This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/a7s6-pLwoiyrezAHz-CEXmLAi28.roa File: a7s6-pLwoiyrezAHz-CEXmLAi28.roa (raw, json) Hash identifier: nhlHfUNEeKi77QockWWhGxaJn7C3J9whAR6snvDoVtM= Subject key identifier: 6B:BB:3A:FA:92:F0:A2:2C:AB:7B:30:07:CF:E0:84:5E:62:C0:8B:6F Certificate issuer: /CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384 Certificate serial: 019B7758FD8150405BF89B0EBFC72102D442 Authority key identifier: ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/a7s6-pLwoiyrezAHz-CEXmLAi28.roa Signing time: Thu 01 Jan 2026 02:17:59 +0000 ROA not before: Thu 01 Jan 2026 02:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 286 IP address blocks: 193.17.185.0/24 maxlen: 24 193.17.186.0/24 maxlen: 24 195.234.152.0/24 maxlen: 24 2001:67c:1514::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:fd:81:50:40:5b:f8:9b:0e:bf:c7:21:02:d4:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384 Validity Not Before: Jan 1 02:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6bbb3afa92f0a22cab7b3007cfe0845e62c08b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f9:46:47:7c:aa:7c:21:8a:54:24:05:a8:e6: ed:f5:4f:74:4e:ab:16:de:ad:b6:b8:88:93:6f:96: 99:19:32:65:c3:52:2f:80:4a:a8:79:e5:a2:40:ce: 60:0a:1e:0c:70:99:12:75:97:f2:f4:95:f0:79:8f: 3e:e0:e9:73:81:d1:45:fd:a0:34:40:d4:e9:c0:72: e1:ee:90:a2:a0:b7:ac:3d:05:45:56:7d:35:b3:1c: cb:75:b0:a0:1f:20:57:af:72:99:f8:fb:68:02:73: d1:26:eb:8e:d9:8c:37:31:00:f6:92:3e:93:94:9b: 67:a0:76:dd:7a:73:1b:68:c5:2b:cc:46:47:3d:27: 5c:7d:29:0d:56:bb:2c:fe:45:93:90:9a:d5:5a:8d: c4:a1:22:df:e3:19:29:62:36:e0:e8:1d:bc:4f:cb: fe:48:73:58:92:f9:a5:42:1d:05:33:c2:4a:02:dc: 18:1f:3b:fd:a6:24:4e:4f:76:9e:9a:cf:02:91:ff: 61:15:4f:40:69:3b:f4:f2:c4:50:75:19:df:5b:40: 4a:07:e9:e9:b6:db:32:01:bd:6c:36:60:e0:9e:06: 27:09:b6:f7:b4:38:0c:32:f0:d0:11:d0:87:c2:79: 12:d3:b0:f9:cb:11:83:72:b8:20:a3:ca:a6:04:0b: 11:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BB:3A:FA:92:F0:A2:2C:AB:7B:30:07:CF:E0:84:5E:62:C0:8B:6F X509v3 Authority Key Identifier: keyid:ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/a7s6-pLwoiyrezAHz-CEXmLAi28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.185.0-193.17.186.255 195.234.152.0/24 IPv6: 2001:67c:1514::/48 Signature Algorithm: sha256WithRSAEncryption 72:cc:39:97:96:b8:1d:77:a7:cd:f8:d2:84:2c:15:4a:57:2d: b9:e7:26:8a:29:98:1d:86:0a:17:b6:96:df:70:7a:e4:2b:a3: be:92:4f:30:c7:ff:04:58:56:d0:ed:d7:78:9e:f5:8a:5e:64: c1:53:7a:b3:d3:63:36:9f:1f:fe:a9:26:d3:48:67:ad:89:70: 06:06:ad:17:b3:31:28:c7:48:72:2e:26:c3:95:91:66:88:78: 07:3e:c5:b4:0c:ff:9e:b2:ad:07:36:cb:51:c7:b1:9a:2f:bf: 63:ba:20:66:d8:b3:23:1d:8c:ae:e3:b0:5a:81:a2:00:d6:ad: e7:61:54:27:0f:97:62:db:97:fb:6e:a5:e6:cf:f3:27:a5:39: 12:a9:e9:e9:f2:cf:fc:cb:4f:fe:9b:99:7a:43:bb:63:ee:e9: 17:c6:ea:b9:33:c0:f1:9d:0f:86:7e:b2:c1:21:e8:51:e7:a8: f2:b2:ee:1d:7c:43:5c:f8:67:16:57:e2:b6:fc:69:bb:d3:c1: c8:94:1f:ae:00:eb:89:92:9c:84:6e:34:f9:e5:34:9f:f4:e7: 74:b1:35:4c:b0:86:87:98:f4:5b:dd:87:12:1b:9f:84:0e:80: 76:4e:4c:a8:de:eb:8d:35:1b:a3:cf:d6:92:8c:bb:ed:0b:fd: bf:de:cb:3b -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt3WP2BUEBb+JsOv8chAtRCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkOTU1MzNlZjQ3ZmQ5NGI4YzU1NGRmM2QyMjhlZWRjZDRj YTAzODQwHhcNMjYwMTAxMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmJiM2FmYTkyZjBhMjJjYWI3YjMwMDdjZmUwODQ1ZTYyYzA4YjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvlGR3yqfCGKVCQFqObt9U90TqsW 3q22uIiTb5aZGTJlw1IvgEqoeeWiQM5gCh4McJkSdZfy9JXweY8+4OlzgdFF/aA0 QNTpwHLh7pCioLesPQVFVn01sxzLdbCgHyBXr3KZ+PtoAnPRJuuO2Yw3MQD2kj6T lJtnoHbdenMbaMUrzEZHPSdcfSkNVrss/kWTkJrVWo3EoSLf4xkpYjbg6B28T8v+ SHNYkvmlQh0FM8JKAtwYHzv9piROT3aems8Ckf9hFU9AaTv08sRQdRnfW0BKB+np ttsyAb1sNmDgngYnCbb3tDgMMvDQEdCHwnkS07D5yxGDcrggo8qmBAsRFwIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFGu7OvqS8KIsq3swB8/ghF5iwItvMB8GA1UdIwQY MBaAFO2VUz70f9lLjFVN89Io7tzUygOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1pWVFB2Ul8yVXVNVlUzejBpanUzTlRLQTRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83YTA0MjMtOWE5NS00MmMxLTgxZTUt MTRkYTc5ZDZjM2FhLzEvYTdzNi1wTHdvaXlyZXpBSHotQ0VYbUxBaTI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83YTA0MjMtOWE5NS00MmMxLTgxZTUtMTRkYTc5ZDZjM2Fh LzEvN1pWVFB2Ul8yVXVNVlUzejBpanUzTlRLQTRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUMAwDBADBEbkD BADBEboDBADD6pgwDwQCAAIwCQMHACABBnwVFDANBgkqhkiG9w0BAQsFAAOCAQEA csw5l5a4HXenzfjShCwVSlctuecmiimYHYYKF7aW33B65CujvpJPMMf/BFhW0O3X eJ71il5kwVN6s9NjNp8f/qkm00hnrYlwBgatF7MxKMdIci4mw5WRZoh4Bz7FtAz/ nrKtBzbLUcexmi+/Y7ogZtizIx2MruOwWoGiANat52FUJw+XYtuX+26l5s/zJ6U5 Eqnp6fLP/MtP/puZekO7Y+7pF8bquTPA8Z0Phn6ywSHoUeeo8rLuHXxDXPhnFlfi tvxpu9PByJQfrgDriZKchG40+eU0n/TndLE1TLCGh5j0W92HEhufhA6Adk5MqN7r jTUbo8/Wkoy77Qv9v97LOw== -----END CERTIFICATE-----Generated at Fri Jan 2 19:42:44 2026 by rpki-client