This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/7l9ngUq8Wk1AjbqW9RJtGIRz3P4.roa File: 7l9ngUq8Wk1AjbqW9RJtGIRz3P4.roa (raw, json) Hash identifier: EHK3o5AqxXjYT44qxa9/0h4L/zP53EV+yGtFIqeqjtQ= Subject key identifier: EE:5F:67:81:4A:BC:5A:4D:40:8D:BA:96:F5:12:6D:18:84:73:DC:FE Certificate issuer: /CN=74267f3ecfcc61668e0501bca60ced6dd75d347c Certificate serial: 019B7FF057208F08CD4824B323846D455240 Authority key identifier: 74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/7l9ngUq8Wk1AjbqW9RJtGIRz3P4.roa Signing time: Fri 02 Jan 2026 18:20:15 +0000 ROA not before: Fri 02 Jan 2026 18:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2200 IP address blocks: 192.44.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:57:20:8f:08:cd:48:24:b3:23:84:6d:45:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74267f3ecfcc61668e0501bca60ced6dd75d347c Validity Not Before: Jan 2 18:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee5f67814abc5a4d408dba96f5126d188473dcfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a7:f3:61:b2:a3:f7:2f:e4:b3:71:4c:e3:1c: d3:67:e1:be:44:4d:1a:a9:ee:2f:2c:52:f5:85:14: 3a:62:d3:17:a8:73:58:13:1b:46:e6:7c:40:73:1f: a4:26:e6:94:3a:85:b3:fb:c4:51:c9:06:12:e6:13: 11:f8:4e:93:38:68:7c:d2:34:71:84:04:0d:0a:60: 84:5a:03:91:f2:d8:6e:90:52:bf:ee:44:84:34:5b: ef:f7:a4:e5:70:c8:6c:ba:f9:06:e3:e3:b2:a5:31: 59:e2:97:46:07:6e:d8:83:93:8f:21:16:16:b4:94: 39:aa:94:91:21:a5:50:d2:a6:29:fd:59:65:8f:7e: 2a:eb:a1:45:f3:b2:a6:37:eb:1d:42:9a:90:1d:e7: 66:cd:7b:03:40:78:55:13:05:8d:c7:9d:94:dc:6f: 5f:61:a3:fd:69:02:9d:af:c1:04:8d:00:bb:8a:29: 27:ad:c8:fc:b6:08:c4:8f:dd:fa:66:54:d6:ad:22: 44:06:9c:b2:88:f7:06:18:7f:81:37:32:b2:e6:a2: d8:70:66:5e:27:43:2a:89:a0:53:ca:43:9c:d8:04: 44:b6:e0:6f:ce:17:bb:a0:ff:9f:ce:44:f6:73:49: a0:fe:06:59:90:2a:1c:fe:dc:3d:62:be:56:9d:f9: d9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:5F:67:81:4A:BC:5A:4D:40:8D:BA:96:F5:12:6D:18:84:73:DC:FE X509v3 Authority Key Identifier: keyid:74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/7l9ngUq8Wk1AjbqW9RJtGIRz3P4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.44.76.0/24 Signature Algorithm: sha256WithRSAEncryption 69:ba:36:e8:86:ba:80:34:00:11:52:75:ec:30:28:f6:a4:e5: e3:1a:06:71:3a:47:9a:20:80:c1:fc:c4:05:d7:85:06:3b:b8: 9e:d5:d2:51:10:95:2c:64:b7:25:16:ab:a5:fb:33:aa:b9:19: 1d:fe:9e:69:15:80:ff:d6:25:0c:7d:09:e4:39:e2:08:4c:ee: d8:c1:a4:cb:82:98:bc:5b:43:25:af:bf:16:41:34:3b:76:31: 14:37:57:06:21:3e:3b:d2:ea:05:36:a8:32:79:bd:63:f2:76: 58:40:02:10:51:f4:a9:2e:99:29:7e:8c:05:3e:70:5c:2e:6e: 59:9e:1b:38:a0:86:59:39:c6:aa:97:3d:6d:71:4c:95:52:75: 02:de:27:ce:08:2b:31:8b:5a:1d:2a:5e:b9:8e:f0:9e:39:cb: ae:b2:5d:7b:bd:05:67:d1:fe:53:84:d8:69:bc:af:ca:67:b6: 59:fa:2b:d3:75:bd:5e:6b:58:f0:20:d8:f7:43:d8:86:10:10: fd:0f:f9:7d:e1:ce:8b:f6:1a:31:1d:d5:69:b1:90:dd:c9:df: 9b:d4:bb:8e:b3:09:61:24:bd:4b:02:fd:de:8c:f5:f0:c3:ed: f9:38:67:86:70:f4:15:87:0e:24:80:7d:9a:ac:6b:da:e9:aa: ef:55:39:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8FcgjwjNSCSzI4RtRVJAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MjY3ZjNlY2ZjYzYxNjY4ZTA1MDFiY2E2MGNlZDZkZDc1 ZDM0N2MwHhcNMjYwMTAyMTgyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTVmNjc4MTRhYmM1YTRkNDA4ZGJhOTZmNTEyNmQxODg0NzNkY2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6fzYbKj9y/ks3FM4xzTZ+G+RE0a qe4vLFL1hRQ6YtMXqHNYExtG5nxAcx+kJuaUOoWz+8RRyQYS5hMR+E6TOGh80jRx hAQNCmCEWgOR8thukFK/7kSENFvv96TlcMhsuvkG4+OypTFZ4pdGB27Yg5OPIRYW tJQ5qpSRIaVQ0qYp/Vllj34q66FF87KmN+sdQpqQHedmzXsDQHhVEwWNx52U3G9f YaP9aQKdr8EEjQC7iiknrcj8tgjEj936ZlTWrSJEBpyyiPcGGH+BNzKy5qLYcGZe J0MqiaBTykOc2AREtuBvzhe7oP+fzkT2c0mg/gZZkCoc/tw9Yr5WnfnZKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO5fZ4FKvFpNQI26lvUSbRiEc9z+MB8GA1UdIwQY MBaAFHQmfz7PzGFmjgUBvKYM7W3XXTR8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZENaX1BzX01ZV2FPQlFHOHBnenRiZGRkTkh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MGNiODAtNGU2ZC00NmE1LWIxYjQt NGUzZjRkNjhmNjgyLzEvN2w5bmdVcThXazFBamJxVzlSSnRHSVJ6M1A0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny83MGNiODAtNGU2ZC00NmE1LWIxYjQtNGUzZjRkNjhmNjgy LzEvZENaX1BzX01ZV2FPQlFHOHBnenRiZGRkTkh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCxMMA0G CSqGSIb3DQEBCwUAA4IBAQBpujbohrqANAARUnXsMCj2pOXjGgZxOkeaIIDB/MQF 14UGO7ie1dJREJUsZLclFqul+zOquRkd/p5pFYD/1iUMfQnkOeIITO7YwaTLgpi8 W0Mlr78WQTQ7djEUN1cGIT470uoFNqgyeb1j8nZYQAIQUfSpLpkpfowFPnBcLm5Z nhs4oIZZOcaqlz1tcUyVUnUC3ifOCCsxi1odKl65jvCeOcuusl17vQVn0f5ThNhp vK/KZ7ZZ+ivTdb1ea1jwINj3Q9iGEBD9D/l94c6L9hoxHdVpsZDdyd+b1LuOswlh JL1LAv3ejPXww+35OGeGcPQVhw4kgH2arGva6arvVTnO -----END CERTIFICATE-----Generated at Mon Jan 26 03:06:07 2026 by rpki-client