This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/MDe6C8qEncFJW9Z_5GGUf8-NnXw.roa File: MDe6C8qEncFJW9Z_5GGUf8-NnXw.roa (raw, json) Hash identifier: rK/554OfUglfPeqEoYZ9XaLl/qaRXFUHRWwU799kKDU= Subject key identifier: 30:37:BA:0B:CA:84:9D:C1:49:5B:D6:7F:E4:61:94:7F:CF:8D:9D:7C Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1 Certificate serial: 019B79EBF91CFE8B74F74FB57634926E14BB Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/MDe6C8qEncFJW9Z_5GGUf8-NnXw.roa Signing time: Thu 01 Jan 2026 14:17:46 +0000 ROA not before: Thu 01 Jan 2026 14:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60367 IP address blocks: 93.125.34.0/24 maxlen: 24 178.172.132.0/24 maxlen: 24 178.172.187.0/24 maxlen: 24 178.172.188.0/24 maxlen: 24 178.172.189.0/24 maxlen: 24 178.172.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:f9:1c:fe:8b:74:f7:4f:b5:76:34:92:6e:14:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1 Validity Not Before: Jan 1 14:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3037ba0bca849dc1495bd67fe461947fcf8d9d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:66:19:b9:ff:4d:4a:16:17:d2:35:ed:c0:55: 59:c5:7a:70:58:bb:4b:c5:4f:9d:39:e2:8d:b9:44: b5:73:15:7c:d3:13:e7:47:5e:5c:58:73:56:0a:9b: ff:4a:2e:8d:b6:a5:54:13:31:2d:71:26:ad:9d:01: f1:10:50:d8:1c:89:90:8d:17:2e:6f:17:90:6f:4e: 3e:96:b2:58:47:9d:ad:d0:83:c9:26:7a:0c:64:28: 96:1e:c5:36:f7:05:62:65:5f:4c:3b:15:ab:f2:8b: 3c:81:c0:49:13:ab:58:25:4d:74:1e:6a:c6:2f:a7: da:fa:5b:ee:cf:1f:48:28:b8:8a:9b:9c:61:86:fd: ea:5e:f6:f7:b4:fb:57:37:9d:2f:ce:1b:59:dd:b5: 88:40:97:03:cf:ca:e5:cd:e1:0f:ab:52:fb:c1:40: 9a:82:4b:4c:8b:ba:b1:3c:72:26:a2:5b:bb:0a:b1: a0:39:6e:0c:14:17:b3:51:89:1e:51:69:a5:55:59: c0:49:0d:d2:4b:6b:1d:c9:dd:c7:7f:f3:5a:6a:21: 7b:94:23:58:8c:fd:a5:47:2f:87:4d:42:fd:86:71: 39:4e:10:2f:12:83:b1:20:ee:28:f8:9f:c1:39:33: 7c:a0:32:13:25:88:98:90:4a:90:58:db:23:bc:cc: 3a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:37:BA:0B:CA:84:9D:C1:49:5B:D6:7F:E4:61:94:7F:CF:8D:9D:7C X509v3 Authority Key Identifier: keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/MDe6C8qEncFJW9Z_5GGUf8-NnXw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.125.34.0/24 178.172.132.0/24 178.172.187.0-178.172.190.255 Signature Algorithm: sha256WithRSAEncryption 22:08:28:df:bb:71:d4:74:d8:e9:69:34:61:94:a2:63:97:3b: 79:8a:56:2f:30:0b:f6:fb:14:28:96:d1:31:68:3a:30:b4:61: 9c:b0:4c:f0:ab:81:3f:b6:ff:4b:9c:21:fb:88:48:86:6f:3e: 46:d4:50:a1:15:21:be:d9:9e:9f:44:f6:72:a0:a9:3e:75:5c: eb:3c:69:73:fc:1f:17:c4:05:81:0f:f5:c2:ab:6d:b1:0e:df: a9:3d:b2:5b:62:c0:19:d9:b8:54:2e:46:c7:a7:e6:23:b5:6c: a9:90:b5:09:12:5f:66:8e:20:75:0b:fe:dc:ed:c7:e0:cc:92: 59:ab:71:4d:41:0d:2b:83:58:87:42:b5:fc:3d:2f:36:bd:a5: 74:bb:18:6d:08:e2:d2:4f:52:66:59:01:34:09:90:ac:e2:ab: 89:00:7a:7e:58:ba:a0:f9:28:3d:f9:80:97:46:3a:a2:61:c2: 87:17:1e:12:d1:db:1a:82:00:f6:72:b7:dc:8a:83:a5:60:c9: 6e:b3:86:90:50:2d:12:98:c3:79:74:b7:f1:d9:b9:5f:6b:38: 1e:52:f3:6c:5f:5d:c0:41:6b:b7:d6:40:f2:90:d4:33:e1:33: 10:66:78:ba:7b:72:ce:b2:59:ca:8f:7e:5d:95:98:c4:da:ba: f6:a9:54:40 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt56/kc/ot090+1djSSbhS7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj ZmViYzEwHhcNMjYwMTAxMTQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDM3YmEwYmNhODQ5ZGMxNDk1YmQ2N2ZlNDYxOTQ3ZmNmOGQ5ZDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGYZuf9NShYX0jXtwFVZxXpwWLtL xU+dOeKNuUS1cxV80xPnR15cWHNWCpv/Si6NtqVUEzEtcSatnQHxEFDYHImQjRcu bxeQb04+lrJYR52t0IPJJnoMZCiWHsU29wViZV9MOxWr8os8gcBJE6tYJU10HmrG L6fa+lvuzx9IKLiKm5xhhv3qXvb3tPtXN50vzhtZ3bWIQJcDz8rlzeEPq1L7wUCa gktMi7qxPHImolu7CrGgOW4MFBezUYkeUWmlVVnASQ3SS2sdyd3Hf/NaaiF7lCNY jP2lRy+HTUL9hnE5ThAvEoOxIO4o+J/BOTN8oDITJYiYkEqQWNsjvMw6yQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFDA3ugvKhJ3BSVvWf+RhlH/PjZ18MB8GA1UdIwQY MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct YWFiMGU0MTRjYzYzLzEvTURlNkM4cUVuY0ZKVzlaXzVHR1VmOC1Oblh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTctYWFiMGU0MTRjYzYz LzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAXX0iAwQA sqyEMAwDBACyrLsDBACyrL4wDQYJKoZIhvcNAQELBQADggEBACIIKN+7cdR02Olp NGGUomOXO3mKVi8wC/b7FCiW0TFoOjC0YZywTPCrgT+2/0ucIfuISIZvPkbUUKEV Ib7Znp9E9nKgqT51XOs8aXP8HxfEBYEP9cKrbbEO36k9sltiwBnZuFQuRsen5iO1 bKmQtQkSX2aOIHUL/tztx+DMklmrcU1BDSuDWIdCtfw9Lza9pXS7GG0I4tJPUmZZ ATQJkKziq4kAen5YuqD5KD35gJdGOqJhwocXHhLR2xqCAPZyt9yKg6VgyW6zhpBQ LRKYw3l0t/HZuV9rOB5S82xfXcBBa7fWQPKQ1DPhMxBmeLp7cs6yWcqPfl2VmMTa uvapVEA= -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:49 2026 by rpki-client