This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/fUJVfPMe1XGExx7fdEk0_IUNnjQ.roa File: fUJVfPMe1XGExx7fdEk0_IUNnjQ.roa (raw, json) Hash identifier: FC4xYnyMIWrY9agdhsu1OBRUWLqsl9NHbIz4gZTG77I= Subject key identifier: 7D:42:55:7C:F3:1E:D5:71:84:C7:1E:DF:74:49:34:FC:85:0D:9E:34 Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d Certificate serial: 019B7BA329D027E8209D5F6058A2B1A9CBF8 Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/fUJVfPMe1XGExx7fdEk0_IUNnjQ.roa Signing time: Thu 01 Jan 2026 22:17:29 +0000 ROA not before: Thu 01 Jan 2026 22:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203201 IP address blocks: 147.78.184.0/22 maxlen: 22 2a09:840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:29:d0:27:e8:20:9d:5f:60:58:a2:b1:a9:cb:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d Validity Not Before: Jan 1 22:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d42557cf31ed57184c71edf744934fc850d9e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0a:bf:fe:fe:ef:a5:c9:db:87:93:fa:01:a9: 2a:40:a2:d7:fc:93:de:2f:3c:d4:b2:48:b9:f5:38: 71:82:0a:6a:20:41:ef:21:ec:f7:79:e4:4c:7d:10: 3d:9b:f2:de:31:32:d6:cc:56:fc:d4:09:ce:07:e0: c8:1d:20:6e:5d:bd:9e:c6:3f:d2:db:be:65:9c:49: 74:b6:a1:e8:0e:54:7f:5d:60:57:8b:38:0f:25:36: 97:da:7f:27:53:2b:03:72:d4:aa:28:74:5e:a0:f1: 6d:24:ef:8f:d1:34:1c:77:d4:e3:18:ad:02:33:d5: 47:7a:0e:9e:2f:c9:01:3e:87:5a:b6:3a:84:18:dd: d1:18:4c:f0:8d:44:c6:94:24:50:4f:3d:0b:35:c1: 20:47:50:1f:3e:9a:2b:6d:96:4f:a5:02:e7:ce:d7: 28:68:c8:26:7c:21:f3:46:dd:a6:83:eb:c5:91:0f: f5:51:c3:3e:ab:52:47:2a:b2:6e:65:25:56:d6:b3: ab:84:35:6d:56:22:99:24:79:7f:91:90:24:1a:d1: 25:93:f3:1b:45:ef:b9:ae:a6:2c:f8:14:ec:07:a4: 91:c5:6d:13:a6:07:b1:4e:bd:4a:f1:a5:c7:c4:29: a3:94:78:a1:b8:3c:bf:a8:ac:ac:c3:67:42:19:b2: a8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:42:55:7C:F3:1E:D5:71:84:C7:1E:DF:74:49:34:FC:85:0D:9E:34 X509v3 Authority Key Identifier: keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/fUJVfPMe1XGExx7fdEk0_IUNnjQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.184.0/22 IPv6: 2a09:840::/32 Signature Algorithm: sha256WithRSAEncryption 5d:b4:73:9b:fc:81:67:54:77:59:15:bb:ff:de:fa:03:d0:05: ee:29:d0:5f:4d:f5:d9:f9:34:88:60:61:5e:52:e9:26:0f:1f: 1d:f5:a6:e2:fe:e3:18:e1:10:d5:01:c6:38:6d:da:ac:1d:52: 6a:51:e8:cc:1a:e7:5d:7a:4d:a3:81:f1:12:38:6e:f4:b3:6f: 03:85:6d:75:32:0e:28:22:44:f7:3f:08:7d:3b:10:93:1d:14: a8:3d:2e:84:d5:f7:80:b6:53:6d:f4:fb:84:fd:2c:d8:1e:bd: 0b:d4:ff:03:8c:f6:19:72:a9:94:71:8f:58:10:da:9a:19:00: ff:c2:c8:42:c4:06:11:45:a1:39:d9:f8:8a:b2:8f:93:7e:d1: 87:47:29:cb:6b:2a:00:d8:42:9b:fa:18:6a:ee:cb:32:c5:28: 09:bf:6d:d2:29:ea:98:7d:68:08:06:02:02:99:c5:64:a4:29: d2:19:73:06:22:75:2d:66:8e:65:15:97:c6:a2:16:ce:01:45: 64:bb:32:cd:e3:45:79:75:c0:8a:59:f4:c1:42:5c:2c:de:ea: 62:3f:43:ef:3d:70:ea:72:d5:fa:b4:5a:5d:70:cc:ce:5c:81: b7:55:0b:62:34:c3:97:8c:b1:42:ca:26:cd:ac:62:ce:1b:ef: 46:f9:e8:cc -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7oynQJ+ggnV9gWKKxqcv4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MmNmM2VhM2Y0NjE5YWRkN2IxZjg1ZTVkYmM3NjhjZDNk MTc0MmQwHhcNMjYwMTAxMjIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDQyNTU3Y2YzMWVkNTcxODRjNzFlZGY3NDQ5MzRmYzg1MGQ5ZTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwq//v7vpcnbh5P6AakqQKLX/JPe LzzUski59ThxggpqIEHvIez3eeRMfRA9m/LeMTLWzFb81AnOB+DIHSBuXb2exj/S 275lnEl0tqHoDlR/XWBXizgPJTaX2n8nUysDctSqKHReoPFtJO+P0TQcd9TjGK0C M9VHeg6eL8kBPodatjqEGN3RGEzwjUTGlCRQTz0LNcEgR1AfPporbZZPpQLnztco aMgmfCHzRt2mg+vFkQ/1UcM+q1JHKrJuZSVW1rOrhDVtViKZJHl/kZAkGtElk/Mb Re+5rqYs+BTsB6SRxW0TpgexTr1K8aXHxCmjlHihuDy/qKysw2dCGbKoRQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFH1CVXzzHtVxhMce33RJNPyFDZ40MB8GA1UdIwQY MBaAFKQs8+o/Rhmt17H4Xl28dozT0XQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NzI2OWItMGY3MC00NmNmLWJjZTIt Yzc3NzUxNTlmYzgyLzEvZlVKVmZQTWUxWEdFeHg3ZmRFazBfSVVObmpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81NzI2OWItMGY3MC00NmNmLWJjZTItYzc3NzUxNTlmYzgy LzEvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCk064MA0E AgACMAcDBQAqCQhAMA0GCSqGSIb3DQEBCwUAA4IBAQBdtHOb/IFnVHdZFbv/3voD 0AXuKdBfTfXZ+TSIYGFeUukmDx8d9abi/uMY4RDVAcY4bdqsHVJqUejMGuddek2j gfESOG70s28DhW11Mg4oIkT3Pwh9OxCTHRSoPS6E1feAtlNt9PuE/SzYHr0L1P8D jPYZcqmUcY9YENqaGQD/wshCxAYRRaE52fiKso+TftGHRynLayoA2EKb+hhq7ssy xSgJv23SKeqYfWgIBgICmcVkpCnSGXMGInUtZo5lFZfGohbOAUVkuzLN40V5dcCK WfTBQlws3upiP0PvPXDqctX6tFpdcMzOXIG3VQtiNMOXjLFCyibNrGLOG+9G+ejM -----END CERTIFICATE-----Generated at Mon Jan 26 14:53:23 2026 by rpki-client