This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/FnV4siConvZq8mk9CbOlR5a9DjI.roa File: FnV4siConvZq8mk9CbOlR5a9DjI.roa (raw, json) Hash identifier: IZ5c3lykfIm9IkvU3L26cQr7DSQZqq6fwwu8m+5tYDw= Subject key identifier: 16:75:78:B2:20:A8:9E:F6:6A:F2:69:3D:09:B3:A5:47:96:BD:0E:32 Certificate issuer: /CN=327557cf22629d058a5114965b2f9df8ef4db690 Certificate serial: 019B7AC8963069857D1B9052A7648D1C330C Authority key identifier: 32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/FnV4siConvZq8mk9CbOlR5a9DjI.roa Signing time: Thu 01 Jan 2026 18:18:44 +0000 ROA not before: Thu 01 Jan 2026 18:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15623 IP address blocks: 193.42.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:96:30:69:85:7d:1b:90:52:a7:64:8d:1c:33:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=327557cf22629d058a5114965b2f9df8ef4db690 Validity Not Before: Jan 1 18:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=167578b220a89ef66af2693d09b3a54796bd0e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:45:8d:bc:ef:55:50:af:21:55:43:67:35:10: ed:97:11:fd:3e:ef:50:90:82:04:98:17:97:9d:6b: e6:77:61:88:cb:a3:cb:58:e2:1f:66:85:ca:57:0a: 61:cd:b3:25:9a:89:ae:4e:27:0d:0a:b4:fe:4f:39: 3b:c1:44:30:d3:f3:dd:9e:98:58:7e:fd:d3:4f:b2: 7f:a6:71:27:67:f2:cc:32:34:d5:da:eb:da:8b:b6: 73:14:64:6e:0b:ec:4d:d5:16:3a:01:05:2f:e8:25: a9:01:09:63:91:e1:32:26:c7:18:22:2d:8c:11:f9: ce:c0:a8:30:36:82:26:02:87:e7:f5:21:f1:9d:69: fb:82:86:43:e9:27:bc:dd:2a:dc:dd:5f:cc:c2:23: 09:9e:ee:01:c3:03:fc:1d:a3:02:c8:65:de:a8:28: d0:0c:cb:3e:05:d1:a9:4d:59:f6:a1:fa:8f:d4:87: e1:e9:6b:84:4c:4c:9d:ec:6f:15:b6:0b:ef:14:37: 98:b5:94:0f:f2:42:0b:28:b8:ae:21:12:2b:f3:ef: 83:e7:e1:08:19:bf:d5:e7:7b:9f:20:75:3c:c2:82: 5b:2a:74:2d:d7:0d:fa:e0:84:3b:2a:96:ec:bf:61: 13:be:1a:96:65:13:74:c8:88:db:d4:e9:01:4c:a8: 08:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:75:78:B2:20:A8:9E:F6:6A:F2:69:3D:09:B3:A5:47:96:BD:0E:32 X509v3 Authority Key Identifier: keyid:32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/FnV4siConvZq8mk9CbOlR5a9DjI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.42.146.0/24 Signature Algorithm: sha256WithRSAEncryption c6:5f:47:d5:4b:d3:9b:0c:2b:02:fe:d2:01:bf:54:68:90:30: 9b:cd:3b:d7:12:b4:30:7f:09:e1:f7:4a:89:40:3a:f8:8b:32: 50:40:4e:33:02:12:76:26:90:f2:c0:a2:1e:53:fe:d3:4e:4b: 53:09:e3:ad:4f:48:bd:ba:dc:40:29:fb:36:30:a2:bb:46:ca: 25:18:e0:37:b7:58:d0:42:66:57:d1:98:68:08:ca:50:53:44: e6:f7:03:24:f7:88:8d:96:95:20:dc:ed:9e:cc:fb:90:a1:cd: e9:96:51:7a:52:0f:5f:2e:0c:01:f4:86:9a:90:0e:e0:f7:f0: bb:ea:56:d0:af:9c:fe:cc:4c:4d:85:ee:c0:83:92:ba:12:7c: 2d:6b:aa:07:25:d0:c6:a9:f2:bd:a3:9e:69:d5:f9:ea:f5:e6: b3:1d:6c:f7:b1:40:e2:0c:e7:5d:71:b8:e0:52:d0:8f:9b:fd: 3b:6a:ba:3c:00:06:f3:54:e5:c5:64:f7:60:37:ce:3c:f8:df: 6f:8c:ba:e3:bc:7e:29:a1:ea:a6:2a:01:d5:17:66:90:6c:84: 7c:7f:01:36:62:84:60:8b:02:6a:b4:15:36:6e:58:1f:cf:39: 44:6a:1e:0a:f4:cd:a1:51:1c:54:f8:cf:c9:c5:05:a4:e8:5c: 0a:bb:44:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yJYwaYV9G5BSp2SNHDMMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNzU1N2NmMjI2MjlkMDU4YTUxMTQ5NjViMmY5ZGY4ZWY0 ZGI2OTAwHhcNMjYwMTAxMTgxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjc1NzhiMjIwYTg5ZWY2NmFmMjY5M2QwOWIzYTU0Nzk2YmQwZTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0WNvO9VUK8hVUNnNRDtlxH9Pu9Q kIIEmBeXnWvmd2GIy6PLWOIfZoXKVwphzbMlmomuTicNCrT+Tzk7wUQw0/PdnphY fv3TT7J/pnEnZ/LMMjTV2uvai7ZzFGRuC+xN1RY6AQUv6CWpAQljkeEyJscYIi2M EfnOwKgwNoImAofn9SHxnWn7goZD6Se83Src3V/MwiMJnu4BwwP8HaMCyGXeqCjQ DMs+BdGpTVn2ofqP1Ifh6WuETEyd7G8VtgvvFDeYtZQP8kILKLiuIRIr8++D5+EI Gb/V53ufIHU8woJbKnQt1w364IQ7Kpbsv2ETvhqWZRN0yIjb1OkBTKgIlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBZ1eLIgqJ72avJpPQmzpUeWvQ4yMB8GA1UdIwQY MBaAFDJ1V88iYp0FilEUllsvnfjvTbaQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85Y2ZmM2QtMTE2OC00MTFjLWEwNjUt ZmQ3MjViODI1MjkxLzEvRm5WNHNpQ29udlpxOG1rOUNiT2xSNWE5RGpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC85Y2ZmM2QtMTE2OC00MTFjLWEwNjUtZmQ3MjViODI1Mjkx LzEvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSqSMA0G CSqGSIb3DQEBCwUAA4IBAQDGX0fVS9ObDCsC/tIBv1RokDCbzTvXErQwfwnh90qJ QDr4izJQQE4zAhJ2JpDywKIeU/7TTktTCeOtT0i9utxAKfs2MKK7RsolGOA3t1jQ QmZX0ZhoCMpQU0Tm9wMk94iNlpUg3O2ezPuQoc3pllF6Ug9fLgwB9IaakA7g9/C7 6lbQr5z+zExNhe7Ag5K6Enwta6oHJdDGqfK9o55p1fnq9eazHWz3sUDiDOddcbjg UtCPm/07aro8AAbzVOXFZPdgN848+N9vjLrjvH4poeqmKgHVF2aQbIR8fwE2YoRg iwJqtBU2blgfzzlEah4K9M2hURxU+M/JxQWk6FwKu0TK -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:20 2026 by rpki-client