This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/fTyO02ke_GllKtyxJqNsPIrBw8M.roa File: fTyO02ke_GllKtyxJqNsPIrBw8M.roa (raw, json) Hash identifier: WNok6YlKlBoAuL/P3LpC/12FhXgfeYSL7QIK0UmP+Sk= Subject key identifier: 7D:3C:8E:D3:69:1E:FC:69:65:2A:DC:B1:26:A3:6C:3C:8A:C1:C3:C3 Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Certificate serial: 019B7F15C2029CAEB089C423ADCE9885FA9D Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/fTyO02ke_GllKtyxJqNsPIrBw8M.roa Signing time: Fri 02 Jan 2026 14:21:30 +0000 ROA not before: Fri 02 Jan 2026 14:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204993 IP address blocks: 194.224.72.0/24 maxlen: 24 194.224.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c2:02:9c:ae:b0:89:c4:23:ad:ce:98:85:fa:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Validity Not Before: Jan 2 14:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d3c8ed3691efc69652adcb126a36c3c8ac1c3c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b1:31:c9:3a:60:71:c2:5b:33:6e:c8:b5:5c: 78:df:e2:53:be:d4:b8:54:e2:64:94:47:2d:14:24: 25:13:8c:38:78:65:d4:a6:3c:6b:b8:6e:db:95:ce: 27:5b:50:bc:7e:50:56:f7:e1:ef:a0:3f:b8:37:78: 64:9d:f2:75:20:27:fb:df:de:f3:de:62:3b:ed:70: 2d:f4:09:37:33:bb:d7:67:93:78:49:b1:72:b3:95: 1e:be:04:35:40:2a:ee:b1:f0:0a:7e:1f:ca:30:c9: b0:2d:90:61:00:8d:47:74:15:83:95:33:eb:b7:96: 4d:0f:83:3b:76:e5:79:f9:53:ce:ad:55:c7:18:02: e9:9c:f8:38:93:d2:e5:82:a7:6d:53:01:8d:17:36: b3:7c:2a:ab:14:d1:df:52:f8:11:f4:af:2c:e5:f3: 33:15:a9:8c:33:b0:5f:97:09:c2:40:bd:8c:70:44: e5:df:29:d9:0e:27:db:f8:73:17:cd:94:b5:51:fe: 36:81:3e:89:e9:19:3b:4c:64:95:54:ab:c8:62:be: e3:d6:3b:e3:86:30:06:49:90:ed:e9:bc:02:da:8b: 9f:57:19:52:97:4c:8b:c4:57:81:b6:5c:25:06:c8: 73:57:9e:e4:9e:17:51:7d:84:c6:66:0c:93:c3:68: de:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:3C:8E:D3:69:1E:FC:69:65:2A:DC:B1:26:A3:6C:3C:8A:C1:C3:C3 X509v3 Authority Key Identifier: keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/fTyO02ke_GllKtyxJqNsPIrBw8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.224.72.0/24 194.224.165.0/24 Signature Algorithm: sha256WithRSAEncryption 10:fd:88:97:db:3d:27:52:dc:92:34:bd:9f:4b:a2:e9:ff:07: 8d:1c:5a:80:06:d8:c1:9c:67:ce:a9:7b:dd:47:8b:d6:f6:2a: e8:9c:48:cc:0b:0c:89:91:e2:2f:34:a0:9b:bf:58:61:0c:c2: 80:c1:e5:9f:20:e5:80:70:7b:38:ce:60:75:44:0d:a7:04:7e: e7:3c:00:f1:9d:0b:2b:e9:f5:de:dc:4c:b6:ac:a5:bb:37:c5: 09:81:06:30:2e:8b:d0:70:96:f9:27:39:e4:51:8e:93:2c:5a: 22:8e:bf:f2:6b:41:55:57:ef:31:d0:f8:70:ff:ea:68:a1:9d: 39:0b:78:10:0e:20:d7:e5:1d:fc:c2:b8:b2:38:23:3f:13:16: 60:6d:f9:fe:8a:bf:ab:dd:ef:36:8a:ca:f0:6c:8e:9f:20:f6: bc:ba:89:b0:3d:e4:07:29:11:49:dd:1b:86:27:59:f8:fe:9b: 0a:84:37:8a:ae:7d:45:31:71:7c:39:ac:41:08:34:45:70:79: 79:b6:41:e8:c9:90:84:19:0b:e1:8e:b4:35:f8:f6:a6:4e:0a: 96:e3:27:42:c9:cf:16:df:bf:03:44:a5:87:28:f9:06:92:36: 93:1a:ac:4d:2d:01:f3:11:c5:0f:ec:6f:51:97:2c:c2:23:ca: 2f:eb:c1:b3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FcICnK6wicQjrc6YhfqdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5 NjdkYTEwHhcNMjYwMTAyMTQyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDNjOGVkMzY5MWVmYzY5NjUyYWRjYjEyNmEzNmMzYzhhYzFjM2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8bExyTpgccJbM27ItVx43+JTvtS4 VOJklEctFCQlE4w4eGXUpjxruG7blc4nW1C8flBW9+HvoD+4N3hknfJ1ICf7397z 3mI77XAt9Ak3M7vXZ5N4SbFys5UevgQ1QCrusfAKfh/KMMmwLZBhAI1HdBWDlTPr t5ZND4M7duV5+VPOrVXHGALpnPg4k9LlgqdtUwGNFzazfCqrFNHfUvgR9K8s5fMz FamMM7BflwnCQL2McETl3ynZDifb+HMXzZS1Uf42gT6J6Rk7TGSVVKvIYr7j1jvj hjAGSZDt6bwC2oufVxlSl0yLxFeBtlwlBshzV57knhdRfYTGZgyTw2jeBwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFH08jtNpHvxpZSrcsSajbDyKwcPDMB8GA1UdIwQY MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt NGJhMmY4ZjFmODNiLzEvZlR5TzAya2VfR2xsS3R5eEpxTnNQSXJCdzhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwuBIAwQA wuClMA0GCSqGSIb3DQEBCwUAA4IBAQAQ/YiX2z0nUtySNL2fS6Lp/weNHFqABtjB nGfOqXvdR4vW9ironEjMCwyJkeIvNKCbv1hhDMKAweWfIOWAcHs4zmB1RA2nBH7n PADxnQsr6fXe3Ey2rKW7N8UJgQYwLovQcJb5JznkUY6TLFoijr/ya0FVV+8x0Phw /+pooZ05C3gQDiDX5R38wriyOCM/ExZgbfn+ir+r3e82isrwbI6fIPa8uomwPeQH KRFJ3RuGJ1n4/psKhDeKrn1FMXF8OaxBCDRFcHl5tkHoyZCEGQvhjrQ1+PamTgqW 4ydCyc8W378DRKWHKPkGkjaTGqxNLQHzEcUP7G9RlyzCI8ov68Gz -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:10 2026 by rpki-client