This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/7bvtPGLStjnkciwxFvPTYgFWfQk.roa File: 7bvtPGLStjnkciwxFvPTYgFWfQk.roa (raw, json) Hash identifier: vjeKrroXH7m1N2sP7ErrsCURI+wiwxbcMJEOYB8cjgg= Subject key identifier: ED:BB:ED:3C:62:D2:B6:39:E4:72:2C:31:16:F3:D3:62:01:56:7D:09 Certificate issuer: /CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937 Certificate serial: 019B7EA4C21FE6957073570C5021EB8D06BF Authority key identifier: 3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/7bvtPGLStjnkciwxFvPTYgFWfQk.roa Signing time: Fri 02 Jan 2026 12:18:05 +0000 ROA not before: Fri 02 Jan 2026 12:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5089 IP address blocks: 193.238.234.0/24 maxlen: 24 193.238.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:c2:1f:e6:95:70:73:57:0c:50:21:eb:8d:06:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937 Validity Not Before: Jan 2 12:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edbbed3c62d2b639e4722c3116f3d36201567d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:24:81:a9:59:6d:7e:20:84:a7:75:3a:38:87: 44:c8:15:4d:00:6a:6b:fa:bd:16:bf:de:ed:1e:fb: bf:b0:23:7c:91:c2:6a:3e:74:bd:f3:9a:c3:e6:20: 8b:3d:1d:2a:94:da:b8:03:70:b4:29:b4:83:0f:a3: c1:f9:32:5a:72:cd:ca:77:b3:f3:3c:00:13:40:0a: f8:cb:99:d0:eb:63:eb:17:fd:f1:e0:df:83:80:07: 02:f5:64:f4:72:65:46:55:4f:a3:2b:13:20:c3:71: 18:c0:2c:6a:ba:9d:ee:31:56:80:fc:c2:f1:41:65: 48:6e:a6:b4:c9:79:f2:cb:b6:40:aa:1a:f6:f1:17: 37:e1:c9:4d:5c:64:9d:33:79:0d:2b:91:13:bd:0e: 8d:45:ec:5f:53:13:37:ae:38:f4:87:41:cd:17:62: 46:7d:88:b2:97:c4:d7:c1:c8:4a:5d:fc:20:61:04: 66:ce:2e:c0:f2:1a:33:b1:2d:64:17:69:60:c2:6e: cb:62:26:e5:db:33:9a:f9:42:23:6e:83:9e:2c:50: 35:56:f3:73:75:4c:08:e6:44:9d:89:4a:97:38:cf: c3:89:9d:5c:72:f2:61:c7:3f:fa:79:06:f4:f5:d0: 2c:c1:6a:9c:0f:d0:fb:fa:a3:6c:5e:82:a1:e2:f6: 7a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:BB:ED:3C:62:D2:B6:39:E4:72:2C:31:16:F3:D3:62:01:56:7D:09 X509v3 Authority Key Identifier: keyid:3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/7bvtPGLStjnkciwxFvPTYgFWfQk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.238.234.0/23 Signature Algorithm: sha256WithRSAEncryption 82:48:c0:28:3e:a0:b2:3d:c1:6a:5d:06:0c:48:8c:e1:a0:4c: 5a:de:46:b0:46:80:02:ad:44:5c:8c:67:05:e1:34:c3:38:56: 01:34:03:0a:81:46:20:83:60:1b:99:c4:4e:cc:d6:5d:26:68: 5b:48:e6:8d:43:d3:c6:d9:ff:b0:02:83:9b:56:fa:b5:b1:68: f7:5b:b8:ce:43:fa:a6:44:3a:62:25:28:50:c2:98:e0:97:9f: c6:34:f9:2b:43:83:22:0a:fb:93:6a:3a:fe:fe:87:e7:cf:d7: 4a:01:f1:cc:7b:47:3e:9d:c8:1e:3b:d5:5d:eb:78:a0:29:ef: 47:1b:88:7e:90:cd:be:6f:0d:8d:c0:b6:b3:e8:5a:45:0f:8d: 17:03:5d:26:dd:38:85:0b:8e:59:36:fd:e9:29:72:08:00:d1: 42:a6:bf:87:aa:e4:0d:bd:1b:b5:ef:32:86:02:36:05:f1:5c: ad:77:a1:08:6e:25:5b:49:55:e2:bc:91:91:65:5f:b2:2b:f3: a9:4b:ec:83:54:24:9f:4b:a5:e9:a6:9e:cc:c0:2b:fd:e2:a6: 25:ab:dc:be:e8:3e:79:73:bb:80:e8:f1:7b:82:dc:4e:91:96: 4f:69:ea:27:0c:1c:22:ea:60:f9:bd:9a:27:61:cf:22:ca:0c: 5c:f5:53:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pMIf5pVwc1cMUCHrjQa/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNDI3NjM3M2IwNDBmYTlhYzc3ZTU2NmM1YjZjZGYzNWI1 M2I5MzcwHhcNMjYwMTAyMTIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGJiZWQzYzYyZDJiNjM5ZTQ3MjJjMzExNmYzZDM2MjAxNTY3ZDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCSBqVltfiCEp3U6OIdEyBVNAGpr +r0Wv97tHvu/sCN8kcJqPnS985rD5iCLPR0qlNq4A3C0KbSDD6PB+TJacs3Kd7Pz PAATQAr4y5nQ62PrF/3x4N+DgAcC9WT0cmVGVU+jKxMgw3EYwCxqup3uMVaA/MLx QWVIbqa0yXnyy7ZAqhr28Rc34clNXGSdM3kNK5ETvQ6NRexfUxM3rjj0h0HNF2JG fYiyl8TXwchKXfwgYQRmzi7A8hozsS1kF2lgwm7LYibl2zOa+UIjboOeLFA1VvNz dUwI5kSdiUqXOM/DiZ1ccvJhxz/6eQb09dAswWqcD9D7+qNsXoKh4vZ6LwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO277Txi0rY55HIsMRbz02IBVn0JMB8GA1UdIwQY MBaAFD1Cdjc7BA+prHflZsW2zfNbU7k3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFVKMk56c0VENm1zZC1WbXhiYk44MXRUdVRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9hMTlkNTEtMDdlNS00ZGI1LTlkMGUt NjZkMzE5OGJmMWEyLzEvN2J2dFBHTFN0am5rY2l3eEZ2UFRZZ0ZXZlFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9hMTlkNTEtMDdlNS00ZGI1LTlkMGUtNjZkMzE5OGJmMWEy LzEvUFVKMk56c0VENm1zZC1WbXhiYk44MXRUdVRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwe7qMA0G CSqGSIb3DQEBCwUAA4IBAQCCSMAoPqCyPcFqXQYMSIzhoExa3kawRoACrURcjGcF 4TTDOFYBNAMKgUYgg2AbmcROzNZdJmhbSOaNQ9PG2f+wAoObVvq1sWj3W7jOQ/qm RDpiJShQwpjgl5/GNPkrQ4MiCvuTajr+/ofnz9dKAfHMe0c+ncgeO9Vd63igKe9H G4h+kM2+bw2NwLaz6FpFD40XA10m3TiFC45ZNv3pKXIIANFCpr+HquQNvRu17zKG AjYF8Vytd6EIbiVbSVXivJGRZV+yK/OpS+yDVCSfS6Xppp7MwCv94qYlq9y+6D55 c7uA6PF7gtxOkZZPaeonDBwi6mD5vZonYc8iygxc9VPf -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:40 2026 by rpki-client