This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/fhF1gg6tTaPV39pNHXzapn66B-4.roa File: fhF1gg6tTaPV39pNHXzapn66B-4.roa (raw, json) Hash identifier: 2B1HxgzGj1c2eVd/8cGSVbgWEoR1+FiouVzHrmQHR7I= Subject key identifier: 7E:11:75:82:0E:AD:4D:A3:D5:DF:DA:4D:1D:7C:DA:A6:7E:BA:07:EE Certificate issuer: /CN=29187f811597dd03513be42f43155bc15a3a0b3f Certificate serial: 019B7758776C7BF1FE4CAE65EA2EBA45DEF5 Authority key identifier: 29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/fhF1gg6tTaPV39pNHXzapn66B-4.roa Signing time: Thu 01 Jan 2026 02:17:24 +0000 ROA not before: Thu 01 Jan 2026 02:17:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58012 IP address blocks: 193.17.70.0/24 maxlen: 24 193.17.179.0/24 maxlen: 24 193.17.193.0/24 maxlen: 24 193.17.220.0/24 maxlen: 24 2a0f:7540::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:77:6c:7b:f1:fe:4c:ae:65:ea:2e:ba:45:de:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29187f811597dd03513be42f43155bc15a3a0b3f Validity Not Before: Jan 1 02:17:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e1175820ead4da3d5dfda4d1d7cdaa67eba07ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:53:19:b2:80:6d:23:de:9c:0c:bb:14:f4:59: 97:2e:14:38:b2:19:d8:95:66:af:db:32:61:b0:52: e4:2f:be:5f:07:29:8c:92:21:4f:e1:09:fa:1b:77: 38:f6:db:58:d2:ec:4e:47:03:33:ba:23:b9:3f:94: 6e:e8:04:9d:e3:7c:b7:63:2b:5d:cd:07:80:30:21: 69:8a:2a:8a:91:49:8e:33:08:e0:f2:a1:eb:df:ee: 8a:0a:ef:84:4e:7b:07:90:29:27:dd:c0:77:e0:7c: 80:c6:94:02:e0:dc:3e:cc:ee:47:3f:46:f7:ef:8b: 37:71:a3:9c:d0:f8:48:aa:cf:ab:cd:0a:53:3c:8d: 87:50:ac:cf:0a:cd:d2:3b:c2:91:60:04:22:93:aa: 20:d3:23:16:c5:27:4a:12:99:89:94:33:b5:01:e3: 5a:86:8b:b3:6e:0c:e4:d2:ad:6d:c0:64:9a:32:c6: e1:2b:42:ba:ca:2e:52:dc:2a:d3:91:f8:69:5d:25: 5f:92:9e:94:a4:19:77:92:52:4c:e7:b7:e6:7a:4e: 64:64:98:a5:33:2c:dc:e4:d3:b7:df:fc:e0:ec:d5: c7:8e:8c:80:0b:48:43:72:97:f7:4e:18:89:35:5b: eb:f3:1f:10:db:7d:90:da:2a:ce:71:e5:fa:b5:b8: 1e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:11:75:82:0E:AD:4D:A3:D5:DF:DA:4D:1D:7C:DA:A6:7E:BA:07:EE X509v3 Authority Key Identifier: keyid:29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/fhF1gg6tTaPV39pNHXzapn66B-4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.70.0/24 193.17.179.0/24 193.17.193.0/24 193.17.220.0/24 IPv6: 2a0f:7540::/29 Signature Algorithm: sha256WithRSAEncryption 2f:24:1e:2b:6d:c1:fb:88:a5:c1:93:02:5a:ec:3f:8e:20:3a: de:16:d8:c2:f5:12:af:e2:3f:6e:2a:8b:1b:57:8d:22:f7:0b: b7:1f:3a:a0:6f:da:f2:c7:c9:88:4a:43:1a:b7:ed:3d:93:fa: 24:36:fa:50:2d:64:2b:fc:76:06:79:de:e0:27:41:73:e6:82: c1:26:4a:63:4b:73:09:7f:64:ac:b3:34:c8:ab:ee:0c:c9:09: 5d:16:89:6f:28:99:63:f1:da:40:bc:ec:18:99:a7:3a:b8:97: f9:cd:cf:4b:ba:9d:3f:89:16:71:65:f0:0b:90:b3:4b:97:37: 5c:9c:4d:41:e9:59:79:c5:2b:48:91:cf:3a:22:0f:84:c7:ae: aa:6b:b5:d7:f1:a5:e4:75:fc:b1:59:6c:a3:b1:b7:9b:7b:57: fa:a4:4d:bc:28:ea:8e:c3:d0:5e:c1:e4:7e:50:00:06:b3:a0: 4b:47:f9:c6:17:66:87:53:b0:d6:f5:e2:13:53:1f:3d:38:97: 23:e3:27:29:57:cf:62:48:28:c9:25:1a:3f:f7:e4:ba:06:29: d2:68:7f:ee:46:e3:73:00:70:08:7e:d6:59:d8:0c:23:33:d2: 1c:5b:81:d3:96:5e:f1:42:a2:16:de:ce:fe:b4:98:f1:33:ea: fe:40:74:dd -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt3WHdse/H+TK5l6i66Rd71MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MTg3ZjgxMTU5N2RkMDM1MTNiZTQyZjQzMTU1YmMxNWEz YTBiM2YwHhcNMjYwMTAxMDIxNzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTExNzU4MjBlYWQ0ZGEzZDVkZmRhNGQxZDdjZGFhNjdlYmEwN2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1MZsoBtI96cDLsU9FmXLhQ4shnY lWav2zJhsFLkL75fBymMkiFP4Qn6G3c49ttY0uxORwMzuiO5P5Ru6ASd43y3Yytd zQeAMCFpiiqKkUmOMwjg8qHr3+6KCu+ETnsHkCkn3cB34HyAxpQC4Nw+zO5HP0b3 74s3caOc0PhIqs+rzQpTPI2HUKzPCs3SO8KRYAQik6og0yMWxSdKEpmJlDO1AeNa houzbgzk0q1twGSaMsbhK0K6yi5S3CrTkfhpXSVfkp6UpBl3klJM57fmek5kZJil Myzc5NO33/zg7NXHjoyAC0hDcpf3ThiJNVvr8x8Q232Q2irOceX6tbgekwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFH4RdYIOrU2j1d/aTR182qZ+ugfuMB8GA1UdIwQY MBaAFCkYf4EVl90DUTvkL0MVW8FaOgs/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1JoX2dSV1gzUU5STy1RdlF4VmJ3Vm82Q3o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC84YzAwNmQtNTBmNS00NDVkLWI3ZTgt MjQ5OTRiMDQwZjQxLzEvZmhGMWdnNnRUYVBWMzlwTkhYemFwbjY2Qi00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC84YzAwNmQtNTBmNS00NDVkLWI3ZTgtMjQ5OTRiMDQwZjQx LzEvS1JoX2dSV1gzUU5STy1RdlF4VmJ3Vm82Q3o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAwRFGAwQA wRGzAwQAwRHBAwQAwRHcMA0EAgACMAcDBQMqD3VAMA0GCSqGSIb3DQEBCwUAA4IB AQAvJB4rbcH7iKXBkwJa7D+OIDreFtjC9RKv4j9uKosbV40i9wu3Hzqgb9ryx8mI SkMat+09k/okNvpQLWQr/HYGed7gJ0Fz5oLBJkpjS3MJf2SsszTIq+4MyQldFolv KJlj8dpAvOwYmac6uJf5zc9Lup0/iRZxZfALkLNLlzdcnE1B6Vl5xStIkc86Ig+E x66qa7XX8aXkdfyxWWyjsbebe1f6pE28KOqOw9BeweR+UAAGs6BLR/nGF2aHU7DW 9eITUx89OJcj4ycpV89iSCjJJRo/9+S6BinSaH/uRuNzAHAIftZZ2AwjM9IcW4HT ll7xQqIW3s7+tJjxM+r+QHTd -----END CERTIFICATE-----Generated at Tue Feb 10 03:06:18 2026 by rpki-client