This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/7bhypKkq_YiwBFbSjFBZ11wqFpY.roa File: 7bhypKkq_YiwBFbSjFBZ11wqFpY.roa (raw, json) Hash identifier: FLgsBun3WcR/Y/Hs/uzj7VkaiD9LTSEAN6HkmFtXkeU= Subject key identifier: ED:B8:72:A4:A9:2A:FD:88:B0:04:56:D2:8C:50:59:D7:5C:2A:16:96 Certificate issuer: /CN=da3d3e9492b11c4669155b7c8ee4f14754b85222 Certificate serial: 019B7E37497CC0D1BA080C799B2305701F89 Authority key identifier: DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/7bhypKkq_YiwBFbSjFBZ11wqFpY.roa Signing time: Fri 02 Jan 2026 10:18:31 +0000 ROA not before: Fri 02 Jan 2026 10:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49491 IP address blocks: 193.169.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:49:7c:c0:d1:ba:08:0c:79:9b:23:05:70:1f:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da3d3e9492b11c4669155b7c8ee4f14754b85222 Validity Not Before: Jan 2 10:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edb872a4a92afd88b00456d28c5059d75c2a1696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:69:0a:ac:34:95:2a:46:57:11:76:a0:ea:87: 63:5d:31:ff:3f:3f:9e:0c:53:c0:6d:6f:ea:5d:c6: a6:c8:00:8e:a5:b0:f2:62:17:64:db:13:b9:d5:32: e9:66:d9:71:bf:29:c4:7b:a9:5c:e9:9d:ca:03:22: 76:5e:f4:71:47:d3:25:df:08:54:cc:00:05:9d:76: 7b:47:dc:cc:d6:6d:21:66:b4:9e:2c:41:95:c0:85: 75:aa:b9:fc:4e:f5:a8:50:10:e9:f2:b4:33:a6:ae: a9:6c:89:b8:7a:30:69:b1:f3:42:91:95:d2:b5:0c: 06:cd:25:65:b6:93:14:15:03:ed:bc:c5:f8:8a:5a: dd:b2:f9:f7:42:b3:e9:93:76:e2:7e:55:93:45:d3: c9:93:55:02:66:b7:09:42:dc:95:59:16:8f:45:46: 41:24:7d:e4:cb:dc:b8:06:a1:4d:5b:09:cb:45:aa: 44:da:98:77:72:c9:0d:00:c4:16:9e:6a:11:fd:b0: 70:5f:51:df:8e:a5:6d:41:cf:2e:55:04:12:a2:49: 81:d5:01:50:96:34:fc:91:a9:09:ac:4f:de:cd:ef: 5e:29:ec:7f:0a:e9:93:21:16:13:33:49:d0:7d:5d: c1:47:47:22:7a:df:98:2c:37:55:98:32:a6:4e:bd: 33:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B8:72:A4:A9:2A:FD:88:B0:04:56:D2:8C:50:59:D7:5C:2A:16:96 X509v3 Authority Key Identifier: keyid:DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/7bhypKkq_YiwBFbSjFBZ11wqFpY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.169.80.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:be:f5:a0:57:98:44:b3:fb:aa:8c:44:80:68:e0:6b:96:5d: fa:c6:da:16:5b:71:b0:32:2a:67:1f:39:9c:f1:16:c3:e1:ce: 41:dd:1e:f7:fc:a2:1f:65:10:e0:c1:93:f4:26:5b:f6:fd:08: 0c:5e:dd:3b:3e:3d:07:2c:48:64:87:cc:91:28:55:07:14:9e: 21:fd:23:94:b2:7a:5d:e7:96:48:dc:a4:f5:68:ba:ef:82:66: b6:13:04:fa:a9:56:b0:43:0b:c1:8f:f1:8f:c1:bb:31:a6:6f: 0d:7f:8c:18:39:f7:01:dd:93:0b:bd:31:5d:ff:c2:f7:3c:fb: 04:89:29:7f:07:61:bb:3c:d8:56:19:a4:90:6f:a3:7c:fd:e0: 35:08:c3:85:17:66:76:ee:c5:99:58:a6:38:79:e8:e9:9d:de: 0b:f8:4f:f7:8b:ea:fc:62:b2:5a:50:d0:c8:37:ec:51:97:e5: f2:17:f5:7d:02:c4:bc:cf:2c:76:36:0e:fb:3d:41:79:3a:eb: bc:3a:ce:62:68:fb:93:21:05:35:f0:91:5f:31:3f:90:7d:cb: e9:28:2e:88:94:c7:32:b7:d0:3e:db:ed:57:7d:cd:bf:61:9c: 29:67:c1:d7:36:9d:3d:90:2f:9b:12:b6:31:78:79:8c:61:c9: 0d:56:07:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N0l8wNG6CAx5myMFcB+JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhM2QzZTk0OTJiMTFjNDY2OTE1NWI3YzhlZTRmMTQ3NTRi ODUyMjIwHhcNMjYwMTAyMTAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGI4NzJhNGE5MmFmZDg4YjAwNDU2ZDI4YzUwNTlkNzVjMmExNjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2kKrDSVKkZXEXag6odjXTH/Pz+e DFPAbW/qXcamyACOpbDyYhdk2xO51TLpZtlxvynEe6lc6Z3KAyJ2XvRxR9Ml3whU zAAFnXZ7R9zM1m0hZrSeLEGVwIV1qrn8TvWoUBDp8rQzpq6pbIm4ejBpsfNCkZXS tQwGzSVltpMUFQPtvMX4ilrdsvn3QrPpk3biflWTRdPJk1UCZrcJQtyVWRaPRUZB JH3ky9y4BqFNWwnLRapE2ph3cskNAMQWnmoR/bBwX1HfjqVtQc8uVQQSokmB1QFQ ljT8kakJrE/eze9eKex/CumTIRYTM0nQfV3BR0ciet+YLDdVmDKmTr0zIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO24cqSpKv2IsARW0oxQWddcKhaWMB8GA1UdIwQY MBaAFNo9PpSSsRxGaRVbfI7k8UdUuFIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MjliYjctM2NmOC00NzU2LWE5MGUt MDQxNDQ4OGFlMDgyLzEvN2JoeXBLa3FfWWl3QkZiU2pGQloxMXdxRnBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82MjliYjctM2NmOC00NzU2LWE5MGUtMDQxNDQ4OGFlMDgy LzEvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwalQMA0G CSqGSIb3DQEBCwUAA4IBAQCMvvWgV5hEs/uqjESAaOBrll36xtoWW3GwMipnHzmc 8RbD4c5B3R73/KIfZRDgwZP0Jlv2/QgMXt07Pj0HLEhkh8yRKFUHFJ4h/SOUsnpd 55ZI3KT1aLrvgma2EwT6qVawQwvBj/GPwbsxpm8Nf4wYOfcB3ZMLvTFd/8L3PPsE iSl/B2G7PNhWGaSQb6N8/eA1CMOFF2Z27sWZWKY4eejpnd4L+E/3i+r8YrJaUNDI N+xRl+XyF/V9AsS8zyx2Ng77PUF5Ouu8Os5iaPuTIQU18JFfMT+QfcvpKC6IlMcy t9A+2+1Xfc2/YZwpZ8HXNp09kC+bErYxeHmMYckNVgcT -----END CERTIFICATE-----Generated at Mon Jan 26 05:54:58 2026 by rpki-client