This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/f_5vf3q7C7ELxTwv6wBQUewDWgw.roa File: f_5vf3q7C7ELxTwv6wBQUewDWgw.roa (raw, json) Hash identifier: O4+DioXtLDVmGcPO2WyW0jSnAleYxRmF3dcn2FLUeDk= Subject key identifier: 7F:FE:6F:7F:7A:BB:0B:B1:0B:C5:3C:2F:EB:00:50:51:EC:03:5A:0C Certificate issuer: /CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13 Certificate serial: 019B78A2231F0AF09AE84E3866D9D39E8741 Authority key identifier: DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/f_5vf3q7C7ELxTwv6wBQUewDWgw.roa Signing time: Thu 01 Jan 2026 08:17:30 +0000 ROA not before: Thu 01 Jan 2026 08:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21488 IP address blocks: 193.110.106.0/23 maxlen: 23 194.246.116.0/23 maxlen: 23 217.66.96.0/21 maxlen: 21 217.66.104.0/21 maxlen: 21 2a0f:c240::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:23:1f:0a:f0:9a:e8:4e:38:66:d9:d3:9e:87:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13 Validity Not Before: Jan 1 08:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ffe6f7f7abb0bb10bc53c2feb005051ec035a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:02:98:cf:fa:88:55:53:f5:cd:46:89:82:bc: 30:ba:6b:4d:1a:3a:44:f0:d0:66:6c:5e:27:01:3f: 0c:dc:d4:8f:41:94:8d:25:18:84:3b:90:96:f7:de: 3b:f2:12:a0:87:66:16:09:7d:77:e7:5c:11:75:70: b7:0a:ea:f4:46:7b:5e:11:8c:d9:a9:dc:c2:84:eb: 8f:8c:81:4a:0a:5e:25:7e:c2:af:4b:7d:65:3e:bc: 7b:b2:3e:4c:c4:7b:12:72:c1:f5:cc:63:46:91:ac: 5b:71:3e:92:22:65:e9:c2:c5:90:86:1a:9f:f1:de: 8d:bb:28:a5:0b:48:62:b3:2e:d7:c4:e5:29:55:96: 37:81:1c:02:6c:7d:28:ee:a3:3b:1f:11:3b:7a:31: cb:1c:cc:6d:de:c8:4b:c7:23:e1:87:e9:f3:31:a7: ba:f5:26:e8:b5:c3:ef:00:58:55:34:57:cc:72:a9: 8a:f8:20:3c:97:dc:52:c1:8d:06:01:24:be:96:3a: b0:0d:bf:87:38:f7:f6:86:11:f7:46:7a:dd:f2:41: 1e:07:0c:85:c8:21:73:bf:7f:70:f0:e4:de:3b:cb: 50:8c:5d:80:7e:c8:ec:ba:45:65:bf:90:b1:d7:2a: 15:2e:8b:af:69:8c:3c:2d:b1:f0:b4:a1:00:5a:58: 8c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:FE:6F:7F:7A:BB:0B:B1:0B:C5:3C:2F:EB:00:50:51:EC:03:5A:0C X509v3 Authority Key Identifier: keyid:DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/f_5vf3q7C7ELxTwv6wBQUewDWgw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.110.106.0/23 194.246.116.0/23 217.66.96.0/20 IPv6: 2a0f:c240::/29 Signature Algorithm: sha256WithRSAEncryption 35:36:7e:dc:41:74:e8:1c:a8:39:24:cd:a8:10:d5:0c:32:8b: f5:65:ae:4b:e3:29:59:b0:c1:1b:0c:77:24:49:9a:67:e0:f1: b3:a0:3b:83:23:f2:ea:84:ef:2b:67:66:54:24:5f:2f:de:a8: 71:a0:c4:c6:03:4c:35:6a:30:55:33:81:38:98:e9:c8:bb:3f: 98:9f:14:97:6c:92:17:ff:f7:43:33:dc:a7:fa:bf:47:c9:b6: 3e:03:17:18:7c:98:98:7d:33:b1:e0:22:a7:4a:56:f0:ca:f3: c7:61:fd:d1:4d:c6:7e:2b:2c:9a:e9:6a:e3:45:94:76:54:e4: 7b:9c:50:9e:7e:ec:f8:d1:c6:07:a3:78:ae:0b:09:f2:7b:54: 48:35:5d:9c:f2:8f:fb:c6:9a:d9:28:d1:4c:8e:f5:ce:a2:09: 7e:e2:41:31:06:36:d1:c8:e5:57:ef:02:9e:7e:73:fc:28:1e: 3f:7f:34:3e:8b:9c:ad:d7:cb:64:4f:73:91:34:5d:9c:0e:3f: fa:eb:19:9e:73:f9:be:60:24:78:de:d3:72:a6:8c:c4:e2:cc: 01:19:1b:9f:6c:e3:07:0d:9e:3a:49:11:de:7b:5d:99:ba:ac: 8a:82:05:c4:a2:2b:47:68:14:ce:b2:f8:82:51:19:4c:a7:1d: 77:0c:e7:04 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt4oiMfCvCa6E44ZtnTnodBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZmNiNjQzZTZhMjFlMmZiNmUyMWNkMDY1M2FiMDk1ZTll YmVmMTMwHhcNMjYwMTAxMDgxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmZlNmY3ZjdhYmIwYmIxMGJjNTNjMmZlYjAwNTA1MWVjMDM1YTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQKYz/qIVVP1zUaJgrwwumtNGjpE 8NBmbF4nAT8M3NSPQZSNJRiEO5CW99478hKgh2YWCX1351wRdXC3Cur0RnteEYzZ qdzChOuPjIFKCl4lfsKvS31lPrx7sj5MxHsScsH1zGNGkaxbcT6SImXpwsWQhhqf 8d6NuyilC0hisy7XxOUpVZY3gRwCbH0o7qM7HxE7ejHLHMxt3shLxyPhh+nzMae6 9SbotcPvAFhVNFfMcqmK+CA8l9xSwY0GASS+ljqwDb+HOPf2hhH3Rnrd8kEeBwyF yCFzv39w8OTeO8tQjF2AfsjsukVlv5Cx1yoVLouvaYw8LbHwtKEAWliMXQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFH/+b396uwuxC8U8L+sAUFHsA1oMMB8GA1UdIwQY MBaAFNr8tkPmoh4vtuIc0GU6sJXp6+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnZ5MlEtYWlIaS0yNGh6UVpUcXdsZW5yN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yN2EzNzQtYzk4NC00YjE5LWFjN2Ut ZGUyZGUxNWY5MGVkLzEvZl81dmYzcTdDN0VMeFR3djZ3QlFVZXdEV2d3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8yN2EzNzQtYzk4NC00YjE5LWFjN2UtZGUyZGUxNWY5MGVk LzEvMnZ5MlEtYWlIaS0yNGh6UVpUcXdsZW5yN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBwW5qAwQB wvZ0AwQE2UJgMA0EAgACMAcDBQMqD8JAMA0GCSqGSIb3DQEBCwUAA4IBAQA1Nn7c QXToHKg5JM2oENUMMov1Za5L4ylZsMEbDHckSZpn4PGzoDuDI/LqhO8rZ2ZUJF8v 3qhxoMTGA0w1ajBVM4E4mOnIuz+YnxSXbJIX//dDM9yn+r9HybY+AxcYfJiYfTOx 4CKnSlbwyvPHYf3RTcZ+Kyya6WrjRZR2VOR7nFCefuz40cYHo3iuCwnye1RINV2c 8o/7xprZKNFMjvXOogl+4kExBjbRyOVX7wKefnP8KB4/fzQ+i5yt18tkT3ORNF2c Dj/66xmec/m+YCR43tNypozE4swBGRufbOMHDZ46SRHee12ZuqyKggXEoitHaBTO sviCURlMpx13DOcE -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:15 2026 by rpki-client