This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/_FZhJyCDZTYefSRG1ObvBZwa1wE.roa File: _FZhJyCDZTYefSRG1ObvBZwa1wE.roa (raw, json) Hash identifier: EXIEcafjYC08bfRW6kit5bJp9cesyMIcoH0saCEqWI8= Subject key identifier: FC:56:61:27:20:83:65:36:1E:7D:24:46:D4:E6:EF:05:9C:1A:D7:01 Certificate issuer: /CN=d1ca67610286ab738f86ce935fdf5ed620f02d96 Certificate serial: 019B21BCA46AFB8D2A86CA55EDA640741550 Authority key identifier: D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/_FZhJyCDZTYefSRG1ObvBZwa1wE.roa Signing time: Mon 15 Dec 2025 11:19:29 +0000 ROA not before: Mon 15 Dec 2025 11:19:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 193.104.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 11:19:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:bc:a4:6a:fb:8d:2a:86:ca:55:ed:a6:40:74:15:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1ca67610286ab738f86ce935fdf5ed620f02d96 Validity Not Before: Dec 15 11:19:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fc566127208365361e7d2446d4e6ef059c1ad701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:38:e9:d0:c4:2c:87:75:6b:16:cd:8d:b6:f0: b2:31:6d:c9:a2:5e:c6:ce:0b:a8:e0:dd:db:0e:0f: 5c:92:2e:4d:4a:24:62:57:f6:d6:14:09:db:c0:92: 9c:f4:ea:0e:8d:eb:7c:2b:7b:7e:ba:9d:31:08:b1: 2d:98:7e:3e:15:8e:26:db:2f:8a:dd:a3:ef:e1:73: 1c:24:15:78:46:6f:62:04:a9:f0:f0:63:eb:c2:21: af:bb:dc:b4:aa:fe:9f:45:ff:1b:a1:00:95:3a:9d: f6:cf:99:44:cc:3f:57:cb:27:63:59:8b:7d:48:a8: 1d:9f:90:92:61:df:5e:db:a4:58:23:ff:cf:d3:f9: 91:d9:4f:0f:fd:12:55:c7:bc:b7:dc:8c:e8:f3:c3: 15:ac:3f:77:5b:af:86:d6:9a:2d:99:83:20:b3:6c: 99:c1:6d:6e:17:af:ac:a6:5f:0d:f6:60:c2:16:cb: bc:d4:c8:ed:fd:6a:e5:81:b8:43:9e:fd:7c:54:9a: 02:70:eb:56:8a:ba:c9:d0:49:71:db:f3:51:30:23: bc:85:c7:da:44:59:61:c3:82:19:3e:25:2e:9e:cd: 4e:76:20:47:ee:36:73:c5:50:7d:db:29:0b:53:7e: 58:97:17:17:6a:d8:64:0b:47:10:5a:77:e2:ac:d2: ad:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:56:61:27:20:83:65:36:1E:7D:24:46:D4:E6:EF:05:9C:1A:D7:01 X509v3 Authority Key Identifier: keyid:D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/_FZhJyCDZTYefSRG1ObvBZwa1wE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.33.0/24 Signature Algorithm: sha256WithRSAEncryption 18:38:a5:1e:81:6e:46:a6:9b:78:12:d0:de:09:7d:fb:8e:f0: 6c:d5:f5:c5:08:2c:66:6c:5b:42:03:01:c3:8d:4e:ef:d4:99: a9:53:c4:eb:a5:f6:7c:03:92:85:9f:68:6c:87:44:f6:cd:c8: c9:f7:57:dc:bf:83:c3:44:3e:00:7c:7a:40:aa:46:97:72:b9: 6d:3f:8a:d9:6c:4d:8b:bc:5c:81:04:25:69:2b:5c:a8:c5:e3: fa:f6:95:38:a3:35:d8:fa:f7:c5:6b:2b:ec:5c:c6:9c:84:8a: 1d:30:4d:e3:5a:90:ee:d1:0e:5c:67:12:f8:dc:30:93:95:3b: b1:7a:e3:85:bb:65:f4:13:6c:06:23:41:c7:c3:1e:a4:ac:43: f7:d8:ba:ec:87:5a:b3:49:7a:83:36:7d:e5:bb:96:ab:d2:c7: 80:19:31:53:50:51:a6:d9:44:39:2d:7b:ed:ce:14:5e:a5:ae: 17:f8:96:0a:77:d9:f2:9e:f6:c7:19:54:d8:9e:90:a3:18:4f: b7:58:3e:fa:75:2c:89:2a:9b:11:1c:57:85:2b:16:64:e3:b0: 8d:05:b4:16:f0:08:23:bf:fa:7c:98:1e:7e:c6:52:5e:ac:81: 3f:d2:cb:dd:d7:78:12:4b:86:0e:9a:84:dd:0f:96:16:7d:d9: 32:9b:57:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZshvKRq+40qhspV7aZAdBVQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxY2E2NzYxMDI4NmFiNzM4Zjg2Y2U5MzVmZGY1ZWQ2MjBm MDJkOTYwHhcNMjUxMjE1MTExOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzU2NjEyNzIwODM2NTM2MWU3ZDI0NDZkNGU2ZWYwNTljMWFkNzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzjp0MQsh3VrFs2NtvCyMW3Jol7G zguo4N3bDg9cki5NSiRiV/bWFAnbwJKc9OoOjet8K3t+up0xCLEtmH4+FY4m2y+K 3aPv4XMcJBV4Rm9iBKnw8GPrwiGvu9y0qv6fRf8boQCVOp32z5lEzD9XyydjWYt9 SKgdn5CSYd9e26RYI//P0/mR2U8P/RJVx7y33Izo88MVrD93W6+G1potmYMgs2yZ wW1uF6+spl8N9mDCFsu81Mjt/WrlgbhDnv18VJoCcOtWirrJ0Elx2/NRMCO8hcfa RFlhw4IZPiUuns1OdiBH7jZzxVB92ykLU35YlxcXathkC0cQWnfirNKtxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPxWYScgg2U2Hn0kRtTm7wWcGtcBMB8GA1UdIwQY MBaAFNHKZ2EChqtzj4bOk1/fXtYg8C2WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGNwbllRS0dxM09QaHM2VFg5OWUxaUR3TFpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YTFhNjItZTQ4MS00YTE0LWFkNmUt MzViZmY5NmRhNGM1LzEvX0ZaaEp5Q0RaVFllZlNSRzFPYnZCWndhMXdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83YTFhNjItZTQ4MS00YTE0LWFkNmUtMzViZmY5NmRhNGM1 LzEvMGNwbllRS0dxM09QaHM2VFg5OWUxaUR3TFpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWghMA0G CSqGSIb3DQEBCwUAA4IBAQAYOKUegW5Gppt4EtDeCX37jvBs1fXFCCxmbFtCAwHD jU7v1JmpU8TrpfZ8A5KFn2hsh0T2zcjJ91fcv4PDRD4AfHpAqkaXcrltP4rZbE2L vFyBBCVpK1yoxeP69pU4ozXY+vfFayvsXMachIodME3jWpDu0Q5cZxL43DCTlTux euOFu2X0E2wGI0HHwx6krEP32Lrsh1qzSXqDNn3lu5ar0seAGTFTUFGm2UQ5LXvt zhRepa4X+JYKd9nynvbHGVTYnpCjGE+3WD76dSyJKpsRHFeFKxZk47CNBbQW8Agj v/p8mB5+xlJerIE/0svd13gSS4YOmoTdD5YWfdkym1fZ -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:40 2025 by rpki-client