This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/F-khUpYShoOhEncM3MZ3Y_Wm7h4.roa File: F-khUpYShoOhEncM3MZ3Y_Wm7h4.roa (raw, json) Hash identifier: zuk3r9ZBjNWRUgr9lOJrcdso6ykt5/DxOmxhn65NsfE= Subject key identifier: 17:E9:21:52:96:12:86:83:A1:12:77:0C:DC:C6:77:63:F5:A6:EE:1E Certificate issuer: /CN=e3342c586371d465bcf35f79e1660e11e0805155 Certificate serial: 019B7E3928A0BCA2ED5407A0C4A55C434F3B Authority key identifier: E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/F-khUpYShoOhEncM3MZ3Y_Wm7h4.roa Signing time: Fri 02 Jan 2026 10:20:33 +0000 ROA not before: Fri 02 Jan 2026 10:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38923 IP address blocks: 83.142.136.0/21 maxlen: 21 193.218.148.0/22 maxlen: 22 194.54.16.0/22 maxlen: 22 195.206.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:28:a0:bc:a2:ed:54:07:a0:c4:a5:5c:43:4f:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3342c586371d465bcf35f79e1660e11e0805155 Validity Not Before: Jan 2 10:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17e9215296128683a112770cdcc67763f5a6ee1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bd:68:97:50:9b:4d:f8:43:4c:9f:1e:f6:b6: c1:3b:08:0b:c4:82:9e:50:29:06:df:40:b5:34:1e: 32:66:35:74:44:07:88:90:59:40:6d:38:2d:79:b3: ef:1e:13:16:2b:41:cf:6a:e0:1f:ae:97:d6:bb:07: 08:fc:16:73:b0:14:50:8c:74:da:42:f8:ab:84:93: 19:54:d6:2c:5c:d0:b8:1c:54:a5:64:8e:b5:87:f5: f6:49:db:a9:6e:05:7a:a1:3f:2a:53:1d:43:ef:10: be:66:df:5e:9c:4c:8d:44:8a:b7:8b:7e:60:5b:7c: ff:2c:2f:52:af:1e:ed:81:e3:ac:d9:af:0e:c5:cb: db:06:7b:3a:ce:c4:a0:62:8a:e9:20:0b:9f:90:9f: b0:ee:21:ef:9e:c8:e6:e2:0f:32:dd:75:2a:88:2b: b2:ee:b5:3b:ef:8c:c6:cc:0a:d7:92:c2:6f:c6:84: 1c:5b:db:40:89:57:a3:c0:3c:d9:e2:25:86:85:25: 2b:60:f9:60:cd:fc:08:d4:59:d9:46:9f:38:db:f1: 98:4c:92:a7:4b:a0:0e:ab:46:b5:e3:1f:1f:e5:23: cd:71:8a:6a:df:a1:a2:9f:0e:46:b8:8a:ab:95:ef: d3:e3:74:2d:f9:26:e7:70:53:90:e6:5a:e6:05:b7: 9d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E9:21:52:96:12:86:83:A1:12:77:0C:DC:C6:77:63:F5:A6:EE:1E X509v3 Authority Key Identifier: keyid:E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/F-khUpYShoOhEncM3MZ3Y_Wm7h4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.142.136.0/21 193.218.148.0/22 194.54.16.0/22 195.206.112.0/22 Signature Algorithm: sha256WithRSAEncryption a4:71:81:44:75:1a:d0:84:ff:83:87:e3:0b:df:29:94:8f:e0: 49:ab:51:0a:5b:53:db:ac:fa:63:c1:e9:a2:c2:fc:e6:2b:27: 47:8c:8f:ae:0c:6b:fc:a8:e5:92:a2:be:23:0c:94:30:3c:0c: 1f:37:e0:5e:4c:62:c5:d6:84:cb:41:b7:e5:5a:78:2f:c5:ea: 5a:5f:84:a1:63:6b:d0:a9:06:4b:39:8b:e3:97:39:4e:5b:07: 1a:6e:15:97:71:ea:34:0f:9e:41:13:80:46:29:33:bf:6c:f9: 60:eb:14:6b:58:e2:8c:8a:55:55:0e:93:cc:a1:9b:60:f9:4a: 30:df:25:a1:63:e0:4d:47:86:a9:8b:dc:ba:8a:ba:72:97:0c: 12:2c:30:cd:9a:bf:c2:d8:3b:56:c0:b3:95:5b:03:55:16:7c: 43:e4:9a:09:02:2f:8c:05:ef:6c:34:86:23:44:cf:1c:a9:a3: b5:94:99:08:b5:f4:42:59:79:b6:9f:2b:69:37:ad:ef:bb:5c: 79:dc:c2:ad:a1:6d:a9:d9:d1:2e:4b:c7:b7:2f:ad:34:27:d8: 43:2a:03:f1:07:ff:7a:12:b2:6a:3a:bc:7f:4a:41:e6:6b:65: 5e:a3:dd:25:a1:21:4f:60:8e:42:38:b2:df:e9:47:98:71:7e: 63:ca:04:c0 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+OSigvKLtVAegxKVcQ087MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMzQyYzU4NjM3MWQ0NjViY2YzNWY3OWUxNjYwZTExZTA4 MDUxNTUwHhcNMjYwMTAyMTAyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2U5MjE1Mjk2MTI4NjgzYTExMjc3MGNkY2M2Nzc2M2Y1YTZlZTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr1ol1CbTfhDTJ8e9rbBOwgLxIKe UCkG30C1NB4yZjV0RAeIkFlAbTgtebPvHhMWK0HPauAfrpfWuwcI/BZzsBRQjHTa QvirhJMZVNYsXNC4HFSlZI61h/X2SdupbgV6oT8qUx1D7xC+Zt9enEyNRIq3i35g W3z/LC9Srx7tgeOs2a8OxcvbBns6zsSgYorpIAufkJ+w7iHvnsjm4g8y3XUqiCuy 7rU774zGzArXksJvxoQcW9tAiVejwDzZ4iWGhSUrYPlgzfwI1FnZRp842/GYTJKn S6AOq0a14x8f5SPNcYpq36Ginw5GuIqrle/T43Qt+SbncFOQ5lrmBbedlQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFBfpIVKWEoaDoRJ3DNzGd2P1pu4eMB8GA1UdIwQY MBaAFOM0LFhjcdRlvPNfeeFmDhHggFFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHpRc1dHTngxR1c4ODE5NTRXWU9FZUNBVVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zZjIzNTUtNjZmZi00MGI3LTk4ZDYt ZDk1YTM4ZjBjMDZlLzEvRi1raFVwWVNob09oRW5jTTNNWjNZX1dtN2g0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8zZjIzNTUtNjZmZi00MGI3LTk4ZDYtZDk1YTM4ZjBjMDZl LzEvNHpRc1dHTngxR1c4ODE5NTRXWU9FZUNBVVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDU46IAwQC wdqUAwQCwjYQAwQCw85wMA0GCSqGSIb3DQEBCwUAA4IBAQCkcYFEdRrQhP+Dh+ML 3ymUj+BJq1EKW1PbrPpjwemiwvzmKydHjI+uDGv8qOWSor4jDJQwPAwfN+BeTGLF 1oTLQbflWngvxepaX4ShY2vQqQZLOYvjlzlOWwcabhWXceo0D55BE4BGKTO/bPlg 6xRrWOKMilVVDpPMoZtg+Uow3yWhY+BNR4api9y6irpylwwSLDDNmr/C2DtWwLOV WwNVFnxD5JoJAi+MBe9sNIYjRM8cqaO1lJkItfRCWXm2nytpN63vu1x53MKtoW2p 2dEuS8e3L600J9hDKgPxB/96ErJqOrx/SkHma2Veo90loSFPYI5COLLf6UeYcX5j ygTA -----END CERTIFICATE-----Generated at Mon Jan 26 14:07:58 2026 by rpki-client