This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/r7QWCdoa9NMTEcanab1wRB7sqmQ.roa File: r7QWCdoa9NMTEcanab1wRB7sqmQ.roa (raw, json) Hash identifier: 1sVfovX47XoYTFT9J0WhngWto2u574YZFahER+nLL6E= Subject key identifier: AF:B4:16:09:DA:1A:F4:D3:13:11:C6:A7:69:BD:70:44:1E:EC:AA:64 Certificate issuer: /CN=db9af91e9eb15b676a96f0af654cc03288154a1a Certificate serial: 019B7834DA9789F5B4C32AFCA73773A9CA2D Authority key identifier: DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/r7QWCdoa9NMTEcanab1wRB7sqmQ.roa Signing time: Thu 01 Jan 2026 06:18:08 +0000 ROA not before: Thu 01 Jan 2026 06:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198917 IP address blocks: 193.242.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:da:97:89:f5:b4:c3:2a:fc:a7:37:73:a9:ca:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db9af91e9eb15b676a96f0af654cc03288154a1a Validity Not Before: Jan 1 06:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afb41609da1af4d31311c6a769bd70441eecaa64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:be:04:0f:f1:d2:87:3a:19:e6:92:07:dc:bb: e9:1e:82:41:b1:1b:eb:54:ec:3b:f5:f6:13:93:0c: d6:d5:f7:58:0c:b3:85:44:f6:84:26:61:1e:a7:cc: a7:85:9c:9e:18:67:42:02:90:e1:cc:cc:0a:aa:88: c8:b9:f2:48:b2:37:c8:68:d6:67:fa:29:39:6a:91: 7b:9d:fb:de:26:4b:51:88:64:dc:5c:2f:f2:93:71: 65:77:45:85:35:56:41:cd:4d:03:fa:90:17:71:ab: b3:d9:31:ad:4e:a6:5a:8c:04:38:42:89:18:49:a4: 06:65:c6:63:ae:c9:e5:87:cf:c2:4e:19:da:51:b2: d5:dd:96:0d:b0:ae:11:88:c5:71:07:f8:9d:de:b9: 0f:cd:30:66:27:67:b7:48:69:29:1e:7d:00:df:aa: 7c:5a:1a:fb:18:f3:c0:1e:6c:b2:f9:78:93:3a:5f: c6:3a:88:53:c9:ee:d1:8d:12:eb:02:09:e1:ae:94: 39:79:4e:62:16:4a:8f:31:04:4a:2a:a6:13:2e:e6: 3b:f6:f5:78:ab:9d:f0:75:df:2b:66:31:e4:f2:bd: 26:33:29:39:cd:25:0d:7e:63:7d:a6:2d:b8:64:45: 36:2e:ce:4f:ac:0b:50:57:40:36:89:2c:9f:09:a7: e2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B4:16:09:DA:1A:F4:D3:13:11:C6:A7:69:BD:70:44:1E:EC:AA:64 X509v3 Authority Key Identifier: keyid:DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/r7QWCdoa9NMTEcanab1wRB7sqmQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.242.134.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:77:50:7b:a2:5e:a7:7b:ab:45:19:47:d5:43:c0:c2:fc:e1: 41:f7:a0:f5:36:f8:ca:04:e2:3a:51:45:3e:8a:76:34:ce:5d: c7:79:1d:e5:ba:88:1a:b5:b1:2f:37:74:27:d3:b8:9f:2d:5e: 6a:64:b0:3b:ed:0f:0e:c8:00:a4:b5:20:08:71:2e:e7:1c:d4: ff:32:db:68:93:d7:50:7d:64:ba:91:35:17:f3:95:9f:f5:9e: b3:b2:e2:8d:a7:41:63:e1:86:99:a1:bd:53:00:6e:97:53:b4: 75:4c:71:d6:b2:98:85:0e:a9:5c:5c:b0:72:ff:aa:61:f8:cb: 45:4a:8d:16:14:7b:d0:09:c7:7a:ad:5c:29:05:a1:bb:26:dc: 14:ca:4b:e0:da:d7:23:69:99:f4:0d:af:bf:56:35:f1:0e:c7: 22:4d:25:10:b5:76:68:49:a2:54:b7:15:ea:04:3a:08:42:83: 17:f3:7b:d0:1e:f0:cc:fd:b8:33:bf:f1:9d:cd:5d:06:07:f8: 54:7b:6b:01:a5:49:b4:fa:91:0e:b3:65:82:0f:a5:96:9f:03: d5:3f:63:19:3c:2d:a1:2a:bc:00:33:c4:10:f3:a9:d9:ed:55: c0:bb:cb:75:6c:c1:b1:c8:60:2a:50:86:50:dc:58:82:79:79: c0:92:f2:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NNqXifW0wyr8pzdzqcotMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOWFmOTFlOWViMTViNjc2YTk2ZjBhZjY1NGNjMDMyODgx NTRhMWEwHhcNMjYwMTAxMDYxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmI0MTYwOWRhMWFmNGQzMTMxMWM2YTc2OWJkNzA0NDFlZWNhYTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL4ED/HShzoZ5pIH3LvpHoJBsRvr VOw79fYTkwzW1fdYDLOFRPaEJmEep8ynhZyeGGdCApDhzMwKqojIufJIsjfIaNZn +ik5apF7nfveJktRiGTcXC/yk3Fld0WFNVZBzU0D+pAXcauz2TGtTqZajAQ4QokY SaQGZcZjrsnlh8/CThnaUbLV3ZYNsK4RiMVxB/id3rkPzTBmJ2e3SGkpHn0A36p8 Whr7GPPAHmyy+XiTOl/GOohTye7RjRLrAgnhrpQ5eU5iFkqPMQRKKqYTLuY79vV4 q53wdd8rZjHk8r0mMyk5zSUNfmN9pi24ZEU2Ls5PrAtQV0A2iSyfCafipwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK+0FgnaGvTTExHGp2m9cEQe7KpkMB8GA1UdIwQY MBaAFNua+R6esVtnapbwr2VMwDKIFUoaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjVyNUhwNnhXMmRxbHZDdlpVekFNb2dWU2hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jZGJmZWItN2FjMS00ZGExLThkNDAt ZjkzNWZjMGYyMGQ1LzEvcjdRV0Nkb2E5Tk1URWNhbmFiMXdSQjdzcW1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9jZGJmZWItN2FjMS00ZGExLThkNDAtZjkzNWZjMGYyMGQ1 LzEvMjVyNUhwNnhXMmRxbHZDdlpVekFNb2dWU2hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwfKGMA0G CSqGSIb3DQEBCwUAA4IBAQAbd1B7ol6ne6tFGUfVQ8DC/OFB96D1NvjKBOI6UUU+ inY0zl3HeR3luogatbEvN3Qn07ifLV5qZLA77Q8OyACktSAIcS7nHNT/Mttok9dQ fWS6kTUX85Wf9Z6zsuKNp0Fj4YaZob1TAG6XU7R1THHWspiFDqlcXLBy/6ph+MtF So0WFHvQCcd6rVwpBaG7JtwUykvg2tcjaZn0Da+/VjXxDsciTSUQtXZoSaJUtxXq BDoIQoMX83vQHvDM/bgzv/GdzV0GB/hUe2sBpUm0+pEOs2WCD6WWnwPVP2MZPC2h KrwAM8QQ86nZ7VXAu8t1bMGxyGAqUIZQ3FiCeXnAkvJz -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:11 2026 by rpki-client