This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/fPpcTKJECfYoksYEZEcUM_j0qkQ.roa File: fPpcTKJECfYoksYEZEcUM_j0qkQ.roa (raw, json) Hash identifier: E5+q7rc6m3t9onZOzrQMasG/CbDzH+1hOPd2cCu+nT4= Subject key identifier: 7C:FA:5C:4C:A2:44:09:F6:28:92:C6:04:64:47:14:33:F8:F4:AA:44 Certificate issuer: /CN=9d8ada352982a319b54d5e483d34426346733ea4 Certificate serial: 019B7B35659EB557336043A327D66D814A91 Authority key identifier: 9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/fPpcTKJECfYoksYEZEcUM_j0qkQ.roa Signing time: Thu 01 Jan 2026 20:17:35 +0000 ROA not before: Thu 01 Jan 2026 20:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202862 IP address blocks: 194.146.88.0/22 maxlen: 22 194.146.88.0/23 maxlen: 23 194.146.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:65:9e:b5:57:33:60:43:a3:27:d6:6d:81:4a:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d8ada352982a319b54d5e483d34426346733ea4 Validity Not Before: Jan 1 20:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cfa5c4ca24409f62892c60464471433f8f4aa44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c8:4e:fb:8d:66:ab:bb:ee:12:55:ad:77:fa: 69:e4:cf:9d:00:9f:a7:90:29:f2:27:d6:83:f2:28: 0c:e8:81:99:40:d2:d6:1f:41:41:43:a7:2d:f9:b0: 8e:fb:48:31:93:f2:c8:7b:95:a2:18:35:55:e3:c5: 9a:fe:af:a8:6e:33:e2:37:7c:4f:c5:a6:36:85:45: d3:06:94:91:6a:1d:b2:f9:ec:1a:e8:5c:e1:9c:af: 5e:35:66:7c:97:c0:f1:47:e4:65:2b:25:6f:7f:fa: 50:5e:9b:43:9f:96:9a:32:27:5a:06:d1:6b:a4:6d: de:80:79:0f:1f:56:f5:9c:02:2d:38:82:a3:d4:a5: 4b:19:0f:9c:e5:b9:16:d9:49:d7:5b:90:4d:88:27: cc:a4:d7:e9:ef:04:bc:38:94:e5:39:c0:b7:ec:a0: 05:73:ed:bd:86:ba:1e:7c:c0:0b:11:5f:98:97:ea: fe:cc:9b:94:07:18:09:10:2e:b6:7b:c1:03:04:13: 52:69:5c:31:a2:46:72:eb:b7:4d:d8:3a:03:e8:c0: 98:45:f6:78:d1:5a:73:e9:f7:51:56:53:58:55:c3: 37:e9:08:56:32:60:0d:33:02:b7:98:e1:cd:94:d1: cb:ba:8e:d7:b2:49:39:e6:7d:6a:e7:85:b4:1a:2d: ad:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:FA:5C:4C:A2:44:09:F6:28:92:C6:04:64:47:14:33:F8:F4:AA:44 X509v3 Authority Key Identifier: keyid:9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/fPpcTKJECfYoksYEZEcUM_j0qkQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.146.88.0/22 Signature Algorithm: sha256WithRSAEncryption 87:17:c4:43:a6:4e:43:fd:d0:35:fd:56:cf:4a:25:cc:69:4e: 9c:24:57:e8:23:82:95:eb:4e:9e:38:e9:30:df:42:f0:83:fe: 0d:06:1b:f6:04:03:bb:01:93:0f:e0:7b:6d:1a:15:64:49:3f: c2:bc:39:f0:f4:68:b1:00:d7:90:b7:da:cf:31:0f:e5:a4:4d: fd:63:f0:24:f5:6d:13:fa:dc:c1:f4:37:f1:50:d0:0e:86:31: cf:2d:22:81:eb:12:8d:86:a5:12:1d:a4:7b:dd:ee:f3:7f:0c: 2c:76:c3:8e:3d:2f:f9:14:50:77:d0:0c:a9:59:6d:49:4e:b0: 5e:11:9d:70:58:70:47:fc:77:46:35:c8:71:27:a8:db:d4:08: 1d:25:03:64:75:da:f4:07:cd:86:c5:22:97:1f:db:4f:04:e8: 07:4d:01:8c:98:d4:59:d1:5c:10:bb:e2:b4:7f:0a:08:2a:9d: b9:ff:3f:b4:d5:60:11:46:54:e4:e5:a4:16:9c:9d:95:f9:b4: f4:b2:ed:bb:65:13:df:cd:e6:87:58:a1:6e:9c:19:47:ab:f8: 0e:90:2e:38:97:49:9d:eb:6f:a5:d5:d7:c1:b2:49:18:33:7b: d9:d0:03:b0:4b:63:53:a7:1c:0d:e3:b6:2a:1b:8c:ad:3f:d2: 6c:cb:cc:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NWWetVczYEOjJ9ZtgUqRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOGFkYTM1Mjk4MmEzMTliNTRkNWU0ODNkMzQ0MjYzNDY3 MzNlYTQwHhcNMjYwMTAxMjAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2ZhNWM0Y2EyNDQwOWY2Mjg5MmM2MDQ2NDQ3MTQzM2Y4ZjRhYTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7chO+41mq7vuElWtd/pp5M+dAJ+n kCnyJ9aD8igM6IGZQNLWH0FBQ6ct+bCO+0gxk/LIe5WiGDVV48Wa/q+objPiN3xP xaY2hUXTBpSRah2y+ewa6FzhnK9eNWZ8l8DxR+RlKyVvf/pQXptDn5aaMidaBtFr pG3egHkPH1b1nAItOIKj1KVLGQ+c5bkW2UnXW5BNiCfMpNfp7wS8OJTlOcC37KAF c+29hroefMALEV+Yl+r+zJuUBxgJEC62e8EDBBNSaVwxokZy67dN2DoD6MCYRfZ4 0Vpz6fdRVlNYVcM36QhWMmANMwK3mOHNlNHLuo7Xskk55n1q54W0Gi2tawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHz6XEyiRAn2KJLGBGRHFDP49KpEMB8GA1UdIwQY MBaAFJ2K2jUpgqMZtU1eSD00QmNGcz6kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbllyYU5TbUNveG0xVFY1SVBUUkNZMFp6UHFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9mNDg2M2EtYWVhZS00MmY3LWJhMTQt ZWQ0YTEzOGM0MTEzLzEvZlBwY1RLSkVDZllva3NZRVpFY1VNX2owcWtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9mNDg2M2EtYWVhZS00MmY3LWJhMTQtZWQ0YTEzOGM0MTEz LzEvbllyYU5TbUNveG0xVFY1SVBUUkNZMFp6UHFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwpJYMA0G CSqGSIb3DQEBCwUAA4IBAQCHF8RDpk5D/dA1/VbPSiXMaU6cJFfoI4KV606eOOkw 30Lwg/4NBhv2BAO7AZMP4HttGhVkST/CvDnw9GixANeQt9rPMQ/lpE39Y/Ak9W0T +tzB9DfxUNAOhjHPLSKB6xKNhqUSHaR73e7zfwwsdsOOPS/5FFB30AypWW1JTrBe EZ1wWHBH/HdGNchxJ6jb1AgdJQNkddr0B82GxSKXH9tPBOgHTQGMmNRZ0VwQu+K0 fwoIKp25/z+01WARRlTk5aQWnJ2V+bT0su27ZRPfzeaHWKFunBlHq/gOkC44l0md 62+l1dfBskkYM3vZ0AOwS2NTpxwN47YqG4ytP9Jsy8xr -----END CERTIFICATE-----Generated at Tue Feb 10 06:28:41 2026 by rpki-client