This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/m7ka3GTgMeqm1ki2dDpAuEKjwdM.roa File: m7ka3GTgMeqm1ki2dDpAuEKjwdM.roa (raw, json) Hash identifier: 77rePDrGBduV4VbCULV3j9BdzB+b3yDNJM//8C/mjto= Subject key identifier: 9B:B9:1A:DC:64:E0:31:EA:A6:D6:48:B6:74:3A:40:B8:42:A3:C1:D3 Certificate issuer: /CN=22a72f3ed23e2294f9bb6ba660246166c13f8324 Certificate serial: 019B7AC7CF5A709B090FE10CE457A1A876A8 Authority key identifier: 22:A7:2F:3E:D2:3E:22:94:F9:BB:6B:A6:60:24:61:66:C1:3F:83:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/m7ka3GTgMeqm1ki2dDpAuEKjwdM.roa Signing time: Thu 01 Jan 2026 18:17:53 +0000 ROA not before: Thu 01 Jan 2026 18:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25059 IP address blocks: 193.201.212.0/22 maxlen: 22 193.201.212.0/24 maxlen: 24 193.201.213.0/24 maxlen: 24 193.201.214.0/24 maxlen: 24 193.201.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:cf:5a:70:9b:09:0f:e1:0c:e4:57:a1:a8:76:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a72f3ed23e2294f9bb6ba660246166c13f8324 Validity Not Before: Jan 1 18:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bb91adc64e031eaa6d648b6743a40b842a3c1d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9b:01:bb:05:4d:e3:01:15:16:cc:d1:76:2f: e6:38:09:44:73:cc:6f:99:86:2d:08:9d:64:d1:5c: 85:83:13:13:67:9c:4b:1f:ac:c3:5c:e0:09:7d:f1: 5e:2d:9d:af:58:f0:44:96:f5:9a:fa:09:37:6b:7a: a1:82:e0:38:c1:56:2a:d5:94:72:97:57:2b:ac:3a: 82:11:11:ee:a5:19:48:61:1a:85:9e:64:17:28:7d: 40:a9:5d:64:c5:98:cf:62:16:77:3e:d1:9e:e1:a9: 36:83:9b:a3:91:cb:78:3f:dc:00:d1:75:cf:70:f3: 09:d6:13:cb:8b:05:c4:9b:2f:30:de:3b:a5:1c:d2: ab:88:14:6e:6e:db:aa:02:62:28:0d:ca:03:02:ae: 18:a7:8f:be:65:7a:00:a8:ff:f3:41:90:9a:b7:d2: 56:ad:38:a3:8c:a1:25:f5:1b:69:fd:a5:00:5f:62: 93:ac:4a:95:fd:56:c3:9a:ea:f1:6e:bf:bd:fb:97: 22:3e:20:35:62:fa:e2:dc:4b:bb:ca:e1:eb:1f:e6: 37:c1:a8:93:80:9d:cb:3b:75:e3:4e:b5:00:9b:38: 9d:cc:db:02:09:53:21:08:7e:56:e7:8b:f0:80:c1: 03:92:dc:4e:4c:46:45:56:73:29:3b:f3:55:37:0d: 99:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B9:1A:DC:64:E0:31:EA:A6:D6:48:B6:74:3A:40:B8:42:A3:C1:D3 X509v3 Authority Key Identifier: keyid:22:A7:2F:3E:D2:3E:22:94:F9:BB:6B:A6:60:24:61:66:C1:3F:83:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/m7ka3GTgMeqm1ki2dDpAuEKjwdM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.201.212.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:78:86:dd:6e:0c:4a:66:a5:69:6b:38:10:74:03:74:8f:1a: 24:2d:0f:cf:83:f8:db:67:bd:4e:e4:12:ee:25:97:87:18:2b: 43:b6:e9:d9:18:55:2b:22:7c:b9:05:95:82:27:f7:28:f1:48: 58:df:89:38:12:33:f0:c4:da:59:a7:aa:c9:a0:e6:77:b6:4e: ed:5e:74:d2:e0:86:ca:4d:12:ef:b2:c5:fa:e9:31:e1:3d:4c: 5d:4d:ab:d4:80:af:83:2c:6b:03:5e:c0:3d:87:57:4f:e8:54: f2:50:07:75:04:b4:01:0f:06:3d:c5:86:cd:75:6d:48:20:56: 71:e6:36:dd:27:16:09:95:20:ad:27:ab:a4:ca:76:75:ad:b5: 55:77:4d:50:67:3b:06:80:f6:e4:e0:4e:6b:c8:45:20:bd:73: ba:55:7c:4d:61:da:a7:4b:e9:6d:aa:44:29:1b:b8:04:36:0e: 40:61:80:d6:5c:ce:78:22:bb:4d:40:73:e9:6d:c6:3f:b3:8a: 6e:91:0d:8b:73:69:c8:11:24:1f:7a:8d:00:69:9e:fc:31:e2: 8d:c6:e1:01:be:a5:4c:14:46:6a:0f:73:c2:8e:ab:22:cc:83: 5e:7f:ac:11:e8:9d:61:c4:3b:69:54:29:22:a2:f3:8c:69:4e: 01:59:b9:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x89acJsJD+EM5FehqHaoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTcyZjNlZDIzZTIyOTRmOWJiNmJhNjYwMjQ2MTY2YzEz ZjgzMjQwHhcNMjYwMTAxMTgxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmI5MWFkYzY0ZTAzMWVhYTZkNjQ4YjY3NDNhNDBiODQyYTNjMWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5sBuwVN4wEVFszRdi/mOAlEc8xv mYYtCJ1k0VyFgxMTZ5xLH6zDXOAJffFeLZ2vWPBElvWa+gk3a3qhguA4wVYq1ZRy l1crrDqCERHupRlIYRqFnmQXKH1AqV1kxZjPYhZ3PtGe4ak2g5ujkct4P9wA0XXP cPMJ1hPLiwXEmy8w3julHNKriBRubtuqAmIoDcoDAq4Yp4++ZXoAqP/zQZCat9JW rTijjKEl9Rtp/aUAX2KTrEqV/VbDmurxbr+9+5ciPiA1Yvri3Eu7yuHrH+Y3waiT gJ3LO3XjTrUAmzidzNsCCVMhCH5W54vwgMEDktxOTEZFVnMpO/NVNw2ZrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJu5Gtxk4DHqptZItnQ6QLhCo8HTMB8GA1UdIwQY MBaAFCKnLz7SPiKU+btrpmAkYWbBP4MkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFjdlB0SS1JcFQ1dTJ1bVlDUmhac0VfZ3lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80Nzk2NzMtOTY2Ny00ZWRhLWJiYmQt YjBiMmVhYWVlZDYxLzEvbTdrYTNHVGdNZXFtMWtpMmREcEF1RUtqd2RNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80Nzk2NzMtOTY2Ny00ZWRhLWJiYmQtYjBiMmVhYWVlZDYx LzEvSXFjdlB0SS1JcFQ1dTJ1bVlDUmhac0VfZ3lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwcnUMA0G CSqGSIb3DQEBCwUAA4IBAQAveIbdbgxKZqVpazgQdAN0jxokLQ/Pg/jbZ71O5BLu JZeHGCtDtunZGFUrIny5BZWCJ/co8UhY34k4EjPwxNpZp6rJoOZ3tk7tXnTS4IbK TRLvssX66THhPUxdTavUgK+DLGsDXsA9h1dP6FTyUAd1BLQBDwY9xYbNdW1IIFZx 5jbdJxYJlSCtJ6ukynZ1rbVVd01QZzsGgPbk4E5ryEUgvXO6VXxNYdqnS+ltqkQp G7gENg5AYYDWXM54IrtNQHPpbcY/s4pukQ2Lc2nIESQfeo0AaZ78MeKNxuEBvqVM FEZqD3PCjqsizINef6wR6J1hxDtpVCkiovOMaU4BWblB -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:59 2026 by rpki-client