This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/vV3xBVfkG0M0NoQ2SxPY7yKei30.roa File: vV3xBVfkG0M0NoQ2SxPY7yKei30.roa (raw, json) Hash identifier: MMyfN4QSow3i88Wo+okKaUSdkHZvrx0YE/Konxtq/wk= Subject key identifier: BD:5D:F1:05:57:E4:1B:43:34:36:84:36:4B:13:D8:EF:22:9E:8B:7D Certificate issuer: /CN=fc4b8573ca0ebb478e008f70afa08ae58b7869a5 Certificate serial: 019B7EA690CDA49303C918AA3250766C9660 Authority key identifier: FC:4B:85:73:CA:0E:BB:47:8E:00:8F:70:AF:A0:8A:E5:8B:78:69:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/vV3xBVfkG0M0NoQ2SxPY7yKei30.roa Signing time: Fri 02 Jan 2026 12:20:03 +0000 ROA not before: Fri 02 Jan 2026 12:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12329 IP address blocks: 194.156.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.mft rsync://rpki.ripe.net/repository/DEFAULT/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:90:cd:a4:93:03:c9:18:aa:32:50:76:6c:96:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc4b8573ca0ebb478e008f70afa08ae58b7869a5 Validity Not Before: Jan 2 12:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd5df10557e41b43343684364b13d8ef229e8b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:35:b6:f1:bd:fc:8b:73:1b:7c:32:87:b3:6b: 8d:fb:9d:99:e8:7b:57:cc:6f:49:cd:84:0d:c8:49: 8a:3f:b6:04:fc:b1:fd:a3:53:88:07:b5:f8:98:48: be:22:e7:d5:99:ad:e4:1a:22:80:e5:b2:09:73:7c: 21:4c:65:3e:e5:78:99:30:16:6a:4e:b6:67:2e:e8: b4:c1:34:fb:d2:55:5e:56:aa:6f:01:94:14:74:f1: a6:ce:3c:56:15:62:82:8b:18:39:b1:71:f1:c7:25: ab:39:71:b3:d6:e3:da:a2:10:27:36:18:b9:ae:60: 22:f6:cb:37:be:88:77:90:fd:32:fb:84:1c:cc:e4: f2:90:7e:0b:e4:c1:e4:ab:c8:0e:ce:0c:fd:cc:f4: e5:2c:f1:b8:23:58:61:ee:b9:cf:a9:04:9a:4c:64: 06:79:d8:de:20:e5:65:ea:ac:f1:46:4e:f5:25:2a: 4e:a3:43:54:28:b8:75:5b:3e:59:81:ca:99:7e:4e: cd:fe:22:38:f9:da:56:3b:e8:0d:0a:1b:3c:de:4a: 42:1e:d3:7d:8d:6a:f8:da:56:c9:37:9f:88:0c:79: 2c:32:f2:70:52:4b:96:92:89:e5:5f:42:e8:d1:df: 84:f7:a4:cd:a2:14:7a:49:c6:92:54:2b:e5:68:34: c2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:5D:F1:05:57:E4:1B:43:34:36:84:36:4B:13:D8:EF:22:9E:8B:7D X509v3 Authority Key Identifier: keyid:FC:4B:85:73:CA:0E:BB:47:8E:00:8F:70:AF:A0:8A:E5:8B:78:69:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/vV3xBVfkG0M0NoQ2SxPY7yKei30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.156.86.0/24 Signature Algorithm: sha256WithRSAEncryption 88:93:a3:1e:20:6b:1b:70:27:18:1a:b3:71:87:57:93:7c:fd: 20:52:53:77:07:06:8f:34:c7:36:03:9c:26:9f:8a:3a:b8:2e: 0d:74:d1:85:26:32:78:33:fb:53:ac:2f:f5:c6:ba:77:7f:92: 4b:3b:2e:2e:3f:b1:4b:fc:7c:7e:19:ef:39:94:5f:ea:93:02: 27:46:10:e0:93:46:76:51:a3:b8:38:a1:3b:9e:dc:5b:f2:f3: fb:6f:10:0e:d1:b0:91:4e:c4:2b:a3:90:dc:b8:d4:a6:70:da: 44:87:13:1d:9c:a7:73:2d:f1:83:c3:30:2d:0c:02:51:35:65: 54:fb:32:98:a6:a1:7d:95:0b:e4:35:71:52:66:7f:ae:d6:3a: 44:8e:4a:8e:43:84:7f:37:8c:e1:6c:64:79:47:6e:c4:60:6e: 58:43:ed:06:03:9b:45:90:08:09:05:65:40:31:81:17:72:c4: d8:96:ee:39:b5:2a:41:f6:ca:05:f5:65:6c:a1:b9:f4:c1:7f: 6c:cf:17:e6:4f:44:11:e7:40:4e:72:27:f4:41:b1:f6:ba:4d: 34:26:4b:74:3a:5b:6e:53:bf:74:69:36:72:96:57:bc:3c:65: ae:88:54:68:dc:b4:f6:21:44:f6:00:16:ce:30:84:2f:e8:8b: a0:16:f3:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ppDNpJMDyRiqMlB2bJZgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNGI4NTczY2EwZWJiNDc4ZTAwOGY3MGFmYTA4YWU1OGI3 ODY5YTUwHhcNMjYwMTAyMTIyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDVkZjEwNTU3ZTQxYjQzMzQzNjg0MzY0YjEzZDhlZjIyOWU4YjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTW28b38i3MbfDKHs2uN+52Z6HtX zG9JzYQNyEmKP7YE/LH9o1OIB7X4mEi+IufVma3kGiKA5bIJc3whTGU+5XiZMBZq TrZnLui0wTT70lVeVqpvAZQUdPGmzjxWFWKCixg5sXHxxyWrOXGz1uPaohAnNhi5 rmAi9ss3voh3kP0y+4QczOTykH4L5MHkq8gOzgz9zPTlLPG4I1hh7rnPqQSaTGQG edjeIOVl6qzxRk71JSpOo0NUKLh1Wz5ZgcqZfk7N/iI4+dpWO+gNChs83kpCHtN9 jWr42lbJN5+IDHksMvJwUkuWkonlX0Lo0d+E96TNohR6ScaSVCvlaDTCGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL1d8QVX5BtDNDaENksT2O8inot9MB8GA1UdIwQY MBaAFPxLhXPKDrtHjgCPcK+giuWLeGmlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0V1RmM4b091MGVPQUk5d3I2Q0s1WXQ0YWFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9lODkyYTEtY2I1ZC00MWQyLTkwNzgt YTM5MDBmZjQ1NDUxLzEvdlYzeEJWZmtHME0wTm9RMlN4UFk3eUtlaTMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9lODkyYTEtY2I1ZC00MWQyLTkwNzgtYTM5MDBmZjQ1NDUx LzEvX0V1RmM4b091MGVPQUk5d3I2Q0s1WXQ0YWFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpxWMA0G CSqGSIb3DQEBCwUAA4IBAQCIk6MeIGsbcCcYGrNxh1eTfP0gUlN3BwaPNMc2A5wm n4o6uC4NdNGFJjJ4M/tTrC/1xrp3f5JLOy4uP7FL/Hx+Ge85lF/qkwInRhDgk0Z2 UaO4OKE7ntxb8vP7bxAO0bCRTsQro5DcuNSmcNpEhxMdnKdzLfGDwzAtDAJRNWVU +zKYpqF9lQvkNXFSZn+u1jpEjkqOQ4R/N4zhbGR5R27EYG5YQ+0GA5tFkAgJBWVA MYEXcsTYlu45tSpB9soF9WVsobn0wX9szxfmT0QR50BOcif0QbH2uk00Jkt0Oltu U790aTZylle8PGWuiFRo3LT2IUT2ABbOMIQv6IugFvMp -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:50 2026 by rpki-client