This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/F7EvqKPuCJrRbauscLqXiKU0tSU.roa File: F7EvqKPuCJrRbauscLqXiKU0tSU.roa (raw, json) Hash identifier: Rn1QP+hzXdWW26eL4q5uEtv+FD1RDx8ao69irkAES9U= Subject key identifier: 17:B1:2F:A8:A3:EE:08:9A:D1:6D:AB:AC:70:BA:97:88:A5:34:B5:25 Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac Certificate serial: 019B79ED54D4D191F8738AF498A677B4FA15 Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/F7EvqKPuCJrRbauscLqXiKU0tSU.roa Signing time: Thu 01 Jan 2026 14:19:15 +0000 ROA not before: Thu 01 Jan 2026 14:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15943 IP address blocks: 194.76.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:54:d4:d1:91:f8:73:8a:f4:98:a6:77:b4:fa:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac Validity Not Before: Jan 1 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17b12fa8a3ee089ad16dabac70ba9788a534b525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6b:bd:68:61:52:ad:a2:d7:60:05:d7:d8:d9: 89:8b:2b:69:36:f9:28:40:09:7d:c8:21:8d:10:08: 8e:ba:3e:31:02:21:dd:16:ad:3e:33:b9:9a:6a:c9: 21:3d:c3:ad:53:65:e9:5c:b4:f3:6f:a3:76:3b:91: f2:8e:9c:93:79:41:40:ef:a1:c7:3d:47:5a:7a:53: c0:47:0f:cb:08:e8:22:3d:34:02:7a:01:0e:42:ba: aa:3d:b3:ca:33:c4:5b:66:97:b0:77:97:1d:55:cf: 07:5c:a2:af:e0:bf:30:58:72:8a:07:5c:bb:87:22: 2d:a8:fd:75:3b:47:02:38:d9:42:a8:71:d5:1d:e8: 81:0a:d9:32:9c:cc:13:4f:f2:b4:c9:74:01:e2:61: 66:7a:01:55:33:9b:e4:64:27:df:bd:74:6a:87:c3: 7e:6a:61:b6:3c:da:e5:70:6d:3a:62:08:73:e5:6c: eb:39:f9:b0:fb:e8:dd:e3:74:4d:33:ff:0a:51:30: b4:4f:bc:1d:7c:23:1a:54:2d:fc:ac:5c:38:1e:a6: d3:56:8c:24:b3:47:f3:b5:be:94:45:8e:fa:45:19: 95:83:15:24:75:b9:ca:4b:f2:46:55:d4:80:a0:72: b7:a9:c4:a8:ca:32:33:a1:5c:82:70:cc:65:e3:69: 40:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B1:2F:A8:A3:EE:08:9A:D1:6D:AB:AC:70:BA:97:88:A5:34:B5:25 X509v3 Authority Key Identifier: keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/F7EvqKPuCJrRbauscLqXiKU0tSU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.76.122.0/23 Signature Algorithm: sha256WithRSAEncryption 35:78:90:7a:52:45:a1:25:25:3a:a8:b2:68:fa:ab:cf:08:ba: df:f9:80:05:cc:94:db:48:a8:f8:1d:8b:97:15:17:79:78:5e: fb:38:1b:2a:a9:d9:92:e9:e3:46:17:f5:e8:8e:39:04:6d:03: f8:6a:16:fb:bc:95:1f:f4:75:90:19:90:c3:45:73:8a:d6:2c: e8:35:93:2c:2d:cc:7f:41:4a:96:1d:0f:b5:2b:e3:55:1b:a6: 30:42:0b:14:99:9a:52:f7:4b:c3:4d:6b:ea:f2:43:20:f2:91: 6b:73:83:c7:99:20:c6:1d:c3:8b:30:a1:7c:c9:21:f0:98:d7: 30:77:1d:41:82:eb:f1:9b:c5:9a:29:9d:30:e3:c6:4a:4f:4c: 45:0c:51:ba:b9:6a:f5:9b:1b:4d:a2:cc:2a:39:76:dc:e5:39: fb:1e:37:cf:9a:ce:0d:99:f0:9c:09:34:41:e4:c1:22:23:82: de:94:73:9f:ec:81:ee:8d:fa:fa:9b:5e:4f:31:f0:55:a3:98: 0e:41:dc:be:06:83:20:e4:c5:24:8b:1d:60:fc:54:a6:06:b5: c6:48:3d:ad:e0:4c:3c:a7:2a:f7:d4:5d:a7:d3:ec:77:c1:d4: 00:cf:a6:27:5c:b5:81:ee:a4:51:73:5b:46:57:11:cd:a8:87: 09:a3:ea:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57VTU0ZH4c4r0mKZ3tPoVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjU2MzIxZWI3ZWEzZWU0NWNkZWQwMjg2Njg0MjBlMzdm YTJmYWMwHhcNMjYwMTAxMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2IxMmZhOGEzZWUwODlhZDE2ZGFiYWM3MGJhOTc4OGE1MzRiNTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12u9aGFSraLXYAXX2NmJiytpNvko QAl9yCGNEAiOuj4xAiHdFq0+M7maaskhPcOtU2XpXLTzb6N2O5HyjpyTeUFA76HH PUdaelPARw/LCOgiPTQCegEOQrqqPbPKM8RbZpewd5cdVc8HXKKv4L8wWHKKB1y7 hyItqP11O0cCONlCqHHVHeiBCtkynMwTT/K0yXQB4mFmegFVM5vkZCffvXRqh8N+ amG2PNrlcG06Yghz5WzrOfmw++jd43RNM/8KUTC0T7wdfCMaVC38rFw4HqbTVowk s0fztb6URY76RRmVgxUkdbnKS/JGVdSAoHK3qcSoyjIzoVyCcMxl42lAlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBexL6ij7gia0W2rrHC6l4ilNLUlMB8GA1UdIwQY MBaAFFz1YyHrfqPuRc3tAoZoQg43+i+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODIt ODQzZTI2MmRkOGRjLzEvRjdFdnFLUHVDSnJSYmF1c2NMcVhpS1UwdFNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODItODQzZTI2MmRkOGRj LzEvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwkx6MA0G CSqGSIb3DQEBCwUAA4IBAQA1eJB6UkWhJSU6qLJo+qvPCLrf+YAFzJTbSKj4HYuX FRd5eF77OBsqqdmS6eNGF/XojjkEbQP4ahb7vJUf9HWQGZDDRXOK1izoNZMsLcx/ QUqWHQ+1K+NVG6YwQgsUmZpS90vDTWvq8kMg8pFrc4PHmSDGHcOLMKF8ySHwmNcw dx1Bguvxm8WaKZ0w48ZKT0xFDFG6uWr1mxtNoswqOXbc5Tn7HjfPms4NmfCcCTRB 5MEiI4LelHOf7IHujfr6m15PMfBVo5gOQdy+BoMg5MUkix1g/FSmBrXGSD2t4Ew8 pyr31F2n0+x3wdQAz6YnXLWB7qRRc1tGVxHNqIcJo+oc -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:58 2026 by rpki-client