This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/7aJymM8-A-Vzxrith_gpYUCnxLA.roa File: 7aJymM8-A-Vzxrith_gpYUCnxLA.roa (raw, json) Hash identifier: yavsVrmsFDM2twygwL9ROfhNDdkXtjYh0veEc5aPL6U= Subject key identifier: ED:A2:72:98:CF:3E:03:E5:73:C6:B8:AD:87:F8:29:61:40:A7:C4:B0 Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748 Certificate serial: 019B79112F86C120CE519D3F67E57CEF2641 Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/7aJymM8-A-Vzxrith_gpYUCnxLA.roa Signing time: Thu 01 Jan 2026 10:18:47 +0000 ROA not before: Thu 01 Jan 2026 10:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13165 IP address blocks: 193.43.182.0/24 maxlen: 24 213.128.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2f:86:c1:20:ce:51:9d:3f:67:e5:7c:ef:26:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748 Validity Not Before: Jan 1 10:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eda27298cf3e03e573c6b8ad87f8296140a7c4b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7f:74:4b:e9:64:34:ee:58:72:fe:8c:a7:e4: 44:70:bb:4f:42:c3:c8:3f:72:58:b9:b0:d6:b1:00: 13:14:47:ec:18:97:67:15:bf:bd:82:f6:91:f5:ac: 37:01:ef:56:42:fd:0b:1f:2e:79:cd:42:12:d5:ee: df:7b:cc:ed:6a:bb:00:ce:a9:f1:6c:b2:87:25:87: ac:99:88:08:34:12:2f:73:7e:9a:c9:b7:d1:cc:54: 54:0f:f0:e7:db:a3:99:c8:eb:07:dc:7a:a6:2e:6c: bd:c9:eb:0a:8e:d4:44:54:af:a7:17:03:ee:3c:d5: 05:0e:ec:77:ca:fc:40:65:09:85:a3:bf:c9:30:05: cd:31:0e:8a:e0:e6:c8:fd:3b:39:a5:bc:a5:db:bc: cd:a9:0a:1d:d4:01:e0:73:06:d8:93:fd:a2:69:cf: 5e:f2:19:d5:ef:a7:62:8a:2d:66:da:23:f8:0e:bf: d7:cf:c9:8b:5f:7d:17:0f:8b:d9:06:81:ed:1f:b2: 51:26:8b:53:33:19:62:20:5d:88:42:55:65:34:b8: 46:46:df:2f:7d:e8:0a:df:4f:98:e9:c5:0b:9c:85: b5:38:9b:a9:41:9d:79:d7:82:d4:e4:f8:83:0e:ce: fe:42:26:f5:b1:2d:64:96:31:0f:02:55:86:5f:d2: fb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A2:72:98:CF:3E:03:E5:73:C6:B8:AD:87:F8:29:61:40:A7:C4:B0 X509v3 Authority Key Identifier: keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/7aJymM8-A-Vzxrith_gpYUCnxLA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.43.182.0/24 213.128.192.0/20 Signature Algorithm: sha256WithRSAEncryption 56:3f:b0:fb:68:c6:80:be:61:a0:41:cb:1a:1c:da:f7:2b:59: 4e:0c:eb:df:d9:aa:28:42:ed:4f:07:4d:c3:df:b0:d4:ad:58: cd:8d:f3:56:4b:13:c3:27:8e:26:00:82:7c:c5:70:2c:27:77: 3a:9c:0f:de:39:3a:4c:15:b0:9b:7b:ef:5d:a1:7a:ab:d2:64: e1:49:2e:70:9e:f0:10:fc:12:b9:b9:d1:d5:5b:8f:fb:a8:e3: cc:cf:fa:e5:7f:18:82:32:f1:39:89:0e:4c:22:4f:f6:0b:7b: d7:85:1e:6f:4e:fc:b5:34:51:d5:a9:cc:b8:a5:01:9f:11:0e: f8:19:cc:d7:00:b1:21:9c:47:ba:e5:94:16:63:d0:8a:30:9c: 22:46:f1:07:9c:a8:47:b8:f0:54:86:75:06:52:11:52:4e:db: 66:c7:a8:3b:72:12:fd:f0:aa:11:eb:26:4a:09:89:f5:a3:70: 6b:47:95:bf:c6:cf:c9:ec:46:20:48:08:d5:85:8e:3e:58:2e: 5e:eb:0c:1a:46:c0:34:58:6f:1f:d2:c6:e7:37:0a:59:69:1f: e5:02:de:8c:5e:8b:77:54:80:0c:f1:b1:ae:4d:5f:93:f5:c8: b5:b0:b1:71:3b:d3:17:ea:e1:17:77:92:0c:4d:44:64:7d:70: 00:a2:4a:06 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ES+GwSDOUZ0/Z+V87yZBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYzM0MmMwNmFhY2MzNTlkMzk0MzlmZjU4ZGVmYThlYTE4 NzU3NDgwHhcNMjYwMTAxMTAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGEyNzI5OGNmM2UwM2U1NzNjNmI4YWQ4N2Y4Mjk2MTQwYTdjNGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH90S+lkNO5Ycv6Mp+REcLtPQsPI P3JYubDWsQATFEfsGJdnFb+9gvaR9aw3Ae9WQv0LHy55zUIS1e7fe8ztarsAzqnx bLKHJYesmYgINBIvc36aybfRzFRUD/Dn26OZyOsH3HqmLmy9yesKjtREVK+nFwPu PNUFDux3yvxAZQmFo7/JMAXNMQ6K4ObI/Ts5pbyl27zNqQod1AHgcwbYk/2iac9e 8hnV76diii1m2iP4Dr/Xz8mLX30XD4vZBoHtH7JRJotTMxliIF2IQlVlNLhGRt8v fegK30+Y6cULnIW1OJupQZ1514LU5PiDDs7+Qib1sS1kljEPAlWGX9L7EQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFO2icpjPPgPlc8a4rYf4KWFAp8SwMB8GA1UdIwQY MBaAFDPDQsBqrMNZ05Q5/1je+o6hh1dIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUt N2YyMzMzNjA0OTk3LzEvN2FKeW1NOC1BLVZ6eHJpdGhfZ3BZVUNueExBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUtN2YyMzMzNjA0OTk3 LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwSu2AwQE 1YDAMA0GCSqGSIb3DQEBCwUAA4IBAQBWP7D7aMaAvmGgQcsaHNr3K1lODOvf2aoo Qu1PB03D37DUrVjNjfNWSxPDJ44mAIJ8xXAsJ3c6nA/eOTpMFbCbe+9doXqr0mTh SS5wnvAQ/BK5udHVW4/7qOPMz/rlfxiCMvE5iQ5MIk/2C3vXhR5vTvy1NFHVqcy4 pQGfEQ74GczXALEhnEe65ZQWY9CKMJwiRvEHnKhHuPBUhnUGUhFSTttmx6g7chL9 8KoR6yZKCYn1o3BrR5W/xs/J7EYgSAjVhY4+WC5e6wwaRsA0WG8f0sbnNwpZaR/l At6MXot3VIAM8bGuTV+T9ci1sLFxO9MX6uEXd5IMTURkfXAAokoG -----END CERTIFICATE-----Generated at Mon Jan 26 07:42:51 2026 by rpki-client