This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/fiaiVWP5lLqsNUQ9XOSyBsEQy8E.roa File: fiaiVWP5lLqsNUQ9XOSyBsEQy8E.roa (raw, json) Hash identifier: v0PmtJ3pzpVot2Wloq98GRl87XDpPUF7bbjfx1/ffng= Subject key identifier: 7E:26:A2:55:63:F9:94:BA:AC:35:44:3D:5C:E4:B2:06:C1:10:CB:C1 Certificate issuer: /CN=45aed3d1a1a1e2830d416afa047b95220e814084 Certificate serial: 019B775877C303AFEEF6BF9303ADB47FEB9B Authority key identifier: 45:AE:D3:D1:A1:A1:E2:83:0D:41:6A:FA:04:7B:95:22:0E:81:40:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/fiaiVWP5lLqsNUQ9XOSyBsEQy8E.roa Signing time: Thu 01 Jan 2026 02:17:25 +0000 ROA not before: Thu 01 Jan 2026 02:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199699 IP address blocks: 193.24.106.0/24 maxlen: 24 2a13:8f80::/29 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:77:c3:03:af:ee:f6:bf:93:03:ad:b4:7f:eb:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45aed3d1a1a1e2830d416afa047b95220e814084 Validity Not Before: Jan 1 02:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e26a25563f994baac35443d5ce4b206c110cbc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dc:ee:e1:55:f3:19:22:a1:bb:87:c6:f2:a7: b0:a9:b1:d0:3f:24:ea:68:29:58:4d:2f:fd:9c:da: f3:83:75:e7:a6:0c:56:46:3c:b4:3c:66:ac:89:d5: f1:d2:ff:22:72:18:bc:df:5b:79:49:aa:e7:99:55: 70:17:a7:db:a3:24:72:3d:5c:11:75:e6:7f:6b:81: 82:35:61:47:f1:f9:0f:31:ed:23:03:73:48:91:fb: 49:41:58:57:ce:19:06:9a:95:ca:6f:a5:26:38:4f: e8:24:28:d1:47:80:e9:cc:57:63:b7:ba:c1:c2:10: 1a:95:62:c0:6d:8f:21:f5:3c:b0:46:1d:46:21:e8: 43:08:ba:f3:2d:45:e6:29:5d:c3:e6:6d:81:04:5f: f8:91:63:c4:1e:68:39:77:bc:ce:8e:ee:21:79:0c: 44:3e:6d:35:36:48:52:16:f9:e4:7b:2a:c4:3d:db: 49:38:09:49:29:80:d7:6a:13:76:f3:36:8c:9e:ae: a0:2f:c7:d0:b0:5f:4d:ee:a2:d4:03:bb:7c:dd:4f: 01:3c:4c:e2:a3:ec:92:e7:4f:9d:23:2c:37:ba:97: c0:23:09:43:00:ce:7d:06:55:bb:65:be:a6:bc:79: 96:7d:5e:0e:f9:d9:40:e5:38:c5:52:2a:79:77:5e: ee:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:26:A2:55:63:F9:94:BA:AC:35:44:3D:5C:E4:B2:06:C1:10:CB:C1 X509v3 Authority Key Identifier: keyid:45:AE:D3:D1:A1:A1:E2:83:0D:41:6A:FA:04:7B:95:22:0E:81:40:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/fiaiVWP5lLqsNUQ9XOSyBsEQy8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.24.106.0/24 IPv6: 2a13:8f80::/29 Signature Algorithm: sha256WithRSAEncryption 2b:65:9d:3b:fb:f0:16:54:5e:52:ac:19:88:c4:51:c3:47:d5: d6:b4:79:80:88:36:bc:ef:39:05:61:a7:95:ef:40:b5:ba:d7: 74:3e:fe:3d:67:fa:09:53:e8:b2:cd:0e:58:6e:b8:b5:8b:79: 35:3d:05:54:2e:c0:39:3c:b1:9a:8f:a3:bc:0d:91:22:da:24: 62:02:42:22:04:91:31:38:ba:dc:38:f4:95:6d:5c:a5:52:28: 8e:14:71:83:9f:08:a1:aa:e5:0e:3e:b4:af:8f:1c:76:7c:df: de:b3:9d:80:01:8f:d4:fe:5f:71:87:4c:20:fd:6d:45:bf:71: 6f:e4:fc:e2:4f:9e:56:12:5a:2b:ca:61:cb:a9:ce:84:a6:51: be:66:bf:37:3f:31:11:2a:7c:cf:03:ba:c2:a2:b4:d4:59:36: aa:62:f2:b0:f8:8d:c5:fa:b9:97:59:f0:98:51:01:9f:bd:aa: 4a:a9:30:85:ae:8a:b8:25:d7:ff:5c:83:22:41:97:aa:ba:ab: 3d:05:99:8f:d8:0c:f4:4a:c7:20:95:f2:f6:47:4c:3d:90:6c: 77:78:37:00:e4:aa:24:ee:bf:80:8f:2a:76:ed:d2:4c:d5:ce: 82:f0:a7:ee:3b:17:6a:c6:71:22:f5:0a:c7:dd:fe:a0:7c:ae: f1:b1:cc:8f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WHfDA6/u9r+TA620f+ubMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1YWVkM2QxYTFhMWUyODMwZDQxNmFmYTA0N2I5NTIyMGU4 MTQwODQwHhcNMjYwMTAxMDIxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTI2YTI1NTYzZjk5NGJhYWMzNTQ0M2Q1Y2U0YjIwNmMxMTBjYmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdzu4VXzGSKhu4fG8qewqbHQPyTq aClYTS/9nNrzg3XnpgxWRjy0PGasidXx0v8ichi831t5SarnmVVwF6fboyRyPVwR deZ/a4GCNWFH8fkPMe0jA3NIkftJQVhXzhkGmpXKb6UmOE/oJCjRR4DpzFdjt7rB whAalWLAbY8h9TywRh1GIehDCLrzLUXmKV3D5m2BBF/4kWPEHmg5d7zOju4heQxE Pm01NkhSFvnkeyrEPdtJOAlJKYDXahN28zaMnq6gL8fQsF9N7qLUA7t83U8BPEzi o+yS50+dIyw3upfAIwlDAM59BlW7Zb6mvHmWfV4O+dlA5TjFUip5d17uNQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFH4molVj+ZS6rDVEPVzksgbBEMvBMB8GA1UdIwQY MBaAFEWu09GhoeKDDUFq+gR7lSIOgUCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmE3VDBhR2g0b01OUVdyNkJIdVZJZzZCUUlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84YzVkYzctYmY0MS00MDA4LTljZmYt MmM2OTk4NTM1OWMwLzEvZmlhaVZXUDVsTHFzTlVROVhPU3lCc0VReThFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS84YzVkYzctYmY0MS00MDA4LTljZmYtMmM2OTk4NTM1OWMw LzEvUmE3VDBhR2g0b01OUVdyNkJIdVZJZzZCUUlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwRhqMA0E AgACMAcDBQMqE4+AMA0GCSqGSIb3DQEBCwUAA4IBAQArZZ07+/AWVF5SrBmIxFHD R9XWtHmAiDa87zkFYaeV70C1utd0Pv49Z/oJU+iyzQ5Ybri1i3k1PQVULsA5PLGa j6O8DZEi2iRiAkIiBJExOLrcOPSVbVylUiiOFHGDnwihquUOPrSvjxx2fN/es52A AY/U/l9xh0wg/W1Fv3Fv5PziT55WElorymHLqc6EplG+Zr83PzERKnzPA7rCorTU WTaqYvKw+I3F+rmXWfCYUQGfvapKqTCFroq4Jdf/XIMiQZequqs9BZmP2Az0Sscg lfL2R0w9kGx3eDcA5Kok7r+Ajyp27dJM1c6C8KfuOxdqxnEi9QrH3f6gfK7xscyP -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:34 2026 by rpki-client