9:ca:b3:c2:68:e8:7c:8e:37:2e:8d:c8:76: 83:49:bc:c9:58:14:24:c1:e5:b2:c5:de:db:7d:d3:c6:47:70: 7e:96:8c:84:ab:06:e4:aa:9a:8d:2a:0a:aa:7b:cd:84:ba:0b: 84:3a:f8:4c:21:bd:01:14:f9:b3:8b:d8:78:07:cc:d9:41:28: 20:4d:36:e2:85:3f:b9:7a:95:96:23:8d:b0:6c:4d:34:db:bf: cc:17:20:e6:48:03:09:65:80:bc:17:4f:7c:0e:7e:88:a9:91: 78:3e:c6:93:ab:c3:9e:36:ed:00:01:e0:6f:af:07:8d:ac:2f: 65:af:88:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g9bq68FqthXXl1lqlvAaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NWJhMDU5NGQwNjVhYjcyMjQ2NWNmYTMwNWVmZjhkNDE2 MTdmYTgwHhcNMjYwMTAyMTYyMTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjNhYjc5YTQzY2FhZGI5Mzc0NmM2NzdjODQxOGEwNTJmNjNkYTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6OwbFr2LRJ+1eeJX7RTCMRZ3yjd gAoS1kvPkZE/lgQmBikNbs6SR40iUwob59sGQ0diHR+/Ti9NRHa+Slm6St+4YwkV 95rhX0dg8crPUJrYeIDDonF20MxMSFALjLW0BgDrEUnTNNhMB4HcdCpPXt8O7Han opz8qntWgu3sE4MFJqrVE2e+ppTaTFfHvCpi57ZuubTgk9DOu/+EUzFh8V53Uc1y /hrd4/aYesop9vtnV6Rdmjg1rT3eDFHh4sZond0GN8d+zT14uB72jNuJBwaDFjMw rgT/isdAtVUsCCJ7xn7ukrruFqZNxDwQA0BLr4XhBMoTWUGZniq93gtoNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBY6t5pDyq25N0bGd8hBigUvY9oZMB8GA1UdIwQY MBaAFNdboFlNBlq3IkZc+jBe/41BYX+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTF1Z1dVMEdXcmNpUmx6Nk1GN19qVUZoZjZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9hNmNhMGYtNTQ4OS00M2ExLWExYTUt MmRlZjM4ZTQ1YmEwLzEvRmpxM21rUEtyYmszUnNaM3lFR0tCUzlqMmhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9hNmNhMGYtNTQ4OS00M2ExLWExYTUtMmRlZjM4ZTQ1YmEw LzEvMTF1Z1dVMEdXcmNpUmx6Nk1GN19qVUZoZjZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwSHAMA0G CSqGSIb3DQEBCwUAA4IBAQAirQU04Kfe6oYlvysdX+8JMi8NjazbTt37pFhjtMQy g5g7nlwLwvRul9xAxfoBPB6ROx2bIUiCrQb6+L1jtvjyfdf/t8hOvMp3qCsuuT3i 1hMMCa6M1UtGqzmhwZkOaqy21tL5SghWP4WVRQfm6BSNc0GgWzOS2SrWOpf2pnL8 hO1sRKnKs8Jo6HyONy6NyHaDSbzJWBQkweWyxd7bfdPGR3B+loyEqwbkqpqNKgqq e82EuguEOvhMIb0BFPmzi9h4B8zZQSggTTbihT+5epWWI42wbE0027/MFyDmSAMJ ZYC8F098Dn6IqZF4PsaTq8OeNu0AAeBvrweNrC9lr4g8 -----END CERTIFICATE-----Generated at Mon Feb 9 22:57:45 2026 by rpki-client