This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/7zP-vrGMSLLfqRfiE-wgv93MQnc.roa File: 7zP-vrGMSLLfqRfiE-wgv93MQnc.roa (raw, json) Hash identifier: RFbWknjP21J0ZtXdcY+/jqdLrNcb7a87Mqd1uXals1g= Subject key identifier: EF:33:FE:BE:B1:8C:48:B2:DF:A9:17:E2:13:EC:20:BF:DD:CC:42:77 Certificate issuer: /CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c Certificate serial: 019B7B358E4E5A7DAEC3921B27332AD11D3B Authority key identifier: B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/7zP-vrGMSLLfqRfiE-wgv93MQnc.roa Signing time: Thu 01 Jan 2026 20:17:46 +0000 ROA not before: Thu 01 Jan 2026 20:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31027 IP address blocks: 193.163.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:8e:4e:5a:7d:ae:c3:92:1b:27:33:2a:d1:1d:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c Validity Not Before: Jan 1 20:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef33febeb18c48b2dfa917e213ec20bfddcc4277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d1:a9:8d:32:a0:f8:77:fe:75:1e:40:99:a5: 26:54:11:f1:62:73:bd:2f:59:42:99:16:3e:89:b0: f8:42:ec:45:dc:d9:a3:19:d2:c0:dc:54:1c:2e:ac: 44:4d:e0:ae:ee:2f:af:89:89:26:64:32:15:f1:32: 7c:88:d3:f9:a1:73:14:b3:61:23:df:10:8d:65:38: d7:07:eb:3b:2b:b2:31:1e:ad:b8:17:4f:9e:27:2c: eb:39:0d:15:ae:d4:be:e4:14:5b:dd:d4:7c:a0:7f: 3b:19:22:2a:96:ba:44:ff:1d:75:a8:94:d4:7c:2a: fe:4c:74:a0:3c:38:59:f6:9b:10:32:d4:db:10:4b: 44:87:f9:27:ac:c0:57:9d:bf:43:58:34:da:cb:32: be:cc:73:82:4f:d1:d8:72:3b:7d:51:8d:d7:da:bb: 69:40:00:f5:f0:87:16:58:96:54:bc:36:f9:e6:3d: f4:ea:80:70:65:25:25:91:fb:9b:c1:0f:86:8c:43: 12:99:9b:7d:ed:88:fe:09:aa:b7:9f:2b:5e:91:51: 03:ef:c8:01:5b:e8:fd:75:a1:fb:3f:56:98:f7:b8: a2:ff:a9:77:be:01:5c:72:85:23:f6:c9:0c:20:fd: 3b:be:85:7d:84:25:12:a9:f8:ae:86:96:0e:ad:a3: a0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:33:FE:BE:B1:8C:48:B2:DF:A9:17:E2:13:EC:20:BF:DD:CC:42:77 X509v3 Authority Key Identifier: keyid:B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/7zP-vrGMSLLfqRfiE-wgv93MQnc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.36.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:e1:7c:e7:85:54:7b:28:6c:7b:87:e7:54:61:04:55:39:75: 06:e4:13:04:12:3c:11:9c:9d:7a:61:88:78:c1:64:54:f5:ff: eb:68:c9:0c:13:ea:fa:f8:89:38:1a:a1:21:6f:39:36:25:d1: 69:77:23:57:a5:f9:9c:c9:58:78:f6:cf:86:8f:ff:83:6e:4e: bc:8f:75:80:51:76:f8:ac:7a:5c:99:b2:aa:b7:a5:21:1c:9a: 9d:bb:cb:18:28:8d:c6:89:8c:cb:4a:b6:27:6a:c8:e7:94:45: a3:32:d3:89:bc:29:85:3c:bc:74:da:3f:44:56:ba:92:43:0e: d2:73:5e:9b:87:97:eb:36:f5:fb:a4:62:84:18:9c:9c:ae:bb: d0:b6:39:a6:ff:13:d6:49:8e:3b:4f:17:6e:88:72:7b:e5:bf: 5c:2f:5b:b6:31:6c:0e:b6:1b:90:5c:6c:12:6a:68:bb:f6:20: 04:5e:28:b5:c9:45:d2:e2:8d:21:5f:4d:e2:a9:ef:71:d2:52: 74:d0:be:d6:c1:ca:37:03:33:aa:4c:b2:a1:3d:e0:1b:3f:0e: 5c:a8:86:36:94:74:9e:d5:7a:cf:a9:98:c5:ba:4e:97:9f:3a: ff:e9:42:ea:d1:16:9d:c5:7a:8c:19:47:1d:e1:09:a9:70:32: 9f:d0:55:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NY5OWn2uw5IbJzMq0R07MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ZjU3ZTQ5ZWJmMDk4YmM1M2U4ZGIzODg4ODFjOTIzNjlk OWJmOGMwHhcNMjYwMTAxMjAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjMzZmViZWIxOGM0OGIyZGZhOTE3ZTIxM2VjMjBiZmRkY2M0Mjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNGpjTKg+Hf+dR5AmaUmVBHxYnO9 L1lCmRY+ibD4QuxF3NmjGdLA3FQcLqxETeCu7i+viYkmZDIV8TJ8iNP5oXMUs2Ej 3xCNZTjXB+s7K7IxHq24F0+eJyzrOQ0VrtS+5BRb3dR8oH87GSIqlrpE/x11qJTU fCr+THSgPDhZ9psQMtTbEEtEh/knrMBXnb9DWDTayzK+zHOCT9HYcjt9UY3X2rtp QAD18IcWWJZUvDb55j306oBwZSUlkfubwQ+GjEMSmZt97Yj+Caq3nytekVED78gB W+j9daH7P1aY97ii/6l3vgFccoUj9skMIP07voV9hCUSqfiuhpYOraOgewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO8z/r6xjEiy36kX4hPsIL/dzEJ3MB8GA1UdIwQY MBaAFLX1fknr8Ji8U+jbOIiBySNp2b+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGZWLVNldndtTHhUNk5zNGlJSEpJMm5adjR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS85ZTkxMjItYmJmZi00OGQ5LTk4YzYt MGE0Mjg2ZjNjZmJlLzEvN3pQLXZyR01TTExmcVJmaUUtd2d2OTNNUW5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS85ZTkxMjItYmJmZi00OGQ5LTk4YzYtMGE0Mjg2ZjNjZmJl LzEvdGZWLVNldndtTHhUNk5zNGlJSEpJMm5adjR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwaMkMA0G CSqGSIb3DQEBCwUAA4IBAQBq4XznhVR7KGx7h+dUYQRVOXUG5BMEEjwRnJ16YYh4 wWRU9f/raMkME+r6+Ik4GqEhbzk2JdFpdyNXpfmcyVh49s+Gj/+Dbk68j3WAUXb4 rHpcmbKqt6UhHJqdu8sYKI3GiYzLSrYnasjnlEWjMtOJvCmFPLx02j9EVrqSQw7S c16bh5frNvX7pGKEGJycrrvQtjmm/xPWSY47TxduiHJ75b9cL1u2MWwOthuQXGwS ami79iAEXii1yUXS4o0hX03iqe9x0lJ00L7Wwco3AzOqTLKhPeAbPw5cqIY2lHSe 1XrPqZjFuk6Xnzr/6ULq0RadxXqMGUcd4QmpcDKf0FXN -----END CERTIFICATE-----Generated at Mon Jan 26 00:24:31 2026 by rpki-client