This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/fg1ZDaE-Jw3uqLF5HiZidz3xbjg.roa File: fg1ZDaE-Jw3uqLF5HiZidz3xbjg.roa (raw, json) Hash identifier: EEwrRzOKdmaJZWY6WRbn+FygexN1DQqGjCid31GjTaw= Subject key identifier: 7E:0D:59:0D:A1:3E:27:0D:EE:A8:B1:79:1E:26:62:77:3D:F1:6E:38 Certificate issuer: /CN=01d288e54730b1093af4999380342f85d8198d0a Certificate serial: 019B7F1595BA09B084A22278BC6FDBD448A9 Authority key identifier: 01:D2:88:E5:47:30:B1:09:3A:F4:99:93:80:34:2F:85:D8:19:8D:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/fg1ZDaE-Jw3uqLF5HiZidz3xbjg.roa Signing time: Fri 02 Jan 2026 14:21:19 +0000 ROA not before: Fri 02 Jan 2026 14:21:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198497 IP address blocks: 188.241.122.0/24 maxlen: 24 188.241.123.0/24 maxlen: 24 195.62.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:95:ba:09:b0:84:a2:22:78:bc:6f:db:d4:48:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01d288e54730b1093af4999380342f85d8198d0a Validity Not Before: Jan 2 14:21:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e0d590da13e270deea8b1791e2662773df16e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ff:bf:b2:69:85:8d:e1:a0:9f:b4:92:03:10: 94:2c:35:b0:49:e0:a1:5a:d5:7d:da:30:22:96:58: 05:92:51:72:97:13:8e:0a:02:36:86:b8:27:58:6f: d2:fa:15:65:96:73:4e:d3:eb:bc:3f:eb:13:ed:fb: 61:b7:61:c6:11:a5:89:52:81:5e:f0:58:45:6d:9e: 3e:93:60:8a:5a:b7:e9:79:8c:4f:d8:5e:5c:7c:32: 16:38:61:fa:04:c7:16:36:40:03:de:08:2c:d1:da: 9e:b5:b5:81:19:b2:79:4c:ad:c3:80:b3:56:24:e1: 8e:f2:6a:ff:3e:3b:78:33:43:c6:23:4c:41:c5:b2: 04:fc:20:bd:fd:67:ec:82:31:83:e2:ec:5d:ab:86: 27:d9:f1:11:4f:91:9c:d6:f9:e3:66:bb:50:36:4d: ad:02:05:3e:27:47:09:0a:97:2e:90:f9:da:73:c7: 7a:73:cd:e5:d6:5d:93:65:23:0d:11:76:a8:b3:f6: db:97:98:85:b8:5f:92:42:6f:ea:71:ea:ad:01:35: 1a:22:4e:ad:68:9a:13:b6:48:87:27:cf:7d:c9:12: 0e:d7:10:6a:c7:e5:7f:c9:28:30:7f:02:21:7e:82: c5:49:8c:ac:5d:fe:31:52:b6:7e:b9:37:de:64:b2: e0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:0D:59:0D:A1:3E:27:0D:EE:A8:B1:79:1E:26:62:77:3D:F1:6E:38 X509v3 Authority Key Identifier: keyid:01:D2:88:E5:47:30:B1:09:3A:F4:99:93:80:34:2F:85:D8:19:8D:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/fg1ZDaE-Jw3uqLF5HiZidz3xbjg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.241.122.0/23 195.62.5.0/24 Signature Algorithm: sha256WithRSAEncryption 83:c6:8f:2a:38:7e:ff:e3:dd:c8:06:18:40:73:3e:42:15:39: 41:5c:46:03:db:bc:e6:ce:9d:07:db:c1:39:94:5d:b8:4e:42: 17:fa:cf:e5:56:99:ee:ba:0a:9b:24:9f:72:f1:9f:c7:84:a8: 71:7c:f9:c1:02:54:67:7b:ea:b8:ff:8d:a8:2f:31:2b:57:aa: b6:22:1d:d2:20:01:bd:f0:25:6f:f4:02:f0:9e:fd:cd:ca:de: e8:b9:49:23:11:fc:cd:64:dc:84:1a:e2:e3:3e:e5:d9:e5:aa: 1a:66:f2:a0:28:f5:05:fd:7e:da:60:2b:70:f2:94:20:b0:ac: 2b:5c:ee:fc:4a:02:21:5d:aa:9a:95:f7:13:7b:3a:41:7a:78: 59:e6:c3:f6:b4:61:6e:70:0e:43:be:96:76:83:f3:f5:10:e8: 1c:ae:27:7e:97:47:a7:e5:bd:4d:8a:ba:75:e4:bf:d5:59:c6: bd:c5:c5:13:16:4c:c9:65:5b:d5:72:5e:02:e8:81:85:81:d4: b5:98:1e:2a:d3:5c:d3:70:b8:80:b8:fd:19:08:41:c3:37:73: b7:96:30:33:dc:58:9c:de:1c:97:36:f0:a6:ab:8d:8a:f3:c9: ba:98:bf:cb:9b:13:91:a5:61:87:e4:eb:b6:e9:7f:2f:de:52: 77:55:8a:59 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FZW6CbCEoiJ4vG/b1EipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZDI4OGU1NDczMGIxMDkzYWY0OTk5MzgwMzQyZjg1ZDgx OThkMGEwHhcNMjYwMTAyMTQyMTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTBkNTkwZGExM2UyNzBkZWVhOGIxNzkxZTI2NjI3NzNkZjE2ZTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf+/smmFjeGgn7SSAxCULDWwSeCh WtV92jAillgFklFylxOOCgI2hrgnWG/S+hVllnNO0+u8P+sT7ftht2HGEaWJUoFe 8FhFbZ4+k2CKWrfpeYxP2F5cfDIWOGH6BMcWNkAD3ggs0dqetbWBGbJ5TK3DgLNW JOGO8mr/Pjt4M0PGI0xBxbIE/CC9/WfsgjGD4uxdq4Yn2fERT5Gc1vnjZrtQNk2t AgU+J0cJCpcukPnac8d6c83l1l2TZSMNEXaos/bbl5iFuF+SQm/qceqtATUaIk6t aJoTtkiHJ899yRIO1xBqx+V/ySgwfwIhfoLFSYysXf4xUrZ+uTfeZLLgKwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFH4NWQ2hPicN7qixeR4mYnc98W44MB8GA1UdIwQY MBaAFAHSiOVHMLEJOvSZk4A0L4XYGY0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWRLSTVVY3dzUWs2OUptVGdEUXZoZGdaalFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85MmMwYTctMmMwMC00YTBkLWIwZjkt YmNlM2ViNTc3NWViLzEvZmcxWkRhRS1KdzN1cUxGNUhpWmlkejN4YmpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS85MmMwYTctMmMwMC00YTBkLWIwZjktYmNlM2ViNTc3NWVi LzEvQWRLSTVVY3dzUWs2OUptVGdEUXZoZGdaalFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBvPF6AwQA wz4FMA0GCSqGSIb3DQEBCwUAA4IBAQCDxo8qOH7/493IBhhAcz5CFTlBXEYD27zm zp0H28E5lF24TkIX+s/lVpnuugqbJJ9y8Z/HhKhxfPnBAlRne+q4/42oLzErV6q2 Ih3SIAG98CVv9ALwnv3Nyt7ouUkjEfzNZNyEGuLjPuXZ5aoaZvKgKPUF/X7aYCtw 8pQgsKwrXO78SgIhXaqalfcTezpBenhZ5sP2tGFucA5DvpZ2g/P1EOgcrid+l0en 5b1Nirp15L/VWca9xcUTFkzJZVvVcl4C6IGFgdS1mB4q01zTcLiAuP0ZCEHDN3O3 ljAz3Fic3hyXNvCmq42K88m6mL/LmxORpWGH5Ou26X8v3lJ3VYpZ -----END CERTIFICATE-----Generated at Mon Jan 26 13:00:35 2026 by rpki-client