This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/g7yZx1fNYRztkH6Egf1MCdRKIp0.roa File: g7yZx1fNYRztkH6Egf1MCdRKIp0.roa (raw, json) Hash identifier: LeThgOMJvz5v6ZJTEM4z4doFArcbIegSXRy9an5TMEY= Subject key identifier: 83:BC:99:C7:57:CD:61:1C:ED:90:7E:84:81:FD:4C:09:D4:4A:22:9D Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019B7FF16A6BECE5BE48BC98273C90E61ECC Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/g7yZx1fNYRztkH6Egf1MCdRKIp0.roa Signing time: Fri 02 Jan 2026 18:21:26 +0000 ROA not before: Fri 02 Jan 2026 18:21:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48447 IP address blocks: 193.160.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:6a:6b:ec:e5:be:48:bc:98:27:3c:90:e6:1e:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Jan 2 18:21:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83bc99c757cd611ced907e8481fd4c09d44a229d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8a:ca:ac:77:f2:61:30:64:5e:b5:f3:03:79: 54:0d:1f:d2:14:e9:ee:45:6d:35:d7:94:6c:35:16: 3b:b8:25:74:a5:f3:61:6a:bb:9d:bf:0d:f8:03:e2: f9:ef:18:ed:f9:cd:39:aa:e7:4c:1d:dd:9d:82:ce: 3e:2a:c4:fc:42:e5:4c:7d:fa:94:c9:fd:87:bf:bb: b2:31:b0:3e:d7:d6:86:ab:c7:bf:8a:b3:8c:20:04: 78:ec:de:1e:c4:02:a2:03:c2:3d:9c:f6:5c:d3:4b: eb:63:72:39:b9:32:01:68:f5:4c:36:21:f6:a3:9b: 98:d6:d7:b4:30:50:49:89:c2:62:05:7c:76:2c:86: 3f:cf:f4:de:17:95:94:b0:15:22:e0:16:61:65:8e: e3:74:17:db:84:45:0e:bd:bc:d5:77:db:e2:d6:14: 07:ed:c3:eb:c1:62:03:c4:56:38:bb:2a:fa:65:4d: e8:7c:f8:43:b2:a5:a8:d2:44:11:03:c3:68:ea:99: a4:fe:e2:00:af:2e:30:87:a3:c4:09:85:e3:1c:22: e1:60:36:15:96:68:10:e5:56:4a:5c:e2:b7:d1:99: 3f:2d:9d:e3:4c:2f:6f:91:04:23:98:4a:53:48:c8: be:8c:17:c1:fe:18:c6:fc:8a:34:b6:7c:de:c9:27: 74:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:BC:99:C7:57:CD:61:1C:ED:90:7E:84:81:FD:4C:09:D4:4A:22:9D X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/g7yZx1fNYRztkH6Egf1MCdRKIp0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.160.223.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:f0:34:ee:d1:4e:04:97:bd:3c:cd:5c:9f:a4:1a:d7:37:a1: c6:24:da:20:93:8b:54:65:86:00:f0:1a:43:59:f3:dc:23:6e: 74:20:55:8c:18:3c:c5:7b:c0:c1:27:6e:f3:c9:76:5c:c4:f3: 9e:94:72:86:f3:07:d7:8e:77:2f:e1:cf:ea:e7:cc:16:de:3d: 9d:ba:8b:57:01:c0:a7:f0:fa:25:ef:25:bb:98:8f:62:6c:cc: 31:7c:df:5d:79:12:bd:32:97:98:be:71:9c:bc:fc:ea:e6:8f: ee:4c:8c:bc:ee:01:f1:f7:a6:30:c0:59:5c:7f:50:4c:e0:52: 2f:87:6d:d8:b2:09:8d:85:89:34:0f:17:84:4a:30:9c:c1:ce: c6:c5:f3:4f:82:e7:77:48:54:d0:ac:d6:34:9c:09:13:a1:20: a7:46:b3:89:ec:a8:9a:db:3b:4c:e9:02:86:0a:e9:bd:39:80: ce:0a:d6:73:5c:2c:20:45:cb:52:17:80:4d:28:c8:41:93:16: c7:5c:25:a1:07:43:67:38:d4:08:7e:3d:3a:f2:4a:9b:c7:16: 12:de:2e:3a:92:e7:f4:7b:93:8d:29:1e:fa:31:94:01:76:a9: 32:f1:38:36:ee:bb:57:13:1e:1f:6b:5b:04:ee:cf:ea:f6:4e: 65:76:48:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8Wpr7OW+SLyYJzyQ5h7MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjYwMTAyMTgyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2JjOTljNzU3Y2Q2MTFjZWQ5MDdlODQ4MWZkNGMwOWQ0NGEyMjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYrKrHfyYTBkXrXzA3lUDR/SFOnu RW0115RsNRY7uCV0pfNharudvw34A+L57xjt+c05qudMHd2dgs4+KsT8QuVMffqU yf2Hv7uyMbA+19aGq8e/irOMIAR47N4exAKiA8I9nPZc00vrY3I5uTIBaPVMNiH2 o5uY1te0MFBJicJiBXx2LIY/z/TeF5WUsBUi4BZhZY7jdBfbhEUOvbzVd9vi1hQH 7cPrwWIDxFY4uyr6ZU3ofPhDsqWo0kQRA8No6pmk/uIAry4wh6PECYXjHCLhYDYV lmgQ5VZKXOK30Zk/LZ3jTC9vkQQjmEpTSMi+jBfB/hjG/Io0tnzeySd0KQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIO8mcdXzWEc7ZB+hIH9TAnUSiKdMB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvZzd5WngxZk5ZUnp0a0g2RWdmMU1DZFJLSXAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaDfMA0G CSqGSIb3DQEBCwUAA4IBAQAs8DTu0U4El708zVyfpBrXN6HGJNogk4tUZYYA8BpD WfPcI250IFWMGDzFe8DBJ27zyXZcxPOelHKG8wfXjncv4c/q58wW3j2duotXAcCn 8Pol7yW7mI9ibMwxfN9deRK9MpeYvnGcvPzq5o/uTIy87gHx96YwwFlcf1BM4FIv h23YsgmNhYk0DxeESjCcwc7GxfNPgud3SFTQrNY0nAkToSCnRrOJ7Kia2ztM6QKG Cum9OYDOCtZzXCwgRctSF4BNKMhBkxbHXCWhB0NnONQIfj068kqbxxYS3i46kuf0 e5ONKR76MZQBdqky8Tg27rtXEx4fa1sE7s/q9k5ldkjL -----END CERTIFICATE-----Generated at Mon Jan 19 14:38:56 2026 by rpki-client