This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/fwlXtqb10A-wV_bek-0TtXLyN60.roa File: fwlXtqb10A-wV_bek-0TtXLyN60.roa (raw, json) Hash identifier: EBH4JtRrxBkeHaZ/uJMc1tdnxhG7UT1SgBTpReFISGs= Subject key identifier: 7F:09:57:B6:A6:F5:D0:0F:B0:57:F6:DE:93:ED:13:B5:72:F2:37:AD Certificate issuer: /CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947 Certificate serial: 019B7C12ADCABAF185A4ADE9CE98C4A91A59 Authority key identifier: B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/fwlXtqb10A-wV_bek-0TtXLyN60.roa Signing time: Fri 02 Jan 2026 00:19:17 +0000 ROA not before: Fri 02 Jan 2026 00:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39330 IP address blocks: 193.228.174.0/24 maxlen: 24 195.238.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ad:ca:ba:f1:85:a4:ad:e9:ce:98:c4:a9:1a:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947 Validity Not Before: Jan 2 00:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f0957b6a6f5d00fb057f6de93ed13b572f237ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5b:b9:77:f6:61:db:ba:a8:89:d6:ed:33:19: a4:65:ca:09:03:81:25:be:c5:29:19:98:31:89:94: 66:f0:40:6e:0e:80:71:a2:9d:7a:6b:63:3d:32:a5: 1c:92:1f:b4:5b:52:d5:f4:de:b2:0b:3c:c3:c9:39: 30:17:b7:8e:e5:ae:6a:d5:a5:7f:46:09:45:d9:94: 5e:57:44:d5:88:7b:96:f1:02:0c:cc:1f:5e:c9:1f: da:5c:7d:d7:7b:35:14:da:3b:e9:f5:66:86:de:8e: bf:8d:3c:a0:a3:63:a2:bb:51:37:1d:12:87:0e:fd: 35:c1:80:ee:cc:f9:9f:19:ec:df:7f:a5:7b:2b:49: 72:63:30:86:9b:f6:ab:4b:7b:aa:d3:1f:be:25:c7: e5:42:b8:7e:bf:30:d0:4e:c3:8a:91:df:6d:45:43: 42:f6:75:bb:16:3c:9c:12:5a:f8:a0:80:18:09:0d: 36:d7:00:cd:b8:66:6a:b1:05:d3:3e:48:e3:80:f0: 79:7c:74:42:7e:fb:81:7e:dd:1b:48:17:0a:e6:d8: 2d:78:d0:83:c1:0d:a2:ec:20:e3:37:3f:97:1b:c2: 80:af:50:75:2d:ba:0b:77:d8:ed:2b:9d:20:41:6f: a8:02:61:a4:52:f6:d2:e9:be:fe:bc:48:6c:a7:23: 82:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:09:57:B6:A6:F5:D0:0F:B0:57:F6:DE:93:ED:13:B5:72:F2:37:AD X509v3 Authority Key Identifier: keyid:B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/fwlXtqb10A-wV_bek-0TtXLyN60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.228.174.0/24 195.238.70.0/23 Signature Algorithm: sha256WithRSAEncryption b1:85:7e:c7:c8:e9:4c:c7:99:5d:1d:6f:15:99:41:0d:32:97: ee:3b:0d:4a:26:e3:57:64:43:a8:ba:04:e5:ea:fe:8e:b6:4e: ed:42:92:6e:16:5a:25:ce:89:d7:25:0f:1b:e1:ea:a5:19:de: 92:97:67:d8:90:41:01:86:52:dd:7a:e7:b9:c1:01:5a:2f:f7: 74:73:59:f9:e9:ff:71:97:37:ad:fa:85:a6:c2:d6:74:53:0e: af:37:65:2d:0f:e7:74:43:97:e1:f4:cf:a9:09:86:c3:ae:58: 1c:8f:47:c3:03:57:2d:ae:d4:c0:3d:07:30:8f:2b:4d:ed:81: f7:63:ef:e7:af:6a:e2:58:62:76:c4:79:7f:a6:65:49:5b:0f: 96:9a:d0:ba:98:44:a3:2a:fe:38:3e:50:6f:33:9b:50:4d:bf: 97:d3:47:c8:70:1f:dd:c0:ec:21:d6:0b:61:5a:c1:76:22:1f: f8:87:ef:ca:95:32:8d:0c:cc:f3:f9:3f:ac:cc:05:f3:2e:5d: 6c:bd:79:13:0b:22:d7:0b:fe:4b:ff:d8:9c:dc:7b:37:c4:12: 0d:0f:0a:85:4f:b5:8b:f9:cc:64:87:19:43:da:e4:60:21:a4: 4a:69:80:8d:f6:aa:ec:10:93:b0:e9:fa:7b:3b:1c:ba:6f:a3: b3:9a:07:ce -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Eq3KuvGFpK3pzpjEqRpZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxODU5ZjNkMmNkMjgzZTdkYjkwZjAyZmUxYjBkNGY2MTU2 MDU5NDcwHhcNMjYwMTAyMDAxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjA5NTdiNmE2ZjVkMDBmYjA1N2Y2ZGU5M2VkMTNiNTcyZjIzN2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lu5d/Zh27qoidbtMxmkZcoJA4El vsUpGZgxiZRm8EBuDoBxop16a2M9MqUckh+0W1LV9N6yCzzDyTkwF7eO5a5q1aV/ RglF2ZReV0TViHuW8QIMzB9eyR/aXH3XezUU2jvp9WaG3o6/jTygo2Oiu1E3HRKH Dv01wYDuzPmfGezff6V7K0lyYzCGm/arS3uq0x++JcflQrh+vzDQTsOKkd9tRUNC 9nW7FjycElr4oIAYCQ021wDNuGZqsQXTPkjjgPB5fHRCfvuBft0bSBcK5tgteNCD wQ2i7CDjNz+XG8KAr1B1LboLd9jtK50gQW+oAmGkUvbS6b7+vEhspyOCGQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFH8JV7am9dAPsFf23pPtE7Vy8jetMB8GA1UdIwQY MBaAFLGFnz0s0oPn25DwL+Gw1PYVYFlHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1lXZlBTelNnLWZia1BBdjRiRFU5aFZnV1VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9mN2E1NjAtODg3My00MGVlLWE3YzUt MmFhZGM1YzNjNTdkLzEvZndsWHRxYjEwQS13Vl9iZWstMFR0WEx5TjYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9mN2E1NjAtODg3My00MGVlLWE3YzUtMmFhZGM1YzNjNTdk LzEvc1lXZlBTelNnLWZia1BBdjRiRFU5aFZnV1VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAweSuAwQB w+5GMA0GCSqGSIb3DQEBCwUAA4IBAQCxhX7HyOlMx5ldHW8VmUENMpfuOw1KJuNX ZEOougTl6v6Otk7tQpJuFlolzonXJQ8b4eqlGd6Sl2fYkEEBhlLdeue5wQFaL/d0 c1n56f9xlzet+oWmwtZ0Uw6vN2UtD+d0Q5fh9M+pCYbDrlgcj0fDA1ctrtTAPQcw jytN7YH3Y+/nr2riWGJ2xHl/pmVJWw+WmtC6mESjKv44PlBvM5tQTb+X00fIcB/d wOwh1gthWsF2Ih/4h+/KlTKNDMzz+T+szAXzLl1svXkTCyLXC/5L/9ic3Hs3xBIN DwqFT7WL+cxkhxlD2uRgIaRKaYCN9qrsEJOw6fp7Oxy6b6OzmgfO -----END CERTIFICATE-----Generated at Mon Jan 26 05:55:31 2026 by rpki-client