This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/fKbITxoxfBmzkn5iR0VgygDPyi0.roa File: fKbITxoxfBmzkn5iR0VgygDPyi0.roa (raw, json) Hash identifier: KdtKUNbFJJYqnd0wx10wIIQRBQE9tIaSTN//dYTfeQQ= Subject key identifier: 7C:A6:C8:4F:1A:31:7C:19:B3:92:7E:62:47:45:60:CA:00:CF:CA:2D Certificate issuer: /CN=a9f2fdea263b79fce11389052b0cd940995c6dfe Certificate serial: 019B7CEE15755FAD60A76C4F98741D50643F Authority key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/fKbITxoxfBmzkn5iR0VgygDPyi0.roa Signing time: Fri 02 Jan 2026 04:18:56 +0000 ROA not before: Fri 02 Jan 2026 04:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204471 IP address blocks: 193.194.16.0/22 maxlen: 24 193.194.20.0/24 maxlen: 24 217.197.106.0/24 maxlen: 24 2a12:d8c0::/32 maxlen: 32 2a12:d8c1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:15:75:5f:ad:60:a7:6c:4f:98:74:1d:50:64:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe Validity Not Before: Jan 2 04:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ca6c84f1a317c19b3927e62474560ca00cfca2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c3:de:07:e3:f7:da:74:fb:f9:7b:52:da:17: ba:6f:24:2d:67:f4:12:53:9c:2f:e3:08:d1:aa:2c: 09:c9:ec:61:d6:b3:35:1b:d9:02:5f:e7:4c:60:ee: c4:68:f8:95:31:52:db:d7:6d:2e:c0:58:9a:b9:8e: 06:ca:f1:11:61:2d:c1:8b:9d:d8:f8:4b:48:5d:ee: ae:b6:87:52:5b:04:0d:19:c9:42:7b:47:a2:db:85: 2e:8d:79:d3:51:27:cf:f3:70:c0:dc:9f:28:0a:2b: 6c:4f:d8:fa:d3:94:49:18:b2:17:91:56:0d:51:f1: d3:8c:ef:be:7e:ae:69:46:3c:b4:d0:9e:70:0b:0a: 84:df:3a:2d:07:dd:dd:fd:3d:cf:a6:69:5a:7d:9b: 84:96:56:be:53:c1:7a:42:ea:a9:1a:aa:fd:96:2c: 67:2b:50:da:41:f7:94:4b:a1:b8:98:21:51:f3:22: 2b:8e:38:b5:7a:38:a8:0c:21:c1:0c:d0:1c:53:14: 5f:21:f8:90:55:06:52:05:ae:fa:45:32:bd:c3:4d: 82:4f:a1:a0:83:52:88:06:91:e6:44:60:ae:d1:ed: 6a:c3:5b:3c:20:63:32:70:c9:4a:d4:c9:ee:55:b9: 11:a8:0d:d1:a4:14:c6:40:76:04:94:76:1f:55:68: dd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A6:C8:4F:1A:31:7C:19:B3:92:7E:62:47:45:60:CA:00:CF:CA:2D X509v3 Authority Key Identifier: keyid:A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/fKbITxoxfBmzkn5iR0VgygDPyi0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.194.16.0-193.194.20.255 217.197.106.0/24 IPv6: 2a12:d8c0::/31 Signature Algorithm: sha256WithRSAEncryption b8:24:68:04:ec:2d:fd:22:38:30:70:4a:08:3d:8d:ee:89:de: 9b:a9:cf:ac:e4:c7:c4:90:5d:f7:b9:6c:18:a1:f1:3c:e5:53: d1:ef:53:e9:b3:0e:13:77:1d:91:6b:38:e0:96:db:bc:c4:52: a8:07:d8:de:5a:95:0d:d2:74:b1:23:a2:1f:1a:da:1f:57:57: 9f:f7:39:df:69:07:28:2a:7b:3e:04:bc:20:77:fe:b0:3a:48: e8:63:6c:3b:94:ca:e7:de:12:a2:6f:22:2f:2f:89:79:b9:74: 04:85:bd:4b:a4:47:4c:df:5c:a8:d1:a1:13:16:cc:1c:90:20: 9c:ea:ed:1c:26:0a:ef:84:44:30:a8:51:d3:6a:be:42:7b:01: af:ad:42:59:95:18:f0:2e:39:0a:04:c7:f1:cc:82:24:11:fc: 3f:e1:7c:30:0e:15:1d:a8:6d:0d:8f:80:af:08:e8:a4:0c:a3: 27:2e:8a:81:65:83:f4:5d:41:6f:09:34:27:af:c3:5c:ec:bb: 24:60:00:62:80:55:57:53:3b:65:73:39:38:31:8f:86:be:90: f6:42:a0:25:2e:df:01:36:b9:05:18:39:5f:b9:e0:f1:d8:5d: 48:2a:a3:cb:c9:29:24:b9:9a:8b:e5:1f:a4:f9:6b:ab:71:e7: 1f:8a:0c:ab -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt87hV1X61gp2xPmHQdUGQ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZjJmZGVhMjYzYjc5ZmNlMTEzODkwNTJiMGNkOTQwOTk1 YzZkZmUwHhcNMjYwMTAyMDQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2E2Yzg0ZjFhMzE3YzE5YjM5MjdlNjI0NzQ1NjBjYTAwY2ZjYTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMPeB+P32nT7+XtS2he6byQtZ/QS U5wv4wjRqiwJyexh1rM1G9kCX+dMYO7EaPiVMVLb120uwFiauY4GyvERYS3Bi53Y +EtIXe6utodSWwQNGclCe0ei24UujXnTUSfP83DA3J8oCitsT9j605RJGLIXkVYN UfHTjO++fq5pRjy00J5wCwqE3zotB93d/T3PpmlafZuElla+U8F6QuqpGqr9lixn K1DaQfeUS6G4mCFR8yIrjji1ejioDCHBDNAcUxRfIfiQVQZSBa76RTK9w02CT6Gg g1KIBpHmRGCu0e1qw1s8IGMycMlK1MnuVbkRqA3RpBTGQHYElHYfVWjdDwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFHymyE8aMXwZs5J+YkdFYMoAz8otMB8GA1UdIwQY MBaAFKny/eomO3n84ROJBSsM2UCZXG3+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWZMOTZpWTdlZnpoRTRrRkt3elpRSmxjYmY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81M2ZmNjItYzFhZC00MjQ0LWI5MWEt ZjhhZmZlZjExMmQ4LzEvZktiSVR4b3hmQm16a241aVIwVmd5Z0RQeWkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My81M2ZmNjItYzFhZC00MjQ0LWI5MWEtZjhhZmZlZjExMmQ4 LzEvcWZMOTZpWTdlZnpoRTRrRkt3elpRSmxjYmY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUMAwDBATBwhAD BADBwhQDBADZxWowDQQCAAIwBwMFASoS2MAwDQYJKoZIhvcNAQELBQADggEBALgk aATsLf0iODBwSgg9je6J3pupz6zkx8SQXfe5bBih8TzlU9HvU+mzDhN3HZFrOOCW 27zEUqgH2N5alQ3SdLEjoh8a2h9XV5/3Od9pBygqez4EvCB3/rA6SOhjbDuUyufe EqJvIi8viXm5dASFvUukR0zfXKjRoRMWzByQIJzq7RwmCu+ERDCoUdNqvkJ7Aa+t QlmVGPAuOQoEx/HMgiQR/D/hfDAOFR2obQ2PgK8I6KQMoycuioFlg/RdQW8JNCev w1zsuyRgAGKAVVdTO2VzOTgxj4a+kPZCoCUu3wE2uQUYOV+54PHYXUgqo8vJKSS5 movlH6T5a6tx5x+KDKs= -----END CERTIFICATE-----Generated at Mon Jan 26 00:39:01 2026 by rpki-client