This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/c7lZje9uN1P8Z0Pai2JJbiwVpOQ.roa File: c7lZje9uN1P8Z0Pai2JJbiwVpOQ.roa (raw, json) Hash identifier: qt+6d63QI9K54qUjpXO2acJvethD5zarG3xunh8N+xA= Subject key identifier: 73:B9:59:8D:EF:6E:37:53:FC:67:43:DA:8B:62:49:6E:2C:15:A4:E4 Certificate issuer: /CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d Certificate serial: 019B797EFFF0622912B4396578EF528586E4 Authority key identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/c7lZje9uN1P8Z0Pai2JJbiwVpOQ.roa Signing time: Thu 01 Jan 2026 12:18:44 +0000 ROA not before: Thu 01 Jan 2026 12:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6900 IP address blocks: 141.93.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ff:f0:62:29:12:b4:39:65:78:ef:52:85:86:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d Validity Not Before: Jan 1 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73b9598def6e3753fc6743da8b62496e2c15a4e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a7:db:6e:63:d7:b0:c7:8e:4a:e9:59:7f:43: e0:c0:32:2b:73:1a:35:a8:f4:99:4c:60:81:6c:f9: 9c:22:0d:45:a2:ec:44:6f:1a:37:2d:9e:41:14:35: f2:cc:97:e5:27:28:3e:93:19:c1:2f:c2:ca:3f:18: c7:4a:b1:6e:87:ff:6a:ba:ca:f2:ca:62:bb:97:c2: 8b:fb:8e:bc:cd:1e:ec:20:5c:20:c7:3d:e7:16:bc: bd:ac:29:9a:15:c7:54:c6:25:e7:f1:32:eb:24:56: 06:7c:e2:f1:0f:93:c7:a6:3a:c2:ef:7a:04:82:36: f3:9f:34:30:25:4a:65:3d:fc:86:e2:ff:ff:46:19: 0a:90:3c:22:fd:2c:6f:e3:88:a9:13:c5:b5:6a:e4: 10:f8:ff:23:82:6f:35:d1:ef:7c:bd:3f:d3:95:13: b1:6c:20:83:46:8e:a9:8c:9a:28:1d:85:08:51:ad: 28:c7:5e:f0:74:b6:ee:1e:c3:97:e8:6a:6d:4d:ef: 45:d3:21:76:84:61:32:cd:7c:a6:40:4e:59:1c:f2: 6f:7a:02:e9:4e:37:b4:24:7d:04:de:48:ee:de:ce: 17:ed:1e:0f:4e:c1:f4:ca:6b:14:d5:f3:7b:05:b7: 83:d2:fb:0f:1d:f0:0d:42:ea:2e:f1:a1:09:56:ca: 3c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B9:59:8D:EF:6E:37:53:FC:67:43:DA:8B:62:49:6E:2C:15:A4:E4 X509v3 Authority Key Identifier: keyid:2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/c7lZje9uN1P8Z0Pai2JJbiwVpOQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.93.23.0/24 Signature Algorithm: sha256WithRSAEncryption 50:3b:6b:d1:f3:92:15:05:fc:24:3a:41:79:ac:2c:33:9c:58: 43:60:c8:ec:ee:81:86:66:a2:c7:ba:4b:7b:51:df:a4:ba:f8: 09:bb:70:71:81:6c:e2:30:c6:6b:65:5f:1c:35:64:a1:36:3f: 6a:d8:25:db:3a:4a:69:3b:b9:86:8c:4a:b2:dc:b7:13:7c:b8: 58:a8:b2:36:88:5a:58:05:06:5d:ce:c2:2d:1f:38:cc:c2:58: 4e:8b:6b:6e:55:74:dd:cb:1a:11:03:64:71:8c:72:40:c8:06: 47:8f:ab:61:1c:60:aa:76:8f:94:fd:02:d3:48:20:5d:7f:2e: ed:10:95:fd:63:36:67:d2:09:f2:48:92:5d:48:30:66:fc:a0: b1:0e:92:a2:bc:ca:24:40:6a:b8:ef:5e:98:c1:a8:cc:27:3d: 33:ac:c4:a7:32:95:bf:3f:ab:48:a3:d5:00:cb:4a:ff:62:80: 5e:a9:92:1c:06:a0:b2:ca:b3:5f:b8:ef:16:61:68:b8:57:74: bb:50:82:dc:5e:ef:c9:31:90:35:40:f9:b8:98:09:98:31:e8: 1a:7e:06:4d:20:bb:ad:b7:95:d1:ba:4a:4b:55:7f:de:5a:56: ec:92:2c:ca:ad:ab:2a:42:70:08:51:26:ae:a1:4c:d3:94:46: 10:6f:37:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fv/wYikStDlleO9ShYbkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMTE3YWRhM2NiOTUxNWE2ZDhhNmRjYzE1ZjJiMGIxYTdk OWJlMWQwHhcNMjYwMTAxMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2I5NTk4ZGVmNmUzNzUzZmM2NzQzZGE4YjYyNDk2ZTJjMTVhNGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqfbbmPXsMeOSulZf0PgwDIrcxo1 qPSZTGCBbPmcIg1FouxEbxo3LZ5BFDXyzJflJyg+kxnBL8LKPxjHSrFuh/9qusry ymK7l8KL+468zR7sIFwgxz3nFry9rCmaFcdUxiXn8TLrJFYGfOLxD5PHpjrC73oE gjbznzQwJUplPfyG4v//RhkKkDwi/Sxv44ipE8W1auQQ+P8jgm810e98vT/TlROx bCCDRo6pjJooHYUIUa0ox17wdLbuHsOX6GptTe9F0yF2hGEyzXymQE5ZHPJvegLp Tje0JH0E3kju3s4X7R4PTsH0ymsU1fN7BbeD0vsPHfANQuou8aEJVso8WwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHO5WY3vbjdT/GdD2otiSW4sFaTkMB8GA1UdIwQY MBaAFC8Reto8uVFabYptzBXysLGn2b4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhGNjJqeTVVVnB0aW0zTUZmS3dzYWZadmgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lZmY0NGQtMjRmZC00Mzg0LTk1MDct N2EwMzRkMTcwYjg1LzEvYzdsWmplOXVOMVA4WjBQYWkySkpiaXdWcE9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9lZmY0NGQtMjRmZC00Mzg0LTk1MDctN2EwMzRkMTcwYjg1 LzEvTHhGNjJqeTVVVnB0aW0zTUZmS3dzYWZadmgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjV0XMA0G CSqGSIb3DQEBCwUAA4IBAQBQO2vR85IVBfwkOkF5rCwznFhDYMjs7oGGZqLHukt7 Ud+kuvgJu3BxgWziMMZrZV8cNWShNj9q2CXbOkppO7mGjEqy3LcTfLhYqLI2iFpY BQZdzsItHzjMwlhOi2tuVXTdyxoRA2RxjHJAyAZHj6thHGCqdo+U/QLTSCBdfy7t EJX9YzZn0gnySJJdSDBm/KCxDpKivMokQGq4716YwajMJz0zrMSnMpW/P6tIo9UA y0r/YoBeqZIcBqCyyrNfuO8WYWi4V3S7UILcXu/JMZA1QPm4mAmYMegafgZNILut t5XRukpLVX/eWlbskizKrasqQnAIUSauoUzTlEYQbzcD -----END CERTIFICATE-----Generated at Sun Jan 25 10:31:41 2026 by rpki-client