This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/F--fPZ33hYEwT-w99iTAzmFapsM.roa File: F--fPZ33hYEwT-w99iTAzmFapsM.roa (raw, json) Hash identifier: hnrXHyTT7478fE2/lXhaU/V6tzJhmeaU+f8PMt/llIs= Subject key identifier: 17:EF:9F:3D:9D:F7:85:81:30:4F:EC:3D:F6:24:C0:CE:61:5A:A6:C3 Certificate issuer: /CN=b50df65a2fcb9b117a853a6b56854b0718ec3343 Certificate serial: 019B7B366DE70CA9263D4139DD05E42751C8 Authority key identifier: B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/F--fPZ33hYEwT-w99iTAzmFapsM.roa Signing time: Thu 01 Jan 2026 20:18:43 +0000 ROA not before: Thu 01 Jan 2026 20:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62371 IP address blocks: 194.0.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:6d:e7:0c:a9:26:3d:41:39:dd:05:e4:27:51:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b50df65a2fcb9b117a853a6b56854b0718ec3343 Validity Not Before: Jan 1 20:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17ef9f3d9df78581304fec3df624c0ce615aa6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f7:a1:c6:43:44:91:8c:40:db:95:33:f7:56: a4:8b:b0:44:cb:85:2f:a0:79:51:78:79:02:f8:41: b8:08:87:9e:e6:37:ac:22:e0:02:74:cb:65:86:92: 43:f0:65:fd:98:55:50:3e:87:ff:22:34:95:5c:bf: 01:ee:2e:65:97:b3:02:79:57:46:72:0f:f1:b4:d7: 5e:91:e5:c6:3b:7f:7e:3f:cf:a5:2c:a5:c7:30:96: 96:e0:e0:a6:1e:d4:2c:74:80:f4:39:1c:70:4a:dc: 3e:16:b9:e6:8a:75:a8:71:d3:d8:11:cb:21:5b:aa: 4c:b2:e9:2e:77:5e:ae:e0:97:51:66:40:9f:70:cb: 50:4e:95:6e:44:5a:3d:61:07:da:74:a8:2b:f5:0d: 47:03:7a:46:ce:e5:1c:40:51:d3:b5:d7:43:b5:bd: f2:2e:43:04:bd:bd:f4:90:92:da:cf:1e:8f:ac:6a: 05:f8:9f:7b:ec:10:02:3a:ac:1e:3f:ca:4e:3d:36: 5c:b1:77:cc:7e:75:51:c2:fe:d5:1f:47:7e:ca:98: 20:11:25:29:6e:ca:2b:45:d6:98:fc:61:1f:bf:bf: e0:cf:59:6d:b9:a3:bf:ff:7c:c1:02:cd:78:a9:5f: c5:02:ed:2e:7e:c3:8b:80:72:db:6f:bd:de:e5:21: 5b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:EF:9F:3D:9D:F7:85:81:30:4F:EC:3D:F6:24:C0:CE:61:5A:A6:C3 X509v3 Authority Key Identifier: keyid:B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/F--fPZ33hYEwT-w99iTAzmFapsM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.147.0/24 Signature Algorithm: sha256WithRSAEncryption 91:0f:1a:95:0b:3c:85:62:d0:d2:99:0b:81:5a:e6:d8:e8:1f: a1:e3:ef:14:59:b4:ab:92:5b:37:49:86:40:0b:cb:c5:e7:5a: 74:ab:68:26:05:b8:e9:bd:22:5d:dc:11:d1:29:47:7b:27:04: 1f:c9:a8:96:c8:e1:59:3b:c2:bf:20:f8:bb:01:01:09:2c:80: 56:ab:9a:1b:d0:e0:cd:a8:d0:1b:26:05:d9:bd:1b:fe:0d:94: 0c:7b:f2:e7:68:2e:2a:ff:2f:cc:e5:1c:72:53:cd:d0:6e:9b: 08:57:e4:44:f8:43:e3:6d:64:d3:46:f1:1d:b6:24:4e:8b:db: 9c:97:0a:3e:dd:59:f0:0e:65:1e:c2:5d:31:58:0f:4d:f8:38: 69:67:21:74:df:da:50:d7:50:53:cd:8f:ad:91:77:f6:12:1b: 44:7b:1c:e7:77:2a:44:31:f7:68:b7:f8:bb:88:58:3d:8d:a4: 67:c8:0e:49:c6:56:10:68:d1:f6:94:60:9f:db:c6:94:cb:f5: fd:82:71:3f:c4:15:6a:1c:47:7d:61:35:c2:7c:b3:73:85:bf: 8c:6b:b0:00:08:78:c3:de:0a:a9:7b:1c:c7:52:e8:3e:68:33: fb:52:f6:fd:4f:21:d1:26:01:1a:c2:ad:6c:88:f4:e4:9d:69: f1:1c:e2:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nm3nDKkmPUE53QXkJ1HIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MGRmNjVhMmZjYjliMTE3YTg1M2E2YjU2ODU0YjA3MThl YzMzNDMwHhcNMjYwMTAxMjAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2VmOWYzZDlkZjc4NTgxMzA0ZmVjM2RmNjI0YzBjZTYxNWFhNmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPehxkNEkYxA25Uz91aki7BEy4Uv oHlReHkC+EG4CIee5jesIuACdMtlhpJD8GX9mFVQPof/IjSVXL8B7i5ll7MCeVdG cg/xtNdekeXGO39+P8+lLKXHMJaW4OCmHtQsdID0ORxwStw+FrnminWocdPYEcsh W6pMsukud16u4JdRZkCfcMtQTpVuRFo9YQfadKgr9Q1HA3pGzuUcQFHTtddDtb3y LkMEvb30kJLazx6PrGoF+J977BACOqweP8pOPTZcsXfMfnVRwv7VH0d+ypggESUp bsorRdaY/GEfv7/gz1ltuaO//3zBAs14qV/FAu0ufsOLgHLbb73e5SFb2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBfvnz2d94WBME/sPfYkwM5hWqbDMB8GA1UdIwQY MBaAFLUN9lovy5sReoU6a1aFSwcY7DNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hYzgyZWMtMGUzMS00NjFlLWEyMDUt MWY2MDEwYTMwZWJiLzEvRi0tZlBaMzNoWUV3VC13OTlpVEF6bUZhcHNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9hYzgyZWMtMGUzMS00NjFlLWEyMDUtMWY2MDEwYTMwZWJi LzEvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgCTMA0G CSqGSIb3DQEBCwUAA4IBAQCRDxqVCzyFYtDSmQuBWubY6B+h4+8UWbSrkls3SYZA C8vF51p0q2gmBbjpvSJd3BHRKUd7JwQfyaiWyOFZO8K/IPi7AQEJLIBWq5ob0ODN qNAbJgXZvRv+DZQMe/LnaC4q/y/M5RxyU83QbpsIV+RE+EPjbWTTRvEdtiROi9uc lwo+3VnwDmUewl0xWA9N+DhpZyF039pQ11BTzY+tkXf2EhtEexzndypEMfdot/i7 iFg9jaRnyA5JxlYQaNH2lGCf28aUy/X9gnE/xBVqHEd9YTXCfLNzhb+Ma7AACHjD 3gqpexzHUug+aDP7Uvb9TyHRJgEawq1siPTknWnxHOKq -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:57 2026 by rpki-client