This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/fTj8VjA3jlGkhYbcidRdlQKvw2s.roa File: fTj8VjA3jlGkhYbcidRdlQKvw2s.roa (raw, json) Hash identifier: jRzOWOgwnHuf2EMT7ZgwseHhtj6/xt+nW051JNR2aY4= Subject key identifier: 7D:38:FC:56:30:37:8E:51:A4:85:86:DC:89:D4:5D:95:02:AF:C3:6B Certificate issuer: /CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23 Certificate serial: 019B7EA6850E6526B3E68D1B00DE2A875143 Authority key identifier: 4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/fTj8VjA3jlGkhYbcidRdlQKvw2s.roa Signing time: Fri 02 Jan 2026 12:20:00 +0000 ROA not before: Fri 02 Jan 2026 12:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200356 IP address blocks: 5.42.197.0/24 maxlen: 24 62.182.100.0/23 maxlen: 24 193.84.18.0/24 maxlen: 24 2a02:4bb::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:85:0e:65:26:b3:e6:8d:1b:00:de:2a:87:51:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23 Validity Not Before: Jan 2 12:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d38fc5630378e51a48586dc89d45d9502afc36b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a7:3e:42:2e:e1:cf:e6:2f:f3:e0:6d:e7:3f: 8f:57:b8:2d:45:c4:e9:39:d5:06:65:8c:c2:b7:8e: 88:d7:fb:b4:ce:d5:75:2f:4e:d4:83:c7:e6:96:fc: 7a:7c:33:83:14:49:db:a3:c6:3c:b9:38:0d:8b:84: e0:fe:9e:3f:fe:6c:64:31:7d:ad:b8:9b:92:38:44: a8:2f:e5:5e:10:10:aa:6c:d4:b5:a8:5c:e0:7b:60: ac:b4:4e:52:ab:2c:d7:fb:aa:a6:17:90:65:f8:c0: 52:3a:d8:8c:90:0d:31:f3:b4:5a:ef:b1:3e:c2:41: 4d:6c:8b:2b:cb:63:7b:9e:4d:51:51:18:2f:3f:aa: 56:d2:96:a5:c2:a0:8c:24:5c:f9:fd:ed:45:d2:be: 23:46:88:cd:31:8b:e3:d9:bd:30:59:fb:8e:20:27: 17:2a:e9:3a:7c:20:fe:3b:45:6d:75:6b:aa:83:77: e7:4e:ce:70:6c:4e:dd:77:5a:51:4a:74:3d:1a:a1: 9b:6c:c1:22:97:a8:4e:03:1e:af:78:f6:10:65:3e: d2:39:95:91:fc:6f:c9:ed:33:ef:f7:e2:e9:9c:b9: 7c:dc:50:5b:6c:b9:a9:3a:6e:7a:b8:5b:ad:27:a9: b6:21:c7:85:44:b2:c8:b3:d5:31:06:16:98:bf:e7: 58:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:38:FC:56:30:37:8E:51:A4:85:86:DC:89:D4:5D:95:02:AF:C3:6B X509v3 Authority Key Identifier: keyid:4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/fTj8VjA3jlGkhYbcidRdlQKvw2s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.197.0/24 62.182.100.0/23 193.84.18.0/24 IPv6: 2a02:4bb::/32 Signature Algorithm: sha256WithRSAEncryption 94:00:3a:11:b0:ae:b0:ae:91:c4:01:53:e0:ff:ea:9f:b1:0d: cc:14:a3:2e:5e:0f:fc:23:3b:1a:1c:d4:3d:2d:7a:20:a3:0b: 6a:ca:d8:3f:f6:34:fa:c2:3d:e4:a1:04:6e:1d:75:e8:c6:02: e8:60:85:da:84:5e:43:25:12:de:bf:94:52:82:fa:0f:63:5d: b4:23:a6:ee:15:68:44:9c:6a:70:06:42:2b:21:97:1f:eb:d0: d8:41:82:f2:63:83:e8:2f:e6:30:57:74:29:84:88:15:62:a1: 6f:4e:9e:81:74:fc:33:8d:2a:93:8c:d1:d1:95:54:f2:7f:5b: ed:34:94:d8:af:69:c8:ef:17:6f:fd:b7:54:67:9b:55:c7:0d: f8:a8:0c:98:a7:23:ee:c0:3c:8b:fb:55:b9:9c:6b:85:42:7b: 0a:52:72:cc:d5:27:a0:91:8a:a2:44:63:9c:87:12:69:bd:d0: bb:a6:7a:4a:63:96:12:65:0c:e6:9f:a1:6e:be:4e:da:4b:3f: 15:b4:28:31:de:4f:22:0f:2b:75:2c:a9:16:d1:f7:43:93:ec: 29:dd:a0:32:ef:d6:be:39:5e:3a:48:cb:fc:35:81:7e:59:7c: 7c:d8:29:38:cd:52:c3:41:74:02:6b:c6:6e:e1:0b:9b:fd:2e: c2:b3:60:33 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt+poUOZSaz5o0bAN4qh1FDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNzY4M2Q2ZWE1MzlmZWYxYjZiNmRiZGQ3NGEzMWQwNWU1 ZjBhMjMwHhcNMjYwMTAyMTIyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDM4ZmM1NjMwMzc4ZTUxYTQ4NTg2ZGM4OWQ0NWQ5NTAyYWZjMzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqc+Qi7hz+Yv8+Bt5z+PV7gtRcTp OdUGZYzCt46I1/u0ztV1L07Ug8fmlvx6fDODFEnbo8Y8uTgNi4Tg/p4//mxkMX2t uJuSOESoL+VeEBCqbNS1qFzge2CstE5SqyzX+6qmF5Bl+MBSOtiMkA0x87Ra77E+ wkFNbIsry2N7nk1RURgvP6pW0palwqCMJFz5/e1F0r4jRojNMYvj2b0wWfuOICcX Kuk6fCD+O0VtdWuqg3fnTs5wbE7dd1pRSnQ9GqGbbMEil6hOAx6vePYQZT7SOZWR /G/J7TPv9+LpnLl83FBbbLmpOm56uFutJ6m2IceFRLLIs9UxBhaYv+dYiwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFH04/FYwN45RpIWG3InUXZUCr8NrMB8GA1UdIwQY MBaAFE12g9bqU5/vG2ttvddKMdBeXwojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFhhRDF1cFRuLThiYTIyOTEwb3gwRjVmQ2lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNTE5NWQtNjY5OC00NjA0LTkxMTQt NjhiMzc2OGY1MGRjLzEvZlRqOFZqQTNqbEdraFliY2lkUmRsUUt2dzJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9lNTE5NWQtNjY5OC00NjA0LTkxMTQtNjhiMzc2OGY1MGRj LzEvVFhhRDF1cFRuLThiYTIyOTEwb3gwRjVmQ2lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQABSrFAwQB PrZkAwQAwVQSMA0EAgACMAcDBQAqAgS7MA0GCSqGSIb3DQEBCwUAA4IBAQCUADoR sK6wrpHEAVPg/+qfsQ3MFKMuXg/8IzsaHNQ9LXogowtqytg/9jT6wj3koQRuHXXo xgLoYIXahF5DJRLev5RSgvoPY120I6buFWhEnGpwBkIrIZcf69DYQYLyY4PoL+Yw V3QphIgVYqFvTp6BdPwzjSqTjNHRlVTyf1vtNJTYr2nI7xdv/bdUZ5tVxw34qAyY pyPuwDyL+1W5nGuFQnsKUnLM1SegkYqiRGOchxJpvdC7pnpKY5YSZQzmn6Fuvk7a Sz8VtCgx3k8iDyt1LKkW0fdDk+wp3aAy79a+OV46SMv8NYF+WXx82Ck4zVLDQXQC a8Zu4Qub/S7Cs2Az -----END CERTIFICATE-----Generated at Mon Jan 26 12:27:05 2026 by rpki-client