This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/pxCe37jhuXSIyNu7bYqJ3DZ_fw4.roa File: pxCe37jhuXSIyNu7bYqJ3DZ_fw4.roa (raw, json) Hash identifier: sH0uhgJw4LrCTAOetXBWIMlVqm3VIDbyxnZ0hMsIubE= Subject key identifier: A7:10:9E:DF:B8:E1:B9:74:88:C8:DB:BB:6D:8A:89:DC:36:7F:7F:0E Certificate issuer: /CN=c1eb2c601fa6d07507973081faa1325fe190b276 Certificate serial: 019B7B359C4B5B92F7405B155318E5FB28FF Authority key identifier: C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/pxCe37jhuXSIyNu7bYqJ3DZ_fw4.roa Signing time: Thu 01 Jan 2026 20:17:49 +0000 ROA not before: Thu 01 Jan 2026 20:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 193.169.70.0/24 maxlen: 24 193.169.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:9c:4b:5b:92:f7:40:5b:15:53:18:e5:fb:28:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1eb2c601fa6d07507973081faa1325fe190b276 Validity Not Before: Jan 1 20:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7109edfb8e1b97488c8dbbb6d8a89dc367f7f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:85:4a:b8:15:52:3b:98:13:5d:65:31:2a:88: 9d:89:f1:a7:b8:e2:f9:b8:e0:7f:b6:cb:2c:4d:f4: 1e:c1:5b:6b:3c:8a:ab:55:83:ab:7b:37:aa:91:fa: 0d:0f:92:40:67:80:19:a8:df:7d:86:07:a6:45:4b: 7a:c9:fd:40:ec:44:dd:01:b2:01:c3:f5:57:66:61: 59:80:45:8a:bc:85:d8:8e:60:f6:25:12:51:27:58: b0:76:29:d0:5d:d8:e0:a8:46:d9:84:65:17:f7:77: 28:28:04:eb:44:c7:15:1f:7d:99:70:cf:35:74:e7: 31:76:d3:2a:3a:59:e9:2b:59:36:e5:16:43:75:c6: b1:b6:4c:6e:50:32:6e:33:8e:f5:7c:f4:5c:b0:0b: 2d:58:81:f3:40:bf:ee:77:17:7d:dc:e9:b1:c0:20: 04:1c:53:19:24:5f:dc:14:41:7f:68:74:5d:a0:17: c6:01:64:68:33:1e:49:49:c5:c3:05:30:a7:c5:a0: d2:87:b2:21:94:cc:b4:ee:b2:97:ef:ef:93:58:01: 45:a0:cc:b4:d1:c8:ba:fb:16:42:aa:b5:3b:8f:02: 4a:3c:0d:7f:d2:9d:ea:d5:4f:37:ce:22:f0:36:ba: 8c:d1:9a:c1:21:12:20:ee:b8:e4:a2:56:2c:1a:40: 5a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:10:9E:DF:B8:E1:B9:74:88:C8:DB:BB:6D:8A:89:DC:36:7F:7F:0E X509v3 Authority Key Identifier: keyid:C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/pxCe37jhuXSIyNu7bYqJ3DZ_fw4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.169.70.0/23 Signature Algorithm: sha256WithRSAEncryption a5:c8:19:78:98:61:86:bb:4e:cd:ec:c7:b7:1d:ba:c7:6a:eb: 90:4d:e9:97:77:8f:81:37:b3:fe:a4:1a:85:9a:ae:0e:0d:48: b7:bf:20:bf:d2:76:21:5b:ac:e6:54:38:e2:8d:97:a7:43:ec: de:75:78:56:34:50:3c:81:7a:a5:24:0d:3f:c8:71:7f:ff:46: 0b:c8:ef:61:74:73:e5:42:a4:45:d6:dc:97:f1:d5:45:e6:68: 0f:fd:f1:c3:db:3e:20:b0:4c:11:36:59:30:66:9d:fa:19:83: 6f:6f:ec:24:ee:ec:05:92:10:74:7e:49:c7:fc:b5:b9:3b:23: 32:2e:33:cf:31:52:04:06:28:b2:3c:9e:64:6e:81:a4:28:0f: b6:e8:dc:f3:21:ad:d2:ec:ea:e9:69:04:3e:b6:0b:f6:1c:fb: b2:73:31:de:58:97:4f:22:09:78:f8:c5:c0:3e:0b:fb:ff:91: 7d:31:7f:be:b4:d9:80:26:3c:4b:73:93:b4:55:b7:70:c8:10: 99:3b:89:5d:fd:90:b9:10:5d:bd:84:9f:fe:48:90:46:35:eb: 3d:6a:38:0c:d6:73:05:98:b0:d1:bc:67:08:61:68:8a:dd:6f: 35:dc:a5:e3:cb:50:62:16:ba:da:c0:3d:59:bd:80:e9:48:83: 1b:d2:7b:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NZxLW5L3QFsVUxjl+yj/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZWIyYzYwMWZhNmQwNzUwNzk3MzA4MWZhYTEzMjVmZTE5 MGIyNzYwHhcNMjYwMTAxMjAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzEwOWVkZmI4ZTFiOTc0ODhjOGRiYmI2ZDhhODlkYzM2N2Y3ZjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIVKuBVSO5gTXWUxKoidifGnuOL5 uOB/tsssTfQewVtrPIqrVYOrezeqkfoND5JAZ4AZqN99hgemRUt6yf1A7ETdAbIB w/VXZmFZgEWKvIXYjmD2JRJRJ1iwdinQXdjgqEbZhGUX93coKATrRMcVH32ZcM81 dOcxdtMqOlnpK1k25RZDdcaxtkxuUDJuM471fPRcsAstWIHzQL/udxd93OmxwCAE HFMZJF/cFEF/aHRdoBfGAWRoMx5JScXDBTCnxaDSh7IhlMy07rKX7++TWAFFoMy0 0ci6+xZCqrU7jwJKPA1/0p3q1U83ziLwNrqM0ZrBIRIg7rjkolYsGkBatQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKcQnt+44bl0iMjbu22Kidw2f38OMB8GA1UdIwQY MBaAFMHrLGAfptB1B5cwgfqhMl/hkLJ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2Vzc1lCLW0wSFVIbHpDQi1xRXlYLUdRc25ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81Y2Y0MzEtNGQ1Ny00NTAzLWIyOGEt OTBlZjdiZGExZGMzLzEvcHhDZTM3amh1WFNJeU51N2JZcUozRFpfZnc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81Y2Y0MzEtNGQ1Ny00NTAzLWIyOGEtOTBlZjdiZGExZGMz LzEvd2Vzc1lCLW0wSFVIbHpDQi1xRXlYLUdRc25ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwalGMA0G CSqGSIb3DQEBCwUAA4IBAQClyBl4mGGGu07N7Me3HbrHauuQTemXd4+BN7P+pBqF mq4ODUi3vyC/0nYhW6zmVDjijZenQ+zedXhWNFA8gXqlJA0/yHF//0YLyO9hdHPl QqRF1tyX8dVF5mgP/fHD2z4gsEwRNlkwZp36GYNvb+wk7uwFkhB0fknH/LW5OyMy LjPPMVIEBiiyPJ5kboGkKA+26NzzIa3S7OrpaQQ+tgv2HPuyczHeWJdPIgl4+MXA Pgv7/5F9MX++tNmAJjxLc5O0VbdwyBCZO4ld/ZC5EF29hJ/+SJBGNes9ajgM1nMF mLDRvGcIYWiK3W813KXjy1BiFrrawD1ZvYDpSIMb0nuA -----END CERTIFICATE-----Generated at Sun Jan 25 19:38:36 2026 by rpki-client