This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/v7DRMSksGTlDfhs744praVhJlnw.roa File: v7DRMSksGTlDfhs744praVhJlnw.roa (raw, json) Hash identifier: whajyGy/1UYHTBKdIHCPuA5IumZDHCjke/Rcxhk8gpY= Subject key identifier: BF:B0:D1:31:29:2C:19:39:43:7E:1B:3B:E3:8A:6B:69:58:49:96:7C Certificate issuer: /CN=b55800300fa4017f970c95d767d812fd10d0dcbc Certificate serial: 019B78A25F45C70F73C34CC7C6434A0D929F Authority key identifier: B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/v7DRMSksGTlDfhs744praVhJlnw.roa Signing time: Thu 01 Jan 2026 08:17:45 +0000 ROA not before: Thu 01 Jan 2026 08:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41493 IP address blocks: 195.93.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:5f:45:c7:0f:73:c3:4c:c7:c6:43:4a:0d:92:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b55800300fa4017f970c95d767d812fd10d0dcbc Validity Not Before: Jan 1 08:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfb0d131292c1939437e1b3be38a6b695849967c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:dd:b8:a2:35:da:1b:be:63:07:d5:0e:33:1a: ec:d4:e1:59:85:2a:0d:7d:6e:74:eb:07:c0:a4:03: e5:05:b6:b8:e0:25:0d:54:5f:01:87:56:46:91:df: ca:1d:a7:dc:5d:fa:56:4e:1d:43:30:fe:a2:23:b9: 71:f6:94:94:d1:d3:d3:4d:31:b6:11:4a:0a:d0:db: 56:ea:88:96:2d:c0:4d:27:bb:9a:3d:e3:f4:d5:2d: 45:9a:5c:d5:1e:7d:29:f8:b7:1b:60:7b:e1:55:6f: da:26:29:ae:04:7f:db:ab:2b:3b:b9:11:33:5b:2c: fe:ff:3f:ee:9b:48:9f:c9:ca:93:c6:83:91:96:8a: 6c:a5:70:b9:24:05:bd:c3:52:1f:44:ee:55:26:ce: fe:b9:c4:5e:fb:22:4f:eb:92:9d:9c:ab:98:b0:33: 10:4c:8c:fe:67:bf:b2:80:01:5d:dc:b3:b2:21:96: af:d6:c0:77:5d:05:5a:7e:59:44:20:9a:04:2c:c0: 68:45:6c:65:e8:cc:0a:76:31:87:dd:9d:25:bb:9b: ce:fc:7d:14:ef:32:84:54:77:b9:87:7d:41:ad:a7: 20:40:b9:98:e4:3f:c0:6b:c5:0a:ab:dd:f7:aa:fe: a7:ea:fa:b3:89:0c:6c:fa:40:73:5a:81:1a:a8:5c: a5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B0:D1:31:29:2C:19:39:43:7E:1B:3B:E3:8A:6B:69:58:49:96:7C X509v3 Authority Key Identifier: keyid:B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/v7DRMSksGTlDfhs744praVhJlnw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.93.196.0/24 Signature Algorithm: sha256WithRSAEncryption 14:bc:67:42:0c:10:67:78:cf:a6:26:4c:5e:c7:2e:2f:47:1b: 6f:ae:86:fc:cb:14:01:ca:e9:8f:bc:85:1a:4b:ff:be:59:fa: a2:26:82:03:01:ac:cf:7e:bf:fc:cb:6c:3b:9f:fc:e7:9b:46: a3:74:0f:0d:64:52:9b:f2:e9:75:4a:0b:e3:65:db:32:17:27: 36:d1:77:76:a1:44:12:b0:39:45:d1:86:a0:8e:fe:b5:ad:b4: c8:4d:20:2b:aa:5d:5a:90:c6:3a:3d:fb:4c:bf:8d:cb:8f:6d: 53:89:f7:d0:51:2f:90:6f:87:9a:a3:08:57:b7:e3:b4:ee:bf: 41:5d:03:17:c4:2f:a8:92:a1:20:b6:65:55:c8:6a:97:7b:cc: d2:db:49:6a:01:66:76:91:93:8c:57:01:3c:13:d2:8a:3f:e7: 8d:0f:84:47:e2:99:ec:02:96:db:b9:d6:8a:e6:b7:a0:91:71: 18:bb:9d:08:bd:6a:29:0c:97:7a:14:cc:4b:dc:f8:21:14:de: 49:9b:f5:16:72:e0:8f:84:88:30:1b:44:e7:bc:25:5f:f2:4a: ee:e1:1c:5f:c3:01:01:04:3b:eb:5c:56:0d:c6:b1:1b:15:8f: 03:39:de:69:b9:70:c1:c5:46:c6:a5:f8:69:41:1b:7c:b0:67: 81:08:06:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ol9Fxw9zw0zHxkNKDZKfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTgwMDMwMGZhNDAxN2Y5NzBjOTVkNzY3ZDgxMmZkMTBk MGRjYmMwHhcNMjYwMTAxMDgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmIwZDEzMTI5MmMxOTM5NDM3ZTFiM2JlMzhhNmI2OTU4NDk5NjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1924ojXaG75jB9UOMxrs1OFZhSoN fW506wfApAPlBba44CUNVF8Bh1ZGkd/KHafcXfpWTh1DMP6iI7lx9pSU0dPTTTG2 EUoK0NtW6oiWLcBNJ7uaPeP01S1FmlzVHn0p+LcbYHvhVW/aJimuBH/bqys7uREz Wyz+/z/um0ifycqTxoORlopspXC5JAW9w1IfRO5VJs7+ucRe+yJP65KdnKuYsDMQ TIz+Z7+ygAFd3LOyIZav1sB3XQVafllEIJoELMBoRWxl6MwKdjGH3Z0lu5vO/H0U 7zKEVHe5h31BracgQLmY5D/Aa8UKq933qv6n6vqziQxs+kBzWoEaqFyl1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL+w0TEpLBk5Q34bO+OKa2lYSZZ8MB8GA1UdIwQY MBaAFLVYADAPpAF/lwyV12fYEv0Q0Ny8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZnQU1BLWtBWC1YREpYWFo5Z1NfUkRRM0x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC84YTg0ODctOTMxYS00MmZiLWI2NjQt YzUyZGY0YWE1MjFkLzEvdjdEUk1Ta3NHVGxEZmhzNzQ0cHJhVmhKbG53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC84YTg0ODctOTMxYS00MmZiLWI2NjQtYzUyZGY0YWE1MjFk LzEvdFZnQU1BLWtBWC1YREpYWFo5Z1NfUkRRM0x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw13EMA0G CSqGSIb3DQEBCwUAA4IBAQAUvGdCDBBneM+mJkxexy4vRxtvrob8yxQByumPvIUa S/++WfqiJoIDAazPfr/8y2w7n/znm0ajdA8NZFKb8ul1SgvjZdsyFyc20Xd2oUQS sDlF0Yagjv61rbTITSArql1akMY6PftMv43Lj21TiffQUS+Qb4eaowhXt+O07r9B XQMXxC+okqEgtmVVyGqXe8zS20lqAWZ2kZOMVwE8E9KKP+eND4RH4pnsApbbudaK 5regkXEYu50IvWopDJd6FMxL3PghFN5Jm/UWcuCPhIgwG0TnvCVf8kru4RxfwwEB BDvrXFYNxrEbFY8DOd5puXDBxUbGpfhpQRt8sGeBCAYX -----END CERTIFICATE-----Generated at Sun Jan 25 17:33:57 2026 by rpki-client