This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P7s6SkBNrB3yuV7739uVskU8ZG8.roa File: P7s6SkBNrB3yuV7739uVskU8ZG8.roa (raw, json) Hash identifier: ZmJidlTbaMdMKLRXvEzc/VS03klVrtlteUmPhSejjJY= Subject key identifier: 3F:BB:3A:4A:40:4D:AC:1D:F2:B9:5E:FB:DF:DB:95:B2:45:3C:64:6F Certificate issuer: /CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e Certificate serial: 019B7BA35783A10F2CA7123AECDF3D72A230 Authority key identifier: 3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P7s6SkBNrB3yuV7739uVskU8ZG8.roa Signing time: Thu 01 Jan 2026 22:17:40 +0000 ROA not before: Thu 01 Jan 2026 22:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56411 IP address blocks: 193.46.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:57:83:a1:0f:2c:a7:12:3a:ec:df:3d:72:a2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e Validity Not Before: Jan 1 22:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fbb3a4a404dac1df2b95efbdfdb95b2453c646f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:35:10:cd:46:2f:9a:96:03:7e:d3:d8:b7:3e: 04:61:d2:2b:70:10:b0:6f:08:37:5a:4a:0e:8c:eb: 5a:eb:98:36:87:f9:8a:15:11:c4:06:04:39:76:57: 1f:02:34:99:a4:35:36:c2:d5:a9:a7:cb:43:f4:0a: 7f:a5:0a:31:a0:20:89:d6:56:85:39:80:fb:f6:b6: f3:6d:cb:e9:f7:53:ff:6d:b5:cc:fb:ef:6a:fb:12: 62:da:8e:7b:94:f0:e3:46:06:6b:e0:31:fc:64:ea: 9e:72:ca:23:8c:81:24:cf:75:79:79:74:19:91:68: a3:dd:f9:56:a8:90:9d:eb:2f:8d:55:c0:3e:47:df: 34:c0:85:17:0b:c2:59:7d:d4:f3:be:c7:96:30:9a: 2c:ff:ae:a8:1d:02:15:f2:ae:f9:ea:71:b1:a1:92: de:cc:1f:e9:66:2f:5f:46:5f:cc:5f:95:9a:b4:18: bf:15:20:f2:5f:4a:42:2e:dc:16:4b:d9:aa:00:ee: b8:7f:24:b3:cc:c1:36:a5:32:eb:8c:c9:66:de:a5: 80:f9:87:62:b5:c0:4f:8d:19:8c:98:5f:bb:66:57: ca:bd:8c:6d:bf:53:cf:cc:e9:f2:3e:9c:49:eb:5a: 2c:42:7a:14:05:6a:a6:52:e6:97:4a:8c:a0:c2:0f: a6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:BB:3A:4A:40:4D:AC:1D:F2:B9:5E:FB:DF:DB:95:B2:45:3C:64:6F X509v3 Authority Key Identifier: keyid:3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P7s6SkBNrB3yuV7739uVskU8ZG8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.62.0/24 Signature Algorithm: sha256WithRSAEncryption b1:4f:69:fe:bc:68:56:47:aa:05:5b:ca:2f:e6:6e:f1:55:3c: 36:e9:9c:e1:60:05:18:2f:4c:ce:46:e3:42:f9:04:e7:05:86: fe:7d:97:4d:35:91:32:69:d4:cb:19:d5:43:a2:48:83:83:02: 6c:fd:49:d2:01:fd:ab:11:99:72:5a:74:83:47:80:dd:58:2c: 40:67:46:c8:e1:e5:c1:7b:33:70:44:34:94:3c:7a:28:e5:6f: 37:1f:4c:b5:46:87:6d:35:f1:ea:df:0c:be:8f:c8:d7:e0:9c: 1a:8f:87:d4:d8:26:a2:72:e2:3d:70:0e:69:b4:6e:85:39:b6: 41:e0:53:9d:67:ee:0b:44:88:1a:12:30:32:f4:a5:66:42:85: d0:cc:d6:88:37:65:7e:ad:a7:f5:e8:bf:99:00:78:3e:83:ef: 3c:05:db:63:7a:1d:b4:4e:39:08:80:73:f6:d0:0b:b5:23:2d: cc:ae:cc:b3:7a:03:c5:ef:e9:3d:44:0b:5e:85:27:e9:f8:10: 7c:e7:b3:ec:01:ee:f8:5e:69:4d:54:e3:03:cf:09:9d:92:f0: e9:5e:e0:c6:d1:84:00:32:ef:7e:8a:9e:4a:77:ba:83:f6:a3: 48:18:3c:15:21:b6:91:b2:4a:3b:2c:62:77:7e:1b:eb:e8:e5: 66:06:6a:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o1eDoQ8spxI67N89cqIwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmOTY3MDNmMzBlMjA5OWEzZDkwMDZiZmE4NGU1YzZjNDg2 YThkMmUwHhcNMjYwMTAxMjIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmJiM2E0YTQwNGRhYzFkZjJiOTVlZmJkZmRiOTViMjQ1M2M2NDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujUQzUYvmpYDftPYtz4EYdIrcBCw bwg3WkoOjOta65g2h/mKFRHEBgQ5dlcfAjSZpDU2wtWpp8tD9Ap/pQoxoCCJ1laF OYD79rbzbcvp91P/bbXM++9q+xJi2o57lPDjRgZr4DH8ZOqecsojjIEkz3V5eXQZ kWij3flWqJCd6y+NVcA+R980wIUXC8JZfdTzvseWMJos/66oHQIV8q756nGxoZLe zB/pZi9fRl/MX5WatBi/FSDyX0pCLtwWS9mqAO64fySzzME2pTLrjMlm3qWA+Ydi tcBPjRmMmF+7ZlfKvYxtv1PPzOnyPpxJ61osQnoUBWqmUuaXSoygwg+mewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD+7OkpATawd8rle+9/blbJFPGRvMB8GA1UdIwQY MBaAFD+WcD8w4gmaPZAGv6hOXGxIao0uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MzY0N2EtNDRlNS00MDQ5LWI4Nzkt OTMzN2YzNzQxNjhlLzEvUDdzNlNrQk5yQjN5dVY3NzM5dVZza1U4Wkc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC84MzY0N2EtNDRlNS00MDQ5LWI4NzktOTMzN2YzNzQxNjhl LzEvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS4+MA0G CSqGSIb3DQEBCwUAA4IBAQCxT2n+vGhWR6oFW8ov5m7xVTw26ZzhYAUYL0zORuNC +QTnBYb+fZdNNZEyadTLGdVDokiDgwJs/UnSAf2rEZlyWnSDR4DdWCxAZ0bI4eXB ezNwRDSUPHoo5W83H0y1RodtNfHq3wy+j8jX4Jwaj4fU2CaicuI9cA5ptG6FObZB 4FOdZ+4LRIgaEjAy9KVmQoXQzNaIN2V+raf16L+ZAHg+g+88Bdtjeh20TjkIgHP2 0Au1Iy3MrsyzegPF7+k9RAtehSfp+BB857PsAe74XmlNVOMDzwmdkvDpXuDG0YQA Mu9+ip5Kd7qD9qNIGDwVIbaRsko7LGJ3fhvr6OVmBmrQ -----END CERTIFICATE-----Generated at Sun Jan 25 21:27:47 2026 by rpki-client