This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/7Mj5v1lcOBzmcBBC8jLwVKnmF6E.roa File: 7Mj5v1lcOBzmcBBC8jLwVKnmF6E.roa (raw, json) Hash identifier: FZGMBdbWDI4SBVgHGU6EFIDpQ6waV160tdsD6LVMmXc= Subject key identifier: EC:C8:F9:BF:59:5C:38:1C:E6:70:10:42:F2:32:F0:54:A9:E6:17:A1 Certificate issuer: /CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826 Certificate serial: 019B7DCA70CD12EF3DD82344795854F3B40C Authority key identifier: 68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/7Mj5v1lcOBzmcBBC8jLwVKnmF6E.roa Signing time: Fri 02 Jan 2026 08:19:37 +0000 ROA not before: Fri 02 Jan 2026 08:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 194.169.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:70:cd:12:ef:3d:d8:23:44:79:58:54:f3:b4:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826 Validity Not Before: Jan 2 08:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ecc8f9bf595c381ce6701042f232f054a9e617a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:93:36:69:18:bd:43:ec:15:9a:65:ae:42:8c: 99:4d:d7:59:93:35:41:88:1b:c4:92:28:b1:7d:9a: ea:dc:89:87:68:7b:1c:40:39:7a:da:e8:53:00:75: b4:de:e1:60:27:9a:5a:d7:12:bd:44:65:aa:25:ea: 38:4c:08:f5:6b:c3:e7:24:87:8f:7e:17:ef:91:df: f1:35:98:38:b1:78:ce:f3:af:a5:ce:7f:6d:43:fd: 8f:16:71:0a:8e:20:c1:2d:0b:c0:76:83:26:2e:e8: 84:65:a8:05:9e:b2:04:ea:1f:70:24:42:9b:df:4a: ce:e0:9d:c0:4c:23:6b:17:20:be:1e:52:32:60:c4: 23:44:fa:be:dd:a9:19:8e:52:38:90:db:18:18:27: 9f:50:00:27:bc:65:a2:66:83:99:af:7d:65:b1:ef: 56:62:d9:e2:37:f2:28:4c:2f:d5:23:c9:d6:0d:ef: e4:52:14:88:7f:b6:00:79:be:dd:55:45:ca:77:31: 0a:da:a1:59:21:38:1e:17:73:0d:3d:67:1f:85:61: 56:6c:e2:2a:84:63:0a:d6:d2:67:cc:9d:04:bf:61: 61:b5:1c:68:9b:f4:de:ca:54:8a:d6:69:b0:ac:37: fc:79:27:ca:c6:87:b4:bb:3e:b2:b6:00:92:5b:78: e7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C8:F9:BF:59:5C:38:1C:E6:70:10:42:F2:32:F0:54:A9:E6:17:A1 X509v3 Authority Key Identifier: keyid:68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/7Mj5v1lcOBzmcBBC8jLwVKnmF6E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.169.219.0/24 Signature Algorithm: sha256WithRSAEncryption a1:73:5a:14:79:a2:d4:8e:a4:00:51:53:df:3f:8d:a0:6b:51: 87:a8:4d:38:01:0b:c9:f1:e3:1f:71:b5:ec:b7:a0:45:1f:c0: 94:e9:fc:8c:3e:81:d7:eb:9d:a5:93:36:a5:35:02:b3:b0:bf: 07:b5:79:f6:3c:df:a5:69:c7:8b:98:43:55:84:1b:56:19:c6: ff:93:63:d6:a9:4c:81:24:73:86:56:b0:27:86:3a:d1:c8:1f: d7:a5:f8:ee:8d:9e:aa:7c:52:88:05:93:f6:9f:4e:02:e6:ed: 52:ed:c5:a6:d8:52:c8:82:8b:16:c3:4d:80:ae:5a:a6:7e:04: 4d:58:75:f6:76:6f:51:37:a1:ed:23:3b:0d:0e:41:24:8b:d4: 95:e0:81:e4:ac:9c:77:bb:ca:29:36:e1:1b:48:a2:62:a4:c1: 98:80:a1:fe:bf:bf:27:e5:09:5a:05:c9:66:4a:2f:a5:bd:c6: d7:ac:a1:9e:a2:96:5c:9a:c3:7b:06:c1:19:4f:48:24:0c:33: 7b:89:ad:ed:4a:c2:90:da:1b:15:02:f5:47:d3:3b:ee:71:8c: f0:9b:1d:44:02:01:b5:4d:4d:8d:f9:4c:94:29:30:3c:90:2c: 8c:91:c7:9a:be:72:9b:c5:86:cc:d1:1d:bd:e4:8e:ae:42:9f: 07:97:67:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ynDNEu892CNEeVhU87QMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YTdjMmM4NGZmYTQ5MzRjZjBmNzNlZjFhMWExYTMzNzg3 MzE4MjYwHhcNMjYwMTAyMDgxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2M4ZjliZjU5NWMzODFjZTY3MDEwNDJmMjMyZjA1NGE5ZTYxN2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZM2aRi9Q+wVmmWuQoyZTddZkzVB iBvEkiixfZrq3ImHaHscQDl62uhTAHW03uFgJ5pa1xK9RGWqJeo4TAj1a8PnJIeP fhfvkd/xNZg4sXjO86+lzn9tQ/2PFnEKjiDBLQvAdoMmLuiEZagFnrIE6h9wJEKb 30rO4J3ATCNrFyC+HlIyYMQjRPq+3akZjlI4kNsYGCefUAAnvGWiZoOZr31lse9W YtniN/IoTC/VI8nWDe/kUhSIf7YAeb7dVUXKdzEK2qFZITgeF3MNPWcfhWFWbOIq hGMK1tJnzJ0Ev2FhtRxom/TeylSK1mmwrDf8eSfKxoe0uz6ytgCSW3jngwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOzI+b9ZXDgc5nAQQvIy8FSp5hehMB8GA1UdIwQY MBaAFGinwshP+kk0zw9z7xoaGjN4cxgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUtmQ3lFXzZTVFRQRDNQdkdob2FNM2h6R0NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mZTQ1NWQtZjZjZS00MzZjLTgzMjct ZGI2ZGRiNGE0NGU1LzEvN01qNXYxbGNPQnptY0JCQzhqTHdWS25tRjZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9mZTQ1NWQtZjZjZS00MzZjLTgzMjctZGI2ZGRiNGE0NGU1 LzEvYUtmQ3lFXzZTVFRQRDNQdkdob2FNM2h6R0NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwqnbMA0G CSqGSIb3DQEBCwUAA4IBAQChc1oUeaLUjqQAUVPfP42ga1GHqE04AQvJ8eMfcbXs t6BFH8CU6fyMPoHX652lkzalNQKzsL8HtXn2PN+laceLmENVhBtWGcb/k2PWqUyB JHOGVrAnhjrRyB/XpfjujZ6qfFKIBZP2n04C5u1S7cWm2FLIgosWw02ArlqmfgRN WHX2dm9RN6HtIzsNDkEki9SV4IHkrJx3u8opNuEbSKJipMGYgKH+v78n5QlaBclm Si+lvcbXrKGeopZcmsN7BsEZT0gkDDN7ia3tSsKQ2hsVAvVH0zvucYzwmx1EAgG1 TU2N+UyUKTA8kCyMkceavnKbxYbM0R295I6uQp8Hl2dP -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:22 2026 by rpki-client