This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/7IHSj-vh6R5J2MfqRSw46f9qAsc.roa File: 7IHSj-vh6R5J2MfqRSw46f9qAsc.roa (raw, json) Hash identifier: WQuJSrCdjbcb9iug/FZIAKR6uCrGdMnpVemGgDUv0Dk= Subject key identifier: EC:81:D2:8F:EB:E1:E9:1E:49:D8:C7:EA:45:2C:38:E9:FF:6A:02:C7 Certificate issuer: /CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f Certificate serial: 019B77C68B4256002D886AEBA9779A7D2F6D Authority key identifier: 49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/7IHSj-vh6R5J2MfqRSw46f9qAsc.roa Signing time: Thu 01 Jan 2026 04:17:39 +0000 ROA not before: Thu 01 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20676 IP address blocks: 193.56.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8b:42:56:00:2d:88:6a:eb:a9:77:9a:7d:2f:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f Validity Not Before: Jan 1 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec81d28febe1e91e49d8c7ea452c38e9ff6a02c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5f:9c:8a:30:eb:5c:71:c9:72:b7:7a:94:f9: 38:56:6e:0b:a8:6a:38:84:b8:5d:50:3d:80:2c:e4: a4:16:cf:d9:e2:ed:67:14:db:8a:04:e2:45:57:7a: 6f:4e:4d:e0:84:ed:c5:9a:89:07:a8:c3:23:b0:eb: bf:b6:5c:37:bb:c1:b7:8f:cd:50:bc:f1:d4:69:b0: a4:d9:b6:34:ad:e1:12:f4:2c:3f:a1:7d:a9:f0:3e: be:d3:ac:db:68:db:6f:95:46:59:58:d5:2a:66:a1: 44:ce:75:5e:c0:28:5d:ca:0d:af:76:c3:1a:69:6b: 1c:c1:92:82:3a:19:42:40:2f:fc:c9:da:58:be:ae: 1d:5f:5f:3a:49:4f:c0:55:5d:cf:c9:2b:7e:04:2c: f0:fe:7b:af:45:cf:b5:9f:d8:4a:22:6d:de:a4:c5: 10:48:a3:ca:0d:57:bf:df:9f:7c:7d:23:53:37:86: 42:55:1a:4b:68:b5:4e:2d:07:99:97:e3:42:30:46: 86:f9:62:1b:d2:e6:44:5a:e4:4d:2a:40:f6:81:16: 87:fb:f7:f3:e5:7e:2c:0b:17:e0:63:ef:c5:39:fb: 14:35:00:2b:f6:55:99:eb:0d:45:4d:87:6a:b7:1f: b0:8b:d3:85:46:c7:8c:93:b1:46:b0:99:70:42:7d: 9e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:81:D2:8F:EB:E1:E9:1E:49:D8:C7:EA:45:2C:38:E9:FF:6A:02:C7 X509v3 Authority Key Identifier: keyid:49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/7IHSj-vh6R5J2MfqRSw46f9qAsc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.56.174.0/23 Signature Algorithm: sha256WithRSAEncryption 33:54:f1:06:e6:cc:0e:02:5f:ba:9a:7d:bd:20:20:8d:72:08: 12:c7:45:04:62:bd:fb:9e:c6:94:f2:a0:59:24:1f:2f:db:a3: c9:71:57:3f:8a:33:d7:e5:e1:71:10:eb:9c:af:b0:29:d4:67: 39:7f:ea:66:7f:60:6f:92:4b:b3:a8:b5:15:f5:3b:c8:7f:57: 96:21:86:69:75:a7:3a:fd:f8:ed:71:44:83:bb:f4:d2:fe:a0: ff:8f:25:13:e1:e2:00:5a:6f:4b:6c:a2:03:e5:d9:3c:dc:ea: eb:57:87:71:15:22:dd:79:d3:ec:49:bc:2b:0b:8f:85:c2:a7: 8d:6c:28:e6:3f:b1:36:96:26:42:89:a5:fd:04:8d:ba:8b:29: cb:02:c0:f9:6a:2c:40:2d:8f:47:12:2f:aa:f1:0f:31:6d:ed: 7c:2b:45:6a:f6:aa:9d:19:08:f7:17:a7:c7:cf:35:cb:22:d4: ac:4d:6e:68:7d:77:ba:14:dc:9e:ec:93:4e:a2:a6:cf:24:36: 96:7c:4e:39:28:75:5a:f2:95:3e:c5:48:53:7d:c2:fd:c4:ed: dc:03:c2:d2:5e:d0:94:a6:b8:29:19:06:6d:1c:85:63:1c:68: ce:39:3f:46:5b:37:82:7b:fa:86:93:81:86:e9:31:f9:67:30: a0:e1:5b:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xotCVgAtiGrrqXeafS9tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YmQ0ZDI4YzUyYzJmMTJlNDZhMWVmYmUxMTMyNDFiZTAw Y2E1OGYwHhcNMjYwMTAxMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzgxZDI4ZmViZTFlOTFlNDlkOGM3ZWE0NTJjMzhlOWZmNmEwMmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF+cijDrXHHJcrd6lPk4Vm4LqGo4 hLhdUD2ALOSkFs/Z4u1nFNuKBOJFV3pvTk3ghO3FmokHqMMjsOu/tlw3u8G3j81Q vPHUabCk2bY0reES9Cw/oX2p8D6+06zbaNtvlUZZWNUqZqFEznVewChdyg2vdsMa aWscwZKCOhlCQC/8ydpYvq4dX186SU/AVV3PySt+BCzw/nuvRc+1n9hKIm3epMUQ SKPKDVe/3598fSNTN4ZCVRpLaLVOLQeZl+NCMEaG+WIb0uZEWuRNKkD2gRaH+/fz 5X4sCxfgY+/FOfsUNQAr9lWZ6w1FTYdqtx+wi9OFRseMk7FGsJlwQn2eDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOyB0o/r4ekeSdjH6kUsOOn/agLHMB8GA1UdIwQY MBaAFEm9TSjFLC8S5Goe++ETJBvgDKWPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNWFmNDctOTQ1Mi00YzU1LWJjMmYt NTc0NjAwN2NiMmEzLzEvN0lIU2otdmg2UjVKMk1mcVJTdzQ2ZjlxQXNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iNWFmNDctOTQ1Mi00YzU1LWJjMmYtNTc0NjAwN2NiMmEz LzEvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwTiuMA0G CSqGSIb3DQEBCwUAA4IBAQAzVPEG5swOAl+6mn29ICCNcggSx0UEYr37nsaU8qBZ JB8v26PJcVc/ijPX5eFxEOucr7Ap1Gc5f+pmf2BvkkuzqLUV9TvIf1eWIYZpdac6 /fjtcUSDu/TS/qD/jyUT4eIAWm9LbKID5dk83OrrV4dxFSLdedPsSbwrC4+FwqeN bCjmP7E2liZCiaX9BI26iynLAsD5aixALY9HEi+q8Q8xbe18K0Vq9qqdGQj3F6fH zzXLItSsTW5ofXe6FNye7JNOoqbPJDaWfE45KHVa8pU+xUhTfcL9xO3cA8LSXtCU prgpGQZtHIVjHGjOOT9GWzeCe/qGk4GG6TH5ZzCg4VsY -----END CERTIFICATE-----Generated at Mon Jan 26 01:02:02 2026 by rpki-client