This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/FyAQ7KHBcpPkx5U9fofY7rznr3Y.roa File: FyAQ7KHBcpPkx5U9fofY7rznr3Y.roa (raw, json) Hash identifier: 8O/estrVT/MzJfWmoEYtW+DS6mw0QdLpZG0YuaeNrsU= Subject key identifier: 17:20:10:EC:A1:C1:72:93:E4:C7:95:3D:7E:87:D8:EE:BC:E7:AF:76 Certificate issuer: /CN=bf98e8170959b5e6018f602b3a7487b2d8028106 Certificate serial: 019B79ED32505759095ED1471955C91B0A35 Authority key identifier: BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/FyAQ7KHBcpPkx5U9fofY7rznr3Y.roa Signing time: Thu 01 Jan 2026 14:19:06 +0000 ROA not before: Thu 01 Jan 2026 14:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47631 IP address blocks: 93.187.224.0/21 maxlen: 21 93.187.224.0/24 maxlen: 24 93.187.225.0/24 maxlen: 24 93.187.226.0/24 maxlen: 24 93.187.227.0/24 maxlen: 24 93.187.228.0/24 maxlen: 24 93.187.229.0/24 maxlen: 24 93.187.230.0/24 maxlen: 24 93.187.231.0/24 maxlen: 24 185.34.124.0/24 maxlen: 24 185.34.127.0/24 maxlen: 24 2a00:9460::/32 maxlen: 32 2a00:9461::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:32:50:57:59:09:5e:d1:47:19:55:c9:1b:0a:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf98e8170959b5e6018f602b3a7487b2d8028106 Validity Not Before: Jan 1 14:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=172010eca1c17293e4c7953d7e87d8eebce7af76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:48:02:8f:ca:92:e8:6f:a6:c3:d4:b1:97:8a: 15:23:30:a1:96:10:9d:81:c1:49:5d:32:1b:97:ac: 70:0d:19:6d:3b:2b:c4:c4:80:56:f7:9a:5b:8c:e2: d0:c4:2e:41:85:01:f4:b8:5e:a4:ed:cd:cf:1b:f9: 8a:72:a7:c6:02:e0:d6:72:6f:8f:bb:39:71:07:44: 9e:13:e9:8d:70:99:ab:e5:03:de:82:c3:b9:08:d3: ff:bc:fd:ef:9e:7b:a3:0e:48:2c:11:91:ce:fa:4a: a7:1d:ee:f4:53:f7:a6:5b:9c:06:7f:9e:7e:e6:b5: 50:eb:d7:0b:67:97:ca:6a:7c:16:f6:69:ef:0a:10: bf:b6:e1:e3:7f:50:2c:31:0e:26:3c:43:5f:23:2c: 34:b3:5e:49:c5:29:ef:3f:e2:ee:84:49:c8:1c:06: 71:eb:6e:19:bb:08:92:a6:07:5c:39:4e:54:49:56: 5a:81:a5:23:08:eb:dd:70:a2:d9:66:56:65:7e:40: 5c:ed:64:37:61:2a:92:ae:bc:83:59:56:45:d8:d5: c0:cb:4f:46:19:a3:7b:12:0a:ff:1a:1c:6e:e1:e4: 3c:75:9b:2d:51:1e:81:83:30:38:aa:6a:93:09:ce: 5f:92:01:2a:b0:b4:c1:49:af:f9:23:d0:4c:eb:a4: ba:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:20:10:EC:A1:C1:72:93:E4:C7:95:3D:7E:87:D8:EE:BC:E7:AF:76 X509v3 Authority Key Identifier: keyid:BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/FyAQ7KHBcpPkx5U9fofY7rznr3Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.187.224.0/21 185.34.124.0/24 185.34.127.0/24 IPv6: 2a00:9460::/31 Signature Algorithm: sha256WithRSAEncryption 45:d8:b0:ee:00:fc:8e:00:07:3a:81:21:5b:10:60:b7:a7:c0: a5:6a:43:bf:d3:bf:eb:1f:92:86:c8:12:65:e5:15:98:8d:04: e3:f5:ed:ec:01:82:b1:87:86:4f:33:0c:01:67:bd:28:7e:0e: de:34:f2:3c:52:dc:c6:3c:af:ca:4c:f8:74:a6:2a:51:21:ca: ef:75:54:63:8c:39:9e:3c:c0:3d:f6:a2:89:bf:69:79:ae:9b: 1e:6c:35:a2:cd:21:12:d1:70:22:78:4d:9c:77:6b:3e:cb:fc: 43:aa:01:b3:1f:28:27:da:c1:08:59:92:0b:59:c6:8e:8f:fe: 5c:8d:91:fa:5e:e8:06:39:f2:21:a1:65:44:30:85:15:58:ac: 5a:87:3f:0d:f1:cd:d8:22:e5:bc:63:45:16:4e:1d:f6:fc:99: 25:55:89:fc:26:fc:04:cb:59:69:9f:b8:4f:88:0c:46:ad:09: f3:9b:71:a6:44:3a:a8:e8:79:96:61:4f:79:ca:cd:95:af:4d: 60:a7:0d:88:41:cf:8d:82:7d:29:9d:40:a1:78:82:13:c5:6f: 3a:cf:23:38:38:4d:cd:f0:52:5c:57:3e:1d:80:cd:27:05:19: c8:ad:3e:6c:68:4c:a7:62:dd:69:c4:2e:1e:90:ca:bc:8a:db: b0:02:df:dd -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt57TJQV1kJXtFHGVXJGwo1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmOThlODE3MDk1OWI1ZTYwMThmNjAyYjNhNzQ4N2IyZDgw MjgxMDYwHhcNMjYwMTAxMTQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzIwMTBlY2ExYzE3MjkzZTRjNzk1M2Q3ZTg3ZDhlZWJjZTdhZjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0gCj8qS6G+mw9Sxl4oVIzChlhCd gcFJXTIbl6xwDRltOyvExIBW95pbjOLQxC5BhQH0uF6k7c3PG/mKcqfGAuDWcm+P uzlxB0SeE+mNcJmr5QPegsO5CNP/vP3vnnujDkgsEZHO+kqnHe70U/emW5wGf55+ 5rVQ69cLZ5fKanwW9mnvChC/tuHjf1AsMQ4mPENfIyw0s15JxSnvP+LuhEnIHAZx 624ZuwiSpgdcOU5USVZagaUjCOvdcKLZZlZlfkBc7WQ3YSqSrryDWVZF2NXAy09G GaN7Egr/Ghxu4eQ8dZstUR6BgzA4qmqTCc5fkgEqsLTBSa/5I9BM66S6UQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFBcgEOyhwXKT5MeVPX6H2O685692MB8GA1UdIwQY MBaAFL+Y6BcJWbXmAY9gKzp0h7LYAoEGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjVqb0Z3bFp0ZVlCajJBck9uU0hzdGdDZ1FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yM2ZiMWEtYTc5MS00MDBjLWE0MWEt NDhjZWVkNWU0MzhlLzEvRnlBUTdLSEJjcFBreDVVOWZvZlk3cnpucjNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8yM2ZiMWEtYTc5MS00MDBjLWE0MWEtNDhjZWVkNWU0Mzhl LzEvdjVqb0Z3bFp0ZVlCajJBck9uU0hzdGdDZ1FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDXbvgAwQA uSJ8AwQAuSJ/MA0EAgACMAcDBQEqAJRgMA0GCSqGSIb3DQEBCwUAA4IBAQBF2LDu APyOAAc6gSFbEGC3p8ClakO/07/rH5KGyBJl5RWYjQTj9e3sAYKxh4ZPMwwBZ70o fg7eNPI8UtzGPK/KTPh0pipRIcrvdVRjjDmePMA99qKJv2l5rpsebDWizSES0XAi eE2cd2s+y/xDqgGzHygn2sEIWZILWcaOj/5cjZH6XugGOfIhoWVEMIUVWKxahz8N 8c3YIuW8Y0UWTh32/JklVYn8JvwEy1lpn7hPiAxGrQnzm3GmRDqo6HmWYU95ys2V r01gpw2IQc+Ngn0pnUCheIITxW86zyM4OE3N8FJcVz4dgM0nBRnIrT5saEynYt1p xC4ekMq8ituwAt/d -----END CERTIFICATE-----Generated at Tue Feb 10 00:10:00 2026 by rpki-client