This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/fe4S5caqbGhoCjojIWugfijS-l4.roa File: fe4S5caqbGhoCjojIWugfijS-l4.roa (raw, json) Hash identifier: 6YRbIlx6seVZp8RUl5TDchv2KEbRzRkel/i9kSVgs8g= Subject key identifier: 7D:EE:12:E5:C6:AA:6C:68:68:0A:3A:23:21:6B:A0:7E:28:D2:FA:5E Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed Certificate serial: 019B77588818E20693719AE2BD3212A6CA85 Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/fe4S5caqbGhoCjojIWugfijS-l4.roa Signing time: Thu 01 Jan 2026 02:17:29 +0000 ROA not before: Thu 01 Jan 2026 02:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215879 IP address blocks: 193.29.144.0/23 maxlen: 23 193.29.144.0/24 maxlen: 24 193.29.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:88:18:e2:06:93:71:9a:e2:bd:32:12:a6:ca:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed Validity Not Before: Jan 1 02:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7dee12e5c6aa6c68680a3a23216ba07e28d2fa5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7e:db:6f:fb:17:03:78:bd:21:6a:11:14:29: e5:40:81:72:cf:9d:85:6b:71:63:b1:ee:bf:d9:f2: 3f:ee:2c:6e:79:dc:e0:7e:75:21:29:be:16:31:00: a3:83:5e:2b:40:73:fc:7f:84:79:bd:a7:5f:a1:e0: 07:ad:29:14:f9:d5:fd:c4:5e:43:18:b7:4c:11:61: 7d:06:92:62:f3:e3:ab:1f:88:ce:72:e6:cd:cc:98: 84:db:51:2d:12:c4:61:55:e0:77:6b:a2:29:f3:2a: 9f:70:08:f4:1b:d7:cd:a8:02:7e:f0:84:d0:6f:6a: 72:05:99:08:8b:06:d3:c9:af:13:c6:b3:b9:ec:cd: 90:29:68:4d:4d:92:d0:66:3d:8d:4e:17:a9:a1:b8: a5:f7:ff:f7:6d:3e:92:b1:d6:13:8c:e0:80:af:b0: 27:d7:b8:1e:e1:f2:3c:d1:77:64:e9:16:ee:02:0b: a9:dc:d1:d8:27:d4:76:c6:85:6b:87:d7:a1:72:7c: f2:35:d7:7a:fa:28:87:2b:d7:4b:27:4e:0d:d3:ab: fb:34:9f:82:45:d5:d1:27:64:46:1d:fb:63:30:37: 89:e7:1c:b2:d6:b0:b7:50:3b:48:49:b7:25:cd:f0: 86:49:6e:47:8c:7d:29:3f:01:f9:7f:c9:fe:97:10: ab:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EE:12:E5:C6:AA:6C:68:68:0A:3A:23:21:6B:A0:7E:28:D2:FA:5E X509v3 Authority Key Identifier: keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/fe4S5caqbGhoCjojIWugfijS-l4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.29.144.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:ee:f7:a8:49:ba:73:6d:08:23:cc:1c:b5:bd:3f:8f:c6:22: d6:c3:dd:d3:21:e1:c5:f4:fd:18:49:e7:56:01:7b:cd:71:04: c0:ed:02:d3:a4:4f:8f:ab:53:1b:ca:d0:bb:b2:0a:0c:37:bf: a1:78:ef:72:5a:e4:3b:d5:75:65:f7:17:23:51:6b:2c:1b:54: fb:38:4e:d5:85:7f:c1:1f:41:0f:b5:76:ae:e8:20:fe:5a:20: ec:a1:ff:d3:71:33:d0:76:27:e2:1e:49:34:09:7d:7b:2f:1f: c8:17:52:98:e0:e4:e3:86:73:fd:e9:cb:87:ef:dc:77:01:66: 19:34:d0:ac:77:5e:d5:67:cd:6a:08:39:6c:53:2c:6f:1d:dd: 6c:14:b9:88:32:53:d4:50:e6:bb:ff:7a:01:0f:3a:6c:76:09: ec:a5:47:db:9d:ec:4a:11:c8:7b:6a:44:3b:5b:d5:93:1c:0a: 86:9d:ad:72:d8:7d:eb:17:8e:49:d6:26:99:e0:1a:20:9f:63: 4b:f3:55:21:2e:5c:93:7c:49:92:20:92:6b:47:b8:a1:eb:85: 96:a2:2d:17:2c:19:e1:f4:d5:c1:b9:00:55:64:33:8b:d0:09: 7b:9a:ba:45:c5:7e:fe:a6:f7:da:0c:75:c6:66:31:17:80:63: 55:f8:08:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WIgY4gaTcZrivTISpsqFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjk2Y2U1OWM1OTU1NzUzMGYwZWFhNDRjNjY0NTAzZDlj NDAxZWQwHhcNMjYwMTAxMDIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGVlMTJlNWM2YWE2YzY4NjgwYTNhMjMyMTZiYTA3ZTI4ZDJmYTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn7bb/sXA3i9IWoRFCnlQIFyz52F a3Fjse6/2fI/7ixuedzgfnUhKb4WMQCjg14rQHP8f4R5vadfoeAHrSkU+dX9xF5D GLdMEWF9BpJi8+OrH4jOcubNzJiE21EtEsRhVeB3a6Ip8yqfcAj0G9fNqAJ+8ITQ b2pyBZkIiwbTya8TxrO57M2QKWhNTZLQZj2NThepobil9//3bT6SsdYTjOCAr7An 17ge4fI80Xdk6RbuAgup3NHYJ9R2xoVrh9ehcnzyNdd6+iiHK9dLJ04N06v7NJ+C RdXRJ2RGHftjMDeJ5xyy1rC3UDtISbclzfCGSW5HjH0pPwH5f8n+lxCrRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH3uEuXGqmxoaAo6IyFroH4o0vpeMB8GA1UdIwQY MBaAFJy5bOWcWVV1MPDqpExmRQPZxAHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxsczVaeFpWWFV3OE9xa1RHWkZBOW5FQWUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ZGQ3YjEtZTMzNy00MDRkLWI3NjQt ZGRiMGIxNDhlNDZiLzEvZmU0UzVjYXFiR2hvQ2pvaklXdWdmaWpTLWw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS81ZGQ3YjEtZTMzNy00MDRkLWI3NjQtZGRiMGIxNDhlNDZi LzEvbkxsczVaeFpWWFV3OE9xa1RHWkZBOW5FQWUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwR2QMA0G CSqGSIb3DQEBCwUAA4IBAQA87veoSbpzbQgjzBy1vT+PxiLWw93TIeHF9P0YSedW AXvNcQTA7QLTpE+Pq1MbytC7sgoMN7+heO9yWuQ71XVl9xcjUWssG1T7OE7VhX/B H0EPtXau6CD+WiDsof/TcTPQdifiHkk0CX17Lx/IF1KY4OTjhnP96cuH79x3AWYZ NNCsd17VZ81qCDlsUyxvHd1sFLmIMlPUUOa7/3oBDzpsdgnspUfbnexKEch7akQ7 W9WTHAqGna1y2H3rF45J1iaZ4Bogn2NL81UhLlyTfEmSIJJrR7ih64WWoi0XLBnh 9NXBuQBVZDOL0Al7mrpFxX7+pvfaDHXGZjEXgGNV+Aib -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:20 2026 by rpki-client