This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/N-Sz7eb5ejVM1p6qryCc5zRHIbU.roa File: N-Sz7eb5ejVM1p6qryCc5zRHIbU.roa (raw, json) Hash identifier: YnpBvRTMf+9uMxTp+5UfUvUMx9s/3sJS6dWYTJ+uzTs= Subject key identifier: 37:E4:B3:ED:E6:F9:7A:35:4C:D6:9E:AA:AF:20:9C:E7:34:47:21:B5 Certificate issuer: /CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6 Certificate serial: 019B76EB9D8AD12BAB488B5E9E6BEE349EC1 Authority key identifier: 3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/N-Sz7eb5ejVM1p6qryCc5zRHIbU.roa Signing time: Thu 01 Jan 2026 00:18:31 +0000 ROA not before: Thu 01 Jan 2026 00:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34599 IP address blocks: 193.104.76.0/24 maxlen: 24 193.104.80.0/24 maxlen: 24 193.104.93.0/24 maxlen: 24 193.104.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9d:8a:d1:2b:ab:48:8b:5e:9e:6b:ee:34:9e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6 Validity Not Before: Jan 1 00:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37e4b3ede6f97a354cd69eaaaf209ce7344721b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d4:3b:b7:78:bf:2a:8b:07:0c:07:62:c8:66: 50:8c:8b:1e:88:b3:89:47:70:ba:54:be:3f:6d:81: 9a:f9:6f:09:da:58:0e:1c:6b:97:26:b3:b0:17:72: 9e:91:3a:e7:5c:a4:ce:48:41:3e:d2:32:31:3e:57: 37:84:03:7f:ff:b1:26:68:b9:6e:98:34:4f:00:69: a0:7c:4d:de:1b:bc:92:f3:1c:5f:47:ac:97:31:af: 04:f2:9d:a6:82:d6:e2:b1:21:17:64:1b:1b:04:92: aa:d8:37:c6:35:a9:64:b1:25:d5:a0:b4:16:21:9e: fd:18:27:72:f8:16:13:de:eb:13:81:ad:f5:7b:e7: 60:38:1c:88:a9:79:0c:82:db:ee:ed:0e:7e:89:46: 4a:1a:f7:24:80:b2:74:5a:4c:8e:33:5e:40:7e:80: d9:21:83:d9:cf:e0:bc:94:6e:90:02:3b:3b:a3:1f: 83:34:fe:9b:61:a9:9a:c9:a2:a1:98:43:81:38:90: c1:d9:de:de:27:1e:72:42:50:3c:61:a6:b0:fa:53: 0e:fa:a2:05:7b:20:b2:3d:c0:1b:4d:81:a0:e6:ba: f1:77:4a:2f:73:27:a2:12:45:0f:46:35:81:e0:b1: 34:6d:2e:87:21:f7:2e:fe:27:2e:ff:62:a4:da:66: ae:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E4:B3:ED:E6:F9:7A:35:4C:D6:9E:AA:AF:20:9C:E7:34:47:21:B5 X509v3 Authority Key Identifier: keyid:3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/N-Sz7eb5ejVM1p6qryCc5zRHIbU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.76.0/24 193.104.80.0/24 193.104.93.0-193.104.94.255 Signature Algorithm: sha256WithRSAEncryption bb:3b:d2:72:a2:ea:b9:03:24:d6:f5:99:08:b4:b2:d4:75:f4: 80:f6:1f:62:50:e0:3f:4b:79:6a:5d:31:cb:43:4a:96:c2:ae: 51:11:b9:37:d4:cb:39:41:19:c9:b9:08:59:50:64:1a:7c:e8: b3:be:df:ad:a8:2a:a7:3c:02:4c:bb:08:01:83:86:be:70:bc: 7e:aa:c1:8a:bd:33:47:3b:ed:2a:bf:e6:8c:93:6f:03:01:cc: 45:c3:4b:50:34:35:63:66:c4:13:35:3f:56:76:db:65:dc:a5: 4d:52:f5:84:6a:b5:63:43:59:4c:2c:f0:c4:61:c4:1e:c8:01: 60:58:c0:40:4e:8b:3c:70:bf:ec:47:5b:91:12:aa:33:85:35: 8b:ed:1a:b0:76:7d:3f:e3:bf:84:f2:8a:02:14:a1:c1:e1:63: dd:23:a5:38:1c:8e:a2:e8:26:58:f7:8f:06:30:89:9e:3f:7a: 77:39:2a:fb:3e:ba:cf:b2:e2:fb:5f:65:27:0b:38:51:a4:79: cb:8b:13:a6:d4:5e:26:4f:b7:0f:8a:07:e0:2b:7e:f5:07:12: 8e:77:4d:ff:b1:07:9a:c8:c5:f0:ca:97:a1:f3:dc:4e:b4:dc: 18:e3:f7:50:db:5f:16:35:93:42:5f:6e:db:8b:cd:60:b0:2b: 47:a6:32:70 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt2652K0SurSItenmvuNJ7BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNGNmODgxNzc0NDJhNTRmMzIxYjhmYTgwYjZjZjVkZjQw NGNmZjYwHhcNMjYwMTAxMDAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2U0YjNlZGU2Zjk3YTM1NGNkNjllYWFhZjIwOWNlNzM0NDcyMWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidQ7t3i/KosHDAdiyGZQjIseiLOJ R3C6VL4/bYGa+W8J2lgOHGuXJrOwF3KekTrnXKTOSEE+0jIxPlc3hAN//7EmaLlu mDRPAGmgfE3eG7yS8xxfR6yXMa8E8p2mgtbisSEXZBsbBJKq2DfGNalksSXVoLQW IZ79GCdy+BYT3usTga31e+dgOByIqXkMgtvu7Q5+iUZKGvckgLJ0WkyOM15AfoDZ IYPZz+C8lG6QAjs7ox+DNP6bYamayaKhmEOBOJDB2d7eJx5yQlA8Yaaw+lMO+qIF eyCyPcAbTYGg5rrxd0ovcyeiEkUPRjWB4LE0bS6HIfcu/icu/2Kk2maupwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFDfks+3m+Xo1TNaeqq8gnOc0RyG1MB8GA1UdIwQY MBaAFDxM+IF3RCpU8yG4+oC2z130BM/2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEV6NGdYZEVLbFR6SWJqNmdMYlBYZlFFel9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zYTQwYzAtMjQ3NS00ODE0LTg1NTkt NzAwZTMwMjdmNjIzLzEvTi1TejdlYjVlalZNMXA2cXJ5Q2M1elJISWJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8zYTQwYzAtMjQ3NS00ODE0LTg1NTktNzAwZTMwMjdmNjIz LzEvUEV6NGdYZEVLbFR6SWJqNmdMYlBYZlFFel9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAwWhMAwQA wWhQMAwDBADBaF0DBADBaF4wDQYJKoZIhvcNAQELBQADggEBALs70nKi6rkDJNb1 mQi0stR19ID2H2JQ4D9LeWpdMctDSpbCrlERuTfUyzlBGcm5CFlQZBp86LO+362o Kqc8Aky7CAGDhr5wvH6qwYq9M0c77Sq/5oyTbwMBzEXDS1A0NWNmxBM1P1Z222Xc pU1S9YRqtWNDWUws8MRhxB7IAWBYwEBOizxwv+xHW5ESqjOFNYvtGrB2fT/jv4Ty igIUocHhY90jpTgcjqLoJlj3jwYwiZ4/enc5Kvs+us+y4vtfZScLOFGkecuLE6bU XiZPtw+KB+ArfvUHEo53Tf+xB5rIxfDKl6Hz3E603Bjj91DbXxY1k0JfbtuLzWCw K0emMnA= -----END CERTIFICATE-----Generated at Mon Jan 26 13:10:47 2026 by rpki-client