This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/P7lFER6rDvJWPD4eZNDJUzqqXlc.roa File: P7lFER6rDvJWPD4eZNDJUzqqXlc.roa (raw, json) Hash identifier: Bxc4JA62qF0y56MVADCG0+cLhskq38CbnkZszya5lEI= Subject key identifier: 3F:B9:45:11:1E:AB:0E:F2:56:3C:3E:1E:64:D0:C9:53:3A:AA:5E:57 Certificate issuer: /CN=b6f3db35659133315d2fcf93058dce350a4cb17a Certificate serial: 019B7E38901DDD1B968C2A43FD37E3B5E9EA Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/P7lFER6rDvJWPD4eZNDJUzqqXlc.roa Signing time: Fri 02 Jan 2026 10:19:54 +0000 ROA not before: Fri 02 Jan 2026 10:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50569 IP address blocks: 194.44.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:90:1d:dd:1b:96:8c:2a:43:fd:37:e3:b5:e9:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a Validity Not Before: Jan 2 10:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fb945111eab0ef2563c3e1e64d0c9533aaa5e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:73:48:14:3b:ec:20:23:d6:59:a4:69:08:b6: 82:f9:46:e0:fb:fc:43:6b:68:57:39:4a:2f:04:e1: 41:94:50:b9:89:d0:60:93:67:ee:9e:00:d4:63:f2: 74:f5:47:ed:e3:c6:df:10:33:2b:a7:29:40:22:ab: 5c:a3:2b:3c:25:b0:a2:e7:8f:51:0b:6d:a1:40:ef: 87:18:12:c4:e2:78:f9:c5:39:d9:3e:60:fc:7f:09: 67:e7:ef:3a:bd:2f:5f:35:ca:9b:04:11:7b:93:1f: 7a:b0:aa:a6:28:dd:87:0d:aa:6b:9a:ff:11:2a:f8: 14:5b:3a:35:9a:e2:de:25:76:6c:a4:31:7b:1b:2a: 22:e6:8a:51:f3:ac:55:e5:be:71:72:9f:cb:4d:48: aa:99:66:5d:2c:1e:56:66:5f:5f:97:d0:ae:0c:8a: 03:2f:6d:d2:2e:86:9a:37:d2:59:2d:62:90:ac:5f: d0:c0:b0:65:8d:7b:89:01:8a:52:a8:49:d9:81:77: 19:4d:1e:65:99:9c:71:bb:60:7a:06:9e:c0:1c:9f: fa:06:7f:76:4f:9e:f4:89:2a:bc:04:32:2e:c9:f4: d2:fe:d7:a9:79:5c:ef:21:0b:2a:89:c5:f7:5b:bb: 59:ab:ac:07:cd:5b:16:a6:bd:0c:77:11:fd:72:1d: d7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B9:45:11:1E:AB:0E:F2:56:3C:3E:1E:64:D0:C9:53:3A:AA:5E:57 X509v3 Authority Key Identifier: keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/P7lFER6rDvJWPD4eZNDJUzqqXlc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.44.28.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:d4:3a:e5:1e:50:88:ae:40:94:d7:8d:0a:5e:fa:c4:c0:12: 69:83:23:50:c7:eb:47:3e:e7:5a:46:10:e5:22:0a:88:96:96: 18:0a:5b:f7:a0:68:7b:4d:60:5a:72:bd:bb:48:26:e3:78:33: 69:f7:92:ab:48:6d:ea:d1:9f:91:3b:82:9c:72:e7:51:e6:f1: b0:fa:ba:96:7e:0e:e5:91:43:0b:66:c1:bd:ce:61:ae:a4:91: cc:56:20:a8:53:b5:21:f4:53:24:db:2c:77:30:97:b4:b8:1b: b9:66:38:eb:ac:31:c5:f3:c0:c4:b5:f0:99:be:3b:6e:04:0a: 71:c1:c5:0f:ee:ed:32:3e:80:a1:5d:c0:f7:14:d5:84:05:0a: c0:f7:3b:53:8c:56:bf:f3:53:58:ca:b0:69:fe:9e:81:01:cb: 09:d3:93:ad:32:82:c8:67:9c:74:6a:51:0f:99:0b:83:05:84: 8c:60:2b:09:ca:98:e4:13:7e:f8:5c:c5:a0:de:d8:25:d1:c9: 3d:6a:9a:21:d4:b6:df:8a:28:60:64:01:eb:64:22:10:c8:71: 1d:7d:7f:c9:46:1d:fe:2f:5c:ab:14:71:ef:cb:38:d4:35:10: 71:49:7d:e7:1b:c0:4d:c9:ea:2d:ea:4e:a1:6e:a8:90:70:0b: 4a:87:63:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJAd3RuWjCpD/TfjtenqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZjNkYjM1NjU5MTMzMzE1ZDJmY2Y5MzA1OGRjZTM1MGE0 Y2IxN2EwHhcNMjYwMTAyMTAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmI5NDUxMTFlYWIwZWYyNTYzYzNlMWU2NGQwYzk1MzNhYWE1ZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HNIFDvsICPWWaRpCLaC+Ubg+/xD a2hXOUovBOFBlFC5idBgk2fungDUY/J09Uft48bfEDMrpylAIqtcoys8JbCi549R C22hQO+HGBLE4nj5xTnZPmD8fwln5+86vS9fNcqbBBF7kx96sKqmKN2HDaprmv8R KvgUWzo1muLeJXZspDF7Gyoi5opR86xV5b5xcp/LTUiqmWZdLB5WZl9fl9CuDIoD L23SLoaaN9JZLWKQrF/QwLBljXuJAYpSqEnZgXcZTR5lmZxxu2B6Bp7AHJ/6Bn92 T570iSq8BDIuyfTS/tepeVzvIQsqicX3W7tZq6wHzVsWpr0MdxH9ch3X7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD+5RREeqw7yVjw+HmTQyVM6ql5XMB8GA1UdIwQY MBaAFLbz2zVlkTMxXS/PkwWNzjUKTLF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQt NTQ5ZWU2ZDMwZmI2LzEvUDdsRkVSNnJEdkpXUEQ0ZVpOREpVenFxWGxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQtNTQ5ZWU2ZDMwZmI2 LzEvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiwcMA0G CSqGSIb3DQEBCwUAA4IBAQAr1DrlHlCIrkCU140KXvrEwBJpgyNQx+tHPudaRhDl IgqIlpYYClv3oGh7TWBacr27SCbjeDNp95KrSG3q0Z+RO4KccudR5vGw+rqWfg7l kUMLZsG9zmGupJHMViCoU7Uh9FMk2yx3MJe0uBu5ZjjrrDHF88DEtfCZvjtuBApx wcUP7u0yPoChXcD3FNWEBQrA9ztTjFa/81NYyrBp/p6BAcsJ05OtMoLIZ5x0alEP mQuDBYSMYCsJypjkE374XMWg3tgl0ck9apoh1LbfiihgZAHrZCIQyHEdfX/JRh3+ L1yrFHHvyzjUNRBxSX3nG8BNyeot6k6hbqiQcAtKh2P/ -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:54 2026 by rpki-client