This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/9C4zylgT_v6zvEFrHmvSaBqh2J0.roa File: 9C4zylgT_v6zvEFrHmvSaBqh2J0.roa (raw, json) Hash identifier: wYzWFJkfh8DVoM0PQNgjA9QYBugmyzSdp/+Mt6aeNyY= Subject key identifier: F4:2E:33:CA:58:13:FE:FE:B3:BC:41:6B:1E:6B:D2:68:1A:A1:D8:9D Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1 Certificate serial: 019B79EBF71079B140FD07414B69A01C552A Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/9C4zylgT_v6zvEFrHmvSaBqh2J0.roa Signing time: Thu 01 Jan 2026 14:17:45 +0000 ROA not before: Thu 01 Jan 2026 14:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50929 IP address blocks: 93.125.29.0/24 maxlen: 24 178.172.191.0/24 maxlen: 24 178.172.222.0/24 maxlen: 24 178.172.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:f7:10:79:b1:40:fd:07:41:4b:69:a0:1c:55:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1 Validity Not Before: Jan 1 14:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f42e33ca5813fefeb3bc416b1e6bd2681aa1d89d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:78:f3:01:77:73:ca:ae:2c:43:ae:4d:29:e4: 9d:66:27:e2:78:a7:42:88:cd:a7:84:ef:c1:c0:81: f1:19:de:df:ee:57:c3:b3:12:60:4d:d2:83:2d:3c: 66:f8:40:56:dd:0d:ba:4f:46:20:d0:82:44:d8:f8: 9d:47:02:3c:6a:dd:1f:80:90:e2:fd:0c:c0:f9:52: 71:91:e0:29:44:74:da:77:2e:7c:05:6b:64:aa:d0: d7:40:7a:12:a8:6a:dc:8b:67:fc:5c:4a:44:47:6f: c1:b7:8b:e4:b4:18:ac:21:ab:45:f9:aa:df:5b:20: 06:9f:9c:a0:cf:f5:c4:4b:cd:00:15:8d:a6:3a:99: 40:ce:00:b5:40:00:24:e1:67:2a:a1:9f:1f:3f:64: 73:2f:24:2a:c3:b5:bf:0a:a5:8e:e1:19:73:40:83: df:c1:c3:2b:f1:c2:b4:69:1b:54:d5:ea:cb:b3:9f: 58:cd:05:08:45:6e:3c:c1:9f:4e:51:7e:e8:0a:56: 7f:74:d2:2d:7b:dd:96:92:fb:db:d8:14:9b:88:bc: 01:c1:dd:bf:4b:1b:87:17:a8:15:69:f3:16:f5:8b: 5c:ee:13:f8:99:69:be:e1:b8:f1:92:cd:a8:27:16: 26:aa:cf:90:4b:21:e9:98:55:07:74:99:13:0f:f1: 31:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2E:33:CA:58:13:FE:FE:B3:BC:41:6B:1E:6B:D2:68:1A:A1:D8:9D X509v3 Authority Key Identifier: keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/9C4zylgT_v6zvEFrHmvSaBqh2J0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.125.29.0/24 178.172.191.0/24 178.172.222.0/23 Signature Algorithm: sha256WithRSAEncryption 19:ce:3c:63:d4:39:e1:7b:d4:17:f2:eb:2e:b8:1b:f2:98:8b: 56:ef:f0:ec:d9:9c:a6:f2:45:96:05:54:bf:66:bf:28:cf:33: 57:90:fb:3f:de:12:b8:61:67:5b:83:d0:56:af:68:a7:d0:42: 5e:1b:34:86:59:0a:14:bb:1d:e1:3a:f6:2e:a1:8a:5c:59:bd: cc:07:79:34:b6:9e:c1:92:ea:aa:8d:e9:39:54:b5:2e:36:d3: 2f:2f:92:62:7d:6d:c0:49:e1:c6:55:7b:6c:d2:a6:f0:91:af: 22:9e:0c:fa:54:c1:de:ee:62:f9:6a:2a:22:ea:0f:72:38:56: f7:9f:54:12:fe:6a:aa:22:5d:fd:af:13:3a:ef:ca:dc:48:46: 40:db:d3:75:d9:70:f6:aa:1e:ef:13:60:1a:9a:c6:17:dc:84: 9e:02:e5:39:bd:dd:3d:5c:51:45:90:70:bc:64:d6:fd:ad:00: 29:9a:a7:0e:d4:4c:12:65:5f:7f:32:c3:71:6f:56:78:a9:77: c7:7e:8a:fa:d0:47:c9:8b:3a:73:a1:03:2d:37:e5:ed:13:24: f3:b4:5a:11:dd:62:9d:6b:f0:db:f2:63:4e:ac:eb:4d:0f:0d: f1:cf:1a:b7:5d:d9:21:29:55:b9:10:0d:12:9a:b5:cc:21:bb: 0f:79:f0:f5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt56/cQebFA/QdBS2mgHFUqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj ZmViYzEwHhcNMjYwMTAxMTQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDJlMzNjYTU4MTNmZWZlYjNiYzQxNmIxZTZiZDI2ODFhYTFkODlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnjzAXdzyq4sQ65NKeSdZifieKdC iM2nhO/BwIHxGd7f7lfDsxJgTdKDLTxm+EBW3Q26T0Yg0IJE2PidRwI8at0fgJDi /QzA+VJxkeApRHTady58BWtkqtDXQHoSqGrci2f8XEpER2/Bt4vktBisIatF+arf WyAGn5ygz/XES80AFY2mOplAzgC1QAAk4WcqoZ8fP2RzLyQqw7W/CqWO4RlzQIPf wcMr8cK0aRtU1erLs59YzQUIRW48wZ9OUX7oClZ/dNIte92Wkvvb2BSbiLwBwd2/ SxuHF6gVafMW9Ytc7hP4mWm+4bjxks2oJxYmqs+QSyHpmFUHdJkTD/ExzwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPQuM8pYE/7+s7xBax5r0mgaodidMB8GA1UdIwQY MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct YWFiMGU0MTRjYzYzLzEvOUM0enlsZ1RfdjZ6dkVGckhtdlNhQnFoMkowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTctYWFiMGU0MTRjYzYz LzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXX0dAwQA sqy/AwQBsqzeMA0GCSqGSIb3DQEBCwUAA4IBAQAZzjxj1Dnhe9QX8usuuBvymItW 7/Ds2Zym8kWWBVS/Zr8ozzNXkPs/3hK4YWdbg9BWr2in0EJeGzSGWQoUux3hOvYu oYpcWb3MB3k0tp7Bkuqqjek5VLUuNtMvL5JifW3ASeHGVXts0qbwka8ingz6VMHe 7mL5aioi6g9yOFb3n1QS/mqqIl39rxM678rcSEZA29N12XD2qh7vE2AamsYX3ISe AuU5vd09XFFFkHC8ZNb9rQApmqcO1EwSZV9/MsNxb1Z4qXfHfor60EfJizpzoQMt N+XtEyTztFoR3WKda/Db8mNOrOtNDw3xzxq3XdkhKVW5EA0SmrXMIbsPefD1 -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:31 2026 by rpki-client