This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/SU7jKC7yODQ_z08lx0PGJnXbADY.roa File: SU7jKC7yODQ_z08lx0PGJnXbADY.roa (raw, json) Hash identifier: E0uEOy5FY0fZEiQFP6DBAyY4w/FgVcaXCiUdTQCllR0= Subject key identifier: 49:4E:E3:28:2E:F2:38:34:3F:CF:4F:25:C7:43:C6:26:75:DB:00:36 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B35746B10CE221D5F99472833BDB56C Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/SU7jKC7yODQ_z08lx0PGJnXbADY.roa Signing time: Thu 01 Jan 2026 20:17:39 +0000 ROA not before: Thu 01 Jan 2026 20:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47427 IP address blocks: 80.96.224.0/23 maxlen: 23 81.180.90.0/23 maxlen: 23 193.231.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:74:6b:10:ce:22:1d:5f:99:47:28:33:bd:b5:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=494ee3282ef238343fcf4f25c743c62675db0036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fc:e9:e6:43:b4:b3:6a:85:33:5c:92:db:cf: 7c:cc:71:96:38:26:9f:31:07:c2:4c:1a:e0:c5:72: 59:ef:e1:c6:06:bc:d8:fb:85:4e:9a:67:c5:ed:ae: 91:20:42:14:24:93:31:97:1c:b4:53:45:47:65:93: df:a0:f0:ca:37:6c:fc:65:bc:1a:98:84:b6:b8:2e: 8e:e9:5d:1d:6a:07:ec:5e:98:07:bd:07:b4:45:a9: 05:3d:1c:6b:f8:ed:40:5a:68:59:6c:b2:b5:c2:fd: 15:ac:2b:47:1d:6e:3a:6e:ad:53:2c:d4:d6:3c:d1: 2a:a7:b3:41:be:61:12:e3:93:7c:1f:05:23:08:f8: 44:94:10:24:27:ed:c6:4e:0d:17:b5:d1:90:9f:36: f6:2f:ee:38:ae:72:48:fe:fe:54:fc:c9:66:5b:41: d7:c2:3c:e1:ee:33:4c:29:eb:6b:52:d4:c2:a1:7a: 9b:d4:bb:54:b5:fc:e9:1d:c5:9f:44:f0:a2:26:4b: 1a:99:cb:88:85:ee:a0:07:23:e4:54:7f:7e:63:5d: 13:d6:39:14:ec:fc:60:d7:bd:53:4d:63:ac:fc:13: 76:54:a3:63:7c:5e:29:91:c1:c9:73:eb:2f:63:98: 9e:4c:e8:d6:4e:a9:84:de:28:78:6e:9a:93:59:d8: 62:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4E:E3:28:2E:F2:38:34:3F:CF:4F:25:C7:43:C6:26:75:DB:00:36 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/SU7jKC7yODQ_z08lx0PGJnXbADY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.96.224.0/23 81.180.90.0/23 193.231.77.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:36:86:b4:d3:a0:4f:31:5f:0f:cc:04:88:bf:8b:29:fc:97: 48:0c:f3:bb:0a:21:27:69:e9:75:a3:55:11:32:bd:4c:37:e6: d5:ee:28:6a:ba:5b:86:59:4d:19:95:8f:d5:5a:8c:3a:2e:7b: b8:49:31:5b:16:5a:74:57:8c:19:c8:71:65:db:cf:c2:11:73: 4d:37:49:c0:da:1c:dd:26:4f:f7:64:52:c3:83:ab:8a:f1:85: 5e:e1:f8:0c:dd:48:8c:7b:69:7f:28:89:0f:c6:c2:31:9c:e0: 0d:93:a2:df:ed:78:dc:05:4f:de:5c:9e:17:a0:9d:66:4d:b8: 6b:81:e5:71:47:11:9c:da:9d:df:14:f8:37:62:2b:57:56:74: fd:55:e9:69:ab:5e:0d:bb:73:6d:d1:cf:75:42:92:ac:06:82: f1:de:e8:26:c6:bb:42:b3:6f:bb:7a:bf:e8:0a:79:2c:2d:53: e5:28:5e:a8:32:64:10:15:5c:26:d1:4a:7d:a4:d3:bb:7b:b1: c9:b8:42:a4:e0:3e:e4:e5:38:38:8f:2e:35:fe:ac:f6:77:97: 2e:52:92:0c:2f:13:76:b7:6e:02:c4:14:ab:70:37:51:20:71: 21:b5:e9:d1:ee:c7:c4:f1:d1:3c:6d:96:ac:4b:1c:f4:3d:91: 21:8b:1e:d9 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7NXRrEM4iHV+ZRygzvbVsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTRlZTMyODJlZjIzODM0M2ZjZjRmMjVjNzQzYzYyNjc1ZGIwMDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/zp5kO0s2qFM1yS2898zHGWOCaf MQfCTBrgxXJZ7+HGBrzY+4VOmmfF7a6RIEIUJJMxlxy0U0VHZZPfoPDKN2z8Zbwa mIS2uC6O6V0dagfsXpgHvQe0RakFPRxr+O1AWmhZbLK1wv0VrCtHHW46bq1TLNTW PNEqp7NBvmES45N8HwUjCPhElBAkJ+3GTg0XtdGQnzb2L+44rnJI/v5U/MlmW0HX wjzh7jNMKetrUtTCoXqb1LtUtfzpHcWfRPCiJksamcuIhe6gByPkVH9+Y10T1jkU 7Pxg171TTWOs/BN2VKNjfF4pkcHJc+svY5ieTOjWTqmE3ih4bpqTWdhi+QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFElO4ygu8jg0P89PJcdDxiZ12wA2MB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvU1U3aktDN3lPRFFfejA4bHgwUEdKblhiQURZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBUGDgAwQB UbRaAwQAwedNMA0GCSqGSIb3DQEBCwUAA4IBAQBeNoa006BPMV8PzASIv4sp/JdI DPO7CiEnael1o1URMr1MN+bV7ihquluGWU0ZlY/VWow6Lnu4STFbFlp0V4wZyHFl 28/CEXNNN0nA2hzdJk/3ZFLDg6uK8YVe4fgM3UiMe2l/KIkPxsIxnOANk6Lf7Xjc BU/eXJ4XoJ1mTbhrgeVxRxGc2p3fFPg3YitXVnT9Velpq14Nu3Nt0c91QpKsBoLx 3ugmxrtCs2+7er/oCnksLVPlKF6oMmQQFVwm0Up9pNO7e7HJuEKk4D7k5Tg4jy41 /qz2d5cuUpIMLxN2t24CxBSrcDdRIHEhtenR7sfE8dE8bZasSxz0PZEhix7Z -----END CERTIFICATE-----Generated at Tue Jan 20 02:50:01 2026 by rpki-client