This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/fwZq6psMq56Ml0BVrit_Wp9BQ4A.roa File: fwZq6psMq56Ml0BVrit_Wp9BQ4A.roa (raw, json) Hash identifier: aIQPnLzBx7/fEcGBfohS/yOvrVJole1RPiyfkmAvLQg= Subject key identifier: 7F:06:6A:EA:9B:0C:AB:9E:8C:97:40:55:AE:2B:7F:5A:9F:41:43:80 Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f Certificate serial: 019B79ED20928CBB3F710A70753F6A93039B Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/fwZq6psMq56Ml0BVrit_Wp9BQ4A.roa Signing time: Thu 01 Jan 2026 14:19:02 +0000 ROA not before: Thu 01 Jan 2026 14:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201202 IP address blocks: 195.187.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:20:92:8c:bb:3f:71:0a:70:75:3f:6a:93:03:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f Validity Not Before: Jan 1 14:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f066aea9b0cab9e8c974055ae2b7f5a9f414380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:50:fe:0f:b3:06:5a:ea:d2:47:dd:44:d5:a4: a6:2a:06:89:68:fc:a5:6f:a4:99:7d:c6:08:f4:02: b9:80:51:9a:d1:89:a8:49:a3:b6:ab:da:76:fa:89: bc:c1:31:61:a3:34:a2:6c:5f:95:23:95:5b:8a:9c: 47:ae:3e:f3:a2:9f:d0:b6:22:44:ff:69:ac:27:43: af:c5:ef:b8:b6:56:31:85:6c:35:ff:20:7d:12:57: 87:96:21:28:20:d9:db:8d:46:54:dc:ae:c6:95:b2: e3:24:80:10:22:0d:47:6e:aa:67:8b:27:ab:09:da: 89:24:29:f0:08:cc:ca:a0:50:86:e2:b0:79:0d:91: 10:57:48:92:47:11:1a:29:21:e5:5e:67:1f:b0:e9: a7:3f:9a:1f:0f:96:0d:a2:c6:fb:94:05:83:e5:64: 36:62:fa:ee:a1:0c:fc:90:b3:1a:7a:05:31:6c:20: ba:66:1c:2d:ef:b8:2b:4c:18:5b:89:73:69:a8:75: 5b:55:aa:63:40:27:56:e5:ff:22:9f:78:a8:6c:c0: c4:98:cc:a5:51:bb:f6:48:f6:85:a5:d0:47:cf:9d: c0:d0:ba:a6:5e:4c:1c:5e:12:35:2d:03:23:79:14: 46:df:a7:f2:61:6d:ec:f9:9e:ab:c3:3e:7e:69:62: a2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:06:6A:EA:9B:0C:AB:9E:8C:97:40:55:AE:2B:7F:5A:9F:41:43:80 X509v3 Authority Key Identifier: keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/fwZq6psMq56Ml0BVrit_Wp9BQ4A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.187.160.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:94:72:40:10:ed:9b:0f:6c:55:4a:82:ec:fd:b6:c2:c7:d7: c2:49:57:19:59:5f:e5:99:9e:b1:1b:f5:e6:63:2a:18:9c:5f: ec:10:c0:8c:6d:b4:14:4b:a0:12:7b:6d:80:c4:fe:2c:19:55: b7:d0:59:25:3c:e1:30:07:1e:3d:f3:19:da:ed:df:cb:db:52: e8:72:87:b0:ea:cb:d9:d8:cc:5d:fd:56:a7:15:3b:06:12:e4: bd:2b:90:21:73:27:a2:02:81:f7:87:c4:62:75:85:37:a6:ab: 59:f1:1f:67:8f:63:62:1d:3c:61:e6:6a:08:87:75:48:7d:a9: e5:ce:0c:63:c6:84:32:d8:e9:a5:ad:71:de:fe:2e:d6:6f:bd: cd:90:a4:d1:ac:fe:d2:86:85:75:6a:cb:c6:56:83:8e:6a:42: c2:65:38:c2:43:5b:4f:8b:6f:6f:67:45:88:73:f2:71:11:da: 18:51:90:eb:ee:4a:bb:08:34:b3:d8:4f:e0:70:15:6d:55:98: 6a:36:fd:43:69:4c:69:aa:83:be:ed:10:b8:2b:55:db:b2:f2: 70:b0:84:33:88:07:3b:a5:f8:27:d3:05:6a:c8:e4:11:cb:f2: 90:f5:f0:e1:e9:86:49:db:20:98:ae:84:06:9e:98:23:6f:d2: 3a:09:1e:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57SCSjLs/cQpwdT9qkwObMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw MTE4OGYwHhcNMjYwMTAxMTQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjA2NmFlYTliMGNhYjllOGM5NzQwNTVhZTJiN2Y1YTlmNDE0MzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1D+D7MGWurSR91E1aSmKgaJaPyl b6SZfcYI9AK5gFGa0YmoSaO2q9p2+om8wTFhozSibF+VI5VbipxHrj7zop/QtiJE /2msJ0Ovxe+4tlYxhWw1/yB9EleHliEoINnbjUZU3K7GlbLjJIAQIg1Hbqpniyer CdqJJCnwCMzKoFCG4rB5DZEQV0iSRxEaKSHlXmcfsOmnP5ofD5YNosb7lAWD5WQ2 YvruoQz8kLMaegUxbCC6Zhwt77grTBhbiXNpqHVbVapjQCdW5f8in3iobMDEmMyl Ubv2SPaFpdBHz53A0LqmXkwcXhI1LQMjeRRG36fyYW3s+Z6rwz5+aWKiVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH8GauqbDKuejJdAVa4rf1qfQUOAMB8GA1UdIwQY MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt YzA2NzFiZjRjZjNlLzEvZndacTZwc01xNTZNbDBCVnJpdF9XcDlCUTRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7ugMA0G CSqGSIb3DQEBCwUAA4IBAQA6lHJAEO2bD2xVSoLs/bbCx9fCSVcZWV/lmZ6xG/Xm YyoYnF/sEMCMbbQUS6ASe22AxP4sGVW30FklPOEwBx498xna7d/L21Locoew6svZ 2Mxd/VanFTsGEuS9K5AhcyeiAoH3h8RidYU3pqtZ8R9nj2NiHTxh5moIh3VIfanl zgxjxoQy2OmlrXHe/i7Wb73NkKTRrP7ShoV1asvGVoOOakLCZTjCQ1tPi29vZ0WI c/JxEdoYUZDr7kq7CDSz2E/gcBVtVZhqNv1DaUxpqoO+7RC4K1XbsvJwsIQziAc7 pfgn0wVqyOQRy/KQ9fDh6YZJ2yCYroQGnpgjb9I6CR6L -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:13 2026 by rpki-client