This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/fWpL_ta7aXoIKT8lwYmDL0nQegU.roa File: fWpL_ta7aXoIKT8lwYmDL0nQegU.roa (raw, json) Hash identifier: r+7J0jRgrAdlkGpSk5T7jtJhr78GxAY9zYWBhS85+uQ= Subject key identifier: 7D:6A:4B:FE:D6:BB:69:7A:08:29:3F:25:C1:89:83:2F:49:D0:7A:05 Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6 Certificate serial: 019B7C12BAF4D83DA1880AA4AC721C8CF239 Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/fWpL_ta7aXoIKT8lwYmDL0nQegU.roa Signing time: Fri 02 Jan 2026 00:19:20 +0000 ROA not before: Fri 02 Jan 2026 00:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 193.8.236.0/23 maxlen: 23 193.8.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ba:f4:d8:3d:a1:88:0a:a4:ac:72:1c:8c:f2:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6 Validity Not Before: Jan 2 00:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d6a4bfed6bb697a08293f25c189832f49d07a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:84:8b:d5:33:0e:34:97:4d:9a:3c:e3:dd:57: b4:1b:38:79:3e:77:37:3a:f7:ab:73:c7:d3:32:42: 5c:c5:1e:2e:be:ac:e4:4f:27:b0:88:39:ea:4a:6e: d8:1d:00:04:c3:25:ec:fa:45:b9:d6:cb:c5:64:2a: 07:36:3a:c6:99:c2:a3:ff:d4:bd:eb:98:2c:1e:72: ba:0b:43:59:12:d8:3a:53:5c:6e:d2:52:a0:52:bd: cc:d0:11:e2:aa:5f:09:e0:cc:e5:e3:4c:e2:6d:04: 8d:90:5b:37:06:b1:aa:e1:34:cb:38:10:57:68:56: 07:04:93:aa:06:91:57:4c:af:e1:80:bc:08:87:b4: 0d:01:e4:76:5b:5f:20:40:42:ab:5f:9c:6c:00:28: 3b:2a:4a:6d:d4:87:ba:44:1a:c4:70:07:34:71:9e: d1:ab:23:9d:b1:0e:d9:54:6e:d4:d8:1b:1b:f3:30: 88:ec:20:11:cf:20:df:4a:43:66:d2:51:1e:51:0b: 12:7c:6d:59:5c:93:aa:39:ef:1a:05:fd:56:0e:2f: 6f:48:62:7e:91:3a:18:50:9e:c1:87:33:70:69:1d: 7b:98:7a:5c:0a:f6:cf:0b:f2:15:eb:01:f1:a7:97: 3e:e0:d0:b9:d9:ca:03:6c:02:1d:af:8f:1d:99:4e: b2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6A:4B:FE:D6:BB:69:7A:08:29:3F:25:C1:89:83:2F:49:D0:7A:05 X509v3 Authority Key Identifier: keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/fWpL_ta7aXoIKT8lwYmDL0nQegU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.8.236.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:2f:b1:5a:26:0b:85:71:a8:d2:11:df:ac:90:04:47:6e:34: 1c:fe:7c:e5:19:0d:fa:19:47:9f:7b:15:a0:67:0a:a4:d3:22: 9e:1b:0a:51:41:6a:a6:5b:e5:ce:4e:be:9e:e6:26:c6:9a:5a: 57:85:98:af:04:76:7e:0d:e1:02:6d:d2:ad:c5:95:1e:4a:bc: 1c:5c:da:9a:d0:a7:82:14:96:96:be:9f:c8:bc:9c:92:02:00: a1:d8:7e:39:8f:00:15:ee:ca:f9:19:5e:e9:c0:e4:61:c5:d1: 25:28:05:84:eb:b5:ec:f6:78:b0:ee:8c:1a:9a:1c:66:ea:3c: 02:48:2b:7c:43:32:c0:dc:f0:24:ba:b5:d3:fc:eb:c9:1f:3a: 5f:99:bd:29:86:00:d6:3a:37:9d:63:7f:00:01:17:f3:ec:79: 38:80:e4:fe:58:1e:22:6e:4f:42:9c:32:fe:66:73:59:25:bb: 4f:45:2b:f9:aa:79:06:bb:cf:a9:d1:f9:74:1d:e0:ff:e9:86: b0:d6:54:b6:fe:a8:20:ce:76:a2:ed:1d:52:e0:19:4e:2a:73: 5f:66:a7:14:ff:c4:5c:0a:68:2e:b9:e5:d7:de:b5:93:81:4d: e3:f5:71:3d:ee:e0:fe:c5:3b:4c:e9:bd:4d:9a:29:b5:b2:4b: 7a:eb:20:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Err02D2hiAqkrHIcjPI5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMWYyMTNiOGM3OTJiN2UwMTNmYTUwNDFmNWI4OTk3MWU2 ZjYyZDYwHhcNMjYwMTAyMDAxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDZhNGJmZWQ2YmI2OTdhMDgyOTNmMjVjMTg5ODMyZjQ5ZDA3YTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4SL1TMONJdNmjzj3Ve0Gzh5Pnc3 Overc8fTMkJcxR4uvqzkTyewiDnqSm7YHQAEwyXs+kW51svFZCoHNjrGmcKj/9S9 65gsHnK6C0NZEtg6U1xu0lKgUr3M0BHiql8J4Mzl40zibQSNkFs3BrGq4TTLOBBX aFYHBJOqBpFXTK/hgLwIh7QNAeR2W18gQEKrX5xsACg7Kkpt1Ie6RBrEcAc0cZ7R qyOdsQ7ZVG7U2Bsb8zCI7CARzyDfSkNm0lEeUQsSfG1ZXJOqOe8aBf1WDi9vSGJ+ kToYUJ7BhzNwaR17mHpcCvbPC/IV6wHxp5c+4NC52coDbAIdr48dmU6yhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH1qS/7Wu2l6CCk/JcGJgy9J0HoFMB8GA1UdIwQY MBaAFF8fITuMeSt+AT+lBB9biZceb2LWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHg4aE80eDVLMzRCUDZVRUgxdUpseDV2WXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zMmY4ZDMtNzMyOC00NWYwLWEwMDct NDAyMjM4NjM4ZWEzLzEvZldwTF90YTdhWG9JS1Q4bHdZbURMMG5RZWdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zMmY4ZDMtNzMyOC00NWYwLWEwMDctNDAyMjM4NjM4ZWEz LzEvWHg4aE80eDVLMzRCUDZVRUgxdUpseDV2WXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwQjsMA0G CSqGSIb3DQEBCwUAA4IBAQAML7FaJguFcajSEd+skARHbjQc/nzlGQ36GUefexWg Zwqk0yKeGwpRQWqmW+XOTr6e5ibGmlpXhZivBHZ+DeECbdKtxZUeSrwcXNqa0KeC FJaWvp/IvJySAgCh2H45jwAV7sr5GV7pwORhxdElKAWE67Xs9niw7owamhxm6jwC SCt8QzLA3PAkurXT/OvJHzpfmb0phgDWOjedY38AARfz7Hk4gOT+WB4ibk9CnDL+ ZnNZJbtPRSv5qnkGu8+p0fl0HeD/6Yaw1lS2/qggznai7R1S4BlOKnNfZqcU/8Rc CmguueXX3rWTgU3j9XE97uD+xTtM6b1Nmim1skt66yDL -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:29 2026 by rpki-client