This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/fr-QZrPazBBhZoKl5RxUHW_lsyI.roa File: fr-QZrPazBBhZoKl5RxUHW_lsyI.roa (raw, json) Hash identifier: baaneFSMPOisaKzNlkgXnvlbeimO3h1V4sE4AAlv6Y8= Subject key identifier: 7E:BF:90:66:B3:DA:CC:10:61:66:82:A5:E5:1C:54:1D:6F:E5:B3:22 Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Certificate serial: 019B7F156AB921E946BED25C038B9178D946 Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/fr-QZrPazBBhZoKl5RxUHW_lsyI.roa Signing time: Fri 02 Jan 2026 14:21:08 +0000 ROA not before: Fri 02 Jan 2026 14:21:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 92.63.225.0/24 maxlen: 24 2a02:c6c1:f::/48 maxlen: 48 2a0f:4b41::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:6a:b9:21:e9:46:be:d2:5c:03:8b:91:78:d9:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Validity Not Before: Jan 2 14:21:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ebf9066b3dacc10616682a5e51c541d6fe5b322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ba:dc:03:43:95:7e:7b:9e:fc:da:d1:4d:7c: 45:a4:11:8d:64:a7:32:ca:cf:b5:0a:07:c3:4f:bb: c5:9d:c6:62:89:2e:68:60:d3:dc:a3:7b:6f:2f:21: 25:eb:8e:49:89:66:9a:0f:7f:06:c7:54:c6:57:22: b1:1d:30:f7:d9:36:a0:2f:80:74:36:0f:37:67:a2: 8b:31:15:e7:d7:52:e7:2a:47:10:da:d0:1c:61:e7: f1:e0:49:69:4a:a6:27:5c:51:c6:ee:dd:2d:27:04: 2f:19:86:1d:52:5d:99:14:12:9e:1e:c9:ed:ea:0d: 17:92:db:37:00:5b:ab:17:8a:0d:c3:ab:27:0c:3b: 8d:9c:fa:8b:c8:4c:80:57:c2:84:f6:92:e8:ad:11: b2:3e:4a:5c:11:2e:32:6a:9f:99:39:55:43:8f:22: 86:2c:41:1d:a1:48:d5:cd:94:3c:46:fa:51:65:ba: 8b:8d:06:68:af:8d:bd:af:87:09:ad:52:9a:19:1e: d7:5b:33:07:57:78:d4:32:32:21:51:50:0e:da:4b: fe:39:cd:af:c9:43:4f:80:c3:8a:4c:d0:9f:94:f8: 7d:3f:ed:09:9e:41:eb:9f:80:86:fd:a9:66:12:c9: cc:e9:20:e4:ec:38:da:98:7e:44:c4:4b:8e:2b:95: 1d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BF:90:66:B3:DA:CC:10:61:66:82:A5:E5:1C:54:1D:6F:E5:B3:22 X509v3 Authority Key Identifier: keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/fr-QZrPazBBhZoKl5RxUHW_lsyI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.63.225.0/24 IPv6: 2a02:c6c1:f::/48 2a0f:4b41::/32 Signature Algorithm: sha256WithRSAEncryption c6:c0:d6:29:55:09:57:1b:fe:c5:1f:f6:42:38:7c:66:28:dc: 14:6c:28:2b:95:a9:3d:f8:54:a0:15:9c:cc:7d:e9:8f:b1:1f: f0:4b:26:26:95:b8:b3:9a:9d:9c:0b:71:a9:08:54:dd:68:75: 7e:6c:85:07:91:e4:5f:c0:82:f6:69:8f:cf:92:2f:d8:55:f1: 58:4a:60:8d:b8:ae:e2:2e:0a:8b:3c:93:96:3d:91:9d:5c:74: 4a:1a:4a:60:4f:31:d7:1c:d7:82:fa:17:12:16:f0:20:cf:34: f5:bd:c6:cc:26:56:9c:a5:d3:46:0f:68:dc:4f:61:06:1b:06: 83:49:ae:ca:61:6e:f1:2f:58:d3:6d:3c:d0:a3:23:a5:62:c8: 1f:8c:36:b5:4b:d5:4b:dc:31:12:ff:f6:75:fc:47:32:1b:eb: de:65:22:23:53:71:fb:93:97:22:d5:1f:38:5f:c3:c7:d3:f9: d3:0f:7c:76:b5:e0:c2:8d:36:74:ec:30:71:d5:fc:c4:3e:e2: e7:6f:97:e2:2b:44:8d:26:c9:5d:d8:8b:97:6e:f5:67:29:b6: aa:a0:50:75:c0:06:28:a0:0c:37:04:df:6c:60:19:0b:6b:1c: 47:d3:0e:5f:c0:23:50:74:4d:f8:79:e0:f3:c1:18:c1:df:7c: 58:24:47:87 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/FWq5IelGvtJcA4uReNlGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0 NGY0NDQwHhcNMjYwMTAyMTQyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWJmOTA2NmIzZGFjYzEwNjE2NjgyYTVlNTFjNTQxZDZmZTViMzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLrcA0OVfnue/NrRTXxFpBGNZKcy ys+1CgfDT7vFncZiiS5oYNPco3tvLyEl645JiWaaD38Gx1TGVyKxHTD32TagL4B0 Ng83Z6KLMRXn11LnKkcQ2tAcYefx4ElpSqYnXFHG7t0tJwQvGYYdUl2ZFBKeHsnt 6g0Xkts3AFurF4oNw6snDDuNnPqLyEyAV8KE9pLorRGyPkpcES4yap+ZOVVDjyKG LEEdoUjVzZQ8RvpRZbqLjQZor429r4cJrVKaGR7XWzMHV3jUMjIhUVAO2kv+Oc2v yUNPgMOKTNCflPh9P+0JnkHrn4CG/almEsnM6SDk7DjamH5ExEuOK5UdBQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFH6/kGaz2swQYWaCpeUcVB1v5bMiMB8GA1UdIwQY MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt ZWU0MzVkM2NkNTg1LzEvZnItUVpyUGF6QkJoWm9LbDVSeFVIV19sc3lJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1 LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQAXD/hMBYE AgACMBADBwAqAsbBAA8DBQAqD0tBMA0GCSqGSIb3DQEBCwUAA4IBAQDGwNYpVQlX G/7FH/ZCOHxmKNwUbCgrlak9+FSgFZzMfemPsR/wSyYmlbizmp2cC3GpCFTdaHV+ bIUHkeRfwIL2aY/Pki/YVfFYSmCNuK7iLgqLPJOWPZGdXHRKGkpgTzHXHNeC+hcS FvAgzzT1vcbMJlacpdNGD2jcT2EGGwaDSa7KYW7xL1jTbTzQoyOlYsgfjDa1S9VL 3DES//Z1/EcyG+veZSIjU3H7k5ci1R84X8PH0/nTD3x2teDCjTZ07DBx1fzEPuLn b5fiK0SNJsld2IuXbvVnKbaqoFB1wAYooAw3BN9sYBkLaxxH0w5fwCNQdE34eeDz wRjB33xYJEeH -----END CERTIFICATE-----Generated at Sun Jan 25 10:11:22 2026 by rpki-client