This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/Fb4vRJq1T1_0xXAoTq2CvVs9y_E.roa File: Fb4vRJq1T1_0xXAoTq2CvVs9y_E.roa (raw, json) Hash identifier: Vmu1pCF9ffVrz7PWfxFH3xY+/bapkWd0ngS7wWyn6c8= Subject key identifier: 15:BE:2F:44:9A:B5:4F:5F:F4:C5:70:28:4E:AD:82:BD:5B:3D:CB:F1 Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f Certificate serial: 019B7834A1B5794E3B422846C6FA6771428B Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/Fb4vRJq1T1_0xXAoTq2CvVs9y_E.roa Signing time: Thu 01 Jan 2026 06:17:53 +0000 ROA not before: Thu 01 Jan 2026 06:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 93.127.170.0/23 maxlen: 24 93.127.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a1:b5:79:4e:3b:42:28:46:c6:fa:67:71:42:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f Validity Not Before: Jan 1 06:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15be2f449ab54f5ff4c570284ead82bd5b3dcbf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3b:0a:51:6e:95:45:1b:d9:d9:1b:0e:cc:1e: 64:fc:a0:5a:e6:74:0c:fe:9f:9c:85:39:d7:00:f6: 56:df:03:2a:3f:ad:89:4d:4d:9c:26:25:f3:55:bc: 6c:4d:1f:dc:1f:f6:11:40:f1:4e:b7:2c:7a:ff:23: 0b:fd:e7:67:f3:81:72:aa:81:d7:c6:34:e0:15:a6: 5e:3e:5f:3a:87:46:46:af:15:c3:39:d2:91:d3:4f: 9d:96:ef:16:d6:e1:d1:71:39:33:4a:e6:e1:f3:34: 73:12:22:e7:62:1f:e6:55:21:51:33:c8:60:ad:2d: 70:c4:b1:a3:0f:48:5c:fe:27:4b:fb:e0:32:9e:ca: cc:c0:de:27:59:23:5c:d0:c3:7e:0d:61:46:44:d5: e6:30:00:f2:f5:10:16:81:c3:83:73:d4:2c:c3:6a: 0f:d5:ad:52:8f:25:20:d0:83:18:63:49:cf:eb:b6: 77:74:ff:48:ec:2f:5b:44:f9:ec:c2:a1:2a:6a:fa: 06:16:c9:2b:07:3b:f9:50:ee:48:de:77:49:2c:28: 69:b9:da:18:f5:3d:39:bf:ac:07:1f:fa:0c:6d:74: 9e:71:e3:64:57:28:c8:19:39:e6:78:b6:d2:5d:d7: da:1b:63:26:de:e9:bb:02:df:8a:8b:17:63:f2:c0: 4f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:BE:2F:44:9A:B5:4F:5F:F4:C5:70:28:4E:AD:82:BD:5B:3D:CB:F1 X509v3 Authority Key Identifier: keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/Fb4vRJq1T1_0xXAoTq2CvVs9y_E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.127.170.0/23 93.127.176.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:5c:6e:e5:c6:08:94:4a:47:fd:9b:36:d4:30:54:c9:eb:ae: e6:7b:5a:fc:d3:d6:df:27:21:da:78:35:c8:ba:72:49:6b:11: 99:08:e6:cb:5c:4a:42:53:56:16:e7:e8:e4:3d:3a:88:d2:25: 89:bb:f8:ee:ba:95:7b:56:c5:44:bf:5a:a7:e3:38:f7:e0:72: 8c:96:81:4b:b1:37:bf:54:0c:be:22:d2:1a:5f:94:84:51:90: 50:9f:f7:63:9f:64:5b:a4:13:3f:0a:0e:7b:26:95:3c:b5:5d: eb:85:d2:99:a2:05:63:94:ca:36:c1:d9:0d:48:3e:a2:d1:4a: 55:74:30:9c:7a:a1:d3:1b:c4:47:7d:18:bf:60:85:29:f6:13: 3b:c7:41:2f:2d:99:e9:46:01:00:8a:24:31:cb:7c:27:b8:bb: cd:55:b4:79:71:e3:9f:fe:21:b1:74:ce:75:a8:4a:e5:b8:44: e7:89:9e:cd:f6:c5:80:a6:b1:27:9a:40:ae:87:d6:9b:78:48: 2b:49:7e:51:d2:3b:5e:c0:af:5c:17:f4:fd:47:11:80:97:da: 26:ec:85:6a:5e:64:f6:7e:ad:6b:fe:e6:e1:50:bb:ad:d9:b6: b2:00:85:ec:5b:d8:16:1e:c2:20:cc:d1:5c:8b:57:a3:f5:a3: e3:20:56:11 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NKG1eU47QihGxvpncUKLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2 ZGRlNmYwHhcNMjYwMTAxMDYxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWJlMmY0NDlhYjU0ZjVmZjRjNTcwMjg0ZWFkODJiZDViM2RjYmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujsKUW6VRRvZ2RsOzB5k/KBa5nQM /p+chTnXAPZW3wMqP62JTU2cJiXzVbxsTR/cH/YRQPFOtyx6/yML/edn84FyqoHX xjTgFaZePl86h0ZGrxXDOdKR00+dlu8W1uHRcTkzSubh8zRzEiLnYh/mVSFRM8hg rS1wxLGjD0hc/idL++AynsrMwN4nWSNc0MN+DWFGRNXmMADy9RAWgcODc9Qsw2oP 1a1SjyUg0IMYY0nP67Z3dP9I7C9bRPnswqEqavoGFskrBzv5UO5I3ndJLChpudoY 9T05v6wHH/oMbXSeceNkVyjIGTnmeLbSXdfaG2Mm3um7At+Kixdj8sBPIwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBW+L0SatU9f9MVwKE6tgr1bPcvxMB8GA1UdIwQY MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt NDQxNDU1OGZkY2JiLzEvRmI0dlJKcTFUMV8weFhBb1RxMkN2VnM5eV9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXX+qAwQB XX+wMA0GCSqGSIb3DQEBCwUAA4IBAQB/XG7lxgiUSkf9mzbUMFTJ667me1r809bf JyHaeDXIunJJaxGZCObLXEpCU1YW5+jkPTqI0iWJu/juupV7VsVEv1qn4zj34HKM loFLsTe/VAy+ItIaX5SEUZBQn/djn2RbpBM/Cg57JpU8tV3rhdKZogVjlMo2wdkN SD6i0UpVdDCceqHTG8RHfRi/YIUp9hM7x0EvLZnpRgEAiiQxy3wnuLvNVbR5ceOf /iGxdM51qErluETniZ7N9sWAprEnmkCuh9abeEgrSX5R0jtewK9cF/T9RxGAl9om 7IVqXmT2fq1r/ubhULut2bayAIXsW9gWHsIgzNFci1ej9aPjIFYR -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:25 2026 by rpki-client