This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/fbVqsUw1qHcGPNDhUBidnEjlYPM.roa File: fbVqsUw1qHcGPNDhUBidnEjlYPM.roa (raw, json) Hash identifier: 5HqkRNZfSmOYfa1L4V5ltNYQi6qB5edXHasYBO1l1+I= Subject key identifier: 7D:B5:6A:B1:4C:35:A8:77:06:3C:D0:E1:50:18:9D:9C:48:E5:60:F3 Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C800D2C283E9F418F596B7CF43CE723 Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/fbVqsUw1qHcGPNDhUBidnEjlYPM.roa Signing time: Fri 02 Jan 2026 02:18:45 +0000 ROA not before: Fri 02 Jan 2026 02:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15422 IP address blocks: 194.206.254.0/24 maxlen: 24 217.109.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:0d:2c:28:3e:9f:41:8f:59:6b:7c:f4:3c:e7:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7db56ab14c35a877063cd0e150189d9c48e560f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:52:6b:62:bf:61:e7:42:44:15:c6:99:96:2d: f5:d3:6d:59:05:49:6b:97:a9:17:16:53:22:4b:0d: c3:81:9b:25:d6:b0:22:fd:83:37:0b:e1:7d:d4:68: 00:fb:dc:bd:8f:fa:3d:30:0c:aa:63:3e:50:6b:b7: e6:75:61:7b:3a:83:87:6d:69:63:f5:02:d1:b0:82: dd:80:a2:7a:5f:39:e5:db:fb:b5:d8:53:14:5b:b6: 61:21:58:ff:e0:e7:a4:49:23:a7:49:9c:bf:6f:56: 76:14:11:23:d5:82:82:49:39:f3:03:db:01:2a:14: 7e:13:64:22:08:2e:19:81:36:0e:9a:b9:14:dc:11: bd:e8:e5:57:3a:eb:5d:bc:da:eb:bd:38:d0:1d:e5: 4a:ec:f7:0b:3c:ce:c4:45:cc:06:4b:d0:da:e8:9c: 70:62:5f:6c:e8:95:f2:76:ac:76:fe:bd:8c:92:03: ec:62:19:b5:47:93:8f:99:37:b9:f8:8a:90:8a:ff: 2c:e9:2c:b5:f1:51:b7:34:b8:6f:c8:91:5b:e9:49: 0e:9e:25:46:11:c8:bc:27:b7:35:72:73:1e:0d:c5: 2d:b2:e4:a1:ad:ab:d7:0a:41:09:d2:03:2f:2c:76: 48:62:09:38:49:8f:ad:34:a1:5f:a2:31:79:58:c0: 79:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B5:6A:B1:4C:35:A8:77:06:3C:D0:E1:50:18:9D:9C:48:E5:60:F3 X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/fbVqsUw1qHcGPNDhUBidnEjlYPM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.206.254.0/24 217.109.67.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:17:95:86:79:41:86:e1:f3:9c:d5:b4:5f:0d:2f:13:4c:f3: b1:50:bb:c2:89:fd:d1:db:05:99:9f:e4:44:43:af:c0:e1:df: 37:be:25:6f:b1:6a:23:56:ba:49:37:e4:c3:0a:a0:45:7a:05: 83:a0:20:ca:0c:7a:81:c6:85:15:ee:2c:8e:ed:7e:6f:81:ba: 0a:a5:10:d9:cd:6e:49:10:9a:47:7a:10:dc:f0:f4:67:83:c7: 75:0c:5c:a7:18:52:17:07:65:47:19:b5:b6:52:19:32:ed:e9: 6e:c6:da:be:f2:b0:a8:94:f8:af:ed:12:35:5b:5e:99:7e:8d: 61:34:10:a1:f2:34:37:63:58:d5:dc:c2:b8:9b:70:65:7b:e1: 73:91:12:10:0b:0c:2f:04:51:c4:fb:ef:3c:4e:e7:eb:0b:af: 70:96:52:95:77:aa:4d:03:74:1a:0f:b8:e7:47:30:e9:7e:fd: 19:72:31:92:9e:1c:41:26:a9:18:bc:c2:c9:0e:12:28:fd:8d: 91:58:28:76:24:c9:7c:45:52:bd:61:1d:dd:ce:de:e5:5a:dc: 6e:84:9b:17:93:65:b2:ae:e0:42:e4:e7:d9:61:f1:9f:4e:fa: f3:94:dd:34:b8:17:2d:c7:de:90:6f:b5:ad:c2:66:d4:06:9d: 43:10:f2:f2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gA0sKD6fQY9Za3z0POcjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGI1NmFiMTRjMzVhODc3MDYzY2QwZTE1MDE4OWQ5YzQ4ZTU2MGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VJrYr9h50JEFcaZli31021ZBUlr l6kXFlMiSw3DgZsl1rAi/YM3C+F91GgA+9y9j/o9MAyqYz5Qa7fmdWF7OoOHbWlj 9QLRsILdgKJ6Xznl2/u12FMUW7ZhIVj/4OekSSOnSZy/b1Z2FBEj1YKCSTnzA9sB KhR+E2QiCC4ZgTYOmrkU3BG96OVXOutdvNrrvTjQHeVK7PcLPM7ERcwGS9Da6Jxw Yl9s6JXydqx2/r2MkgPsYhm1R5OPmTe5+IqQiv8s6Sy18VG3NLhvyJFb6UkOniVG Eci8J7c1cnMeDcUtsuShravXCkEJ0gMvLHZIYgk4SY+tNKFfojF5WMB5SwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFH21arFMNah3BjzQ4VAYnZxI5WDzMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvZmJWcXNVdzFxSGNHUE5EaFVCaWRuRWpsWVBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAws7+AwQA 2W1DMA0GCSqGSIb3DQEBCwUAA4IBAQAKF5WGeUGG4fOc1bRfDS8TTPOxULvCif3R 2wWZn+REQ6/A4d83viVvsWojVrpJN+TDCqBFegWDoCDKDHqBxoUV7iyO7X5vgboK pRDZzW5JEJpHehDc8PRng8d1DFynGFIXB2VHGbW2Uhky7eluxtq+8rColPiv7RI1 W16Zfo1hNBCh8jQ3Y1jV3MK4m3Ble+FzkRIQCwwvBFHE++88TufrC69wllKVd6pN A3QaD7jnRzDpfv0ZcjGSnhxBJqkYvMLJDhIo/Y2RWCh2JMl8RVK9YR3dzt7lWtxu hJsXk2WyruBC5OfZYfGfTvrzlN00uBctx96Qb7WtwmbUBp1DEPLy -----END CERTIFICATE-----Generated at Sun Jan 25 19:01:40 2026 by rpki-client