This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/fc06tDzqAcbjDYDl3vL1PeFJVTY.roa File: fc06tDzqAcbjDYDl3vL1PeFJVTY.roa (raw, json) Hash identifier: 1VsZk2Z0ekFMNlq/NwiBJy9M7XrZUWOMvgWdygR5Fws= Subject key identifier: 7D:CD:3A:B4:3C:EA:01:C6:E3:0D:80:E5:DE:F2:F5:3D:E1:49:55:36 Certificate issuer: /CN=54f87b5a62c1ff0f522812e9add1756bc73384c5 Certificate serial: 019B7F15AF38ED3125E467A364BE6281DBBF Authority key identifier: 54:F8:7B:5A:62:C1:FF:0F:52:28:12:E9:AD:D1:75:6B:C7:33:84:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/fc06tDzqAcbjDYDl3vL1PeFJVTY.roa Signing time: Fri 02 Jan 2026 14:21:26 +0000 ROA not before: Fri 02 Jan 2026 14:21:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20546 IP address blocks: 93.191.160.0/24 maxlen: 24 93.191.161.0/24 maxlen: 24 93.191.162.0/24 maxlen: 24 93.191.163.0/24 maxlen: 24 93.191.164.0/24 maxlen: 24 93.191.165.0/24 maxlen: 24 93.191.166.0/24 maxlen: 24 93.191.167.0/24 maxlen: 24 185.192.168.0/24 maxlen: 24 185.192.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/VPh7WmLB_w9SKBLprdF1a8czhMU.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/VPh7WmLB_w9SKBLprdF1a8czhMU.mft rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:af:38:ed:31:25:e4:67:a3:64:be:62:81:db:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54f87b5a62c1ff0f522812e9add1756bc73384c5 Validity Not Before: Jan 2 14:21:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7dcd3ab43cea01c6e30d80e5def2f53de1495536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4c:b9:cb:d7:a6:d7:a7:81:34:ab:32:c5:72: 14:a9:76:48:c7:e0:d0:a7:28:85:63:b0:54:bb:ee: 69:5e:42:01:4e:5a:d4:32:49:e7:de:a2:07:00:9e: 8c:7a:36:45:71:3f:b4:92:b0:fa:5a:78:e7:34:35: 97:bd:b8:e4:c7:87:86:78:5b:32:22:11:e4:d4:6c: 9d:10:df:d3:c5:f0:47:dd:2e:d9:eb:ac:62:1c:0c: 44:d0:59:99:94:a8:4a:ee:4e:5c:1d:e2:54:fd:da: d4:fe:81:9c:4e:ff:11:62:bd:c4:f2:81:07:0a:6b: 48:10:61:41:1b:9a:c7:91:81:3e:11:c9:1d:c9:ae: 5b:79:94:a8:14:a6:73:88:46:bb:da:58:eb:7f:f3: 44:f0:fb:75:d1:c9:ad:5c:33:54:2d:30:5e:75:a4: a4:07:31:81:04:f9:f7:5d:b4:42:57:56:41:ec:e1: ae:df:48:11:04:8d:f2:75:ac:b4:5b:b5:87:85:51: 9e:d5:d7:11:8f:fb:a9:3c:d6:22:e8:b7:dd:21:ce: 8a:9d:a1:94:65:99:20:bb:51:4d:3f:72:83:14:0f: c6:e9:56:c9:ab:86:04:30:00:2d:aa:2f:ff:ce:4e: 11:1b:eb:ed:8e:2e:83:d6:60:c8:15:e3:96:60:cf: fa:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:CD:3A:B4:3C:EA:01:C6:E3:0D:80:E5:DE:F2:F5:3D:E1:49:55:36 X509v3 Authority Key Identifier: keyid:54:F8:7B:5A:62:C1:FF:0F:52:28:12:E9:AD:D1:75:6B:C7:33:84:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/fc06tDzqAcbjDYDl3vL1PeFJVTY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/VPh7WmLB_w9SKBLprdF1a8czhMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.191.160.0/21 185.192.168.0/23 Signature Algorithm: sha256WithRSAEncryption 49:3d:bd:77:41:35:04:10:b1:df:8f:db:e1:db:12:93:ae:ac: 34:b2:60:d6:97:4a:fb:74:02:4b:6b:43:9c:e9:6e:b6:aa:06: 80:f0:9b:2f:fe:0f:59:0c:ec:c9:38:d5:62:d3:54:d7:df:dd: 53:da:f6:c0:30:65:39:32:e8:7c:ca:b8:18:54:c7:a2:35:5c: 82:12:ae:77:32:9a:6b:b5:24:d0:6b:33:6a:d4:24:a8:77:19: a8:82:2a:dd:50:64:7e:35:f7:20:33:95:bc:51:e6:95:8c:17: 5f:45:b9:f8:e7:4d:81:9a:8d:5a:90:34:a0:40:e7:fe:62:bf: 9e:41:d7:ae:15:d3:95:0a:7e:15:c7:a3:f7:43:0d:6a:b0:de: ad:1c:43:9d:3a:18:30:7d:6e:3c:3d:8d:d6:15:d0:9a:97:ed: a5:30:af:79:0b:e5:62:b0:6f:b4:23:3e:12:6e:84:d3:98:b5: aa:f4:a7:29:24:cf:fc:d3:97:67:5e:db:19:d3:2e:f2:db:b2: 95:bf:b5:08:73:12:be:12:68:77:05:7f:04:a0:6b:2d:bc:91: f2:68:0d:f4:f1:24:0b:74:c8:89:22:ee:a5:91:f0:6a:67:4d: 0a:fb:0f:1b:55:dd:f8:75:ef:33:21:45:6e:5c:55:24:4f:75: e5:f2:ef:0f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/Fa847TEl5GejZL5igdu/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Zjg3YjVhNjJjMWZmMGY1MjI4MTJlOWFkZDE3NTZiYzcz Mzg0YzUwHhcNMjYwMTAyMTQyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGNkM2FiNDNjZWEwMWM2ZTMwZDgwZTVkZWYyZjUzZGUxNDk1NTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwky5y9em16eBNKsyxXIUqXZIx+DQ pyiFY7BUu+5pXkIBTlrUMknn3qIHAJ6MejZFcT+0krD6WnjnNDWXvbjkx4eGeFsy IhHk1GydEN/TxfBH3S7Z66xiHAxE0FmZlKhK7k5cHeJU/drU/oGcTv8RYr3E8oEH CmtIEGFBG5rHkYE+Eckdya5beZSoFKZziEa72ljrf/NE8Pt10cmtXDNULTBedaSk BzGBBPn3XbRCV1ZB7OGu30gRBI3yday0W7WHhVGe1dcRj/upPNYi6LfdIc6KnaGU ZZkgu1FNP3KDFA/G6VbJq4YEMAAtqi//zk4RG+vtji6D1mDIFeOWYM/6rQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFH3NOrQ86gHG4w2A5d7y9T3hSVU2MB8GA1UdIwQY MBaAFFT4e1piwf8PUigS6a3RdWvHM4TFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlBoN1dtTEJfdzlTS0JMcHJkRjFhOGN6aE1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yY2M0MTktOGUzNC00MWE5LWIyNDMt ODU1NDE4ZmZlZDQxLzEvZmMwNnREenFBY2JqRFlEbDN2TDFQZUZKVlRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8yY2M0MTktOGUzNC00MWE5LWIyNDMtODU1NDE4ZmZlZDQx LzEvVlBoN1dtTEJfdzlTS0JMcHJkRjFhOGN6aE1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDXb+gAwQB ucCoMA0GCSqGSIb3DQEBCwUAA4IBAQBJPb13QTUEELHfj9vh2xKTrqw0smDWl0r7 dAJLa0Oc6W62qgaA8Jsv/g9ZDOzJONVi01TX391T2vbAMGU5Muh8yrgYVMeiNVyC Eq53MpprtSTQazNq1CSodxmogirdUGR+NfcgM5W8UeaVjBdfRbn4502Bmo1akDSg QOf+Yr+eQdeuFdOVCn4Vx6P3Qw1qsN6tHEOdOhgwfW48PY3WFdCal+2lMK95C+Vi sG+0Iz4SboTTmLWq9KcpJM/805dnXtsZ0y7y27KVv7UIcxK+Emh3BX8EoGstvJHy aA308SQLdMiJIu6lkfBqZ00K+w8bVd34de8zIUVuXFUkT3Xl8u8P -----END CERTIFICATE-----Generated at Sun Jan 25 10:28:17 2026 by rpki-client