This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/7dNSDdB7_w97DhUoDrNZCXrX7E0.roa File: 7dNSDdB7_w97DhUoDrNZCXrX7E0.roa (raw, json) Hash identifier: RIHs9Q0Oo6t9P10Krf7jjUML9y+2LWdE7MwzxZ7TTvM= Subject key identifier: ED:D3:52:0D:D0:7B:FF:0F:7B:0E:15:28:0E:B3:59:09:7A:D7:EC:4D Certificate issuer: /CN=c20897c1dbd606929137e672bad0c1f67e637d16 Certificate serial: 019B783514B5F89370EEC6559C7A5F88B08F Authority key identifier: C2:08:97:C1:DB:D6:06:92:91:37:E6:72:BA:D0:C1:F6:7E:63:7D:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/7dNSDdB7_w97DhUoDrNZCXrX7E0.roa Signing time: Thu 01 Jan 2026 06:18:23 +0000 ROA not before: Thu 01 Jan 2026 06:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 193.188.240.0/24 maxlen: 24 193.188.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:14:b5:f8:93:70:ee:c6:55:9c:7a:5f:88:b0:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c20897c1dbd606929137e672bad0c1f67e637d16 Validity Not Before: Jan 1 06:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edd3520dd07bff0f7b0e15280eb359097ad7ec4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c0:86:03:0e:d8:60:4d:ce:0e:4d:e6:74:c2: f9:71:18:b0:5a:7b:39:5c:87:66:a4:50:77:6b:2c: 25:d6:c8:57:29:e5:75:f9:73:e9:e6:c6:1a:ad:5d: 83:4e:bc:00:71:6e:1f:1d:cc:a5:0e:0d:4a:0a:9e: 7e:87:2f:a4:d6:44:b9:1c:d0:36:b4:bb:e8:70:71: 9d:cc:59:fb:b7:1a:82:f2:ec:c1:3b:4c:0f:bf:3c: 74:25:72:f3:22:35:9b:86:2d:4e:1a:07:26:5d:07: f3:93:bc:e3:b1:eb:34:0f:22:41:3b:bc:5e:bc:c3: 52:95:94:c3:12:9e:07:8f:1a:66:84:f8:5a:97:33: 6f:26:89:d8:f8:98:85:62:81:7f:a9:30:d6:28:9b: 40:c0:9e:af:bd:74:5b:49:e7:06:dd:c5:fe:cc:21: 52:a8:7c:a7:b6:78:91:07:e1:79:9b:22:1a:af:3f: 57:a8:3b:26:ef:c1:39:be:36:73:a2:f1:d8:0a:e2: fa:61:75:e1:cd:47:52:59:ae:94:5e:53:32:16:00: f0:dc:2e:42:12:c3:f3:a6:15:ed:f5:c1:bc:f6:24: 56:72:50:3e:14:0d:25:20:8f:78:7d:f6:18:f8:24: 79:7c:56:73:e5:ce:fb:d1:39:b7:07:65:5b:52:61: 99:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D3:52:0D:D0:7B:FF:0F:7B:0E:15:28:0E:B3:59:09:7A:D7:EC:4D X509v3 Authority Key Identifier: keyid:C2:08:97:C1:DB:D6:06:92:91:37:E6:72:BA:D0:C1:F6:7E:63:7D:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/7dNSDdB7_w97DhUoDrNZCXrX7E0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.188.240.0/24 193.188.245.0/24 Signature Algorithm: sha256WithRSAEncryption 24:85:28:b3:3d:a4:2d:57:fd:2a:90:34:5f:dc:4c:bd:e7:73: df:77:b8:bc:38:5c:2c:74:da:c2:f1:99:a9:72:94:38:81:a7: e3:83:72:e7:4a:ee:6e:be:89:6d:d7:21:6b:64:42:32:50:5e: 0d:dd:3d:cd:db:9a:d7:53:c6:7b:64:53:54:4c:bb:c4:a6:68: ba:bb:70:c9:d8:8f:46:d0:be:36:a2:03:2d:8d:f3:5c:08:88: 16:58:f2:db:14:d7:6e:8c:8d:02:01:bb:b6:85:6d:90:25:63: fc:2d:02:4d:79:35:95:65:7e:6a:0f:c8:17:9a:d7:a5:36:ae: 8d:9e:46:5e:8e:fa:9c:b7:c8:94:48:e3:37:87:b8:a3:2e:67: ae:cd:ba:cb:39:57:a3:02:2d:2b:42:52:ba:87:9e:ba:b9:1a: be:35:60:d1:ac:27:3f:d5:6a:21:20:d0:47:ab:96:6a:ca:63: 45:76:a0:76:59:a1:ea:d3:88:0a:7c:a3:b8:0e:4b:50:10:db: c5:f8:41:e7:e9:e4:4b:5c:fc:60:46:2a:42:70:95:11:8c:0e: f5:47:c7:c1:6b:32:55:54:a6:1d:6c:e9:4f:b6:a5:c2:a4:20: 0a:57:5b:31:fc:b9:ac:4d:b6:00:d7:02:8e:e2:dd:89:1c:00: 46:f0:8d:ac -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NRS1+JNw7sZVnHpfiLCPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMDg5N2MxZGJkNjA2OTI5MTM3ZTY3MmJhZDBjMWY2N2U2 MzdkMTYwHhcNMjYwMTAxMDYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGQzNTIwZGQwN2JmZjBmN2IwZTE1MjgwZWIzNTkwOTdhZDdlYzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMCGAw7YYE3ODk3mdML5cRiwWns5 XIdmpFB3aywl1shXKeV1+XPp5sYarV2DTrwAcW4fHcylDg1KCp5+hy+k1kS5HNA2 tLvocHGdzFn7txqC8uzBO0wPvzx0JXLzIjWbhi1OGgcmXQfzk7zjses0DyJBO7xe vMNSlZTDEp4HjxpmhPhalzNvJonY+JiFYoF/qTDWKJtAwJ6vvXRbSecG3cX+zCFS qHyntniRB+F5myIarz9XqDsm78E5vjZzovHYCuL6YXXhzUdSWa6UXlMyFgDw3C5C EsPzphXt9cG89iRWclA+FA0lII94ffYY+CR5fFZz5c770Tm3B2VbUmGZowIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFO3TUg3Qe/8Pew4VKA6zWQl61+xNMB8GA1UdIwQY MBaAFMIIl8Hb1gaSkTfmcrrQwfZ+Y30WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2dpWHdkdldCcEtSTi1aeXV0REI5bjVqZlJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8xZjhjYjQtMTcxMi00ZTUzLThkMjQt YzkxYmY1MDEwNGI5LzEvN2ROU0RkQjdfdzk3RGhVb0RyTlpDWHJYN0UwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8xZjhjYjQtMTcxMi00ZTUzLThkMjQtYzkxYmY1MDEwNGI5 LzEvd2dpWHdkdldCcEtSTi1aeXV0REI5bjVqZlJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwbzwAwQA wbz1MA0GCSqGSIb3DQEBCwUAA4IBAQAkhSizPaQtV/0qkDRf3Ey953Pfd7i8OFws dNrC8ZmpcpQ4gafjg3LnSu5uvolt1yFrZEIyUF4N3T3N25rXU8Z7ZFNUTLvEpmi6 u3DJ2I9G0L42ogMtjfNcCIgWWPLbFNdujI0CAbu2hW2QJWP8LQJNeTWVZX5qD8gX mtelNq6NnkZejvqct8iUSOM3h7ijLmeuzbrLOVejAi0rQlK6h566uRq+NWDRrCc/ 1WohINBHq5ZqymNFdqB2WaHq04gKfKO4DktQENvF+EHn6eRLXPxgRipCcJURjA71 R8fBazJVVKYdbOlPtqXCpCAKV1sx/LmsTbYA1wKO4t2JHABG8I2s -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:16 2026 by rpki-client