This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/fMwFtlYuiX_w2A3KeXT69xVYzQY.roa File: fMwFtlYuiX_w2A3KeXT69xVYzQY.roa (raw, json) Hash identifier: HDxC3sfVC2J2+N7eO2SPFGWLSEvIdJyreKLtso0sSj8= Subject key identifier: 7C:CC:05:B6:56:2E:89:7F:F0:D8:0D:CA:79:74:FA:F7:15:58:CD:06 Certificate issuer: /CN=c098914cb0a945440f84deaf3f3d97fc77fd26ce Certificate serial: 019B797E6F56634B5628B9DA4F1D9F36A1D2 Authority key identifier: C0:98:91:4C:B0:A9:45:44:0F:84:DE:AF:3F:3D:97:FC:77:FD:26:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/fMwFtlYuiX_w2A3KeXT69xVYzQY.roa Signing time: Thu 01 Jan 2026 12:18:07 +0000 ROA not before: Thu 01 Jan 2026 12:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 193.25.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.crl rsync://rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.mft rsync://rpki.ripe.net/repository/DEFAULT/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:6f:56:63:4b:56:28:b9:da:4f:1d:9f:36:a1:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c098914cb0a945440f84deaf3f3d97fc77fd26ce Validity Not Before: Jan 1 12:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ccc05b6562e897ff0d80dca7974faf71558cd06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:87:3e:f2:2e:d3:7c:a5:89:f5:7a:ae:a5:5a: 9a:5d:a0:6c:d6:6e:38:76:03:c7:85:76:e0:ab:b5: 22:18:bd:4a:1a:d3:64:a6:62:46:20:df:cc:04:1e: a3:7d:34:c4:d6:0f:a3:15:e0:3f:fa:43:3a:8f:3f: 6b:1e:4f:ff:08:78:64:ce:c0:1b:89:c4:37:da:4c: d2:05:cd:16:b5:01:1c:9b:59:98:9f:35:3a:87:79: 29:1d:63:22:85:91:3b:5e:61:c9:ab:61:2a:0c:a3: ea:12:9f:42:30:9d:81:5a:aa:3e:6e:aa:32:49:e8: 52:8c:39:24:c3:12:a4:d0:5a:06:a2:01:3a:32:01: 22:3d:8d:e9:36:59:9a:fe:47:19:78:dd:7c:ef:85: 58:4d:f6:59:79:d0:59:10:17:12:07:72:91:d9:58: 05:11:b0:9a:8f:ef:ee:7e:89:f3:10:4c:bc:39:6c: 53:f0:c5:d9:4e:3b:6f:22:dc:e2:22:10:9d:88:57: a9:86:30:ff:37:c5:e9:37:fa:7c:a7:f7:f3:46:f4: 33:06:ef:07:19:77:a9:ff:7b:be:7d:d0:40:43:a4: 88:ef:7b:2c:1b:e2:22:67:63:b5:66:a1:46:f8:f9: 3e:06:49:7c:ad:82:06:5d:72:39:0b:b0:c5:91:51: 47:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CC:05:B6:56:2E:89:7F:F0:D8:0D:CA:79:74:FA:F7:15:58:CD:06 X509v3 Authority Key Identifier: keyid:C0:98:91:4C:B0:A9:45:44:0F:84:DE:AF:3F:3D:97:FC:77:FD:26:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/fMwFtlYuiX_w2A3KeXT69xVYzQY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.25.16.0/20 Signature Algorithm: sha256WithRSAEncryption 3f:ab:ae:ce:af:93:1b:e7:7e:0b:47:5d:6b:f0:1c:38:04:ae: 41:c8:c3:51:a1:7a:0c:20:ed:a8:58:5a:9a:1b:30:65:4a:07: 13:20:2e:eb:06:73:ee:72:35:a4:4c:25:5a:72:e8:8e:49:7d: a2:1e:67:8d:6f:a4:5c:30:07:68:bf:78:31:a8:65:23:14:7c: a5:fe:f1:26:36:55:d6:1e:03:6e:66:f6:80:1b:63:33:5f:d0: 17:d6:ed:19:13:af:55:ec:d3:fc:60:70:78:c8:f3:a4:4f:4e: 33:05:ab:fe:0f:fc:b9:79:6b:78:8f:ae:43:f9:09:39:2f:db: 6d:24:90:d8:13:21:86:de:11:c4:6b:8e:d5:ad:f6:1b:b8:02: ba:a5:18:6f:9d:f6:0b:6f:48:b1:81:aa:7e:56:eb:30:ef:f5: 70:05:ef:b2:cd:e7:05:bb:82:b4:b2:24:31:08:f4:19:93:41: e0:eb:e6:c8:ae:0a:2e:80:5c:8d:e7:12:98:5d:32:03:cd:98: 1d:a8:36:51:02:5f:67:7a:0a:85:a7:49:5b:21:87:60:3f:a7: 45:61:b9:cc:be:ab:69:6f:bc:1f:9a:cc:f5:bc:ea:2f:6e:2e: 26:76:ec:54:c6:0e:ff:cb:88:aa:83:18:ba:a4:3e:f8:f6:63: 77:18:89:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fm9WY0tWKLnaTx2fNqHSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwOTg5MTRjYjBhOTQ1NDQwZjg0ZGVhZjNmM2Q5N2ZjNzdm ZDI2Y2UwHhcNMjYwMTAxMTIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2NjMDViNjU2MmU4OTdmZjBkODBkY2E3OTc0ZmFmNzE1NThjZDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4c+8i7TfKWJ9XqupVqaXaBs1m44 dgPHhXbgq7UiGL1KGtNkpmJGIN/MBB6jfTTE1g+jFeA/+kM6jz9rHk//CHhkzsAb icQ32kzSBc0WtQEcm1mYnzU6h3kpHWMihZE7XmHJq2EqDKPqEp9CMJ2BWqo+bqoy SehSjDkkwxKk0FoGogE6MgEiPY3pNlma/kcZeN1874VYTfZZedBZEBcSB3KR2VgF EbCaj+/ufonzEEy8OWxT8MXZTjtvItziIhCdiFephjD/N8XpN/p8p/fzRvQzBu8H GXep/3u+fdBAQ6SI73ssG+IiZ2O1ZqFG+Pk+Bkl8rYIGXXI5C7DFkVFHewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHzMBbZWLol/8NgNynl0+vcVWM0GMB8GA1UdIwQY MBaAFMCYkUywqUVED4Terz89l/x3/SbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0ppUlRMQ3BSVVFQaE42dlB6MlhfSGY5SnM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny80ZjA4YTUtNDMyZi00OGZjLWJkOGIt ZmI3MWJkNDU0NWIwLzEvZk13RnRsWXVpWF93MkEzS2VYVDY5eFZZelFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny80ZjA4YTUtNDMyZi00OGZjLWJkOGItZmI3MWJkNDU0NWIw LzEvd0ppUlRMQ3BSVVFQaE42dlB6MlhfSGY5SnM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwRkQMA0G CSqGSIb3DQEBCwUAA4IBAQA/q67Or5Mb534LR11r8Bw4BK5ByMNRoXoMIO2oWFqa GzBlSgcTIC7rBnPucjWkTCVacuiOSX2iHmeNb6RcMAdov3gxqGUjFHyl/vEmNlXW HgNuZvaAG2MzX9AX1u0ZE69V7NP8YHB4yPOkT04zBav+D/y5eWt4j65D+Qk5L9tt JJDYEyGG3hHEa47VrfYbuAK6pRhvnfYLb0ixgap+Vusw7/VwBe+yzecFu4K0siQx CPQZk0Hg6+bIrgougFyN5xKYXTIDzZgdqDZRAl9negqFp0lbIYdgP6dFYbnMvqtp b7wfmsz1vOovbi4mduxUxg7/y4iqgxi6pD749mN3GIkV -----END CERTIFICATE-----Generated at Tue Jan 27 11:26:00 2026 by rpki-client