This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/l7gHbDR0S8uySRRh7NBvNXKfHGs.roa File: l7gHbDR0S8uySRRh7NBvNXKfHGs.roa (raw, json) Hash identifier: HnjKcHy6ehMCdOMeQO1AkeKLrYGzqxETFH3zfR/ADJ4= Subject key identifier: 97:B8:07:6C:34:74:4B:CB:B2:49:14:61:EC:D0:6F:35:72:9F:1C:6B Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F8576907B0E22E55B8188886EE846C1 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/l7gHbDR0S8uySRRh7NBvNXKfHGs.roa Signing time: Fri 02 Jan 2026 16:23:31 +0000 ROA not before: Fri 02 Jan 2026 16:23:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215620 IP address blocks: 193.124.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:76:90:7b:0e:22:e5:5b:81:88:88:6e:e8:46:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97b8076c34744bcbb2491461ecd06f35729f1c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:87:42:ce:ef:89:77:d1:0a:fe:4f:55:21:65: 1c:29:37:0a:49:95:05:d1:69:0c:1a:bd:a9:1d:8c: 4a:80:63:e1:d1:63:f9:1d:9a:55:e6:e9:33:35:48: 00:3f:1a:0b:31:d1:50:9a:d1:ac:9a:50:2c:65:21: 93:70:58:73:77:d6:60:d9:fe:c5:84:28:4c:be:41: 90:82:01:27:03:de:eb:47:5b:f8:2b:6b:8d:a0:16: 14:97:cb:b7:62:1a:7f:c1:b0:e2:1c:1e:bc:5e:a4: 88:d4:d6:33:84:76:02:c2:e2:6e:cb:85:a0:96:dd: e5:ff:47:6c:cd:e5:87:72:75:eb:34:fd:3f:0d:e5: 8c:f3:24:c3:20:c3:df:91:25:f7:c7:41:86:71:9a: d7:4b:23:3c:f8:6e:55:0b:07:84:9d:9d:8f:4b:81: 55:42:53:68:a3:d9:1a:84:43:46:24:d2:e6:f2:b0: 99:5a:85:8f:89:62:75:19:14:98:34:36:b6:f6:ba: e6:d9:ce:01:1e:7c:3c:80:39:7c:12:b1:5b:7c:94: 3a:cf:66:29:c6:43:1d:f8:a7:c6:58:4e:d2:17:c5: 71:5d:17:12:9f:58:c0:2d:de:21:53:89:63:09:39: dc:0c:17:9e:67:f6:18:8c:f0:68:a8:bc:95:e3:61: 4a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B8:07:6C:34:74:4B:CB:B2:49:14:61:EC:D0:6F:35:72:9F:1C:6B X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/l7gHbDR0S8uySRRh7NBvNXKfHGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.124.90.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:7a:2c:2a:9f:84:76:da:37:56:ba:96:e0:b3:fd:f6:4c:a2: 55:b8:a7:6c:af:99:a2:4a:cf:bf:17:6a:b9:35:08:1f:04:a9: 24:a3:5e:e5:6b:88:f7:e8:60:46:b0:49:55:3a:6f:e7:86:7e: 6e:f1:a0:92:82:b5:03:df:eb:9d:83:f1:e7:23:0e:c5:7d:be: 75:0d:75:39:eb:bb:69:bb:2a:7c:2b:61:be:52:19:6e:73:90: 84:6a:94:3a:39:f1:2c:30:f5:16:ea:94:c5:db:23:3f:cd:89: 6c:25:81:d9:7d:99:ea:d4:5f:9f:09:c2:e5:f3:4a:02:fb:28: da:5b:c4:4e:4b:6a:f2:e7:96:83:f8:f3:fd:d2:90:c3:e9:92: 34:c1:4d:44:c3:60:88:a2:15:3f:b1:4c:81:cd:fe:6b:39:85: e3:81:90:3f:f8:bc:b8:48:96:4d:45:c6:19:14:da:92:9a:f7: 05:a0:8f:c3:0a:0c:72:fa:34:24:71:20:73:75:f6:0c:ac:ee: d4:80:e9:4a:23:62:d6:f6:ad:8a:48:cf:57:eb:9e:b4:6e:67: 4b:67:c6:14:0a:a1:ae:ae:02:e2:ec:f4:4f:51:79:e8:38:1e: 80:5f:ff:fa:d9:47:43:14:27:35:65:03:1f:89:97:32:07:a4: ac:45:fe:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hXaQew4i5VuBiIhu6EbBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2I4MDc2YzM0NzQ0YmNiYjI0OTE0NjFlY2QwNmYzNTcyOWYxYzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYdCzu+Jd9EK/k9VIWUcKTcKSZUF 0WkMGr2pHYxKgGPh0WP5HZpV5ukzNUgAPxoLMdFQmtGsmlAsZSGTcFhzd9Zg2f7F hChMvkGQggEnA97rR1v4K2uNoBYUl8u3Yhp/wbDiHB68XqSI1NYzhHYCwuJuy4Wg lt3l/0dszeWHcnXrNP0/DeWM8yTDIMPfkSX3x0GGcZrXSyM8+G5VCweEnZ2PS4FV QlNoo9kahENGJNLm8rCZWoWPiWJ1GRSYNDa29rrm2c4BHnw8gDl8ErFbfJQ6z2Yp xkMd+KfGWE7SF8VxXRcSn1jALd4hU4ljCTncDBeeZ/YYjPBoqLyV42FKEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJe4B2w0dEvLskkUYezQbzVynxxrMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvbDdnSGJEUjBTOHV5U1JSaDdOQnZOWEtmSEdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwXxaMA0G CSqGSIb3DQEBCwUAA4IBAQAueiwqn4R22jdWupbgs/32TKJVuKdsr5miSs+/F2q5 NQgfBKkko17la4j36GBGsElVOm/nhn5u8aCSgrUD3+udg/HnIw7Ffb51DXU567tp uyp8K2G+Uhluc5CEapQ6OfEsMPUW6pTF2yM/zYlsJYHZfZnq1F+fCcLl80oC+yja W8ROS2ry55aD+PP90pDD6ZI0wU1Ew2CIohU/sUyBzf5rOYXjgZA/+Ly4SJZNRcYZ FNqSmvcFoI/DCgxy+jQkcSBzdfYMrO7UgOlKI2LW9q2KSM9X6560bmdLZ8YUCqGu rgLi7PRPUXnoOB6AX//62UdDFCc1ZQMfiZcyB6SsRf48 -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:04 2026 by rpki-client