This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/FXpUcueuWBp6fQq5c2tPdjSTYm4.roa File: FXpUcueuWBp6fQq5c2tPdjSTYm4.roa (raw, json) Hash identifier: RuaY5W7lr0sJsovg6cTHvVcz5PIkzQYxHi6ype94V9k= Subject key identifier: 15:7A:54:72:E7:AE:58:1A:7A:7D:0A:B9:73:6B:4F:76:34:93:62:6E Certificate issuer: /CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc Certificate serial: 019B7F15190611422CA5FEEE09B30391B8B8 Authority key identifier: 5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/FXpUcueuWBp6fQq5c2tPdjSTYm4.roa Signing time: Fri 02 Jan 2026 14:20:47 +0000 ROA not before: Fri 02 Jan 2026 14:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 194.33.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:19:06:11:42:2c:a5:fe:ee:09:b3:03:91:b8:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc Validity Not Before: Jan 2 14:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=157a5472e7ae581a7a7d0ab9736b4f763493626e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:03:d1:91:fb:61:37:b6:6a:da:21:01:63:7c: c1:e5:f4:c8:40:2b:f6:14:5d:92:67:0d:86:ab:1c: 3e:0a:37:d1:b8:2c:72:da:d8:a6:38:c6:fb:ec:f1: 56:03:51:0a:06:83:a5:da:72:36:50:96:05:50:a0: c3:41:94:0d:4f:65:b1:64:51:25:5d:7f:93:4e:aa: 2a:95:94:d3:7e:0c:6d:38:0e:50:fc:b5:f7:e6:95: 7d:d0:2d:42:2f:3c:3e:ba:78:e4:ea:5b:3a:de:2e: 7a:e3:d0:eb:1d:83:ee:14:f3:c1:f5:7f:8e:90:0e: 06:36:90:7c:9a:f0:da:cb:24:83:fe:49:a2:37:ad: ed:a0:81:76:fb:e7:77:95:a8:c3:d3:95:9c:06:54: 20:09:95:4e:57:1f:e0:e3:7c:e3:fe:81:5d:7b:9c: 70:8e:ed:97:2d:14:b7:77:f0:8a:36:67:53:5c:5a: 7c:c8:e2:b4:19:53:d3:6e:83:46:fa:17:b6:7e:3e: 79:a0:e3:f2:cd:73:9b:9e:fb:47:ab:20:78:e1:36: 49:91:65:b2:43:37:06:f8:d6:23:48:f1:fb:32:84: 35:ed:bf:de:aa:d5:15:21:29:37:06:90:64:56:6b: 91:16:09:cd:d9:70:e0:e0:12:69:90:de:7d:81:68: 0a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:7A:54:72:E7:AE:58:1A:7A:7D:0A:B9:73:6B:4F:76:34:93:62:6E X509v3 Authority Key Identifier: keyid:5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/FXpUcueuWBp6fQq5c2tPdjSTYm4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.186.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:d7:a3:46:1a:67:61:fd:98:a2:2a:d1:e8:73:98:db:c8:29: 8f:d0:df:99:e0:4b:c1:66:e3:04:29:bb:c2:7a:8b:38:4b:28: 46:48:47:30:0e:8e:a0:b4:df:2c:fd:9f:a4:86:d3:4c:b8:0a: 21:f4:72:d1:c9:38:eb:17:34:22:ee:ca:dc:e3:13:2f:b3:4c: 0e:38:eb:2d:12:8c:c2:2f:73:de:37:be:aa:e4:40:bf:ed:19: 16:3f:05:40:14:95:94:97:d3:62:b5:96:ca:52:ce:a7:06:d0: 23:fe:59:eb:c3:1c:e0:81:cc:c8:3b:37:68:48:34:f1:3e:88: 46:99:ce:50:fd:b7:7f:a3:11:94:bc:70:32:2a:93:d4:a9:7c: 78:da:74:d8:45:c0:0b:f0:58:67:d4:05:57:46:1e:f6:52:c1: 2e:fe:c8:55:04:ae:ac:be:d0:d2:53:a7:75:18:39:ba:b2:3d: b4:9a:96:89:2e:79:f1:47:48:50:c5:67:81:82:f4:4e:e5:17: 28:47:42:02:2b:c7:5b:51:c0:33:4d:e4:0a:71:85:80:7e:9d: 12:a8:33:27:2d:c8:d7:2f:3b:73:7d:32:78:18:0e:9d:b3:25: b9:7a:8c:6a:f9:5c:8b:90:58:01:61:4c:f3:3e:65:8c:38:31: 3d:24:ea:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FRkGEUIspf7uCbMDkbi4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOGE1MmRjOTk4ZjExNDhjMDc4MjkwYmRiYjRkM2NkYzNm MDNjYmMwHhcNMjYwMTAyMTQyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTdhNTQ3MmU3YWU1ODFhN2E3ZDBhYjk3MzZiNGY3NjM0OTM2MjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwPRkfthN7Zq2iEBY3zB5fTIQCv2 FF2SZw2Gqxw+CjfRuCxy2timOMb77PFWA1EKBoOl2nI2UJYFUKDDQZQNT2WxZFEl XX+TTqoqlZTTfgxtOA5Q/LX35pV90C1CLzw+unjk6ls63i5649DrHYPuFPPB9X+O kA4GNpB8mvDayySD/kmiN63toIF2++d3lajD05WcBlQgCZVOVx/g43zj/oFde5xw ju2XLRS3d/CKNmdTXFp8yOK0GVPTboNG+he2fj55oOPyzXObnvtHqyB44TZJkWWy QzcG+NYjSPH7MoQ17b/eqtUVISk3BpBkVmuRFgnN2XDg4BJpkN59gWgKLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBV6VHLnrlgaen0KuXNrT3Y0k2JuMB8GA1UdIwQY MBaAFFqKUtyZjxFIwHgpC9u0083D8Dy8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV29wUzNKbVBFVWpBZUNrTDI3VFR6Y1B3UEx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9hM2Q4MjUtZDdhNy00N2NjLWEwY2Et OTY2NmVkZWVlMWUzLzEvRlhwVWN1ZXVXQnA2ZlFxNWMydFBkalNUWW00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9hM2Q4MjUtZDdhNy00N2NjLWEwY2EtOTY2NmVkZWVlMWUz LzEvV29wUzNKbVBFVWpBZUNrTDI3VFR6Y1B3UEx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiG6MA0G CSqGSIb3DQEBCwUAA4IBAQBd16NGGmdh/ZiiKtHoc5jbyCmP0N+Z4EvBZuMEKbvC eos4SyhGSEcwDo6gtN8s/Z+khtNMuAoh9HLRyTjrFzQi7src4xMvs0wOOOstEozC L3PeN76q5EC/7RkWPwVAFJWUl9NitZbKUs6nBtAj/lnrwxzggczIOzdoSDTxPohG mc5Q/bd/oxGUvHAyKpPUqXx42nTYRcAL8Fhn1AVXRh72UsEu/shVBK6svtDSU6d1 GDm6sj20mpaJLnnxR0hQxWeBgvRO5RcoR0ICK8dbUcAzTeQKcYWAfp0SqDMnLcjX LztzfTJ4GA6dsyW5eoxq+VyLkFgBYUzzPmWMODE9JOp+ -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:38 2026 by rpki-client