This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/_nZKD9ZTGWn3ixeAqRkUR8-oFdY.roa File: _nZKD9ZTGWn3ixeAqRkUR8-oFdY.roa (raw, json) Hash identifier: E+dKSGK3CToMIv6bsluEab6asnsTgpRJX/4wcKUB3No= Subject key identifier: FE:76:4A:0F:D6:53:19:69:F7:8B:17:80:A9:19:14:47:CF:A8:15:D6 Certificate issuer: /CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996 Certificate serial: 019B7D5C124D11F8318B856CB6B849645029 Authority key identifier: F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/_nZKD9ZTGWn3ixeAqRkUR8-oFdY.roa Signing time: Fri 02 Jan 2026 06:19:04 +0000 ROA not before: Fri 02 Jan 2026 06:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198682 IP address blocks: 193.39.164.0/22 maxlen: 24 193.39.164.0/24 maxlen: 24 2a0b:11c0::/48 maxlen: 48 2a0b:11c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:12:4d:11:f8:31:8b:85:6c:b6:b8:49:64:50:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996 Validity Not Before: Jan 2 06:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe764a0fd6531969f78b1780a9191447cfa815d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f3:da:c4:4e:1d:a7:da:99:b9:4e:14:d3:78: f2:d8:16:7e:36:45:d6:26:97:63:05:b8:83:c2:47: 6a:a5:4b:43:f6:5a:dd:2d:91:8f:cb:f9:4d:38:15: e4:2d:a7:68:12:2f:13:69:76:6c:2a:9c:6a:67:99: cd:bb:9f:a1:ad:03:18:6d:f9:3b:d9:e4:ab:f8:e7: 28:63:29:9e:31:5f:65:7d:06:fe:72:46:4d:4b:af: 95:f4:eb:ac:0b:58:8d:a6:62:15:06:36:6c:ad:24: 2c:e3:78:7b:fb:18:a1:b5:8b:3a:86:40:65:85:88: e2:da:25:38:70:64:e3:41:1d:1e:62:09:5a:d9:50: 9d:d0:1e:e2:2a:de:a4:0a:d5:fe:f1:b8:0d:e1:68: 4b:fe:cc:2c:16:85:0e:5a:3e:a8:82:8b:c5:1a:cc: 83:c8:7a:7a:d7:a9:1e:11:04:e5:44:5a:f0:bd:28: 84:6e:d5:1c:88:20:16:33:1c:26:69:7a:b0:c2:56: 14:f1:28:31:bb:d9:23:b0:a0:b5:61:8e:1b:38:88: d7:2d:80:01:90:5e:b5:19:44:d5:7b:94:de:06:c6: 71:a7:da:f8:d8:b8:12:f7:67:4b:2b:a6:72:c4:9f: a8:35:71:b4:7b:2e:9a:56:8a:68:ed:f8:51:c2:8d: 21:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:76:4A:0F:D6:53:19:69:F7:8B:17:80:A9:19:14:47:CF:A8:15:D6 X509v3 Authority Key Identifier: keyid:F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/_nZKD9ZTGWn3ixeAqRkUR8-oFdY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.39.164.0/22 IPv6: 2a0b:11c0::/47 Signature Algorithm: sha256WithRSAEncryption 7f:8e:0e:2f:56:5b:97:fd:3a:8f:a7:ab:93:e2:15:48:fe:e6: c0:aa:5f:61:f2:14:97:95:ec:63:5d:9f:c5:7e:50:97:e0:c1: a9:ef:75:40:a7:14:e9:ff:fe:23:c9:2e:5e:88:93:38:7a:da: 71:3d:c1:2a:af:bc:5a:9d:20:89:79:2b:e5:27:54:dc:4e:fc: 91:51:77:8b:72:ce:c5:fb:a4:9a:4e:56:0b:6d:9b:cd:43:86: af:41:eb:9a:72:e3:e0:cd:9f:a8:c2:63:86:f2:3c:12:90:4e: 57:27:5e:61:06:7c:f2:fc:70:8e:7b:2e:1f:f0:b2:82:83:ea: 96:fb:49:d9:4b:18:e2:bb:17:72:4d:38:ee:35:53:b0:d3:67: dd:5f:83:df:57:35:a3:fa:34:85:3c:18:4d:5e:17:2a:c0:d5: 4a:41:25:9e:36:83:1a:05:c7:21:e4:a5:3b:6b:e0:58:1e:74: f5:a9:82:bf:cc:94:8d:a3:2e:b2:50:3b:b1:6a:26:88:90:09: 59:0c:7b:7d:2f:1c:09:6d:6b:15:e7:c0:2a:49:8f:99:e1:f2: c0:17:22:28:59:77:93:76:6e:e3:1f:1f:7c:43:93:cf:bc:e5: 3a:50:6a:52:58:c2:75:36:4a:95:41:9e:1f:14:01:40:22:c9: 84:74:4d:de -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9XBJNEfgxi4VstrhJZFApMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZjFjNTZkYWY3MDVmMTJlOTVkNDJmNDc3ZjhlMGEzZDg2 ZjM5OTYwHhcNMjYwMTAyMDYxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTc2NGEwZmQ2NTMxOTY5Zjc4YjE3ODBhOTE5MTQ0N2NmYTgxNWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/PaxE4dp9qZuU4U03jy2BZ+NkXW JpdjBbiDwkdqpUtD9lrdLZGPy/lNOBXkLadoEi8TaXZsKpxqZ5nNu5+hrQMYbfk7 2eSr+OcoYymeMV9lfQb+ckZNS6+V9OusC1iNpmIVBjZsrSQs43h7+xihtYs6hkBl hYji2iU4cGTjQR0eYgla2VCd0B7iKt6kCtX+8bgN4WhL/swsFoUOWj6ogovFGsyD yHp616keEQTlRFrwvSiEbtUciCAWMxwmaXqwwlYU8Sgxu9kjsKC1YY4bOIjXLYAB kF61GUTVe5TeBsZxp9r42LgS92dLK6ZyxJ+oNXG0ey6aVopo7fhRwo0hbQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFP52Sg/WUxlp94sXgKkZFEfPqBXWMB8GA1UdIwQY MBaAFPbxxW2vcF8S6V1C9Hf44KPYbzmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXZIRmJhOXdYeExwWFVMMGRfamdvOWh2T1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9jMjBhZDUtZmRmYy00NDU4LTg1YjEt YmZhY2JiMWExNzdkLzEvX25aS0Q5WlRHV24zaXhlQXFSa1VSOC1vRmRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9jMjBhZDUtZmRmYy00NDU4LTg1YjEtYmZhY2JiMWExNzdk LzEvOXZIRmJhOXdYeExwWFVMMGRfamdvOWh2T1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwSekMA8E AgACMAkDBwEqCxHAAAAwDQYJKoZIhvcNAQELBQADggEBAH+ODi9WW5f9Oo+nq5Pi FUj+5sCqX2HyFJeV7GNdn8V+UJfgwanvdUCnFOn//iPJLl6Ikzh62nE9wSqvvFqd IIl5K+UnVNxO/JFRd4tyzsX7pJpOVgttm81Dhq9B65py4+DNn6jCY4byPBKQTlcn XmEGfPL8cI57Lh/wsoKD6pb7SdlLGOK7F3JNOO41U7DTZ91fg99XNaP6NIU8GE1e FyrA1UpBJZ42gxoFxyHkpTtr4FgedPWpgr/MlI2jLrJQO7FqJoiQCVkMe30vHAlt axXnwCpJj5nh8sAXIihZd5N2buMfH3xDk8+85TpQalJYwnU2SpVBnh8UAUAiyYR0 Td4= -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:29 2026 by rpki-client