This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/U7F_EGMPuOTUwMrEIvZDG6D8FL0.roa File: U7F_EGMPuOTUwMrEIvZDG6D8FL0.roa (raw, json) Hash identifier: Msu3UEjWnFS+f8ETYG9dtK80xmHaVMz/zqoRDxDt/JM= Subject key identifier: 53:B1:7F:10:63:0F:B8:E4:D4:C0:CA:C4:22:F6:43:1B:A0:FC:14:BD Certificate issuer: /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4 Certificate serial: 019B7B3568F75B2573F3F04B592827A47E29 Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/U7F_EGMPuOTUwMrEIvZDG6D8FL0.roa Signing time: Thu 01 Jan 2026 20:17:36 +0000 ROA not before: Thu 01 Jan 2026 20:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15681 IP address blocks: 83.137.240.0/24 maxlen: 24 194.29.97.0/24 maxlen: 24 194.29.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:68:f7:5b:25:73:f3:f0:4b:59:28:27:a4:7e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4 Validity Not Before: Jan 1 20:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53b17f10630fb8e4d4c0cac422f6431ba0fc14bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6a:39:6d:71:e5:a2:00:aa:0e:20:cd:5f:a8: 8d:e5:7f:8b:38:d1:b6:ec:9e:09:7f:63:0e:d6:d2: 78:45:69:8a:4f:5f:e4:35:81:9b:ee:7b:0b:e0:ad: 33:c2:88:cd:85:b3:18:66:68:2a:a1:02:b1:75:4a: 33:2d:a8:0e:14:77:03:62:da:03:bb:87:76:38:f4: 45:b7:a8:39:ab:c9:f1:c3:16:1a:f8:fa:14:43:85: e1:14:49:3e:25:0f:7b:b5:0e:d5:4e:7d:63:42:71: 66:1b:94:c4:de:c1:ce:0e:ce:2b:df:8b:f0:19:78: 65:69:f0:8f:2f:7a:5c:99:58:25:df:c4:87:db:26: 99:8b:fd:05:34:7f:cd:79:64:fe:6c:cb:a6:d1:bd: 27:91:50:67:cb:3e:c6:1f:fc:87:0f:fb:73:f4:6e: 62:b3:e9:35:0d:fe:bb:bf:01:3b:7a:79:5a:58:cd: e7:da:b0:cb:49:00:ed:20:b5:91:e1:5e:21:e8:7e: c4:a5:f7:a9:50:cb:39:bc:6a:3c:df:63:ee:f0:e9: c2:b0:e0:9d:64:9d:26:0d:51:43:ce:94:79:40:b5: de:98:8b:65:44:e4:6a:63:3a:8c:d3:01:a2:20:4d: 6d:9d:dd:a9:8e:f6:ff:49:67:b5:52:22:07:79:0e: c0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B1:7F:10:63:0F:B8:E4:D4:C0:CA:C4:22:F6:43:1B:A0:FC:14:BD X509v3 Authority Key Identifier: keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/U7F_EGMPuOTUwMrEIvZDG6D8FL0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.137.240.0/24 194.29.97.0-194.29.98.255 Signature Algorithm: sha256WithRSAEncryption bc:e7:c7:cc:22:39:28:fc:c5:aa:4e:b6:a1:d0:86:6e:93:77: 93:3b:24:b8:44:da:c9:fc:6a:ec:87:d6:a8:30:2d:0e:f4:57: 2b:b0:cf:a7:84:90:b3:b2:ef:41:0b:7f:a2:7f:78:29:c0:a4: 96:fb:63:0e:d0:80:c7:31:02:c7:21:22:cf:34:ae:03:29:ca: 64:f1:2f:4a:9a:2b:d6:60:5f:c9:50:35:1e:43:f6:5a:6d:a5: 45:ea:f4:4d:8f:00:c4:f9:f3:f5:92:49:b7:b8:ef:62:99:27: c9:37:29:ae:ff:1d:16:73:bb:f1:71:52:7f:8c:eb:1e:d6:7a: 92:7f:6a:2c:a9:52:51:89:67:b3:54:82:b7:92:c8:71:00:ac: e8:8e:d0:f5:43:40:3b:4b:ae:91:76:c8:66:69:8c:84:88:ba: f5:9b:84:2c:74:12:5e:12:27:b1:61:d5:77:c4:12:d7:10:7e: c3:a8:a3:4d:9c:16:ef:de:e3:90:1b:9c:3e:c1:76:8e:25:fb: f5:4a:ae:9f:90:ba:01:c2:84:2b:f8:39:60:e9:ad:10:a4:67: a2:f8:46:c8:81:30:6a:fe:fe:7d:d1:9e:13:ce:10:81:88:5e: df:57:14:41:e8:76:4a:bb:34:e9:1a:fe:25:52:8d:07:64:08: 6b:91:d1:99 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt7NWj3WyVz8/BLWSgnpH4pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZDlhMGE0YjU3YTBlZWM3YzRlNTJhMTE5ZGI0YjFjNjU2 ZjRkYjQwHhcNMjYwMTAxMjAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2IxN2YxMDYzMGZiOGU0ZDRjMGNhYzQyMmY2NDMxYmEwZmMxNGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2o5bXHlogCqDiDNX6iN5X+LONG2 7J4Jf2MO1tJ4RWmKT1/kNYGb7nsL4K0zwojNhbMYZmgqoQKxdUozLagOFHcDYtoD u4d2OPRFt6g5q8nxwxYa+PoUQ4XhFEk+JQ97tQ7VTn1jQnFmG5TE3sHODs4r34vw GXhlafCPL3pcmVgl38SH2yaZi/0FNH/NeWT+bMum0b0nkVBnyz7GH/yHD/tz9G5i s+k1Df67vwE7enlaWM3n2rDLSQDtILWR4V4h6H7EpfepUMs5vGo832Pu8OnCsOCd ZJ0mDVFDzpR5QLXemItlRORqYzqM0wGiIE1tnd2pjvb/SWe1UiIHeQ7AcQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFFOxfxBjD7jk1MDKxCL2Qxug/BS9MB8GA1UdIwQY MBaAFEbZoKS1eg7sfE5SoRnbSxxlb020MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82NzNiMWQtNmQxNC00ZGY1LTk5YWQt MmVlMmI3Mjk1ZGZmLzEvVTdGX0VHTVB1T1RVd01yRUl2WkRHNkQ4RkwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS82NzNiMWQtNmQxNC00ZGY1LTk5YWQtMmVlMmI3Mjk1ZGZm LzEvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAU4nwMAwD BADCHWEDBADCHWIwDQYJKoZIhvcNAQELBQADggEBALznx8wiOSj8xapOtqHQhm6T d5M7JLhE2sn8auyH1qgwLQ70Vyuwz6eEkLOy70ELf6J/eCnApJb7Yw7QgMcxAsch Is80rgMpymTxL0qaK9ZgX8lQNR5D9lptpUXq9E2PAMT58/WSSbe472KZJ8k3Ka7/ HRZzu/FxUn+M6x7WepJ/aiypUlGJZ7NUgreSyHEArOiO0PVDQDtLrpF2yGZpjISI uvWbhCx0El4SJ7Fh1XfEEtcQfsOoo02cFu/e45AbnD7Bdo4l+/VKrp+QugHChCv4 OWDprRCkZ6L4RsiBMGr+/n3RnhPOEIGIXt9XFEHodkq7NOka/iVSjQdkCGuR0Zk= -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:09 2026 by rpki-client