This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/FWYPQ6WC8Y-fg5sSQlXizSCkIiw.roa File: FWYPQ6WC8Y-fg5sSQlXizSCkIiw.roa (raw, json) Hash identifier: iqx9LdajD80FLscZZE0m7wFZ2v4e15gazl5hqYdyNRs= Subject key identifier: 15:66:0F:43:A5:82:F1:8F:9F:83:9B:12:42:55:E2:CD:20:A4:22:2C Certificate issuer: /CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf Certificate serial: 019B7F81554177878A400150FC89E2BE12CF Authority key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/FWYPQ6WC8Y-fg5sSQlXizSCkIiw.roa Signing time: Fri 02 Jan 2026 16:19:01 +0000 ROA not before: Fri 02 Jan 2026 16:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206813 IP address blocks: 194.113.54.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:55:41:77:87:8a:40:01:50:fc:89:e2:be:12:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf Validity Not Before: Jan 2 16:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15660f43a582f18f9f839b124255e2cd20a4222c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c2:bc:a0:bb:ea:8b:41:57:94:ef:66:88:f4: cd:16:39:18:a9:04:3d:eb:76:7f:c4:74:f2:f5:4a: da:b0:30:cb:72:2e:6b:b1:e7:b1:07:00:7d:88:87: c9:96:05:f2:4f:70:fb:72:a9:0b:ef:23:c1:f5:9b: 76:6b:18:b7:c7:f2:91:c4:06:6d:c8:e1:b1:58:5c: b8:a8:b6:33:26:b0:41:95:29:0f:9c:34:8a:e0:f3: 74:b3:cc:d9:f5:d9:02:68:ce:5e:1f:10:6b:c8:b9: 95:11:40:d4:4d:01:87:31:ff:12:73:49:c8:4d:19: 4d:e8:03:83:55:e0:45:f7:ae:f7:c4:99:d5:81:b5: ac:c2:2a:69:40:62:88:94:dc:8a:1c:62:67:10:af: 1b:8a:07:29:ba:ac:b4:80:03:ba:3e:ff:03:ed:05: 5e:b8:e2:a9:82:b5:05:4a:0b:e4:22:f8:4e:cd:b1: e8:75:96:3f:35:89:9a:2b:ab:56:e0:ab:ed:87:c4: 6d:e0:8e:95:69:27:cc:e2:2b:c4:9e:9e:b3:3c:b6: 67:a7:52:68:27:8f:11:18:3d:38:25:32:3f:23:d0: 43:6a:d1:2b:27:02:f3:ce:d0:be:8f:f8:df:9b:58: af:70:4d:44:d0:09:3e:1e:43:56:a6:2d:e2:af:38: 6f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:66:0F:43:A5:82:F1:8F:9F:83:9B:12:42:55:E2:CD:20:A4:22:2C X509v3 Authority Key Identifier: keyid:B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/FWYPQ6WC8Y-fg5sSQlXizSCkIiw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.113.54.0/23 Signature Algorithm: sha256WithRSAEncryption 42:99:0a:d5:05:f2:b8:13:54:2d:c6:9f:4b:44:3c:8b:7b:a5: 2a:59:ec:6f:1c:1d:45:62:34:26:31:4d:9b:8d:a4:56:16:0c: 2f:70:f9:06:f0:00:5b:cf:83:d5:39:48:5c:a2:ea:9e:96:bd: 3d:af:9b:fb:eb:3e:af:ba:14:1e:38:a3:d5:00:8a:23:51:90: 9b:ec:39:21:ef:d2:3b:61:4c:d8:80:5b:36:9f:7e:4e:21:92: 33:06:f4:46:81:12:8f:f1:ea:53:80:e8:3e:9e:89:b1:02:53: cf:37:ef:a7:f1:9a:d8:e9:db:56:47:a2:5f:39:4b:72:b7:25: 03:ea:f5:63:8d:5f:7a:38:b9:b1:04:ec:52:65:c1:86:68:48: 95:a0:04:a1:98:d1:f0:47:7b:24:f2:0d:d6:0d:b8:35:e2:3b: a3:0d:3c:04:98:eb:c9:54:b8:4f:bb:e7:49:6c:92:ba:03:2c: 23:b8:c7:d4:bd:8f:f0:b6:de:c4:09:13:0f:e8:da:7b:cb:66: cb:07:5d:ac:41:f7:ad:31:18:f6:b8:22:82:f7:33:aa:fb:1a: bd:d0:7a:ce:70:cb:de:af:dc:68:0f:54:77:d8:29:f2:5d:42: 52:10:a1:39:45:3b:48:e2:f0:3b:23:d0:35:32:71:97:84:0c: 19:89:52:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gVVBd4eKQAFQ/InivhLPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YjBiYmQ2NDQ1NTc4ZWRiYzdiYTZiNWJmN2NhOTM2OGQy NDE3YmYwHhcNMjYwMTAyMTYxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTY2MGY0M2E1ODJmMThmOWY4MzliMTI0MjU1ZTJjZDIwYTQyMjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8K8oLvqi0FXlO9miPTNFjkYqQQ9 63Z/xHTy9UrasDDLci5rseexBwB9iIfJlgXyT3D7cqkL7yPB9Zt2axi3x/KRxAZt yOGxWFy4qLYzJrBBlSkPnDSK4PN0s8zZ9dkCaM5eHxBryLmVEUDUTQGHMf8Sc0nI TRlN6AODVeBF9673xJnVgbWswippQGKIlNyKHGJnEK8bigcpuqy0gAO6Pv8D7QVe uOKpgrUFSgvkIvhOzbHodZY/NYmaK6tW4Kvth8Rt4I6VaSfM4ivEnp6zPLZnp1Jo J48RGD04JTI/I9BDatErJwLzztC+j/jfm1ivcE1E0Ak+HkNWpi3irzhvlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBVmD0OlgvGPn4ObEkJV4s0gpCIsMB8GA1UdIwQY MBaAFLSwu9ZEVXjtvHumtb98qTaNJBe/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNTAyZmMtZDlmNy00ZmE4LWJhZjYt NzdkNTI5YmU1M2Q3LzEvRldZUFE2V0M4WS1mZzVzU1FsWGl6U0NrSWl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8zNTAyZmMtZDlmNy00ZmE4LWJhZjYtNzdkNTI5YmU1M2Q3 LzEvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwnE2MA0G CSqGSIb3DQEBCwUAA4IBAQBCmQrVBfK4E1Qtxp9LRDyLe6UqWexvHB1FYjQmMU2b jaRWFgwvcPkG8ABbz4PVOUhcouqelr09r5v76z6vuhQeOKPVAIojUZCb7Dkh79I7 YUzYgFs2n35OIZIzBvRGgRKP8epTgOg+nomxAlPPN++n8ZrY6dtWR6JfOUtytyUD 6vVjjV96OLmxBOxSZcGGaEiVoAShmNHwR3sk8g3WDbg14jujDTwEmOvJVLhPu+dJ bJK6AywjuMfUvY/wtt7ECRMP6Np7y2bLB12sQfetMRj2uCKC9zOq+xq90HrOcMve r9xoD1R32CnyXUJSEKE5RTtI4vA7I9A1MnGXhAwZiVJN -----END CERTIFICATE-----Generated at Sun Jan 25 20:01:21 2026 by rpki-client