This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/fzdQ-DiiI7ywifu_IGVttENLXng.roa File: fzdQ-DiiI7ywifu_IGVttENLXng.roa (raw, json) Hash identifier: NRsukZR0ciYndHqAYYe2J/xe0I537gyb7NRFYGMJuBM= Subject key identifier: 7F:37:50:F8:38:A2:23:BC:B0:89:FB:BF:20:65:6D:B4:43:4B:5E:78 Certificate issuer: /CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4 Certificate serial: 019B77C73F5E479B8000DCF21A72F88A1F82 Authority key identifier: FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/fzdQ-DiiI7ywifu_IGVttENLXng.roa Signing time: Thu 01 Jan 2026 04:18:25 +0000 ROA not before: Thu 01 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20572 IP address blocks: 193.108.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 21:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3f:5e:47:9b:80:00:dc:f2:1a:72:f8:8a:1f:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4 Validity Not Before: Jan 1 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f3750f838a223bcb089fbbf20656db4434b5e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:38:70:2e:53:63:9a:c6:7f:79:ee:ec:55:e6: 18:d9:9c:fa:2b:c2:30:a8:33:05:75:41:79:33:14: c8:4b:5b:9e:c7:79:b9:69:23:18:d2:a7:c0:5d:be: 90:5d:70:09:38:8a:3d:ac:8b:48:ac:ba:f2:f2:89: 89:f0:47:2c:3e:0d:00:53:28:3b:59:87:3d:e8:a0: 81:2c:bc:46:b4:25:fa:70:ce:5a:96:ab:a5:34:c1: 4c:6a:20:c9:40:fe:d1:e4:41:85:ea:dc:34:e1:fb: 60:07:88:1b:01:4f:92:0b:bf:2a:6d:6c:af:0d:f2: d6:6c:08:45:a5:c7:10:99:a1:1a:3a:01:89:f3:ca: 85:be:74:69:0b:b9:6c:8d:eb:a5:0e:59:93:c2:3a: 05:5b:03:70:11:5e:9d:7c:51:d1:f4:c2:dc:99:9d: 2d:11:8c:ac:af:b4:9e:a3:25:d6:73:d3:fe:8b:74: b1:7f:6d:d6:45:ca:30:85:61:6d:13:bd:aa:34:46: 99:50:87:bf:55:e5:38:b0:06:ff:01:cc:fa:f6:cf: ed:d8:cd:45:81:9f:f1:3a:70:61:41:6c:c8:b0:30: 31:43:06:02:1f:a0:da:bc:7e:53:06:ac:31:55:27: 55:b5:0f:8d:20:80:99:13:93:89:ec:ca:3b:d7:04: 3f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:37:50:F8:38:A2:23:BC:B0:89:FB:BF:20:65:6D:B4:43:4B:5E:78 X509v3 Authority Key Identifier: keyid:FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/fzdQ-DiiI7ywifu_IGVttENLXng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.108.184.0/24 Signature Algorithm: sha256WithRSAEncryption 48:2f:d3:9d:4c:42:50:f7:ca:04:4a:bc:d0:1f:18:9a:e2:1d: 1a:5b:96:2d:0d:c9:67:39:e9:b1:10:aa:b2:c4:2b:1e:20:7e: 12:93:e4:b2:0f:d3:14:a9:e1:78:1a:ed:b6:a0:50:ea:e0:fb: fd:a9:53:22:d9:6f:f8:66:1e:8d:0d:dc:45:2b:94:9f:a8:b5: 96:e7:c7:aa:d9:77:16:10:22:57:7f:ab:bd:b0:9c:83:6e:0f: cd:94:a1:a9:53:c2:d4:54:0d:9f:8b:bb:b8:2f:f4:65:7c:25: 3b:42:a4:a4:4c:ec:b2:dd:5e:31:10:d5:ee:1e:37:26:96:27: c4:ce:47:84:44:47:49:75:df:69:08:5a:1c:ab:99:62:e4:b8: eb:e8:a5:cb:52:3a:d9:ff:8b:ea:51:dd:a4:65:78:ef:e7:d3: 41:f7:ce:5b:a1:53:ad:fc:b3:fc:3b:4c:62:ee:32:0d:20:5f: dd:09:a9:03:3d:8a:e1:33:34:1a:31:e9:59:62:51:b7:ff:a0: 47:22:29:7a:7c:b0:0f:27:e6:26:ea:8d:fb:35:d0:44:00:ff: e5:51:dc:1a:60:b1:16:0a:2e:1d:2b:46:15:7b:c7:de:c3:94: d3:08:1d:c7:2d:f7:b9:0e:4a:46:5b:ce:bb:98:9b:6f:87:bd: 56:b9:04:cb -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3xz9eR5uAANzyGnL4ih+CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiYTAwNTNiNjhhNDM5OGZkNTJmMDdhZmRkNmFkMzEwOWZk ZWQ0YjQwHhcNMjYwMTAxMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjM3NTBmODM4YTIyM2JjYjA4OWZiYmYyMDY1NmRiNDQzNGI1ZTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjhwLlNjmsZ/ee7sVeYY2Zz6K8Iw qDMFdUF5MxTIS1uex3m5aSMY0qfAXb6QXXAJOIo9rItIrLry8omJ8EcsPg0AUyg7 WYc96KCBLLxGtCX6cM5alqulNMFMaiDJQP7R5EGF6tw04ftgB4gbAU+SC78qbWyv DfLWbAhFpccQmaEaOgGJ88qFvnRpC7lsjeulDlmTwjoFWwNwEV6dfFHR9MLcmZ0t EYysr7SeoyXWc9P+i3Sxf23WRcowhWFtE72qNEaZUIe/VeU4sAb/Acz69s/t2M1F gZ/xOnBhQWzIsDAxQwYCH6DavH5TBqwxVSdVtQ+NIICZE5OJ7Mo71wQ/swIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFH83UPg4oiO8sIn7vyBlbbRDS154MB8GA1UdIwQY MBaAFPugBTtopDmP1S8Hr91q0xCf3tS0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS02QUZPMmlrT1lfVkx3ZXYzV3JURUpfZTFMUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvNzMzMTc0LWVkZDYtNGI0Mi1iMDEx LTk4MDU4MTAwYTY0OC8xL2Z6ZFEtRGlpSTd5d2lmdV9JR1Z0dEVOTFhuZy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZTEvNzMzMTc0LWVkZDYtNGI0Mi1iMDExLTk4MDU4MTAwYTY0 OC8xLzEtNkFGTzJpa09ZX1ZMd2V2M1dyVEVKX2UxTFEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBbLgw DQYJKoZIhvcNAQELBQADggEBAEgv051MQlD3ygRKvNAfGJriHRpbli0NyWc56bEQ qrLEKx4gfhKT5LIP0xSp4Xga7bagUOrg+/2pUyLZb/hmHo0N3EUrlJ+otZbnx6rZ dxYQIld/q72wnINuD82UoalTwtRUDZ+Lu7gv9GV8JTtCpKRM7LLdXjEQ1e4eNyaW J8TOR4RER0l132kIWhyrmWLkuOvopctSOtn/i+pR3aRleO/n00H3zluhU638s/w7 TGLuMg0gX90JqQM9iuEzNBox6VliUbf/oEciKXp8sA8n5ibqjfs10EQA/+VR3Bpg sRYKLh0rRhV7x97DlNMIHcct97kOSkZbzruYm2+HvVa5BMs= -----END CERTIFICATE-----Generated at Tue Jan 6 06:30:34 2026 by rpki-client