This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/FG6edaLthXtNRXgQz784XZNgYd8.roa File: FG6edaLthXtNRXgQz784XZNgYd8.roa (raw, json) Hash identifier: 5nX8hTmpLoy7w0liaeZHVLXCjdNjFlEQzahTMpZo9sE= Subject key identifier: 14:6E:9E:75:A2:ED:85:7B:4D:45:78:10:CF:BF:38:5D:93:60:61:DF Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0 Certificate serial: 019B7F84423A5E20B123963E34C356E384EA Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/FG6edaLthXtNRXgQz784XZNgYd8.roa Signing time: Fri 02 Jan 2026 16:22:12 +0000 ROA not before: Fri 02 Jan 2026 16:22:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207059 IP address blocks: 31.184.200.0/24 maxlen: 24 31.184.201.0/24 maxlen: 24 31.184.202.0/24 maxlen: 24 31.184.203.0/24 maxlen: 24 195.39.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:42:3a:5e:20:b1:23:96:3e:34:c3:56:e3:84:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0 Validity Not Before: Jan 2 16:22:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=146e9e75a2ed857b4d457810cfbf385d936061df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:13:c0:d7:34:17:44:d7:ab:3b:d8:a9:ff:69: c4:7e:29:18:30:06:2f:92:87:89:9f:cb:7d:10:3c: 2e:f5:fd:97:14:ec:98:af:2d:81:ff:ea:fa:d7:ba: 20:14:ad:64:eb:d4:7e:d2:cc:6e:f3:4f:43:be:77: d4:ad:d0:44:02:bc:26:b2:8e:e4:53:ce:42:f4:5f: aa:d9:4a:5e:6e:f0:6b:66:87:8c:91:e8:67:d7:f0: f0:5c:80:bd:a2:4a:cf:7e:d6:79:8d:b0:76:23:35: 48:c6:b8:5a:a8:d1:15:3f:2b:2e:db:f2:76:b2:a1: 35:4b:6c:16:cb:52:11:e7:db:02:13:9b:93:77:78: 09:45:6c:ad:69:86:7d:24:c0:64:95:f6:cf:1e:3e: 14:67:57:e3:05:43:3b:c7:ef:44:3e:62:8e:27:05: 83:86:4e:57:49:e3:55:7d:fd:fb:de:3a:b6:11:11: 10:cb:5b:06:e2:1d:f5:29:54:dc:6d:52:79:a3:f6: 49:8c:bc:0e:41:85:ca:f0:cf:6e:1f:37:7e:df:a8: 30:53:ac:a9:fb:33:61:3d:27:31:d2:26:ae:fc:19: 32:51:e4:9e:32:1d:a9:65:45:72:d8:8c:5e:36:92: ba:ec:40:3a:fa:67:34:28:1d:3e:3f:46:c0:d7:23: 38:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6E:9E:75:A2:ED:85:7B:4D:45:78:10:CF:BF:38:5D:93:60:61:DF X509v3 Authority Key Identifier: keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/FG6edaLthXtNRXgQz784XZNgYd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.184.200.0/22 195.39.207.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:cd:89:5f:09:4e:11:be:36:67:9b:a0:af:17:87:d4:66:fa: e1:50:cc:1f:3f:ff:12:69:61:0c:db:92:79:cd:e9:6d:b3:64: 6b:e3:0b:eb:2a:88:98:0b:0e:fd:bc:3f:7e:3d:7e:cd:50:26: 40:69:c6:0b:9e:72:63:b1:c0:7f:17:e6:b7:b8:20:43:23:c7: da:31:d5:e7:22:dc:5a:b3:0b:45:99:36:5f:e0:03:2b:30:2e: 92:27:51:f4:6d:d9:57:d9:15:9b:6d:83:91:d0:7f:67:7a:38: d5:15:aa:10:b2:24:52:b5:70:a0:fc:73:37:6d:c3:89:d6:d4: b9:27:13:72:64:c1:09:28:b0:8e:18:1d:6b:17:8c:d2:2c:da: be:dc:d7:08:9e:cf:52:67:ec:f8:ae:a6:c1:ed:9d:d8:40:82: d8:5e:b7:77:5e:2c:02:96:c7:06:51:8a:2d:6c:c7:78:e2:26: 98:c7:53:9a:f7:1d:ee:8b:c7:b5:37:ee:b1:a3:df:df:fa:cd: 3f:f4:e5:23:07:6b:85:68:56:a5:f3:26:9c:60:ca:e2:ac:ac: 97:52:5a:dc:ee:64:17:a6:8f:9d:92:73:ac:ee:1a:96:b2:69: fa:20:8f:2b:1a:f2:44:19:9e:48:21:ba:2b:d5:4c:08:3e:30: 80:8d:71:20 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hEI6XiCxI5Y+NMNW44TqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2U1ODVhNTliNTIzYmI4NmQ2NjBhNzE2OGUxYzFlYmEw OTRkYTAwHhcNMjYwMTAyMTYyMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDZlOWU3NWEyZWQ4NTdiNGQ0NTc4MTBjZmJmMzg1ZDkzNjA2MWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRPA1zQXRNerO9ip/2nEfikYMAYv koeJn8t9EDwu9f2XFOyYry2B/+r617ogFK1k69R+0sxu809DvnfUrdBEArwmso7k U85C9F+q2UpebvBrZoeMkehn1/DwXIC9okrPftZ5jbB2IzVIxrhaqNEVPysu2/J2 sqE1S2wWy1IR59sCE5uTd3gJRWytaYZ9JMBklfbPHj4UZ1fjBUM7x+9EPmKOJwWD hk5XSeNVff373jq2EREQy1sG4h31KVTcbVJ5o/ZJjLwOQYXK8M9uHzd+36gwU6yp +zNhPScx0iau/BkyUeSeMh2pZUVy2IxeNpK67EA6+mc0KB0+P0bA1yM4IwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBRunnWi7YV7TUV4EM+/OF2TYGHfMB8GA1UdIwQY MBaAFHw+WFpZtSO7htZgpxaOHB66CU2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8yNmUzMmEtMzViYS00NDNmLWJjMWUt NmRjMWY1NjAzMWViLzEvRkc2ZWRhTHRoWHROUlhnUXo3ODRYWk5nWWQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8yNmUzMmEtMzViYS00NDNmLWJjMWUtNmRjMWY1NjAzMWVi LzEvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCH7jIAwQA wyfPMA0GCSqGSIb3DQEBCwUAA4IBAQBfzYlfCU4RvjZnm6CvF4fUZvrhUMwfP/8S aWEM25J5zelts2Rr4wvrKoiYCw79vD9+PX7NUCZAacYLnnJjscB/F+a3uCBDI8fa MdXnItxaswtFmTZf4AMrMC6SJ1H0bdlX2RWbbYOR0H9nejjVFaoQsiRStXCg/HM3 bcOJ1tS5JxNyZMEJKLCOGB1rF4zSLNq+3NcIns9SZ+z4rqbB7Z3YQILYXrd3XiwC lscGUYotbMd44iaYx1Oa9x3ui8e1N+6xo9/f+s0/9OUjB2uFaFal8yacYMrirKyX Ulrc7mQXpo+dknOs7hqWsmn6II8rGvJEGZ5IIbor1UwIPjCAjXEg -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:09 2026 by rpki-client