This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/FK7M33h8PneimbbBwlzPtI7UGjQ.roa File: FK7M33h8PneimbbBwlzPtI7UGjQ.roa (raw, json) Hash identifier: aNLGPczAzOxwP3MWrRV4AkrfcQXY2Y+aKOj5IkNZYfg= Subject key identifier: 14:AE:CC:DF:78:7C:3E:77:A2:99:B6:C1:C2:5C:CF:B4:8E:D4:1A:34 Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528 Certificate serial: 019B783443AB0EE4A088FF9C372A037E21CD Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/FK7M33h8PneimbbBwlzPtI7UGjQ.roa Signing time: Thu 01 Jan 2026 06:17:29 +0000 ROA not before: Thu 01 Jan 2026 06:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47692 IP address blocks: 188.172.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:43:ab:0e:e4:a0:88:ff:9c:37:2a:03:7e:21:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528 Validity Not Before: Jan 1 06:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14aeccdf787c3e77a299b6c1c25ccfb48ed41a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:93:6f:b9:b4:34:f6:3e:b3:db:66:f6:df:df: 7a:ec:a0:9e:1a:6a:9d:a1:f6:f7:99:ea:9b:09:d3: 6b:7b:64:56:dc:b2:b4:77:48:96:bf:33:71:e5:69: 1e:7a:ae:6b:ee:2b:ca:80:ea:4a:e4:30:e6:c7:ab: 99:f3:fb:ef:cf:6c:5b:48:48:f2:ff:59:42:05:07: ba:de:81:4f:0a:cb:d4:2b:c1:0f:39:b0:e3:fa:a8: 99:da:6e:27:14:a2:ad:5b:46:bf:11:4d:ee:fc:46: 89:1e:60:80:2f:24:a2:dc:e8:ff:a3:01:84:94:e7: 47:8b:d3:8e:89:bb:b0:b0:bc:7a:dd:3f:fe:97:f3: 81:4b:ff:c0:00:63:c8:25:d8:c9:b7:db:0c:43:3e: 1a:7d:1e:f2:33:21:57:e8:d8:d9:da:8f:94:2b:a2: c9:64:f1:f4:0c:98:9d:1a:15:9a:fb:98:54:56:a9: c3:41:b7:35:bc:57:18:22:66:77:1d:61:dc:2e:36: ce:82:10:00:f6:9c:41:e3:b8:d4:56:4b:e5:b0:49: 0a:c0:48:cd:5c:a9:09:84:4c:88:7b:0e:bf:4b:1f: 8f:71:2c:b7:84:43:90:22:39:da:56:b7:4f:e3:71: 4b:17:9f:d6:1b:37:da:dc:7c:66:8b:0e:48:4f:53: f9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AE:CC:DF:78:7C:3E:77:A2:99:B6:C1:C2:5C:CF:B4:8E:D4:1A:34 X509v3 Authority Key Identifier: keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/FK7M33h8PneimbbBwlzPtI7UGjQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.172.196.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:2c:13:3f:05:5e:79:28:e3:01:8a:13:2c:81:a1:24:41:b4: b4:7f:92:06:a6:73:a7:b4:68:65:47:5b:d1:bc:1c:1c:2f:c0: e7:42:ad:c2:20:58:48:4b:6e:4b:72:9a:1e:85:f1:93:c7:51: f1:a6:19:5c:0d:5a:08:0a:dd:f9:bc:67:c9:d6:a6:a8:8a:a2: 34:ba:7c:f1:1f:97:e4:75:0d:ef:af:90:ea:37:0a:b8:3c:f4: 70:3e:e5:04:93:2d:47:4c:13:b5:81:a7:53:38:da:3a:4a:1e: e2:1d:d8:63:85:96:03:3b:fb:51:83:5f:4e:d7:63:48:73:fd: 5d:96:79:43:12:5a:52:13:36:ba:98:e2:66:10:2c:6f:b9:11: aa:5a:53:9a:ca:39:6d:21:b0:4d:aa:ee:ed:ca:78:53:d0:0e: 18:7b:8a:d0:b5:32:75:bc:b7:35:20:fa:5d:19:8a:04:6c:d1: f2:40:93:ee:97:e7:aa:62:87:45:13:f1:4c:f5:4c:6d:5f:48: 38:1a:f1:50:9e:0a:ab:72:d7:54:b8:32:e2:3e:e8:dc:e9:39: 97:f9:8c:82:cb:fe:eb:1d:0d:b2:76:b1:9b:5c:60:38:e2:7a: 10:27:0a:47:11:93:49:d1:d9:f0:e7:f1:90:51:e5:78:69:31: b0:94:fc:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NEOrDuSgiP+cNyoDfiHNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MzlhZmViYWNlODk5YThlZTBiYjRmOGJiNDQ3NWZlMjQ3 YTE1MjgwHhcNMjYwMTAxMDYxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGFlY2NkZjc4N2MzZTc3YTI5OWI2YzFjMjVjY2ZiNDhlZDQxYTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJNvubQ09j6z22b239967KCeGmqd ofb3meqbCdNre2RW3LK0d0iWvzNx5Wkeeq5r7ivKgOpK5DDmx6uZ8/vvz2xbSEjy /1lCBQe63oFPCsvUK8EPObDj+qiZ2m4nFKKtW0a/EU3u/EaJHmCALySi3Oj/owGE lOdHi9OOibuwsLx63T/+l/OBS//AAGPIJdjJt9sMQz4afR7yMyFX6NjZ2o+UK6LJ ZPH0DJidGhWa+5hUVqnDQbc1vFcYImZ3HWHcLjbOghAA9pxB47jUVkvlsEkKwEjN XKkJhEyIew6/Sx+PcSy3hEOQIjnaVrdP43FLF5/WGzfa3Hxmiw5IT1P5TwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBSuzN94fD53opm2wcJcz7SO1Bo0MB8GA1UdIwQY MBaAFKU5r+us6Jmo7gu0+LtEdf4kehUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYt NzQxMzk1OTEzMTJlLzEvRks3TTMzaDhQbmVpbWJiQndselB0STdVR2pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYtNzQxMzk1OTEzMTJl LzEvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvKzEMA0G CSqGSIb3DQEBCwUAA4IBAQCaLBM/BV55KOMBihMsgaEkQbS0f5IGpnOntGhlR1vR vBwcL8DnQq3CIFhIS25LcpoehfGTx1HxphlcDVoICt35vGfJ1qaoiqI0unzxH5fk dQ3vr5DqNwq4PPRwPuUEky1HTBO1gadTONo6Sh7iHdhjhZYDO/tRg19O12NIc/1d lnlDElpSEza6mOJmECxvuRGqWlOayjltIbBNqu7tynhT0A4Ye4rQtTJ1vLc1IPpd GYoEbNHyQJPul+eqYodFE/FM9UxtX0g4GvFQngqrctdUuDLiPujc6TmX+YyCy/7r HQ2ydrGbXGA44noQJwpHEZNJ0dnw5/GQUeV4aTGwlPyM -----END CERTIFICATE-----Generated at Sun Jan 25 14:38:31 2026 by rpki-client