This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/F2aeFjJsEe0Ev-pYnuxbm8GUj-s.roa File: F2aeFjJsEe0Ev-pYnuxbm8GUj-s.roa (raw, json) Hash identifier: //RGqq5vbdwe1kcXBXm0ImZrQGGNEM4aNxYmS22uVKk= Subject key identifier: 17:66:9E:16:32:6C:11:ED:04:BF:EA:58:9E:EC:5B:9B:C1:94:8F:EB Certificate issuer: /CN=af6da9d56b42c2b816b1ae6b185125abf21593ef Certificate serial: 019B7C80D549C3CF5D67426DB555AE440878 Authority key identifier: AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/F2aeFjJsEe0Ev-pYnuxbm8GUj-s.roa Signing time: Fri 02 Jan 2026 02:19:36 +0000 ROA not before: Fri 02 Jan 2026 02:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 194.56.96.0/22 maxlen: 22 194.56.104.0/22 maxlen: 22 194.56.112.0/22 maxlen: 22 194.56.116.0/22 maxlen: 22 194.56.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d5:49:c3:cf:5d:67:42:6d:b5:55:ae:44:08:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af6da9d56b42c2b816b1ae6b185125abf21593ef Validity Not Before: Jan 2 02:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17669e16326c11ed04bfea589eec5b9bc1948feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8e:c4:9e:de:36:61:46:99:d7:3c:f5:cb:dd: 54:69:9f:c4:7c:19:37:d2:6b:21:8e:33:c8:e1:96: 9b:ad:68:04:72:ce:a1:83:60:29:18:f9:3f:61:60: c6:80:a7:ce:0b:8e:d8:4b:1e:ef:ed:3a:90:e8:de: c5:a2:34:98:28:7d:4e:ee:db:82:17:f7:ad:3e:00: f2:86:99:90:aa:01:ac:53:44:4a:b1:2a:e8:86:34: 8f:96:5a:52:a2:1d:b2:6a:ef:06:bd:d2:14:47:07: 2f:df:8d:31:55:01:70:f7:c1:b1:29:ea:a4:fd:26: a9:d8:51:14:30:fe:da:53:88:7d:82:de:61:d4:9c: ce:45:0c:e4:d4:79:fb:3e:6f:99:09:7b:5b:4e:58: 6e:9f:35:d5:61:8b:6c:ce:f8:d9:0a:6e:e4:0b:62: f5:4d:86:da:1b:40:3f:e4:8f:48:21:df:f3:d5:7a: e2:ae:d0:d8:ed:f9:01:e8:c1:9c:50:24:26:68:ee: c8:6a:4a:5f:df:78:7b:45:ff:7c:cb:a2:58:fd:ec: 09:ae:0f:0b:66:d1:ad:79:93:5c:83:d1:16:48:71: 01:0a:fb:e5:12:a4:12:e9:d7:c3:10:6e:5b:d9:07: ae:e8:50:ea:b9:48:df:f2:12:db:50:62:36:45:90: 6d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:66:9E:16:32:6C:11:ED:04:BF:EA:58:9E:EC:5B:9B:C1:94:8F:EB X509v3 Authority Key Identifier: keyid:AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/F2aeFjJsEe0Ev-pYnuxbm8GUj-s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.56.96.0/22 194.56.104.0/22 194.56.112.0-194.56.123.255 Signature Algorithm: sha256WithRSAEncryption 88:9d:ad:95:c8:cb:0e:29:f2:a4:87:ab:dd:55:a3:cc:ce:a0: ca:57:f5:81:9a:ce:4f:e4:4d:5f:87:8f:e2:dc:35:40:81:a0: c1:eb:d1:d4:52:4c:41:51:6c:32:a0:37:05:d6:63:b6:48:98: 2f:c8:77:bd:64:89:5a:c5:19:c0:1c:a3:c4:43:09:11:48:31: 8a:eb:4c:f9:9e:1a:cf:6c:be:ab:55:d5:92:16:90:67:64:cf: fa:a7:59:b9:16:23:9d:11:01:b4:46:38:3f:63:38:5e:8b:3b: 49:3e:92:df:38:c2:96:21:f3:7f:bb:b8:c7:37:10:e0:56:de: 3a:8f:0d:0c:e5:ea:49:d3:70:6f:ab:fc:aa:2d:d1:f0:18:a1: 1a:cf:13:f2:e3:73:8e:0f:16:5a:0f:30:af:35:91:b2:0e:cb: 6d:8b:b7:46:61:e7:c7:67:ec:a0:4f:94:61:29:2a:c0:e6:b5: 78:df:62:d4:71:b2:61:fc:f3:ed:68:d9:38:69:4b:11:18:78: 62:fa:de:92:aa:63:26:46:2d:1e:37:a0:72:84:04:7a:5a:e9: 82:da:36:fd:d6:12:6e:1a:59:82:e6:38:85:69:4f:68:96:e2: 05:d1:2f:5e:ab:d4:36:94:4b:98:ce:84:76:f5:dc:48:2a:8f: f3:06:23:2d -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt8gNVJw89dZ0JttVWuRAh4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNmRhOWQ1NmI0MmMyYjgxNmIxYWU2YjE4NTEyNWFiZjIx NTkzZWYwHhcNMjYwMTAyMDIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzY2OWUxNjMyNmMxMWVkMDRiZmVhNTg5ZWVjNWI5YmMxOTQ4ZmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro7Ent42YUaZ1zz1y91UaZ/EfBk3 0mshjjPI4ZabrWgEcs6hg2ApGPk/YWDGgKfOC47YSx7v7TqQ6N7FojSYKH1O7tuC F/etPgDyhpmQqgGsU0RKsSrohjSPllpSoh2yau8GvdIURwcv340xVQFw98GxKeqk /Sap2FEUMP7aU4h9gt5h1JzORQzk1Hn7Pm+ZCXtbTlhunzXVYYtszvjZCm7kC2L1 TYbaG0A/5I9IId/z1XrirtDY7fkB6MGcUCQmaO7Iakpf33h7Rf98y6JY/ewJrg8L ZtGteZNcg9EWSHEBCvvlEqQS6dfDEG5b2Qeu6FDquUjf8hLbUGI2RZBtMQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFBdmnhYybBHtBL/qWJ7sW5vBlI/rMB8GA1UdIwQY MBaAFK9tqdVrQsK4FrGuaxhRJavyFZPvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjIycDFXdEN3cmdXc2E1ckdGRWxxX0lWay04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84OTczNzgtYzU1Ni00MzUyLTlhMDQt YjEwYTgzMmJjYTQzLzEvRjJhZUZqSnNFZTBFdi1wWW51eGJtOEdVai1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy84OTczNzgtYzU1Ni00MzUyLTlhMDQtYjEwYTgzMmJjYTQz LzEvcjIycDFXdEN3cmdXc2E1ckdGRWxxX0lWay04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCwjhgAwQC wjhoMAwDBATCOHADBALCOHgwDQYJKoZIhvcNAQELBQADggEBAIidrZXIyw4p8qSH q91Vo8zOoMpX9YGazk/kTV+Hj+LcNUCBoMHr0dRSTEFRbDKgNwXWY7ZImC/Id71k iVrFGcAco8RDCRFIMYrrTPmeGs9svqtV1ZIWkGdkz/qnWbkWI50RAbRGOD9jOF6L O0k+kt84wpYh83+7uMc3EOBW3jqPDQzl6knTcG+r/Kot0fAYoRrPE/Ljc44PFloP MK81kbIOy22Lt0Zh58dn7KBPlGEpKsDmtXjfYtRxsmH88+1o2ThpSxEYeGL63pKq YyZGLR43oHKEBHpa6YLaNv3WEm4aWYLmOIVpT2iW4gXRL16r1DaUS5jOhHb13Egq j/MGIy0= -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:38 2026 by rpki-client