This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/rJGAs6X1h64jP6R35e61qsCTXFY.roa File: rJGAs6X1h64jP6R35e61qsCTXFY.roa (raw, json) Hash identifier: GVSlFoAaLCK/f0Zjs4b7sBkaI33tH8EXTGwc45c8NVc= Subject key identifier: AC:91:80:B3:A5:F5:87:AE:23:3F:A4:77:E5:EE:B5:AA:C0:93:5C:56 Certificate issuer: /CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8 Certificate serial: 019B7BA52E92384F2D0D5BE39CCD37F1FA7C Authority key identifier: 7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/rJGAs6X1h64jP6R35e61qsCTXFY.roa Signing time: Thu 01 Jan 2026 22:19:41 +0000 ROA not before: Thu 01 Jan 2026 22:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62385 IP address blocks: 193.104.151.0/24 maxlen: 24 2a10:7c80::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:2e:92:38:4f:2d:0d:5b:e3:9c:cd:37:f1:fa:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8 Validity Not Before: Jan 1 22:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac9180b3a5f587ae233fa477e5eeb5aac0935c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c9:f1:30:ab:80:51:15:09:29:86:c6:0b:2f: f0:f6:86:b3:ae:a7:e9:fd:e7:a3:78:44:ac:d5:f3: 44:24:04:81:31:25:75:bf:67:46:b0:e0:6b:a6:20: d3:74:23:72:98:d4:63:6c:f2:23:01:7f:bf:75:40: f5:81:b8:c0:f9:8e:15:77:af:5a:f8:6c:f1:5e:e1: 44:6c:56:3a:7d:3f:2b:eb:40:4f:b4:1b:88:9e:3f: db:7c:d3:a3:26:a0:51:12:33:3f:2d:7a:05:bc:a7: 9a:b3:0e:56:27:23:3d:d8:8e:1f:3e:6b:6a:34:47: 8a:31:1f:b4:93:1e:8b:59:e7:3a:97:ec:c8:46:72: ab:ca:7b:38:de:d8:9a:78:f4:75:f6:b6:a2:39:58: 6c:f9:53:a3:c8:c0:44:dc:2b:10:a5:d4:81:bc:45: 8f:ca:9b:9f:0c:27:41:7a:0e:18:6b:a9:9d:99:69: b7:0c:5b:d5:99:7a:34:1f:29:44:8b:76:ea:dc:11: ab:7a:8c:52:70:28:25:2f:eb:44:fe:a9:8e:71:98: a8:60:bb:a0:72:b2:5b:5e:e0:37:70:53:e6:5f:5a: 58:36:9e:37:fb:ea:83:fa:be:50:f9:54:e4:6d:54: 15:a1:04:51:7e:d7:29:3f:04:d7:d3:d5:92:6e:ac: bb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:91:80:B3:A5:F5:87:AE:23:3F:A4:77:E5:EE:B5:AA:C0:93:5C:56 X509v3 Authority Key Identifier: keyid:7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/rJGAs6X1h64jP6R35e61qsCTXFY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.151.0/24 IPv6: 2a10:7c80::/29 Signature Algorithm: sha256WithRSAEncryption 68:95:12:4b:32:19:6e:ee:6f:ac:07:bd:0a:e5:ea:8a:b9:f1: d0:d0:6f:9a:74:a1:54:7d:7b:71:6a:f9:5c:4f:68:ae:99:8f: d6:08:5d:de:f2:76:b0:cc:6a:07:5d:e4:f3:3e:70:d4:86:18: d0:ae:1c:79:f7:97:c5:ea:5a:7a:49:e2:47:88:3a:b4:c4:ae: 76:eb:a1:ab:60:2d:34:76:e7:d9:c1:b7:86:ff:10:73:84:2e: 85:15:78:a7:a1:a0:57:42:e0:a0:f0:e9:63:54:10:09:07:52: e2:19:ec:65:f5:2b:bf:fd:19:f9:b8:f0:a0:6c:b2:f2:51:24: 83:09:71:22:85:41:ed:58:e0:b8:f5:9d:e5:18:df:da:0b:0f: 93:0f:3e:46:e8:ed:c5:a8:28:e7:28:66:64:fb:08:40:a2:ba: 8f:e0:55:5e:5e:bd:57:2a:92:2a:92:55:d0:44:50:53:b5:39: f1:30:d6:8f:39:1a:a0:a0:d9:eb:44:de:da:2b:be:90:e2:5c: 98:47:57:20:fa:5f:5e:cc:19:e0:e3:23:c1:40:61:3f:57:a1: 9d:8e:dc:a0:54:9d:28:ad:60:c7:1b:97:f0:59:ae:96:cb:c1: 6e:f6:3d:b1:dd:59:79:4f:6d:12:42:b5:c1:10:bc:d1:df:4f: ba:ca:a8:9e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7pS6SOE8tDVvjnM038fp8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMGFmOTczOGM5Zjc5OWI1NmY0YjkwMTdiZjgyMWI0ZmNh MTM1YjgwHhcNMjYwMTAxMjIxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzkxODBiM2E1ZjU4N2FlMjMzZmE0NzdlNWVlYjVhYWMwOTM1YzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMnxMKuAURUJKYbGCy/w9oazrqfp /eejeESs1fNEJASBMSV1v2dGsOBrpiDTdCNymNRjbPIjAX+/dUD1gbjA+Y4Vd69a +GzxXuFEbFY6fT8r60BPtBuInj/bfNOjJqBREjM/LXoFvKeasw5WJyM92I4fPmtq NEeKMR+0kx6LWec6l+zIRnKryns43tiaePR19raiOVhs+VOjyMBE3CsQpdSBvEWP ypufDCdBeg4Ya6mdmWm3DFvVmXo0HylEi3bq3BGreoxScCglL+tE/qmOcZioYLug crJbXuA3cFPmX1pYNp43++qD+r5Q+VTkbVQVoQRRftcpPwTX09WSbqy7bwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKyRgLOl9YeuIz+kd+XutarAk1xWMB8GA1UdIwQY MBaAFHsK+XOMn3mbVvS5AXv4IbT8oTW4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXdyNWM0eWZlWnRXOUxrQmVfZ2h0UHloTmJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MjFlNzAtZjQ0Mi00MjUyLWFlYTAt Y2ExMmY1M2Q3YjM0LzEvckpHQXM2WDFoNjRqUDZSMzVlNjFxc0NUWEZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MjFlNzAtZjQ0Mi00MjUyLWFlYTAtY2ExMmY1M2Q3YjM0 LzEvZXdyNWM0eWZlWnRXOUxrQmVfZ2h0UHloTmJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwWiXMA0E AgACMAcDBQMqEHyAMA0GCSqGSIb3DQEBCwUAA4IBAQBolRJLMhlu7m+sB70K5eqK ufHQ0G+adKFUfXtxavlcT2iumY/WCF3e8nawzGoHXeTzPnDUhhjQrhx595fF6lp6 SeJHiDq0xK5266GrYC00dufZwbeG/xBzhC6FFXinoaBXQuCg8OljVBAJB1LiGexl 9Su//Rn5uPCgbLLyUSSDCXEihUHtWOC49Z3lGN/aCw+TDz5G6O3FqCjnKGZk+whA orqP4FVeXr1XKpIqklXQRFBTtTnxMNaPORqgoNnrRN7aK76Q4lyYR1cg+l9ezBng 4yPBQGE/V6GdjtygVJ0orWDHG5fwWa6Wy8Fu9j2x3Vl5T20SQrXBELzR30+6yqie -----END CERTIFICATE-----Generated at Tue Feb 10 01:28:23 2026 by rpki-client