This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/e7Z2PR7xiMg2qO87UOgZBfNHWVA.roa File: e7Z2PR7xiMg2qO87UOgZBfNHWVA.roa (raw, json) Hash identifier: 2MJbHB4+HtGJ4wxkgZ0Dl95e/tJehFc1YChaP86nwFM= Subject key identifier: 7B:B6:76:3D:1E:F1:88:C8:36:A8:EF:3B:50:E8:19:05:F3:47:59:50 Certificate issuer: /CN=9863354a111af6d5e1ad10da38ad8144b6be868e Certificate serial: 019B78A370302029B4954F06527C80B14D5A Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/e7Z2PR7xiMg2qO87UOgZBfNHWVA.roa Signing time: Thu 01 Jan 2026 08:18:55 +0000 ROA not before: Thu 01 Jan 2026 08:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 193.134.253.0/24 maxlen: 24 193.135.101.0/24 maxlen: 24 2a14:8980::/48 maxlen: 48 2a14:8981::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:70:30:20:29:b4:95:4f:06:52:7c:80:b1:4d:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e Validity Not Before: Jan 1 08:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7bb6763d1ef188c836a8ef3b50e81905f3475950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a9:db:23:26:73:26:d3:f9:a6:5f:1c:48:c1: c6:7f:35:89:d3:57:0f:38:6d:42:9d:f4:0e:d5:d8: 07:a3:92:2b:e9:0c:a8:ae:c4:aa:cb:84:5c:0c:9d: b4:ae:14:19:e1:71:cb:74:36:8d:46:d4:ab:7c:4e: 82:d8:c7:e0:ba:9c:bd:0f:de:fd:81:51:76:d5:8d: b2:ae:4e:c9:c9:f5:c1:64:85:2d:fe:c0:bf:37:cf: 37:1a:93:43:b5:8f:1b:cc:c8:61:93:69:5e:78:fd: 3d:04:45:59:79:29:84:55:41:01:06:5e:7f:ee:cc: 35:4d:8a:4e:77:bf:95:ed:07:a6:50:ac:ce:9f:32: b5:9d:a7:81:fc:07:89:01:26:e5:3e:ee:1b:5d:16: 85:a1:fc:c7:67:51:1b:fc:31:31:09:9d:41:64:3f: c3:82:9f:25:73:68:6f:74:71:34:c2:92:92:42:4d: 05:bb:bb:ff:62:a9:ec:95:fd:e8:4e:50:c7:7f:12: dc:38:c5:4d:1a:05:9f:23:26:5d:1c:a2:fc:9f:90: f2:35:c2:82:dc:8e:9b:95:96:d8:f6:c1:a3:e7:44: 2e:82:30:bd:e5:51:a9:a9:f2:af:3d:2f:08:f2:32: 63:9e:fd:77:d8:fe:0d:86:73:86:42:d5:ac:7b:96: 4b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B6:76:3D:1E:F1:88:C8:36:A8:EF:3B:50:E8:19:05:F3:47:59:50 X509v3 Authority Key Identifier: keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/e7Z2PR7xiMg2qO87UOgZBfNHWVA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.134.253.0/24 193.135.101.0/24 IPv6: 2a14:8980::/48 2a14:8981::/48 Signature Algorithm: sha256WithRSAEncryption 55:d4:de:86:f0:6b:55:0d:c3:2c:ca:cd:48:33:59:47:d9:d7: bb:ee:a6:57:c1:7a:e6:08:7a:78:d6:b9:59:86:62:5f:46:e8: 6a:49:6d:96:65:92:10:d4:23:52:49:ba:4d:59:88:24:ca:0f: a6:04:b7:6b:7b:fd:c7:45:f6:68:c5:4e:6f:23:f8:0c:18:50: 04:26:74:72:71:8d:aa:66:46:d5:b3:3c:91:18:ef:ad:25:3b: ec:2a:82:41:78:9c:1c:b5:10:ae:ff:c4:ed:94:3b:75:67:dd: 83:96:08:8d:2e:4b:f5:cf:6f:4e:7e:74:d8:44:98:f4:1b:cc: 48:2d:5d:7b:da:45:1f:e1:5d:bf:90:d2:e8:0f:af:b1:a9:b0: 0d:e8:17:39:9f:12:19:a0:81:c2:0b:41:b6:5c:84:17:4d:d3: 4c:9e:bd:0d:10:93:e6:8f:27:5e:31:cb:d9:76:07:f1:e5:ce: b4:1c:e3:1b:cb:d9:d2:3c:87:b9:2c:85:ad:88:e4:8a:18:70: 9b:c1:f6:a8:3d:97:d0:db:6e:07:3e:e8:87:45:de:b7:21:0f: 20:4a:d1:4a:9a:41:05:2e:06:ae:ef:28:8c:cf:2f:f7:85:8c: c2:4e:20:35:71:0e:5a:c7:61:fc:e5:71:2d:0f:1c:27:05:29: 93:c9:52:d3 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt4o3AwICm0lU8GUnyAsU1aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NjMzNTRhMTExYWY2ZDVlMWFkMTBkYTM4YWQ4MTQ0YjZi ZTg2OGUwHhcNMjYwMTAxMDgxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmI2NzYzZDFlZjE4OGM4MzZhOGVmM2I1MGU4MTkwNWYzNDc1OTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqnbIyZzJtP5pl8cSMHGfzWJ01cP OG1CnfQO1dgHo5Ir6QyorsSqy4RcDJ20rhQZ4XHLdDaNRtSrfE6C2Mfgupy9D979 gVF21Y2yrk7JyfXBZIUt/sC/N883GpNDtY8bzMhhk2leeP09BEVZeSmEVUEBBl5/ 7sw1TYpOd7+V7QemUKzOnzK1naeB/AeJASblPu4bXRaFofzHZ1Eb/DExCZ1BZD/D gp8lc2hvdHE0wpKSQk0Fu7v/Yqnslf3oTlDHfxLcOMVNGgWfIyZdHKL8n5DyNcKC 3I6blZbY9sGj50QugjC95VGpqfKvPS8I8jJjnv132P4NhnOGQtWse5ZLRwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFHu2dj0e8YjINqjvO1DoGQXzR1lQMB8GA1UdIwQY MBaAFJhjNUoRGvbV4a0Q2jitgUS2voaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUdNMVNoRWE5dFhoclJEYU9LMkJSTGEtaG80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9iZWE4NDctYTc4My00ODlkLWFlNGIt NTNmNTc1MDRlZjM1LzEvZTdaMlBSN3hpTWcycU84N1VPZ1pCZk5IV1ZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9iZWE4NDctYTc4My00ODlkLWFlNGItNTNmNTc1MDRlZjM1 LzEvbUdNMVNoRWE5dFhoclJEYU9LMkJSTGEtaG80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAwYb9AwQA wYdlMBgEAgACMBIDBwAqFImAAAADBwAqFImBAAAwDQYJKoZIhvcNAQELBQADggEB AFXU3obwa1UNwyzKzUgzWUfZ17vuplfBeuYIenjWuVmGYl9G6GpJbZZlkhDUI1JJ uk1ZiCTKD6YEt2t7/cdF9mjFTm8j+AwYUAQmdHJxjapmRtWzPJEY760lO+wqgkF4 nBy1EK7/xO2UO3Vn3YOWCI0uS/XPb05+dNhEmPQbzEgtXXvaRR/hXb+Q0ugPr7Gp sA3oFzmfEhmggcILQbZchBdN00yevQ0Qk+aPJ14xy9l2B/HlzrQc4xvL2dI8h7ks ha2I5IoYcJvB9qg9l9Dbbgc+6IdF3rchDyBK0UqaQQUuBq7vKIzPL/eFjMJOIDVx DlrHYfzlcS0PHCcFKZPJUtM= -----END CERTIFICATE-----Generated at Fri Jan 2 09:30:24 2026 by rpki-client