This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/fg1dJ5KT1fZ2mElPDebHpNVgR8U.roa File: fg1dJ5KT1fZ2mElPDebHpNVgR8U.roa (raw, json) Hash identifier: Q8kFLKZwqJa3BTNxu/acXdMWWvmB0nDo3x9ALn3COiQ= Subject key identifier: 7E:0D:5D:27:92:93:D5:F6:76:98:49:4F:0D:E6:C7:A4:D5:60:47:C5 Certificate issuer: /CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4 Certificate serial: 019B7758A6D044C27D9758C119D92A352D3A Authority key identifier: 41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/fg1dJ5KT1fZ2mElPDebHpNVgR8U.roa Signing time: Thu 01 Jan 2026 02:17:37 +0000 ROA not before: Thu 01 Jan 2026 02:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213499 IP address blocks: 194.242.6.0/24 maxlen: 24 194.242.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a6:d0:44:c2:7d:97:58:c1:19:d9:2a:35:2d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4 Validity Not Before: Jan 1 02:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e0d5d279293d5f67698494f0de6c7a4d56047c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a7:10:a1:2c:96:a3:2c:7a:5e:e1:ad:f6:cf: 05:3f:2c:ef:82:62:c6:59:fb:a8:44:40:ff:e5:e9: 04:88:3a:c5:62:2a:3d:2b:da:30:1d:34:ae:61:ad: 5b:8b:07:a2:18:8a:db:13:4e:e2:e7:1a:10:f6:d0: 6d:3d:55:78:25:eb:a0:27:64:f1:b4:e3:7b:b5:9b: 8b:c6:3d:da:c2:b6:6b:75:e7:f2:55:07:f8:5a:6f: bc:6c:77:75:2a:d6:b0:0a:d1:c1:da:06:90:d2:47: 45:92:ee:2b:1d:06:9b:94:be:ba:c8:5e:2c:c6:b5: 19:f9:b7:ef:4d:a2:af:81:72:f2:87:31:f2:9a:98: f6:5d:cd:4f:5c:4b:64:9f:62:1a:6e:58:b3:df:f2: ab:28:6b:b2:6d:3c:bc:9c:ff:8e:69:64:d6:29:10: 77:65:41:c5:67:a5:a4:19:90:40:bf:6b:02:10:91: a0:fc:64:14:22:71:7b:60:69:93:35:5f:71:8d:fe: 7f:60:88:58:ab:0a:c5:3c:1a:f7:ec:f2:05:af:47: 79:18:66:32:dc:38:98:13:61:75:bf:f1:26:c8:bf: 67:8e:1c:3c:e6:2e:07:03:40:18:03:1d:ac:47:35: 75:da:94:85:d0:63:98:94:dc:8e:ea:8c:4a:f6:2b: 12:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:0D:5D:27:92:93:D5:F6:76:98:49:4F:0D:E6:C7:A4:D5:60:47:C5 X509v3 Authority Key Identifier: keyid:41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/fg1dJ5KT1fZ2mElPDebHpNVgR8U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.242.6.0/23 Signature Algorithm: sha256WithRSAEncryption 68:30:cb:7a:c3:5f:8e:37:12:96:b4:92:5e:de:08:aa:fc:77: e4:cc:02:67:30:12:a7:b2:83:a2:66:22:ac:49:07:02:56:47: 4f:5e:5d:33:07:56:ca:20:59:78:22:bb:33:9c:35:30:c4:39: c7:a0:07:ac:f8:6f:08:6c:2b:d6:a0:66:5f:9a:cf:c2:cf:55: 3c:f0:b6:bc:5e:b6:e3:fe:0d:3a:44:c5:d8:17:c9:7e:f1:3b: 63:a6:4d:8b:8c:b0:40:97:f9:28:09:d0:4a:8e:a5:56:56:b7: fb:a7:74:3a:93:1a:ea:93:f9:e0:b9:0b:c7:ff:98:44:46:9e: db:b3:b7:9d:3d:1f:85:46:73:69:99:c4:ba:db:a5:48:2c:6b: c5:68:71:02:08:cb:54:7f:b3:0d:ee:ea:1d:b6:5e:e4:aa:9e: 48:60:fb:6b:70:42:b0:92:cb:6b:17:fa:6b:22:e6:42:11:81: 24:ad:22:2d:42:b4:2b:dd:96:0b:2b:00:2b:a8:24:da:07:75: 3d:4a:b9:88:81:16:2a:8d:0c:79:7a:f3:55:ae:9d:03:0c:e9: 45:d8:8d:28:4f:79:a4:9e:7d:fb:a8:4f:a1:2f:a3:72:a2:be: a7:48:87:cb:2f:49:58:e4:df:9d:05:df:61:b2:a1:69:28:4c: 4c:a0:fa:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WKbQRMJ9l1jBGdkqNS06MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMzdhZjA4ZjE5YWExNWJlZDNmNDFiZTYyYjM2MzAzZGNj N2RjZjQwHhcNMjYwMTAxMDIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTBkNWQyNzkyOTNkNWY2NzY5ODQ5NGYwZGU2YzdhNGQ1NjA0N2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKcQoSyWoyx6XuGt9s8FPyzvgmLG WfuoRED/5ekEiDrFYio9K9owHTSuYa1biweiGIrbE07i5xoQ9tBtPVV4JeugJ2Tx tON7tZuLxj3awrZrdefyVQf4Wm+8bHd1KtawCtHB2gaQ0kdFku4rHQablL66yF4s xrUZ+bfvTaKvgXLyhzHympj2Xc1PXEtkn2Iabliz3/KrKGuybTy8nP+OaWTWKRB3 ZUHFZ6WkGZBAv2sCEJGg/GQUInF7YGmTNV9xjf5/YIhYqwrFPBr37PIFr0d5GGYy 3DiYE2F1v/EmyL9njhw85i4HA0AYAx2sRzV12pSF0GOYlNyO6oxK9isSXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH4NXSeSk9X2dphJTw3mx6TVYEfFMB8GA1UdIwQY MBaAFEE3rwjxmqFb7T9BvmKzYwPcx9z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVRldkNQR2FvVnZ0UDBHLVlyTmpBOXpIM1BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZmRkMjQtNGQxNi00ZTczLWI2MTkt N2Y1ZWMyNzVjYWE0LzEvZmcxZEo1S1QxZloybUVsUERlYkhwTlZnUjhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kZmRkMjQtNGQxNi00ZTczLWI2MTktN2Y1ZWMyNzVjYWE0 LzEvUVRldkNQR2FvVnZ0UDBHLVlyTmpBOXpIM1BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwvIGMA0G CSqGSIb3DQEBCwUAA4IBAQBoMMt6w1+ONxKWtJJe3giq/HfkzAJnMBKnsoOiZiKs SQcCVkdPXl0zB1bKIFl4IrsznDUwxDnHoAes+G8IbCvWoGZfms/Cz1U88La8Xrbj /g06RMXYF8l+8Ttjpk2LjLBAl/koCdBKjqVWVrf7p3Q6kxrqk/nguQvH/5hERp7b s7edPR+FRnNpmcS626VILGvFaHECCMtUf7MN7uodtl7kqp5IYPtrcEKwkstrF/pr IuZCEYEkrSItQrQr3ZYLKwArqCTaB3U9SrmIgRYqjQx5evNVrp0DDOlF2I0oT3mk nn37qE+hL6Nyor6nSIfLL0lY5N+dBd9hsqFpKExMoPoK -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:57 2026 by rpki-client