This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/7bGl1Xdi6Pm1X1Ab1Zfe3WxrCvQ.roa File: 7bGl1Xdi6Pm1X1Ab1Zfe3WxrCvQ.roa (raw, json) Hash identifier: WitY0IfqjKazmEtgATl+1ViOVRltHmA3RLHFAZFUngo= Subject key identifier: ED:B1:A5:D5:77:62:E8:F9:B5:5F:50:1B:D5:97:DE:DD:6C:6B:0A:F4 Certificate issuer: /CN=5f5079e0e587c47ff14d202112f4eef78b078491 Certificate serial: 019B783549C4698FA9E5F81A42A15A0F7CC8 Authority key identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/7bGl1Xdi6Pm1X1Ab1Zfe3WxrCvQ.roa Signing time: Thu 01 Jan 2026 06:18:36 +0000 ROA not before: Thu 01 Jan 2026 06:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25400 IP address blocks: 193.24.102.0/24 maxlen: 24 2a13:9980::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:49:c4:69:8f:a9:e5:f8:1a:42:a1:5a:0f:7c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f5079e0e587c47ff14d202112f4eef78b078491 Validity Not Before: Jan 1 06:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edb1a5d57762e8f9b55f501bd597dedd6c6b0af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:99:37:a7:09:78:43:88:17:31:7a:7f:39:01: 95:7a:8c:ac:89:86:40:ca:04:57:58:d5:90:aa:1d: 20:16:59:e4:0b:29:79:14:a2:08:f9:b8:58:9c:b0: 53:f7:37:f9:7c:61:93:67:40:2c:76:56:f5:61:fb: f1:df:f7:21:46:83:13:05:92:74:e1:bb:2d:9e:d0: ab:94:28:0b:68:70:ea:c8:d9:17:f3:7c:82:9d:d3: 8a:ed:0f:4f:ea:7c:03:af:0a:44:ad:85:d4:24:4e: c7:27:78:3b:3f:97:8f:f6:a6:10:cc:a9:04:29:b5: eb:20:80:ae:05:e6:77:2e:26:0e:76:87:15:3a:71: 7d:9b:74:3c:14:dc:dd:22:85:b9:80:bb:14:c7:b5: 4b:9c:34:92:3f:75:48:a6:6a:cd:a0:74:88:ac:72: c2:e9:c0:39:dc:a9:02:01:c8:b0:a7:bc:1b:8b:11: 34:28:58:f8:2a:9e:c0:ac:a3:8c:3d:96:d2:22:6f: 45:88:a0:c0:87:21:9b:45:61:49:33:d4:3d:bb:30: 7f:ee:fc:d5:3f:c2:e1:01:de:c7:f9:45:90:3f:b4: b4:16:d0:73:4a:35:f4:6a:4a:16:2c:d7:7f:07:01: b4:41:5d:8a:1c:fe:1a:07:1e:33:1d:82:83:4d:5e: 35:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B1:A5:D5:77:62:E8:F9:B5:5F:50:1B:D5:97:DE:DD:6C:6B:0A:F4 X509v3 Authority Key Identifier: keyid:5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/7bGl1Xdi6Pm1X1Ab1Zfe3WxrCvQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.24.102.0/24 IPv6: 2a13:9980::/32 Signature Algorithm: sha256WithRSAEncryption 9a:fe:ac:db:56:99:ee:66:54:66:b2:ec:7e:42:04:da:b8:e6: f9:2e:86:13:c0:39:6f:97:13:09:8e:12:36:38:9c:18:c7:2e: 24:2a:49:79:8c:b8:a0:57:60:bf:ca:74:8a:42:e6:fb:67:31: ff:c7:e2:16:19:16:18:31:46:73:87:02:02:50:3e:2e:29:83: f0:7c:4e:57:e5:5c:f1:9a:26:10:79:28:15:01:5d:2f:e7:82: 30:78:44:ed:21:ed:f5:9e:3f:38:2e:93:17:bb:3a:b5:a9:7a: b3:8b:86:ce:a4:c6:47:2b:42:21:6f:a4:32:c1:e6:0f:e6:20: bd:15:8c:c3:a7:78:2a:e4:ba:a2:68:6f:d3:49:49:8a:48:c4: 3c:94:cb:7e:5c:0f:d6:4b:8b:3e:16:14:f4:05:1d:54:e3:3c: de:d1:1e:5f:1e:53:95:ef:83:5d:d5:3c:a7:59:ba:e7:a9:8c: dc:8d:e0:d1:23:19:6f:dd:e4:90:2f:07:82:b8:71:73:fb:6f: 3a:20:04:a6:a6:31:eb:e4:64:18:73:cb:c8:55:6e:b1:a5:6b: bc:2f:50:b4:09:32:42:b2:48:fa:5b:f9:fc:7b:3f:1c:e0:81: 22:6a:93:06:4a:5e:99:ea:85:8a:27:c9:94:60:cb:17:f7:8c: cf:05:a0:4c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NUnEaY+p5fgaQqFaD3zIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNTA3OWUwZTU4N2M0N2ZmMTRkMjAyMTEyZjRlZWY3OGIw Nzg0OTEwHhcNMjYwMTAxMDYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGIxYTVkNTc3NjJlOGY5YjU1ZjUwMWJkNTk3ZGVkZDZjNmIwYWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZk3pwl4Q4gXMXp/OQGVeoysiYZA ygRXWNWQqh0gFlnkCyl5FKII+bhYnLBT9zf5fGGTZ0Asdlb1Yfvx3/chRoMTBZJ0 4bstntCrlCgLaHDqyNkX83yCndOK7Q9P6nwDrwpErYXUJE7HJ3g7P5eP9qYQzKkE KbXrIICuBeZ3LiYOdocVOnF9m3Q8FNzdIoW5gLsUx7VLnDSSP3VIpmrNoHSIrHLC 6cA53KkCAciwp7wbixE0KFj4Kp7ArKOMPZbSIm9FiKDAhyGbRWFJM9Q9uzB/7vzV P8LhAd7H+UWQP7S0FtBzSjX0akoWLNd/BwG0QV2KHP4aBx4zHYKDTV41qwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFO2xpdV3Yuj5tV9QG9WX3t1sawr0MB8GA1UdIwQY MBaAFF9QeeDlh8R/8U0gIRL07veLB4SRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lMzc4YjItODg2NC00NzEwLTk2NzQt MWZjOGY3NmE4MDZhLzEvN2JHbDFYZGk2UG0xWDFBYjFaZmUzV3hyQ3ZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9lMzc4YjItODg2NC00NzEwLTk2NzQtMWZjOGY3NmE4MDZh LzEvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwRhmMA0E AgACMAcDBQAqE5mAMA0GCSqGSIb3DQEBCwUAA4IBAQCa/qzbVpnuZlRmsux+QgTa uOb5LoYTwDlvlxMJjhI2OJwYxy4kKkl5jLigV2C/ynSKQub7ZzH/x+IWGRYYMUZz hwICUD4uKYPwfE5X5VzxmiYQeSgVAV0v54IweETtIe31nj84LpMXuzq1qXqzi4bO pMZHK0Ihb6QyweYP5iC9FYzDp3gq5LqiaG/TSUmKSMQ8lMt+XA/WS4s+FhT0BR1U 4zze0R5fHlOV74Nd1TynWbrnqYzcjeDRIxlv3eSQLweCuHFz+286IASmpjHr5GQY c8vIVW6xpWu8L1C0CTJCskj6W/n8ez8c4IEiapMGSl6Z6oWKJ8mUYMsX94zPBaBM -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:23 2026 by rpki-client