This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/fbA42s8Kmn6_qiii4C2mgQXSZaY.roa File: fbA42s8Kmn6_qiii4C2mgQXSZaY.roa (raw, json) Hash identifier: wv9Hm3pzXU0ti/JP4SWAksa5yQa0BXn03rMeZYg4wgo= Subject key identifier: 7D:B0:38:DA:CF:0A:9A:7E:BF:AA:28:A2:E0:2D:A6:81:05:D2:65:A6 Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Certificate serial: 019B7AC89EC0BB808FF3F7DDB3AC27468CBD Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/fbA42s8Kmn6_qiii4C2mgQXSZaY.roa Signing time: Thu 01 Jan 2026 18:18:46 +0000 ROA not before: Thu 01 Jan 2026 18:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53856 IP address blocks: 194.26.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:9e:c0:bb:80:8f:f3:f7:dd:b3:ac:27:46:8c:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Validity Not Before: Jan 1 18:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7db038dacf0a9a7ebfaa28a2e02da68105d265a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cb:23:bf:15:4a:de:8e:3f:75:75:59:f4:59: c6:b4:4d:5b:1e:a1:ec:5f:15:3c:40:0a:bc:49:e3: b5:f1:b7:00:9e:7f:15:d8:a7:79:0c:d7:c1:84:79: 6a:a3:e1:2e:1a:47:01:d1:a2:0f:2d:90:95:ba:16: b6:9e:6d:1d:78:7b:70:96:58:83:f4:6c:e9:e5:f8: 0d:a9:50:47:5b:b9:cc:39:8c:c1:24:d6:d8:70:b4: 25:ed:59:58:93:5e:2b:14:41:7a:d9:fd:3e:94:85: d1:18:ce:71:9d:af:31:4f:41:89:27:08:a5:d0:7e: 46:a7:0c:fc:0c:06:7e:40:f0:ce:76:70:e2:ef:b7: ac:e2:e2:60:3e:72:ae:33:fd:72:db:ae:a3:ae:bb: bb:88:94:dd:1c:04:2f:d7:b1:2e:a3:67:59:3b:1c: e8:56:d0:6f:e5:db:c4:91:04:cc:ae:d5:57:b2:07: b7:93:95:88:35:ad:f2:5a:86:6e:9b:2d:94:0c:7d: d0:45:28:d1:e2:5c:ec:a3:22:3a:0a:34:9a:a8:c8: 7f:53:10:6e:23:91:79:ff:79:a2:44:aa:8e:e4:ba: 4d:21:4e:61:f6:a7:99:81:6b:cf:48:55:d5:75:f9: a7:e9:c2:78:ce:ec:85:58:c0:8b:43:24:a3:c8:65: 27:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B0:38:DA:CF:0A:9A:7E:BF:AA:28:A2:E0:2D:A6:81:05:D2:65:A6 X509v3 Authority Key Identifier: keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/fbA42s8Kmn6_qiii4C2mgQXSZaY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.26.218.0/24 Signature Algorithm: sha256WithRSAEncryption 22:7f:7a:11:30:e3:bf:73:3e:68:12:22:fe:1e:59:c1:47:26: 12:de:1c:37:e2:b5:4f:f6:7a:3e:79:11:94:3a:11:b8:05:c4: b5:05:4c:5c:89:30:cf:f0:c0:22:9e:8c:6d:05:30:6f:a0:39: 2c:92:77:49:41:54:3f:e7:7b:1f:a2:3d:0b:d1:08:b9:e7:70: 4c:9f:1d:71:60:ea:ae:95:92:72:43:bd:6e:43:e2:19:6c:98: 30:70:bb:85:c7:89:d3:28:94:e9:2f:51:79:c7:e2:73:0a:6c: fa:d5:e4:e5:dc:99:6c:c8:de:09:1f:15:40:ad:83:5e:96:42: 3d:80:59:e2:01:d8:52:9b:09:dd:4e:ae:52:dc:cb:28:8c:03: fb:43:68:20:27:cb:f8:b3:f5:2a:d6:e1:ae:64:5e:7a:a6:55: 29:f8:a8:aa:bb:0a:aa:1e:af:99:56:ff:bf:fd:77:94:19:59: 81:8a:d4:87:9f:ff:ae:e2:f7:3f:f5:b1:c3:56:18:a1:20:5d: 8d:80:de:48:6a:60:d3:d7:8d:08:99:75:44:56:d9:52:b3:8e: 4f:8d:86:3a:a2:d1:c7:a6:12:68:77:73:5e:fd:50:6f:0a:65: 38:fd:20:bf:85:e1:43:c7:2c:75:07:19:12:20:5c:14:3b:09: f2:47:a7:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yJ7Au4CP8/fds6wnRoy9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh Y2IwY2UwHhcNMjYwMTAxMTgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGIwMzhkYWNmMGE5YTdlYmZhYTI4YTJlMDJkYTY4MTA1ZDI2NWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycsjvxVK3o4/dXVZ9FnGtE1bHqHs XxU8QAq8SeO18bcAnn8V2Kd5DNfBhHlqo+EuGkcB0aIPLZCVuha2nm0deHtwlliD 9Gzp5fgNqVBHW7nMOYzBJNbYcLQl7VlYk14rFEF62f0+lIXRGM5xna8xT0GJJwil 0H5Gpwz8DAZ+QPDOdnDi77es4uJgPnKuM/1y266jrru7iJTdHAQv17Euo2dZOxzo VtBv5dvEkQTMrtVXsge3k5WINa3yWoZumy2UDH3QRSjR4lzsoyI6CjSaqMh/UxBu I5F5/3miRKqO5LpNIU5h9qeZgWvPSFXVdfmn6cJ4zuyFWMCLQySjyGUnAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH2wONrPCpp+v6ooouAtpoEF0mWmMB8GA1UdIwQY MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct MDUwMzc0OWFkZWEwLzEvZmJBNDJzOEttbjZfcWlpaTRDMm1nUVhTWmFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhraMA0G CSqGSIb3DQEBCwUAA4IBAQAif3oRMOO/cz5oEiL+HlnBRyYS3hw34rVP9no+eRGU OhG4BcS1BUxciTDP8MAinoxtBTBvoDkskndJQVQ/53sfoj0L0Qi553BMnx1xYOqu lZJyQ71uQ+IZbJgwcLuFx4nTKJTpL1F5x+JzCmz61eTl3JlsyN4JHxVArYNelkI9 gFniAdhSmwndTq5S3MsojAP7Q2ggJ8v4s/Uq1uGuZF56plUp+KiquwqqHq+ZVv+/ /XeUGVmBitSHn/+u4vc/9bHDVhihIF2NgN5IamDT140ImXVEVtlSs45PjYY6otHH phJod3Ne/VBvCmU4/SC/heFDxyx1BxkSIFwUOwnyR6fM -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:38 2026 by rpki-client