This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/b7V7Vp2pyUPsj-EgQb-btDvJGUI.roa File: b7V7Vp2pyUPsj-EgQb-btDvJGUI.roa (raw, json) Hash identifier: +CgnWrloE2cl+/T5x4ppjvImSab6JWEygqKFh+5TDJQ= Subject key identifier: 6F:B5:7B:56:9D:A9:C9:43:EC:8F:E1:20:41:BF:9B:B4:3B:C9:19:42 Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12EC158EAED6DD11C98A84A5CC815A Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/b7V7Vp2pyUPsj-EgQb-btDvJGUI.roa Signing time: Fri 02 Jan 2026 00:19:33 +0000 ROA not before: Fri 02 Jan 2026 00:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 138.188.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ec:15:8e:ae:d6:dd:11:c9:8a:84:a5:cc:81:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fb57b569da9c943ec8fe12041bf9bb43bc91942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:61:f9:3e:1c:58:15:62:87:c3:82:55:bf:f3: 41:ac:8c:99:27:0b:9e:ab:75:d3:fe:e3:89:7f:aa: 92:4d:28:1d:72:1a:b0:c2:d8:16:29:ba:8f:c8:7a: 9c:cd:cf:46:cc:e4:07:7c:7b:17:e4:3f:16:ba:a6: 7b:93:27:f3:62:f9:e6:61:41:24:ae:66:3c:ad:4d: 62:8a:cb:09:49:cb:a7:67:ad:1b:72:a0:ca:7e:ef: 81:3a:63:1a:d5:cc:b1:0e:c1:a9:90:a9:c2:0f:75: 4b:79:41:cb:bc:ae:37:b2:de:8b:e7:c2:45:bd:3f: f5:88:06:7e:ed:39:fd:f5:cd:d0:3b:a9:33:88:9f: 0a:6d:7f:f0:39:a7:8d:19:c8:7c:14:74:66:77:09: fa:5d:e6:3f:33:9a:bd:1e:97:03:58:f2:42:ff:60: 81:1b:e0:12:2a:90:3b:2a:38:06:f9:12:08:5f:75: bd:72:18:82:cb:af:2e:90:07:4d:25:73:54:94:6b: 16:b7:31:a6:bb:99:ef:42:78:38:26:8c:6d:56:dd: 2a:be:d3:25:e8:06:26:1e:07:50:cc:6c:4c:1d:e4: d8:e5:af:05:d6:ea:63:36:b2:89:47:13:5d:0d:e2: 05:f6:7e:19:6b:c8:66:68:30:eb:7a:d1:8d:88:9e: 74:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B5:7B:56:9D:A9:C9:43:EC:8F:E1:20:41:BF:9B:B4:3B:C9:19:42 X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/b7V7Vp2pyUPsj-EgQb-btDvJGUI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.188.174.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:61:b9:0e:48:0c:5f:0e:27:86:da:38:7b:2c:b3:ab:6c:84: 22:90:89:53:f7:ef:38:29:b0:b2:13:23:0b:b0:4e:8f:51:ba: 8b:ac:9f:97:e9:3b:0d:60:82:03:7e:ab:a9:e4:fd:ac:a9:68: 77:3a:7a:92:f1:77:13:7f:1e:5d:0a:23:53:a2:af:d9:c6:15: 8e:5f:60:e8:5f:43:e4:d8:8f:6b:17:41:ad:60:3d:ab:c4:9c: 96:4a:f4:ec:77:7d:e4:06:7c:11:ee:ce:62:63:cc:b9:b8:01: d5:cb:04:fa:3a:77:f7:a3:49:6d:51:e7:f6:f5:d8:61:be:4f: 32:4e:74:4b:f8:d8:dc:3f:4e:25:2f:a7:0a:d0:36:93:af:04: f5:ec:33:58:1c:62:58:af:5d:61:fd:a6:4a:dd:4f:b7:6b:69: b6:d3:d4:05:2c:55:f7:81:08:98:e7:b2:d1:6a:77:85:c2:a4: 14:e5:15:f6:94:35:63:51:a9:e5:95:fb:31:0f:5e:ff:2b:cd: 22:19:d6:8f:c4:f4:9a:f9:6f:38:b2:cf:5b:14:da:8d:1f:1c: 7a:9d:3b:3b:d8:c6:27:70:3b:d3:30:5b:7b:c3:43:90:83:a1: 1b:64:39:d6:e6:97:73:94:78:7d:47:56:ec:c9:7b:6a:6d:ac: 78:32:c0:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EuwVjq7W3RHJioSlzIFaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmI1N2I1NjlkYTljOTQzZWM4ZmUxMjA0MWJmOWJiNDNiYzkxOTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mH5PhxYFWKHw4JVv/NBrIyZJwue q3XT/uOJf6qSTSgdchqwwtgWKbqPyHqczc9GzOQHfHsX5D8WuqZ7kyfzYvnmYUEk rmY8rU1iissJScunZ60bcqDKfu+BOmMa1cyxDsGpkKnCD3VLeUHLvK43st6L58JF vT/1iAZ+7Tn99c3QO6kziJ8KbX/wOaeNGch8FHRmdwn6XeY/M5q9HpcDWPJC/2CB G+ASKpA7KjgG+RIIX3W9chiCy68ukAdNJXNUlGsWtzGmu5nvQng4JoxtVt0qvtMl 6AYmHgdQzGxMHeTY5a8F1upjNrKJRxNdDeIF9n4Za8hmaDDretGNiJ50xQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG+1e1adqclD7I/hIEG/m7Q7yRlCMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvYjdWN1ZwMnB5VVBzai1FZ1FiLWJ0RHZKR1VJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiryuMA0G CSqGSIb3DQEBCwUAA4IBAQAeYbkOSAxfDieG2jh7LLOrbIQikIlT9+84KbCyEyML sE6PUbqLrJ+X6TsNYIIDfqup5P2sqWh3OnqS8XcTfx5dCiNToq/ZxhWOX2DoX0Pk 2I9rF0GtYD2rxJyWSvTsd33kBnwR7s5iY8y5uAHVywT6Onf3o0ltUef29dhhvk8y TnRL+NjcP04lL6cK0DaTrwT17DNYHGJYr11h/aZK3U+3a2m209QFLFX3gQiY57LR aneFwqQU5RX2lDVjUanllfsxD17/K80iGdaPxPSa+W84ss9bFNqNHxx6nTs72MYn cDvTMFt7w0OQg6EbZDnW5pdzlHh9R1bsyXtqbax4MsBQ -----END CERTIFICATE-----Generated at Fri Jan 9 00:58:30 2026 by rpki-client