This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/F7B-C4bNCSywc3mpeKEs2FywA9U.roa File: F7B-C4bNCSywc3mpeKEs2FywA9U.roa (raw, json) Hash identifier: BGYrsPSKdvnPqHmjNTc58L5AtaaoWZ/37+CFXsTbTec= Subject key identifier: 17:B0:7E:0B:86:CD:09:2C:B0:73:79:A9:78:A1:2C:D8:5C:B0:03:D5 Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f Certificate serial: 019B797F516975E1777941D0747CA3B6CDDA Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/F7B-C4bNCSywc3mpeKEs2FywA9U.roa Signing time: Thu 01 Jan 2026 12:19:05 +0000 ROA not before: Thu 01 Jan 2026 12:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213252 IP address blocks: 213.238.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:51:69:75:e1:77:79:41:d0:74:7c:a3:b6:cd:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f Validity Not Before: Jan 1 12:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17b07e0b86cd092cb07379a978a12cd85cb003d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1b:5d:db:bd:02:6c:e4:fd:24:fd:2f:74:10: 86:b5:ac:00:92:9f:df:8e:2d:6a:4b:54:e1:3a:dd: 01:c1:4e:50:21:af:8d:2c:bb:6f:a1:b0:e3:99:8f: a5:e0:d6:9a:a5:45:8d:d7:ec:b5:b0:3b:c1:5e:f6: 9e:41:7c:80:71:5e:74:d2:68:28:ba:b9:66:6f:87: e6:e6:3c:6f:69:a3:22:60:d3:3c:82:c2:d7:0e:fd: 6b:9e:f5:e7:9e:4b:ee:d8:e1:47:88:f2:c6:d9:88: c6:96:4f:2e:01:a4:01:e9:97:3b:da:a5:26:25:8d: 47:bd:ba:ec:31:7d:14:e4:46:e1:c1:a6:a9:d2:20: 24:7c:c2:32:72:52:c3:87:d2:c1:74:20:d7:60:06: 88:22:93:e6:1e:a6:4f:8c:b1:f4:62:20:42:95:f5: b5:10:55:cd:8a:bd:7d:75:c4:be:d0:06:2a:4f:06: 21:86:5a:33:eb:73:b0:5e:b1:b9:cb:2c:c9:6a:9a: 76:32:1f:84:90:0a:b6:e9:9c:df:9c:78:6b:90:d1: 6c:9c:6d:22:48:4f:90:1f:b2:78:f0:59:5f:aa:88: 93:85:25:72:12:68:b6:4c:f8:8a:85:2b:e3:3b:1e: 0e:62:9c:59:79:ce:23:7e:5c:e8:74:98:7e:4a:da: 09:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B0:7E:0B:86:CD:09:2C:B0:73:79:A9:78:A1:2C:D8:5C:B0:03:D5 X509v3 Authority Key Identifier: keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/F7B-C4bNCSywc3mpeKEs2FywA9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.238.183.0/24 Signature Algorithm: sha256WithRSAEncryption 41:cb:ea:b9:32:07:98:92:c9:46:0a:5a:0b:bb:2e:89:24:49: 92:f2:f7:e3:d1:df:41:22:9a:18:9e:94:65:1e:75:f8:78:63: 0a:a6:54:59:44:29:c8:61:cc:07:4e:57:c1:fe:25:60:ca:39: 99:fc:39:56:7f:35:12:65:b3:1a:62:d1:cf:3c:09:4e:de:88: 3c:9e:ac:00:8a:d5:82:23:7c:b0:13:37:81:63:33:53:5e:f0: 09:09:5e:8d:ab:43:9a:34:7a:6f:d9:9b:7c:8e:98:79:17:00: c3:b4:09:74:87:b2:4c:43:82:7a:9b:bb:7e:e4:f6:77:5d:50: 1e:9b:29:44:c4:88:4f:76:bc:57:2f:3d:9a:fe:d8:92:23:32: 56:71:26:55:be:13:70:1c:3b:87:10:da:ed:70:65:3c:3f:1f: b8:48:09:4d:0f:10:39:75:20:6e:0f:4d:8c:f8:41:05:44:54: f4:cc:29:1f:23:73:a0:0b:ec:4d:f5:cd:6d:ea:ff:e2:dd:cf: b1:a2:52:11:40:70:aa:4c:f8:8e:5c:43:21:54:63:14:28:8f: 72:8d:d9:31:ff:4c:2e:50:93:ff:38:e2:1f:a5:5d:5c:ab:bd: 0b:95:a3:51:d2:ad:11:a8:29:15:0d:97:67:eb:77:8d:9e:81: ed:97:29:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5f1FpdeF3eUHQdHyjts3aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0 MGRlM2YwHhcNMjYwMTAxMTIxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2IwN2UwYjg2Y2QwOTJjYjA3Mzc5YTk3OGExMmNkODVjYjAwM2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRtd270CbOT9JP0vdBCGtawAkp/f ji1qS1ThOt0BwU5QIa+NLLtvobDjmY+l4NaapUWN1+y1sDvBXvaeQXyAcV500mgo urlmb4fm5jxvaaMiYNM8gsLXDv1rnvXnnkvu2OFHiPLG2YjGlk8uAaQB6Zc72qUm JY1HvbrsMX0U5Ebhwaap0iAkfMIyclLDh9LBdCDXYAaIIpPmHqZPjLH0YiBClfW1 EFXNir19dcS+0AYqTwYhhloz63OwXrG5yyzJapp2Mh+EkAq26ZzfnHhrkNFsnG0i SE+QH7J48FlfqoiThSVyEmi2TPiKhSvjOx4OYpxZec4jflzodJh+StoJTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBewfguGzQkssHN5qXihLNhcsAPVMB8GA1UdIwQY MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt Y2QzMTYxNWQwMWE5LzEvRjdCLUM0Yk5DU3l3YzNtcGVLRXMyRnl3QTlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5 LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1e63MA0G CSqGSIb3DQEBCwUAA4IBAQBBy+q5MgeYkslGCloLuy6JJEmS8vfj0d9BIpoYnpRl HnX4eGMKplRZRCnIYcwHTlfB/iVgyjmZ/DlWfzUSZbMaYtHPPAlO3og8nqwAitWC I3ywEzeBYzNTXvAJCV6Nq0OaNHpv2Zt8jph5FwDDtAl0h7JMQ4J6m7t+5PZ3XVAe mylExIhPdrxXLz2a/tiSIzJWcSZVvhNwHDuHENrtcGU8Px+4SAlNDxA5dSBuD02M +EEFRFT0zCkfI3OgC+xN9c1t6v/i3c+xolIRQHCqTPiOXEMhVGMUKI9yjdkx/0wu UJP/OOIfpV1cq70LlaNR0q0RqCkVDZdn63eNnoHtlym6 -----END CERTIFICATE-----Generated at Wed Jan 21 15:54:26 2026 by rpki-client