This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jFbwQkcGhyQRzeItk2RwuQnzkSc.roa File: jFbwQkcGhyQRzeItk2RwuQnzkSc.roa (raw, json) Hash identifier: xdTrH2Hpw0bGvA/mPnAyFjvXEmrQa5yqdaDyqhBJIHk= Subject key identifier: 8C:56:F0:42:47:06:87:24:11:CD:E2:2D:93:64:70:B9:09:F3:91:27 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF19D337400B217E9ABFCC6F735CA5E Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jFbwQkcGhyQRzeItk2RwuQnzkSc.roa Signing time: Fri 02 Jan 2026 18:21:39 +0000 ROA not before: Fri 02 Jan 2026 18:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2856 IP address blocks: 193.111.4.0/24 maxlen: 24 193.111.5.0/24 maxlen: 24 193.111.18.0/24 maxlen: 24 193.111.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:9d:33:74:00:b2:17:e9:ab:fc:c6:f7:35:ca:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c56f0424706872411cde22d936470b909f39127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:72:87:ee:b9:6c:2d:82:30:95:f2:f8:19:59: 42:1d:81:51:28:65:23:c2:5d:8a:c1:5e:2b:83:bf: 31:2a:a3:ad:35:a9:ea:16:75:de:12:c9:e9:25:7e: 50:86:a7:91:b8:e1:f9:a9:e9:0e:a6:fd:f5:bd:5f: 19:a9:74:7a:44:19:73:1b:29:da:0f:ac:53:21:92: bd:58:ac:da:99:1f:01:7a:13:19:49:a1:12:c4:10: 18:e9:98:61:54:37:7e:63:b0:59:61:ae:e5:66:06: dc:47:7b:e1:93:1b:69:3d:49:c8:43:18:e2:03:5c: 95:d0:f0:ea:59:66:b7:3b:bc:6f:34:62:f7:e6:97: 8c:7c:17:f5:70:2f:ec:b5:b2:ea:1e:9d:a3:b0:60: d5:87:95:ec:21:7e:2c:3e:cf:24:41:c6:4b:a7:9c: ae:cf:9b:3d:c2:78:db:bb:07:b5:ff:f4:ab:67:df: c9:62:e6:ba:40:89:54:60:da:70:0a:9e:9a:09:5e: 1e:d3:13:2b:08:48:92:49:6f:e9:d5:29:0a:fa:df: 96:51:37:7f:16:8c:f5:a1:2f:95:16:cf:53:0e:77: 4f:b5:34:8a:39:c8:04:42:b4:e6:69:a7:a1:98:91: 96:12:91:2b:04:df:df:72:98:a1:93:d4:cd:8a:2a: a5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:56:F0:42:47:06:87:24:11:CD:E2:2D:93:64:70:B9:09:F3:91:27 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jFbwQkcGhyQRzeItk2RwuQnzkSc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.4.0/23 193.111.18.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:a7:bb:a9:b2:55:05:5b:b5:81:50:08:77:4c:6e:d2:6e:8a: fe:c9:b7:1b:b6:32:dc:d4:b5:1d:1a:ed:34:a7:0a:9d:01:3c: e8:d4:cd:b7:12:db:7f:82:5e:f3:76:c8:ca:a3:6e:f6:9c:75: 7e:34:3b:f0:91:d2:62:63:e9:c5:02:53:82:29:40:b4:24:77: 89:84:c6:00:ad:63:25:51:26:b2:0b:ab:ef:47:26:b0:ed:11: 3b:2a:7e:f1:4d:45:9e:3f:c0:25:b0:04:2f:98:f7:6e:a2:50: bb:9b:02:9d:33:04:22:50:c0:52:64:b6:61:cb:48:aa:d3:af: 39:1f:57:26:ed:d9:9c:b7:0d:b9:5e:29:d1:c2:04:10:03:13: d4:b0:bf:c3:bd:bc:41:fd:61:2d:08:44:86:99:42:29:b9:14: 59:c3:8b:5a:5d:7e:e4:b1:78:c4:03:52:15:ab:e0:3d:ea:48: 8c:2c:1b:00:86:73:96:2b:2e:ae:ad:7d:97:d2:0f:9f:70:1c: 8e:aa:30:04:ce:fc:6e:9c:39:01:9b:ab:ca:a8:e5:00:37:ad: be:54:b2:c4:94:e7:fb:39:56:d7:16:54:1d:c8:41:70:3b:d3: e1:e9:1e:44:c4:10:02:ac:3e:d0:3b:fa:3c:64:23:6a:f3:c2: f5:dd:5e:48 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8Z0zdACyF+mr/Mb3NcpeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzU2ZjA0MjQ3MDY4NzI0MTFjZGUyMmQ5MzY0NzBiOTA5ZjM5MTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHKH7rlsLYIwlfL4GVlCHYFRKGUj wl2KwV4rg78xKqOtNanqFnXeEsnpJX5QhqeRuOH5qekOpv31vV8ZqXR6RBlzGyna D6xTIZK9WKzamR8BehMZSaESxBAY6ZhhVDd+Y7BZYa7lZgbcR3vhkxtpPUnIQxji A1yV0PDqWWa3O7xvNGL35peMfBf1cC/stbLqHp2jsGDVh5XsIX4sPs8kQcZLp5yu z5s9wnjbuwe1//SrZ9/JYua6QIlUYNpwCp6aCV4e0xMrCEiSSW/p1SkK+t+WUTd/ Foz1oS+VFs9TDndPtTSKOcgEQrTmaaehmJGWEpErBN/fcpihk9TNiiqlRwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIxW8EJHBockEc3iLZNkcLkJ85EnMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvakZid1FrY0doeVFSemVJdGsyUnd1UW56a1NjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwW8EAwQB wW8SMA0GCSqGSIb3DQEBCwUAA4IBAQB+p7upslUFW7WBUAh3TG7Sbor+ybcbtjLc 1LUdGu00pwqdATzo1M23Ett/gl7zdsjKo272nHV+NDvwkdJiY+nFAlOCKUC0JHeJ hMYArWMlUSayC6vvRyaw7RE7Kn7xTUWeP8AlsAQvmPduolC7mwKdMwQiUMBSZLZh y0iq0685H1cm7dmctw25XinRwgQQAxPUsL/DvbxB/WEtCESGmUIpuRRZw4taXX7k sXjEA1IVq+A96kiMLBsAhnOWKy6urX2X0g+fcByOqjAEzvxunDkBm6vKqOUAN62+ VLLElOf7OVbXFlQdyEFwO9Ph6R5ExBACrD7QO/o8ZCNq88L13V5I -----END CERTIFICATE-----Generated at Thu Jan 8 17:35:02 2026 by rpki-client