This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/fQSwy1PbcWCW-W8lAoB007soiHY.roa File: fQSwy1PbcWCW-W8lAoB007soiHY.roa (raw, json) Hash identifier: pYNWyBmzvMNfkg2J+LMPe+XO0uoYAH463wTZOpkyn7A= Subject key identifier: 7D:04:B0:CB:53:DB:71:60:96:F9:6F:25:02:80:74:D3:BB:28:88:76 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78343C47692AD0A059675EE3D6C27B4F Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/fQSwy1PbcWCW-W8lAoB007soiHY.roa Signing time: Thu 01 Jan 2026 06:17:27 +0000 ROA not before: Thu 01 Jan 2026 06:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1653 IP address blocks: 194.14.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:3c:47:69:2a:d0:a0:59:67:5e:e3:d6:c2:7b:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d04b0cb53db716096f96f25028074d3bb288876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4e:38:99:1c:47:6e:02:30:f0:d2:64:be:23: fb:37:68:91:13:f1:b3:73:d7:48:c1:af:85:5e:ce: 59:0c:67:ce:ea:a6:2a:e2:70:d3:0b:24:65:64:96: 4f:84:28:f3:78:c8:58:91:04:37:89:a5:c5:f1:78: 8b:63:e8:60:96:4a:e9:f7:ce:21:32:8c:63:35:32: 5f:e0:d4:f1:01:37:82:37:27:4c:8e:88:8e:1c:36: ca:4c:9d:a3:ec:97:8a:39:a9:d2:47:b5:a8:1b:99: 32:0e:97:28:30:72:92:a0:ab:78:fe:b2:9e:d4:41: e2:af:e2:3f:79:b7:3e:fe:0f:7d:10:c7:22:0b:ff: ef:be:25:a9:c9:a0:54:53:3c:7c:c6:d5:58:34:8c: a8:57:7f:59:ce:10:d1:9f:12:79:77:ca:8d:45:6e: 29:d6:76:37:55:93:3c:d7:bb:62:59:6a:fd:8f:d2: 89:92:94:dd:95:f6:05:ac:e6:ea:b1:6b:9d:56:a5: d7:b9:e0:c6:50:1e:9f:8a:40:34:92:6c:d6:4b:4f: 09:66:48:4b:91:47:a9:ad:4a:3a:99:ca:3c:31:f5: 91:b7:65:62:02:be:f7:ab:7f:2b:09:fd:4a:15:92: 1b:7c:ee:44:11:1f:f5:7e:3f:8d:84:5f:8d:11:2f: d9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:04:B0:CB:53:DB:71:60:96:F9:6F:25:02:80:74:D3:BB:28:88:76 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/fQSwy1PbcWCW-W8lAoB007soiHY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.14.45.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:f1:f6:98:2f:1c:e0:db:f6:ce:5d:9c:1e:1b:50:47:5e:a2: 17:a1:59:9e:40:f5:3f:bd:f8:46:cd:a6:35:f8:21:79:30:ed: 5a:14:96:a0:81:43:a0:b7:f8:82:01:3a:61:fb:b5:2d:2a:34: 0c:17:1e:09:f2:03:ff:ef:0a:ef:c9:5d:86:dc:a7:62:fa:f6: b4:48:df:9b:33:52:6a:65:31:eb:38:1b:9a:80:58:eb:47:6f: 6f:b7:d7:d2:e3:c7:3b:3e:6e:e4:92:f5:9e:a4:1b:58:a5:9f: 2f:21:bc:2f:a5:3f:19:81:65:24:eb:76:0d:f3:91:b1:5a:35: 4d:78:4e:21:6d:b2:86:8a:df:b2:ac:15:95:21:00:c7:7d:1e: 22:76:da:a0:2f:dd:ba:bf:7b:d0:36:4c:99:68:56:db:6a:0a: c0:5a:fd:88:f5:49:1b:fb:04:9e:39:35:de:62:b4:28:09:77: 90:d3:2f:7c:35:c8:14:20:02:8c:c8:bd:d6:7b:a9:e4:2a:8c: 3e:09:87:64:ff:cf:33:31:5c:8e:76:66:a5:cc:0f:ac:76:26: a9:78:6f:1b:5d:b5:4f:d9:b1:3e:47:05:be:05:47:b1:7f:95: 88:44:09:e1:66:3a:15:90:c3:39:ee:ab:b3:25:5b:90:f7:68: dc:f3:68:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NDxHaSrQoFlnXuPWwntPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDA0YjBjYjUzZGI3MTYwOTZmOTZmMjUwMjgwNzRkM2JiMjg4ODc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs044mRxHbgIw8NJkviP7N2iRE/Gz c9dIwa+FXs5ZDGfO6qYq4nDTCyRlZJZPhCjzeMhYkQQ3iaXF8XiLY+hglkrp984h MoxjNTJf4NTxATeCNydMjoiOHDbKTJ2j7JeKOanSR7WoG5kyDpcoMHKSoKt4/rKe 1EHir+I/ebc+/g99EMciC//vviWpyaBUUzx8xtVYNIyoV39ZzhDRnxJ5d8qNRW4p 1nY3VZM817tiWWr9j9KJkpTdlfYFrObqsWudVqXXueDGUB6fikA0kmzWS08JZkhL kUeprUo6mco8MfWRt2ViAr73q38rCf1KFZIbfO5EER/1fj+NhF+NES/ZkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH0EsMtT23FglvlvJQKAdNO7KIh2MB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvZlFTd3kxUGJjV0NXLVc4bEFvQjAwN3NvaUhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg4tMA0G CSqGSIb3DQEBCwUAA4IBAQBr8faYLxzg2/bOXZweG1BHXqIXoVmeQPU/vfhGzaY1 +CF5MO1aFJaggUOgt/iCATph+7UtKjQMFx4J8gP/7wrvyV2G3Kdi+va0SN+bM1Jq ZTHrOBuagFjrR29vt9fS48c7Pm7kkvWepBtYpZ8vIbwvpT8ZgWUk63YN85GxWjVN eE4hbbKGit+yrBWVIQDHfR4idtqgL926v3vQNkyZaFbbagrAWv2I9Ukb+wSeOTXe YrQoCXeQ0y98NcgUIAKMyL3We6nkKow+CYdk/88zMVyOdmalzA+sdiapeG8bXbVP 2bE+RwW+BUexf5WIRAnhZjoVkMM57quzJVuQ92jc82hj -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:36 2026 by rpki-client