This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/p7Zx4z15h2rwCPWQo8voZZd_wjI.roa File: p7Zx4z15h2rwCPWQo8voZZd_wjI.roa (raw, json) Hash identifier: BFscIk+0smXBa3HZBMbzUtXRmH73v7OJ+r4F7QoLTTY= Subject key identifier: A7:B6:71:E3:3D:79:87:6A:F0:08:F5:90:A3:CB:E8:65:97:7F:C2:32 Certificate issuer: /CN=6d7b79604af1f3908f4817956626353ee6ffc1f4 Certificate serial: 019B7E3772B1D079B9AE46F71495C6E659C1 Authority key identifier: 6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/p7Zx4z15h2rwCPWQo8voZZd_wjI.roa Signing time: Fri 02 Jan 2026 10:18:41 +0000 ROA not before: Fri 02 Jan 2026 10:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44558 IP address blocks: 31.209.96.0/20 maxlen: 20 185.37.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:72:b1:d0:79:b9:ae:46:f7:14:95:c6:e6:59:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d7b79604af1f3908f4817956626353ee6ffc1f4 Validity Not Before: Jan 2 10:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7b671e33d79876af008f590a3cbe865977fc232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:33:22:ca:5c:1f:71:f2:a9:8b:e8:39:b7:24: de:a8:67:f3:9e:3a:7e:07:c2:61:0f:0f:6d:fb:e6: 70:b5:37:68:78:83:8e:86:54:7c:cb:44:ba:ae:32: b9:d8:e7:77:e8:34:b2:c5:f5:6d:13:ba:51:2f:c6: 70:73:a9:d3:d4:03:28:cc:b2:27:5b:8a:bb:2f:8d: 85:46:6e:19:12:32:60:fd:80:79:53:b9:2f:44:30: 5a:28:0e:ec:05:76:c6:5b:df:b6:72:96:40:97:19: 61:c5:1c:48:41:12:2a:42:ef:9b:39:b6:f5:d9:8a: a2:44:e7:c1:64:21:d2:6d:e9:3d:f1:69:9c:a9:27: f4:77:08:1b:08:78:23:59:4c:d8:ab:7f:5c:94:42: 86:6b:51:ba:32:0c:45:47:2e:fb:2c:3d:23:30:1f: 8b:ac:ef:f6:68:76:18:46:8a:7e:02:5c:a8:4a:a1: c3:a9:ff:e4:6b:8b:24:c5:90:98:44:3a:08:01:79: c1:6b:41:a3:2f:d6:6a:36:2d:09:a7:b1:3b:25:f3: 1f:ec:26:35:a1:47:cd:35:6c:46:58:89:29:07:81: e2:a6:dd:87:95:5b:38:e6:f7:12:09:e0:c9:1d:07: eb:ac:b7:15:e8:f1:c1:e9:a9:ae:84:c7:4b:c7:59: a9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B6:71:E3:3D:79:87:6A:F0:08:F5:90:A3:CB:E8:65:97:7F:C2:32 X509v3 Authority Key Identifier: keyid:6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/p7Zx4z15h2rwCPWQo8voZZd_wjI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.209.96.0/20 185.37.184.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:39:01:73:36:70:4c:21:e9:86:76:b5:85:f0:82:99:39:a7: 44:fb:42:29:5e:8c:f2:38:9d:db:8b:24:a5:f9:92:a3:8a:0e: b3:f4:d2:b4:d5:d2:f2:60:c3:20:78:74:0e:bd:48:9d:e1:37: c2:f4:4e:1e:6b:ec:aa:ce:3b:82:42:98:7e:71:a8:79:db:74: d4:10:bc:9d:4f:f6:a4:3d:27:5e:f9:80:1e:e0:b6:76:62:aa: 57:ce:6e:51:44:b1:c2:f3:21:20:c1:cf:b3:c7:df:fb:9d:1e: b8:f2:8e:86:e7:3e:58:d6:29:50:b4:9b:02:52:40:bc:88:a5: 58:97:d8:da:16:ae:0d:4e:fe:d5:e9:e9:9e:1e:38:c0:b0:32: 28:8f:64:26:7e:da:63:b7:ea:ff:13:4b:80:7f:b4:a3:99:20: 4c:1c:42:2b:a2:2d:b5:f5:81:e8:7c:41:d6:4c:29:91:61:19: 34:82:cc:31:5f:eb:66:67:34:16:83:80:43:3a:c1:72:46:67: c0:f8:19:4b:20:6f:a5:fb:1b:8f:f9:16:23:77:20:6d:92:1d: fa:98:0c:01:af:bd:f0:c1:ca:86:31:53:4e:45:5c:37:9e:a1: 50:7f:64:a7:57:39:7e:78:69:c6:7d:28:f0:2f:29:ad:91:75: 02:87:86:d4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N3Kx0Hm5rkb3FJXG5lnBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkN2I3OTYwNGFmMWYzOTA4ZjQ4MTc5NTY2MjYzNTNlZTZm ZmMxZjQwHhcNMjYwMTAyMTAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2I2NzFlMzNkNzk4NzZhZjAwOGY1OTBhM2NiZTg2NTk3N2ZjMjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDMiylwfcfKpi+g5tyTeqGfznjp+ B8JhDw9t++ZwtTdoeIOOhlR8y0S6rjK52Od36DSyxfVtE7pRL8Zwc6nT1AMozLIn W4q7L42FRm4ZEjJg/YB5U7kvRDBaKA7sBXbGW9+2cpZAlxlhxRxIQRIqQu+bObb1 2YqiROfBZCHSbek98WmcqSf0dwgbCHgjWUzYq39clEKGa1G6MgxFRy77LD0jMB+L rO/2aHYYRop+AlyoSqHDqf/ka4skxZCYRDoIAXnBa0GjL9ZqNi0Jp7E7JfMf7CY1 oUfNNWxGWIkpB4Hipt2HlVs45vcSCeDJHQfrrLcV6PHB6amuhMdLx1mpmwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKe2ceM9eYdq8Aj1kKPL6GWXf8IyMB8GA1UdIwQY MBaAFG17eWBK8fOQj0gXlWYmNT7m/8H0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlh0NVlFcng4NUNQU0JlVlppWTFQdWJfd2ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85M2E3MzQtM2NiNy00MTJjLWI0NWYt Mjc1YjZlOWZiYzYzLzEvcDdaeDR6MTVoMnJ3Q1BXUW84dm9aWmRfd2pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85M2E3MzQtM2NiNy00MTJjLWI0NWYtMjc1YjZlOWZiYzYz LzEvYlh0NVlFcng4NUNQU0JlVlppWTFQdWJfd2ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEH9FgAwQC uSW4MA0GCSqGSIb3DQEBCwUAA4IBAQBfOQFzNnBMIemGdrWF8IKZOadE+0IpXozy OJ3biySl+ZKjig6z9NK01dLyYMMgeHQOvUid4TfC9E4ea+yqzjuCQph+cah523TU ELydT/akPSde+YAe4LZ2YqpXzm5RRLHC8yEgwc+zx9/7nR648o6G5z5Y1ilQtJsC UkC8iKVYl9jaFq4NTv7V6emeHjjAsDIoj2Qmftpjt+r/E0uAf7SjmSBMHEIroi21 9YHofEHWTCmRYRk0gswxX+tmZzQWg4BDOsFyRmfA+BlLIG+l+xuP+RYjdyBtkh36 mAwBr73wwcqGMVNORVw3nqFQf2SnVzl+eGnGfSjwLymtkXUCh4bU -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:21 2026 by rpki-client