This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/FAnp13R7vZew86VD0yXy30rskus.roa File: FAnp13R7vZew86VD0yXy30rskus.roa (raw, json) Hash identifier: inPyQ73AzxqgSN178lLSbPKZBhe3Io2ja2XLtWWA0uk= Subject key identifier: 14:09:E9:D7:74:7B:BD:97:B0:F3:A5:43:D3:25:F2:DF:4A:EC:92:EB Certificate issuer: /CN=cd3c110dfd77f57757391c0faedeebe36086571d Certificate serial: 019B7D5BF7893A57E770BF0D930C1EA182FB Authority key identifier: CD:3C:11:0D:FD:77:F5:77:57:39:1C:0F:AE:DE:EB:E3:60:86:57:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTwRDf139XdXORwPrt7r42CGVx0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/FAnp13R7vZew86VD0yXy30rskus.roa Signing time: Fri 02 Jan 2026 06:18:57 +0000 ROA not before: Fri 02 Jan 2026 06:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43598 IP address blocks: 193.187.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/zTwRDf139XdXORwPrt7r42CGVx0.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/zTwRDf139XdXORwPrt7r42CGVx0.mft rsync://rpki.ripe.net/repository/DEFAULT/zTwRDf139XdXORwPrt7r42CGVx0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:f7:89:3a:57:e7:70:bf:0d:93:0c:1e:a1:82:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd3c110dfd77f57757391c0faedeebe36086571d Validity Not Before: Jan 2 06:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1409e9d7747bbd97b0f3a543d325f2df4aec92eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:af:e1:8d:10:78:55:e2:c8:79:3b:54:79:0c: 4b:a9:56:a3:2e:7b:4e:cf:49:f5:fe:28:39:6f:27: c5:22:62:b6:78:24:c0:45:2b:2b:db:8a:c8:1d:db: 04:20:d1:1f:fe:30:f3:9c:76:3f:47:69:60:f0:54: 7b:ac:6a:8e:b1:64:50:f4:80:d0:20:aa:4c:2a:6d: c0:6a:98:9f:90:23:eb:f4:d3:50:a5:65:4a:57:a4: 54:31:50:d6:37:95:ce:e4:18:5e:85:43:f4:25:34: 62:3b:b8:72:42:83:39:71:09:85:4c:b2:b8:cf:f6: a3:9f:4b:1d:f6:61:0b:1b:79:e1:24:ca:fc:37:33: ac:d6:f1:e9:8a:c4:81:59:6e:52:15:f6:4f:02:fb: 29:94:17:b8:e1:69:2a:a8:6d:24:c9:24:71:67:25: 2a:54:c1:37:7c:b2:71:5f:8e:d3:32:77:fe:c3:61: 9d:c9:fc:a9:09:02:24:18:3c:93:1c:40:f9:51:df: 5c:0b:d5:a4:e5:44:c4:57:ba:56:4a:b0:c1:30:b8: 25:49:20:99:ef:6f:a8:15:c4:40:a7:d8:8a:17:53: 93:58:02:83:55:05:7d:17:a3:76:7d:57:ca:d3:49: 8c:d9:44:09:85:2e:fa:f2:9f:02:c8:3e:d6:00:d7: ea:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:09:E9:D7:74:7B:BD:97:B0:F3:A5:43:D3:25:F2:DF:4A:EC:92:EB X509v3 Authority Key Identifier: keyid:CD:3C:11:0D:FD:77:F5:77:57:39:1C:0F:AE:DE:EB:E3:60:86:57:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTwRDf139XdXORwPrt7r42CGVx0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/FAnp13R7vZew86VD0yXy30rskus.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/zTwRDf139XdXORwPrt7r42CGVx0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.187.192.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:91:da:85:22:32:6c:88:84:68:8a:87:7b:59:11:28:0f:eb: b3:a8:bb:9f:cb:18:32:98:75:2b:51:d5:eb:21:39:f9:9a:f4: 8f:80:94:4a:3e:4f:f0:05:d4:51:26:1b:18:02:3a:f8:0b:5e: 18:91:b3:ad:6f:19:30:5f:b4:98:02:6c:ee:c2:4c:da:cf:33: ee:3f:f0:6f:3d:8e:fa:82:f9:36:6c:80:45:8a:35:28:ce:b6: a8:34:50:96:70:2e:bd:e2:b9:df:87:97:45:53:94:ca:4d:10: 56:f9:46:de:e7:03:00:9c:49:08:46:b1:8a:81:3a:86:3b:fd: 69:c1:ad:9f:65:c4:7b:81:ef:55:b3:b5:f6:31:58:f7:13:bf: 5b:f6:be:57:ae:63:d8:d8:28:fb:f4:a2:dd:54:28:fb:a9:b5: 35:69:52:2a:dd:71:56:39:2d:63:7c:b5:7d:96:95:0d:a1:11: e8:c8:d0:a4:64:8d:b6:fe:44:73:70:5e:63:5c:07:63:c5:9d: 9c:67:06:e8:0a:72:f8:9d:a4:74:ae:47:65:e0:8a:db:a3:94: aa:8e:a0:14:4e:ee:f2:30:85:88:bf:a0:9d:95:52:c5:09:eb: 90:b4:c5:23:84:84:05:52:1b:12:d8:0d:f9:34:d9:b1:d6:17: 20:04:22:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W/eJOlfncL8NkwweoYL7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkM2MxMTBkZmQ3N2Y1Nzc1NzM5MWMwZmFlZGVlYmUzNjA4 NjU3MWQwHhcNMjYwMTAyMDYxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDA5ZTlkNzc0N2JiZDk3YjBmM2E1NDNkMzI1ZjJkZjRhZWM5MmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq/hjRB4VeLIeTtUeQxLqVajLntO z0n1/ig5byfFImK2eCTARSsr24rIHdsEINEf/jDznHY/R2lg8FR7rGqOsWRQ9IDQ IKpMKm3AapifkCPr9NNQpWVKV6RUMVDWN5XO5BhehUP0JTRiO7hyQoM5cQmFTLK4 z/ajn0sd9mELG3nhJMr8NzOs1vHpisSBWW5SFfZPAvsplBe44WkqqG0kySRxZyUq VME3fLJxX47TMnf+w2GdyfypCQIkGDyTHED5Ud9cC9Wk5UTEV7pWSrDBMLglSSCZ 72+oFcRAp9iKF1OTWAKDVQV9F6N2fVfK00mM2UQJhS768p8CyD7WANfq5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBQJ6dd0e72XsPOlQ9Ml8t9K7JLrMB8GA1UdIwQY MBaAFM08EQ39d/V3VzkcD67e6+NghlcdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelR3UkRmMTM5WGRYT1J3UHJ0N3I0MkNHVngwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8yMGU1YTItMGU2NC00ZWEzLThjODYt NmMwMmVjMTliODA5LzEvRkFucDEzUjd2WmV3ODZWRDB5WHkzMHJza3VzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8yMGU1YTItMGU2NC00ZWEzLThjODYtNmMwMmVjMTliODA5 LzEvelR3UkRmMTM5WGRYT1J3UHJ0N3I0MkNHVngwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwbvAMA0G CSqGSIb3DQEBCwUAA4IBAQAfkdqFIjJsiIRoiod7WREoD+uzqLufyxgymHUrUdXr ITn5mvSPgJRKPk/wBdRRJhsYAjr4C14YkbOtbxkwX7SYAmzuwkzazzPuP/BvPY76 gvk2bIBFijUozraoNFCWcC694rnfh5dFU5TKTRBW+Ube5wMAnEkIRrGKgTqGO/1p wa2fZcR7ge9Vs7X2MVj3E79b9r5XrmPY2Cj79KLdVCj7qbU1aVIq3XFWOS1jfLV9 lpUNoRHoyNCkZI22/kRzcF5jXAdjxZ2cZwboCnL4naR0rkdl4Irbo5SqjqAUTu7y MIWIv6CdlVLFCeuQtMUjhIQFUhsS2A35NNmx1hcgBCJh -----END CERTIFICATE-----Generated at Tue Feb 10 04:48:51 2026 by rpki-client