This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/e6rt8CL4Tt23u6mnF3HX9gILLdw.roa File: e6rt8CL4Tt23u6mnF3HX9gILLdw.roa (raw, json) Hash identifier: 0VKltNMP0fVwSJth+lSOjHYVHCR+JxiPMU1thfnFsLc= Subject key identifier: 7B:AA:ED:F0:22:F8:4E:DD:B7:BB:A9:A7:17:71:D7:F6:02:0B:2D:DC Certificate issuer: /CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54 Certificate serial: 019B7E380764ECDDFD3C36A92AEE93868A08 Authority key identifier: AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/e6rt8CL4Tt23u6mnF3HX9gILLdw.roa Signing time: Fri 02 Jan 2026 10:19:19 +0000 ROA not before: Fri 02 Jan 2026 10:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56683 IP address blocks: 193.194.116.0/22 maxlen: 22 193.194.116.0/24 maxlen: 24 193.194.117.0/24 maxlen: 24 193.194.118.0/24 maxlen: 24 193.194.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:07:64:ec:dd:fd:3c:36:a9:2a:ee:93:86:8a:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54 Validity Not Before: Jan 2 10:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7baaedf022f84eddb7bba9a71771d7f6020b2ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f6:f0:3f:76:c9:64:81:08:95:e7:06:7e:a0: 41:fd:05:20:da:7b:41:d7:08:fc:2a:64:ca:fd:be: 12:ba:87:26:d1:23:e8:b8:25:01:a3:83:01:0c:c9: e1:76:ea:3b:62:5e:f8:c7:87:86:50:93:31:04:35: 98:86:f9:2f:cb:72:4c:d4:7c:32:93:91:c9:94:9f: 66:f0:92:37:78:2b:c4:cc:cb:9b:93:e2:7c:0f:94: 16:5f:8d:57:f3:65:f2:90:33:fc:f8:5c:1b:a1:d5: 6f:67:0f:ac:1f:cd:d1:2b:cf:03:f3:d0:3b:21:2f: a8:57:8f:87:08:a4:d8:70:32:58:dc:8b:db:c6:0e: 14:e7:48:cb:0c:6f:9d:34:99:c2:ff:e1:b7:e8:3b: e3:48:1d:4a:40:e1:3f:4c:af:1a:cc:8a:c9:2e:94: d2:8e:e7:1c:54:58:da:25:dd:f6:a5:58:80:a4:ec: e6:f3:c8:d5:7b:13:40:38:5d:bb:fe:1a:05:82:c6: 1a:e8:5b:53:48:24:d1:ae:f0:c3:7e:56:95:8c:c9: f1:39:4c:54:4f:6e:4f:6a:75:54:c1:5a:e4:3b:10: 16:dc:d9:e9:d9:a6:85:f9:d5:6c:1f:e6:ea:da:5b: 3c:8f:1f:9e:1f:db:95:30:7a:68:29:2a:67:7b:8a: d1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AA:ED:F0:22:F8:4E:DD:B7:BB:A9:A7:17:71:D7:F6:02:0B:2D:DC X509v3 Authority Key Identifier: keyid:AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/e6rt8CL4Tt23u6mnF3HX9gILLdw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.194.116.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:dd:0c:1e:c0:64:a7:90:b0:b1:ef:74:88:a6:04:d4:23:92: 8e:2c:52:51:4e:56:00:65:dd:d9:ee:d0:c4:9b:23:26:76:29: fb:8f:b1:89:76:42:3d:b4:fb:79:8d:09:d6:a5:ff:43:69:e6: b3:c3:4d:53:63:5c:d1:3e:b6:99:d0:37:3a:a4:0a:37:0a:46: f8:9d:a4:bc:5a:d0:43:db:40:ac:85:ff:88:40:82:3b:ab:72: 3c:e7:b7:b9:e6:b8:c7:5f:d6:0c:ef:40:e5:71:ad:de:7a:9a: 42:19:96:95:ae:e5:a9:24:fb:74:9a:e2:c8:60:27:f4:b8:e1: 62:4f:91:b6:30:c8:ea:65:3c:e2:fc:53:b8:84:77:e1:fa:e9: 66:1d:9c:16:1c:6e:87:ed:6c:01:8c:5d:2a:e7:c7:79:d6:57: ca:13:27:85:f9:f6:1b:f7:fc:5c:86:97:8f:0e:c6:3e:db:69: 6a:c0:e3:e3:0e:7d:dc:69:7c:cb:85:8c:9e:04:2c:0b:56:90: f0:ea:98:e8:68:24:54:a5:98:af:d5:5d:0d:25:b1:27:f0:96: 8d:49:0d:a2:a0:f7:7d:96:a8:38:e0:dd:b6:98:d8:6e:78:a8: 62:07:c8:ac:d9:5f:21:e7:6f:d3:2b:66:15:21:97:d2:ae:85: 54:7f:d3:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OAdk7N39PDapKu6ThooIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZDNlMmIxMmY0NzkxOTgyOTRmYWY2MGM2ZTM2YTBhMWI3 YmZkNTQwHhcNMjYwMTAyMTAxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmFhZWRmMDIyZjg0ZWRkYjdiYmE5YTcxNzcxZDdmNjAyMGIyZGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/bwP3bJZIEIlecGfqBB/QUg2ntB 1wj8KmTK/b4Suocm0SPouCUBo4MBDMnhduo7Yl74x4eGUJMxBDWYhvkvy3JM1Hwy k5HJlJ9m8JI3eCvEzMubk+J8D5QWX41X82XykDP8+FwbodVvZw+sH83RK88D89A7 IS+oV4+HCKTYcDJY3Ivbxg4U50jLDG+dNJnC/+G36DvjSB1KQOE/TK8azIrJLpTS juccVFjaJd32pViApOzm88jVexNAOF27/hoFgsYa6FtTSCTRrvDDflaVjMnxOUxU T25PanVUwVrkOxAW3Nnp2aaF+dVsH+bq2ls8jx+eH9uVMHpoKSpne4rR4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHuq7fAi+E7dt7uppxdx1/YCCy3cMB8GA1UdIwQY MBaAFKvT4rEvR5GYKU+vYMbjagobe/1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTlQaXNTOUhrWmdwVDY5Z3h1TnFDaHQ3X1ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83OTFmYjUtYTVlYi00N2Y1LWFkOWEt OTk3ZjQ3YWI3ZGYyLzEvZTZydDhDTDRUdDIzdTZtbkYzSFg5Z0lMTGR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy83OTFmYjUtYTVlYi00N2Y1LWFkOWEtOTk3ZjQ3YWI3ZGYy LzEvcTlQaXNTOUhrWmdwVDY5Z3h1TnFDaHQ3X1ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwcJ0MA0G CSqGSIb3DQEBCwUAA4IBAQB/3QwewGSnkLCx73SIpgTUI5KOLFJRTlYAZd3Z7tDE myMmdin7j7GJdkI9tPt5jQnWpf9Daeazw01TY1zRPraZ0Dc6pAo3Ckb4naS8WtBD 20Cshf+IQII7q3I857e55rjHX9YM70Dlca3eeppCGZaVruWpJPt0muLIYCf0uOFi T5G2MMjqZTzi/FO4hHfh+ulmHZwWHG6H7WwBjF0q58d51lfKEyeF+fYb9/xchpeP DsY+22lqwOPjDn3caXzLhYyeBCwLVpDw6pjoaCRUpZiv1V0NJbEn8JaNSQ2ioPd9 lqg44N22mNhueKhiB8is2V8h52/TK2YVIZfSroVUf9Pg -----END CERTIFICATE-----Generated at Sun Jan 25 14:35:23 2026 by rpki-client