This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/FJjLx1iJw4VqFKz7FPQ0JyldOfI.roa File: FJjLx1iJw4VqFKz7FPQ0JyldOfI.roa (raw, json) Hash identifier: ev1W9ohjVf7Q0Z9nGx/i+Cc2wNkdLs6mHMbE9kefqiU= Subject key identifier: 14:98:CB:C7:58:89:C3:85:6A:14:AC:FB:14:F4:34:27:29:5D:39:F2 Certificate issuer: /CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0 Certificate serial: 019B7C12EE948855AF42C73D85D7BD743E69 Authority key identifier: 77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/FJjLx1iJw4VqFKz7FPQ0JyldOfI.roa Signing time: Fri 02 Jan 2026 00:19:34 +0000 ROA not before: Fri 02 Jan 2026 00:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5406 IP address blocks: 193.53.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ee:94:88:55:af:42:c7:3d:85:d7:bd:74:3e:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0 Validity Not Before: Jan 2 00:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1498cbc75889c3856a14acfb14f43427295d39f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:82:82:fa:19:eb:21:8d:ef:35:83:0c:c5:74: fc:9d:67:15:e4:c6:2f:e9:da:3d:e4:2b:2d:b5:42: 90:92:18:56:67:66:0d:9b:3d:27:63:aa:fb:94:e2: 00:93:53:78:30:14:9f:6b:18:2b:0a:88:d8:0e:f8: 37:5b:ca:90:e4:27:a4:1b:d3:00:dd:21:84:21:c9: 51:39:f3:02:ce:89:b0:ca:8f:c5:7e:09:a5:f1:79: b3:1d:7a:6b:a3:a6:ab:55:25:90:c8:18:31:f8:e7: 79:b8:a4:d2:bf:3c:7a:c3:f0:5a:04:22:99:c0:ea: 59:54:f9:7b:07:d4:f2:8f:09:8d:c0:50:88:98:f4: 16:e9:e6:c9:25:60:5d:4a:e2:59:43:2c:b6:19:dd: 24:9d:da:ce:75:04:58:9d:26:94:90:d3:f6:ef:bc: a1:60:99:35:7d:8a:dd:bc:d4:be:5e:64:d7:58:07: bd:11:d7:b6:6b:bd:0f:05:46:ae:1a:5c:01:7a:4a: 4d:29:71:55:be:84:8a:7f:53:02:96:5f:6d:15:77: 11:4a:cc:46:06:f1:eb:85:8f:55:48:f5:c3:66:5c: e7:87:13:eb:dd:2c:94:a4:21:0c:52:5c:62:8f:74: 24:fb:2f:b8:9c:6a:f0:06:5d:26:13:80:41:6d:91: 12:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:98:CB:C7:58:89:C3:85:6A:14:AC:FB:14:F4:34:27:29:5D:39:F2 X509v3 Authority Key Identifier: keyid:77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/FJjLx1iJw4VqFKz7FPQ0JyldOfI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.53.125.0/24 Signature Algorithm: sha256WithRSAEncryption 58:97:f0:fd:80:15:00:f0:f5:f9:54:de:11:e3:9f:d0:85:da: 3e:9a:a6:ea:8d:5e:e9:84:30:8c:41:a6:51:77:3a:74:01:c2: 6f:bd:1c:c4:e7:ed:27:13:6d:63:49:25:d9:c7:c6:a9:67:d7: 50:e1:dd:1c:aa:8a:22:59:26:f2:2d:f4:c4:15:91:bf:22:d5: dd:37:90:89:26:14:a0:27:af:8e:6e:81:0d:b1:31:5b:be:e8: a5:40:1d:58:55:42:b7:78:55:68:5f:c5:d0:49:85:b6:6e:67: 3d:d1:4c:0b:0d:ac:23:29:96:ce:9f:7d:76:97:e2:d6:5c:19: 49:11:ef:0a:29:36:7e:96:54:e9:e9:cc:94:f7:f0:ff:6a:8a: 71:43:f0:1c:1a:32:a0:1d:e2:4e:47:6f:34:be:6b:b6:ee:98: cb:ad:15:54:80:5d:ce:6b:e4:d3:de:c5:71:dd:b1:8d:4f:8d: a7:54:4a:e4:ee:2c:e5:da:be:73:72:b0:a3:6f:bf:a4:db:90: 6f:17:b5:79:ac:e5:7d:fa:6f:4f:d1:9e:2e:61:a2:82:98:a4: 3a:65:74:68:fb:63:53:5b:cb:61:db:7f:8c:1e:a8:a7:74:28: 7a:5a:b9:89:64:2c:80:36:f7:2b:0a:57:bc:98:8c:f7:8d:85: c4:48:01:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Eu6UiFWvQsc9hde9dD5pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NTVjZDhiZTcxZTI5ZTcyZDk2OTBjN2NkNDA4N2I1ZjI2 MTE2ZjAwHhcNMjYwMTAyMDAxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDk4Y2JjNzU4ODljMzg1NmExNGFjZmIxNGY0MzQyNzI5NWQzOWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYKC+hnrIY3vNYMMxXT8nWcV5MYv 6do95CsttUKQkhhWZ2YNmz0nY6r7lOIAk1N4MBSfaxgrCojYDvg3W8qQ5CekG9MA 3SGEIclROfMCzomwyo/Ffgml8XmzHXpro6arVSWQyBgx+Od5uKTSvzx6w/BaBCKZ wOpZVPl7B9TyjwmNwFCImPQW6ebJJWBdSuJZQyy2Gd0kndrOdQRYnSaUkNP277yh YJk1fYrdvNS+XmTXWAe9Ede2a70PBUauGlwBekpNKXFVvoSKf1MCll9tFXcRSsxG BvHrhY9VSPXDZlznhxPr3SyUpCEMUlxij3Qk+y+4nGrwBl0mE4BBbZESswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBSYy8dYicOFahSs+xT0NCcpXTnyMB8GA1UdIwQY MBaAFHdVzYvnHinnLZaQx81Ah7XyYRbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDFYTmktY2VLZWN0bHBESHpVQ0h0ZkpoRnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My83YzBjNTctMTVhOC00MzA3LTg1MGQt ZTAyMWY4Y2U2YzUxLzEvRkpqTHgxaUp3NFZxRkt6N0ZQUTBKeWxkT2ZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My83YzBjNTctMTVhOC00MzA3LTg1MGQtZTAyMWY4Y2U2YzUx LzEvZDFYTmktY2VLZWN0bHBESHpVQ0h0ZkpoRnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTV9MA0G CSqGSIb3DQEBCwUAA4IBAQBYl/D9gBUA8PX5VN4R45/Qhdo+mqbqjV7phDCMQaZR dzp0AcJvvRzE5+0nE21jSSXZx8apZ9dQ4d0cqooiWSbyLfTEFZG/ItXdN5CJJhSg J6+OboENsTFbvuilQB1YVUK3eFVoX8XQSYW2bmc90UwLDawjKZbOn312l+LWXBlJ Ee8KKTZ+llTp6cyU9/D/aopxQ/AcGjKgHeJOR280vmu27pjLrRVUgF3Oa+TT3sVx 3bGNT42nVErk7izl2r5zcrCjb7+k25BvF7V5rOV9+m9P0Z4uYaKCmKQ6ZXRo+2NT W8th23+MHqindCh6WrmJZCyANvcrCle8mIz3jYXESAEz -----END CERTIFICATE-----Generated at Mon Jan 26 20:25:51 2026 by rpki-client