This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/F7SCLIzy92KJ-NREaaVjODfHqik.roa File: F7SCLIzy92KJ-NREaaVjODfHqik.roa (raw, json) Hash identifier: BwWuIIlFuPQUtjh0Ydgc0I6ELzPNPwQINU9/s1qI1yY= Subject key identifier: 17:B4:82:2C:8C:F2:F7:62:89:F8:D4:44:69:A5:63:38:37:C7:AA:29 Certificate issuer: /CN=0b31cb530fe52fcc029e6497e778200398c29f3c Certificate serial: 019B79EC930875DA1DEEF718D27842DFDF40 Authority key identifier: 0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/F7SCLIzy92KJ-NREaaVjODfHqik.roa Signing time: Thu 01 Jan 2026 14:18:25 +0000 ROA not before: Thu 01 Jan 2026 14:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5483 IP address blocks: 185.51.188.0/24 maxlen: 24 2a01:b5e0::/104 maxlen: 104 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:93:08:75:da:1d:ee:f7:18:d2:78:42:df:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b31cb530fe52fcc029e6497e778200398c29f3c Validity Not Before: Jan 1 14:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17b4822c8cf2f76289f8d44469a5633837c7aa29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c6:d7:34:d1:d2:04:40:a2:b5:46:7f:ba:20: 91:f1:be:59:fd:ae:6d:74:35:bb:d8:08:80:b0:ac: 35:20:8c:ff:b0:db:24:64:b6:3b:09:67:63:70:51: 0b:8f:90:4e:33:57:d5:aa:a0:b7:f6:40:5f:68:3c: 90:dd:55:3d:34:75:53:72:71:dd:cd:30:70:a1:50: 53:8e:af:12:f9:b7:0c:bb:1c:ff:20:4e:0d:75:b0: 99:df:7a:8f:49:86:d9:53:0c:ed:6d:76:d9:bd:ae: 13:d6:65:2c:bd:ae:2d:08:0d:47:1d:e2:05:81:5d: 47:6b:ee:42:6c:7f:3a:0a:89:3a:eb:b4:cd:b1:89: e5:1b:96:5e:e2:b4:0c:b0:dd:5e:b3:39:d9:78:fc: 07:e7:ee:69:05:8a:cb:3a:92:be:79:bd:35:9f:d1: b1:c3:fe:27:8e:7a:6f:0c:6f:4d:7f:e5:a2:7f:0f: e5:01:f6:eb:d7:ae:7e:9b:51:54:c0:95:48:83:85: 93:54:d2:cd:cc:69:3a:66:98:7a:15:59:2b:a4:13: c3:4e:cd:d7:8f:f9:85:e1:ac:05:57:fe:6b:15:c5: cd:c7:2a:fe:a9:7e:63:11:5b:d3:56:6b:1d:9b:ee: 6d:3d:de:7c:e4:5e:2e:29:25:dd:fa:3e:bd:64:13: e4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B4:82:2C:8C:F2:F7:62:89:F8:D4:44:69:A5:63:38:37:C7:AA:29 X509v3 Authority Key Identifier: keyid:0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/F7SCLIzy92KJ-NREaaVjODfHqik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.51.188.0/24 IPv6: 2a01:b5e0::/104 Signature Algorithm: sha256WithRSAEncryption 12:23:34:e5:e8:54:73:38:13:d3:a8:84:92:0f:77:38:b9:9c: 68:5e:89:a5:17:8d:c0:d2:1d:44:47:c6:56:12:0c:98:40:62: 27:03:af:59:51:39:4d:cc:f8:4c:51:75:f4:e2:9e:8b:ed:bf: 29:fd:25:34:cc:02:5c:9c:4a:44:1b:16:21:84:8f:79:a1:09: 73:32:f8:c5:08:a5:43:33:64:19:40:79:9c:bd:09:4c:b7:7b: d4:77:21:26:41:15:1f:c7:51:94:5a:75:ba:98:7a:cb:a8:da: 20:85:05:94:39:a3:18:99:82:e0:b9:2b:c0:59:d1:ad:9a:e1: 92:59:d6:3c:f5:b9:81:67:25:8a:88:28:60:fc:31:78:2a:a2: 62:b0:74:58:c7:35:c3:10:25:b1:90:28:85:e3:12:70:93:df: e3:ad:50:0a:bb:3e:97:f3:55:fc:a2:26:00:1b:29:b0:23:49: 52:a3:2a:19:f8:96:72:b5:bd:8c:f3:47:e1:b6:32:d2:21:68: 9d:12:a9:65:df:eb:95:bb:89:f8:7c:46:73:96:e4:58:43:ec: 19:c8:46:0f:d4:4d:69:61:5e:4a:74:76:74:88:c5:1a:04:7e: 16:00:f7:5f:1b:4c:9b:92:ee:83:5e:7a:f9:51:47:25:0d:98: 28:d8:65:67 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt57JMIddod7vcY0nhC399AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMzFjYjUzMGZlNTJmY2MwMjllNjQ5N2U3NzgyMDAzOThj MjlmM2MwHhcNMjYwMTAxMTQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2I0ODIyYzhjZjJmNzYyODlmOGQ0NDQ2OWE1NjMzODM3YzdhYTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sbXNNHSBECitUZ/uiCR8b5Z/a5t dDW72AiAsKw1IIz/sNskZLY7CWdjcFELj5BOM1fVqqC39kBfaDyQ3VU9NHVTcnHd zTBwoVBTjq8S+bcMuxz/IE4NdbCZ33qPSYbZUwztbXbZva4T1mUsva4tCA1HHeIF gV1Ha+5CbH86Cok667TNsYnlG5Ze4rQMsN1esznZePwH5+5pBYrLOpK+eb01n9Gx w/4njnpvDG9Nf+Wifw/lAfbr165+m1FUwJVIg4WTVNLNzGk6Zph6FVkrpBPDTs3X j/mF4awFV/5rFcXNxyr+qX5jEVvTVmsdm+5tPd585F4uKSXd+j69ZBPkRwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFBe0giyM8vdiifjURGmlYzg3x6opMB8GA1UdIwQY MBaAFAsxy1MP5S/MAp5kl+d4IAOYwp88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3pITFV3X2xMOHdDbm1TWDUzZ2dBNWpDbnp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hNjg5OWItM2JiMi00ZGRjLTljOTEt YTFlM2MzOTRlZTgwLzEvRjdTQ0xJenk5MktKLU5SRWFhVmpPRGZIcWlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9hNjg5OWItM2JiMi00ZGRjLTljOTEtYTFlM2MzOTRlZTgw LzEvQ3pITFV3X2xMOHdDbm1TWDUzZ2dBNWpDbnp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQAuTO8MBYE AgACMBADDgAqAbXgAAAAAAAAAAAAMA0GCSqGSIb3DQEBCwUAA4IBAQASIzTl6FRz OBPTqISSD3c4uZxoXomlF43A0h1ER8ZWEgyYQGInA69ZUTlNzPhMUXX04p6L7b8p /SU0zAJcnEpEGxYhhI95oQlzMvjFCKVDM2QZQHmcvQlMt3vUdyEmQRUfx1GUWnW6 mHrLqNoghQWUOaMYmYLguSvAWdGtmuGSWdY89bmBZyWKiChg/DF4KqJisHRYxzXD ECWxkCiF4xJwk9/jrVAKuz6X81X8oiYAGymwI0lSoyoZ+JZytb2M80fhtjLSIWid Eqll3+uVu4n4fEZzluRYQ+wZyEYP1E1pYV5KdHZ0iMUaBH4WAPdfG0ybku6DXnr5 UUclDZgo2GVn -----END CERTIFICATE-----Generated at Mon Jan 26 15:00:24 2026 by rpki-client