This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/fdUZglm7qbLpi4z3ml0ClmGLJDE.roa File: fdUZglm7qbLpi4z3ml0ClmGLJDE.roa (raw, json) Hash identifier: xhQjxCWPQZFDhPKRIbg1vJLO2EP+X4pmltYxKxqr3pg= Subject key identifier: 7D:D5:19:82:59:BB:A9:B2:E9:8B:8C:F7:9A:5D:02:96:61:8B:24:31 Certificate issuer: /CN=1697c46eafa10ec5d907bb05e37123b692ab494c Certificate serial: 019B7C8014B00475B8B137BB50E9D1239D4C Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/fdUZglm7qbLpi4z3ml0ClmGLJDE.roa Signing time: Fri 02 Jan 2026 02:18:47 +0000 ROA not before: Fri 02 Jan 2026 02:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201749 IP address blocks: 93.191.112.0/24 maxlen: 24 93.191.115.0/24 maxlen: 24 2a06:a540::/31 maxlen: 31 2a06:a542::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:14:b0:04:75:b8:b1:37:bb:50:e9:d1:23:9d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c Validity Not Before: Jan 2 02:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7dd5198259bba9b2e98b8cf79a5d0296618b2431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c7:6e:c0:71:eb:f8:f7:a1:fd:fc:82:be:56: 4c:fe:ab:e3:ee:9a:b6:bb:bd:b2:f6:3c:a3:41:c0: d3:e7:b7:a7:aa:9c:01:4f:bc:78:22:76:4e:57:41: 72:83:a4:62:e6:d4:50:19:25:af:ff:5d:14:7c:69: 30:8a:44:8d:da:ff:25:80:59:1f:1a:a8:e1:b8:a0: 5b:14:07:49:9e:45:41:d8:34:e3:e2:2c:3d:65:43: 88:f3:8c:2b:39:f6:6d:08:b7:d8:60:a4:1a:3d:9a: d3:42:14:f2:28:4e:b2:03:14:0b:ea:8b:9a:c3:77: 4e:18:1a:5a:35:c7:44:31:bf:b2:e5:67:65:c8:c5: 95:11:96:01:a4:e1:18:97:dd:2a:01:07:43:52:37: de:69:d3:a4:07:43:25:1c:da:cb:e9:b4:c6:da:90: 47:4a:5b:66:c5:33:57:d0:d0:f3:2a:b7:93:01:cf: aa:f8:34:cf:11:c2:09:a1:63:68:d2:eb:fd:48:1b: 4f:15:c9:31:c3:03:23:d9:a1:f4:8a:7a:d7:28:a1: 9e:6f:c2:0a:f4:de:cf:e0:2a:68:9c:ed:55:a6:4c: c4:89:d8:b8:7a:ba:6c:44:31:14:f6:77:03:6a:e8: 17:fa:f8:b3:70:5b:83:2b:fc:7c:73:a7:39:5b:f7: b3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D5:19:82:59:BB:A9:B2:E9:8B:8C:F7:9A:5D:02:96:61:8B:24:31 X509v3 Authority Key Identifier: keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/fdUZglm7qbLpi4z3ml0ClmGLJDE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.191.112.0/24 93.191.115.0/24 IPv6: 2a06:a540::/30 Signature Algorithm: sha256WithRSAEncryption 77:4f:63:a1:ef:9a:a8:2c:57:92:a6:2e:6f:23:ee:54:44:3c: 86:8d:31:4e:40:ed:63:46:58:57:d5:ea:32:3a:5d:ad:0e:30: 63:85:86:c1:6e:c6:ad:19:70:64:c9:91:cf:65:8a:07:a5:72: bc:40:11:74:61:ff:3b:7e:12:40:b9:43:38:f2:b8:40:a8:2d: 60:a0:26:73:9b:a5:ee:8b:a7:cc:cc:36:cc:fb:c0:4f:c8:08: ee:7b:20:d4:5e:64:b9:4c:5e:4d:13:82:e4:bc:47:c5:00:81: 71:1b:2a:be:21:89:6e:5b:e1:34:d9:72:3b:c1:27:2f:32:3c: 80:a2:65:07:6d:ae:3f:77:5d:0a:bb:10:d7:34:b6:6c:0a:80: 9e:eb:e2:be:d9:72:12:99:91:50:3a:86:22:95:90:0e:61:be: ec:cc:27:e5:8b:dd:b7:c2:83:57:b2:b7:b9:ab:2e:f7:48:43: 40:2d:c2:27:80:e7:52:cc:1a:65:f2:f2:74:84:bc:98:f0:4f: 89:8b:cb:9f:fd:c6:70:e6:f1:22:a8:72:9f:66:4b:ae:ea:f9: 41:22:b9:90:13:3a:24:1f:aa:3d:d8:99:a2:cf:14:2e:81:24: 25:0a:85:1d:c7:2b:57:20:72:b4:87:5f:5e:61:7b:aa:10:6b: cb:f1:3d:04 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8gBSwBHW4sTe7UOnRI51MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2OTdjNDZlYWZhMTBlYzVkOTA3YmIwNWUzNzEyM2I2OTJh YjQ5NGMwHhcNMjYwMTAyMDIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGQ1MTk4MjU5YmJhOWIyZTk4YjhjZjc5YTVkMDI5NjYxOGIyNDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMduwHHr+Peh/fyCvlZM/qvj7pq2 u72y9jyjQcDT57enqpwBT7x4InZOV0Fyg6Ri5tRQGSWv/10UfGkwikSN2v8lgFkf GqjhuKBbFAdJnkVB2DTj4iw9ZUOI84wrOfZtCLfYYKQaPZrTQhTyKE6yAxQL6oua w3dOGBpaNcdEMb+y5WdlyMWVEZYBpOEYl90qAQdDUjfeadOkB0MlHNrL6bTG2pBH SltmxTNX0NDzKreTAc+q+DTPEcIJoWNo0uv9SBtPFckxwwMj2aH0inrXKKGeb8IK 9N7P4CponO1VpkzEidi4erpsRDEU9ncDaugX+vizcFuDK/x8c6c5W/ezaQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFH3VGYJZu6my6YuM95pdApZhiyQxMB8GA1UdIwQY MBaAFBaXxG6voQ7F2Qe7BeNxI7aSq0lMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnBmRWJxLWhEc1haQjdzRjQzRWp0cEtyU1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kMDk5MmQtOTNmYS00ODQ2LWE0OTUt NzY1MjJjMjA3YzU1LzEvZmRVWmdsbTdxYkxwaTR6M21sMENsbUdMSkRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9kMDk5MmQtOTNmYS00ODQ2LWE0OTUtNzY1MjJjMjA3YzU1 LzEvRnBmRWJxLWhEc1haQjdzRjQzRWp0cEtyU1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAXb9wAwQA Xb9zMA0EAgACMAcDBQIqBqVAMA0GCSqGSIb3DQEBCwUAA4IBAQB3T2Oh75qoLFeS pi5vI+5URDyGjTFOQO1jRlhX1eoyOl2tDjBjhYbBbsatGXBkyZHPZYoHpXK8QBF0 Yf87fhJAuUM48rhAqC1goCZzm6Xui6fMzDbM+8BPyAjueyDUXmS5TF5NE4LkvEfF AIFxGyq+IYluW+E02XI7wScvMjyAomUHba4/d10KuxDXNLZsCoCe6+K+2XISmZFQ OoYilZAOYb7szCfli923woNXsre5qy73SENALcIngOdSzBpl8vJ0hLyY8E+Ji8uf /cZw5vEiqHKfZkuu6vlBIrmQEzokH6o92JmizxQugSQlCoUdxytXIHK0h19eYXuq EGvL8T0E -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:56 2026 by rpki-client