This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/1G7xfZS-7N9Bwv9zRGVTYavgwDw.roa File: 1G7xfZS-7N9Bwv9zRGVTYavgwDw.roa (raw, json) Hash identifier: NBwXIln+Lrk68hloVfF0NdhAEyHd00EUEH5nirBGf1U= Subject key identifier: D4:6E:F1:7D:94:BE:EC:DF:41:C2:FF:73:44:65:53:61:AB:E0:C0:3C Certificate issuer: /CN=379cd67c0c18959239358553229e91f543cc5a5f Certificate serial: 019B79ECB7B606FBA884DAC5CA858645F6A1 Authority key identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/1G7xfZS-7N9Bwv9zRGVTYavgwDw.roa Signing time: Thu 01 Jan 2026 14:18:35 +0000 ROA not before: Thu 01 Jan 2026 14:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15169 IP address blocks: 193.186.4.0/24 maxlen: 24 2a00:1450::/32 maxlen: 32 2a00:1450:4001::/48 maxlen: 48 2a00:1450:4002::/48 maxlen: 48 2a00:1450:4003::/48 maxlen: 48 2a00:1450:4004::/48 maxlen: 48 2a00:1450:4005::/48 maxlen: 48 2a00:1450:4006::/48 maxlen: 48 2a00:1450:4007::/48 maxlen: 48 2a00:1450:4008::/48 maxlen: 48 2a00:1450:4009::/48 maxlen: 48 2a00:1450:400a::/48 maxlen: 48 2a00:1450:400b::/48 maxlen: 48 2a00:1450:400c::/48 maxlen: 48 2a00:1450:400d::/48 maxlen: 48 2a00:1450:400e::/48 maxlen: 48 2a00:1450:400f::/48 maxlen: 48 2a00:1450:4010::/48 maxlen: 48 2a00:1450:4011::/48 maxlen: 48 2a00:1450:4012::/48 maxlen: 48 2a00:1450:4013::/48 maxlen: 48 2a00:1450:4014::/48 maxlen: 48 2a00:1450:4015::/48 maxlen: 48 2a00:1450:4016::/48 maxlen: 48 2a00:1450:4017::/48 maxlen: 48 2a00:1450:4018::/48 maxlen: 48 2a00:1450:4019::/48 maxlen: 48 2a00:1450:401a::/48 maxlen: 48 2a00:1450:401b::/48 maxlen: 48 2a00:1450:401c::/48 maxlen: 48 2a00:1450:4025::/48 maxlen: 48 2a00:1450:480e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b7:b6:06:fb:a8:84:da:c5:ca:85:86:45:f6:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=379cd67c0c18959239358553229e91f543cc5a5f Validity Not Before: Jan 1 14:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d46ef17d94beecdf41c2ff7344655361abe0c03c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:06:3b:96:f5:ba:f0:e4:f7:39:2f:f1:ee:74: 15:72:fa:10:75:a5:d3:5a:d4:a4:96:e5:7b:9f:40: d9:c0:87:7c:23:2e:11:92:c5:1b:31:76:b5:de:3c: 24:ea:56:4a:61:df:fc:cb:b6:17:8e:05:9e:5b:cb: 2c:64:59:18:21:70:f5:c3:4e:14:4a:df:38:ae:fc: 77:c1:70:34:e8:e3:84:2b:81:4a:57:38:da:85:64: 0b:fe:ec:e1:de:1f:80:a1:31:ea:07:83:ce:0c:58: 33:ce:c2:43:5c:db:9f:5f:53:97:c5:6d:bf:96:88: d4:5b:83:4f:96:64:af:cf:b4:45:df:5a:bb:9c:5c: 20:72:20:b9:6b:3d:7a:47:19:f7:0d:c1:72:ba:cd: a7:b4:1d:8a:f6:0b:16:3d:e1:fe:36:dc:93:1c:09: 7a:83:0f:6e:7a:61:45:93:67:9d:39:5b:c4:f1:66: e1:81:96:39:4b:17:fe:27:3b:b4:57:de:3f:4f:b8: cd:ce:1f:58:03:45:27:d4:fa:42:a7:cd:9d:8f:8c: 68:96:ce:f1:85:05:3a:98:d9:b6:88:7d:cc:5f:7a: 85:a5:30:a2:64:ca:e0:ca:1b:26:6b:43:0f:b4:95: c5:0c:02:8e:06:65:75:6c:87:9d:5a:05:ba:d0:db: 8d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6E:F1:7D:94:BE:EC:DF:41:C2:FF:73:44:65:53:61:AB:E0:C0:3C X509v3 Authority Key Identifier: keyid:37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/1G7xfZS-7N9Bwv9zRGVTYavgwDw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.186.4.0/24 IPv6: 2a00:1450::/32 Signature Algorithm: sha256WithRSAEncryption 51:6a:ee:99:4d:48:1f:28:18:f4:68:df:79:bb:ec:05:1d:f9: 70:8e:16:a7:a4:1d:6e:ca:af:e1:68:27:3a:18:53:d2:72:70: ba:72:4c:3a:35:f6:a3:5d:e6:64:96:b6:4c:e2:1a:17:bc:87: 14:e0:32:9d:56:d9:92:1f:9f:a9:85:f6:5e:a8:0b:12:33:48: ed:2b:a7:9c:73:4f:3b:13:ec:7f:72:cb:ab:4c:8a:67:21:a2: 8d:06:ab:d2:f1:8c:9d:7b:54:3f:89:15:4f:40:17:9d:62:92: 4d:33:dc:99:e2:ca:a0:ce:5e:9c:1e:07:40:05:02:ad:ca:15: 72:d6:f8:3d:9a:01:8d:70:a0:01:39:54:77:dd:eb:b0:a7:7e: e5:43:5e:0f:c4:4b:3b:51:36:78:8a:a3:c0:2e:10:be:f5:5a: d0:31:5a:2c:4e:6e:33:a6:10:da:26:d5:32:fb:6d:1a:49:46: cb:b3:34:72:cd:f0:b0:b4:10:85:6e:b7:13:d9:23:8f:7b:f1: a8:ea:b4:fd:40:89:3d:c9:59:98:a1:e6:aa:e9:e3:25:71:9e: b3:58:29:ae:4a:01:da:32:c0:bb:f7:7f:c9:38:ff:14:70:0b: 1b:9f:41:70:a7:3c:68:3d:9f:d4:7e:1a:0c:9e:01:4f:af:17: dc:8c:d0:61 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57Le2BvuohNrFyoWGRfahMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3OWNkNjdjMGMxODk1OTIzOTM1ODU1MzIyOWU5MWY1NDNj YzVhNWYwHhcNMjYwMTAxMTQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDZlZjE3ZDk0YmVlY2RmNDFjMmZmNzM0NDY1NTM2MWFiZTBjMDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AY7lvW68OT3OS/x7nQVcvoQdaXT WtSkluV7n0DZwId8Iy4RksUbMXa13jwk6lZKYd/8y7YXjgWeW8ssZFkYIXD1w04U St84rvx3wXA06OOEK4FKVzjahWQL/uzh3h+AoTHqB4PODFgzzsJDXNufX1OXxW2/ lojUW4NPlmSvz7RF31q7nFwgciC5az16Rxn3DcFyus2ntB2K9gsWPeH+NtyTHAl6 gw9uemFFk2edOVvE8WbhgZY5Sxf+Jzu0V94/T7jNzh9YA0Un1PpCp82dj4xols7x hQU6mNm2iH3MX3qFpTCiZMrgyhsma0MPtJXFDAKOBmV1bIedWgW60NuNjQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNRu8X2UvuzfQcL/c0RlU2Gr4MA8MB8GA1UdIwQY MBaAFDec1nwMGJWSOTWFUyKekfVDzFpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjV6V2ZBd1lsWkk1TllWVElwNlI5VVBNV2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hNjBjMjktNzRhYS00YjJiLTkwNjYt OTliYmJhZmU5YzRiLzEvMUc3eGZaUy03TjlCd3Y5elJHVlRZYXZnd0R3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9hNjBjMjktNzRhYS00YjJiLTkwNjYtOTliYmJhZmU5YzRi LzEvTjV6V2ZBd1lsWkk1TllWVElwNlI5VVBNV2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwboEMA0E AgACMAcDBQAqABRQMA0GCSqGSIb3DQEBCwUAA4IBAQBRau6ZTUgfKBj0aN95u+wF HflwjhanpB1uyq/haCc6GFPScnC6ckw6NfajXeZklrZM4hoXvIcU4DKdVtmSH5+p hfZeqAsSM0jtK6ecc087E+x/csurTIpnIaKNBqvS8Yyde1Q/iRVPQBedYpJNM9yZ 4sqgzl6cHgdABQKtyhVy1vg9mgGNcKABOVR33euwp37lQ14PxEs7UTZ4iqPALhC+ 9VrQMVosTm4zphDaJtUy+20aSUbLszRyzfCwtBCFbrcT2SOPe/Go6rT9QIk9yVmY oeaq6eMlcZ6zWCmuSgHaMsC793/JOP8UcAsbn0FwpzxoPZ/UfhoMngFPrxfcjNBh -----END CERTIFICATE-----Generated at Sun Jan 25 18:41:56 2026 by rpki-client