This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/7YpkD0KfUd6GvtssKEAM5COaSjg.roa File: 7YpkD0KfUd6GvtssKEAM5COaSjg.roa (raw, json) Hash identifier: WV0BukIXTVr1fBZ0Z/X4lkuf8IyCGzCcom5E1ZYckgc= Subject key identifier: ED:8A:64:0F:42:9F:51:DE:86:BE:DB:2C:28:40:0C:E4:23:9A:4A:38 Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe Certificate serial: 019B7910F220DAB612F288DE63B1F4AE30AC Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/7YpkD0KfUd6GvtssKEAM5COaSjg.roa Signing time: Thu 01 Jan 2026 10:18:32 +0000 ROA not before: Thu 01 Jan 2026 10:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 193.22.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f2:20:da:b6:12:f2:88:de:63:b1:f4:ae:30:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213e1d50d52288bee80eea435577018712409bbe Validity Not Before: Jan 1 10:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed8a640f429f51de86bedb2c28400ce4239a4a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7a:f7:6b:ac:8f:81:5e:d3:6a:95:27:92:8e: 0c:90:c4:e9:b4:f7:3c:b3:fd:17:3a:07:0f:99:95: 23:2a:37:23:f7:f8:06:47:dc:3c:03:80:7d:3e:3c: 86:fc:aa:c8:4b:cf:97:77:33:aa:68:0b:3d:15:d0: 55:de:ec:8c:94:ec:71:0b:99:51:bb:81:85:73:70: ce:fb:0e:ae:e5:75:a1:4c:3c:0c:7a:6d:93:2b:9f: eb:61:c6:99:7e:4e:b0:23:e4:b2:94:15:a1:dc:18: ca:15:91:d6:c8:82:d1:c2:7e:d1:29:1d:79:fe:3f: 8d:ea:16:ba:6a:2f:e7:3d:99:a3:47:77:2c:90:ab: 90:ef:f3:7c:f1:4a:2c:87:53:2d:c2:f1:87:d2:db: 20:06:b4:39:25:c2:6b:7f:ce:55:20:3f:92:81:77: 2c:60:c6:e2:10:4c:35:94:7b:dc:48:7a:f7:04:b5: cf:be:02:f8:9d:20:b5:47:dc:30:48:19:70:dd:7f: 7d:68:f1:db:2e:42:db:53:75:c3:51:3a:7f:47:3f: a4:5c:0f:ac:0c:43:89:b6:3c:f4:b0:d1:81:d3:86: c8:3b:b5:20:ee:cb:2c:20:87:b3:dd:5e:8d:bd:a6: e1:05:88:02:a7:2c:9a:c7:45:0f:09:9f:e4:1c:84: 41:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8A:64:0F:42:9F:51:DE:86:BE:DB:2C:28:40:0C:E4:23:9A:4A:38 X509v3 Authority Key Identifier: keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/7YpkD0KfUd6GvtssKEAM5COaSjg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.12.0/24 Signature Algorithm: sha256WithRSAEncryption ab:d5:a9:d0:f7:77:74:c2:7f:26:29:40:d6:1a:f0:9e:1f:f0: bb:29:2b:a9:ba:0a:c2:f1:a1:0f:63:23:ba:13:4d:21:30:61: 89:c1:ab:8e:ce:c2:7d:2d:44:75:c4:d7:39:e7:45:a0:34:2e: 98:6f:a1:a8:52:24:e8:6b:80:11:6d:92:33:6b:65:1d:18:78: 10:9b:10:4b:b9:9c:8e:68:08:ea:ab:37:7b:93:e9:77:f2:95: 0c:ab:b8:b3:c4:6d:f9:1d:f1:50:c5:aa:8c:d5:a5:3c:7e:db: f0:ed:95:52:74:c2:87:a7:77:79:a8:5a:45:db:62:8b:0d:2d: d3:6f:25:30:89:1c:64:49:87:d2:4e:93:1e:fb:31:58:6d:a5: c5:3b:e0:12:18:7c:d8:0e:29:d3:26:42:09:e9:1a:c9:89:7a: 75:6e:76:2f:99:9d:a6:03:4a:c2:b0:78:e4:e3:78:95:1a:5f: d6:88:ec:a3:04:32:c4:33:ff:b6:17:d4:8f:9d:6c:f0:ee:a5: 52:4c:92:12:14:f9:5d:3b:4a:96:bc:92:ea:9f:59:a6:20:2a: f8:61:29:ab:d6:10:5b:37:0e:1b:92:65:13:0b:26:5f:74:a4: 4c:72:e0:77:43:33:9c:94:0e:ed:50:34:33:5d:4a:b3:b6:6b: de:94:a8:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EPIg2rYS8ojeY7H0rjCsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxM2UxZDUwZDUyMjg4YmVlODBlZWE0MzU1NzcwMTg3MTI0 MDliYmUwHhcNMjYwMTAxMTAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDhhNjQwZjQyOWY1MWRlODZiZWRiMmMyODQwMGNlNDIzOWE0YTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Hr3a6yPgV7TapUnko4MkMTptPc8 s/0XOgcPmZUjKjcj9/gGR9w8A4B9PjyG/KrIS8+XdzOqaAs9FdBV3uyMlOxxC5lR u4GFc3DO+w6u5XWhTDwMem2TK5/rYcaZfk6wI+SylBWh3BjKFZHWyILRwn7RKR15 /j+N6ha6ai/nPZmjR3cskKuQ7/N88Uosh1MtwvGH0tsgBrQ5JcJrf85VID+SgXcs YMbiEEw1lHvcSHr3BLXPvgL4nSC1R9wwSBlw3X99aPHbLkLbU3XDUTp/Rz+kXA+s DEOJtjz0sNGB04bIO7Ug7sssIIez3V6NvabhBYgCpyyax0UPCZ/kHIRBLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO2KZA9Cn1Hehr7bLChADOQjmko4MB8GA1UdIwQY MBaAFCE+HVDVIoi+6A7qQ1V3AYcSQJu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYt MzE2ZWYyNjFmNGE1LzEvN1lwa0QwS2ZVZDZHdnRzc0tFQU01Q09hU2pnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYtMzE2ZWYyNjFmNGE1 LzEvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRYMMA0G CSqGSIb3DQEBCwUAA4IBAQCr1anQ93d0wn8mKUDWGvCeH/C7KSupugrC8aEPYyO6 E00hMGGJwauOzsJ9LUR1xNc550WgNC6Yb6GoUiToa4ARbZIza2UdGHgQmxBLuZyO aAjqqzd7k+l38pUMq7izxG35HfFQxaqM1aU8ftvw7ZVSdMKHp3d5qFpF22KLDS3T byUwiRxkSYfSTpMe+zFYbaXFO+ASGHzYDinTJkIJ6RrJiXp1bnYvmZ2mA0rCsHjk 43iVGl/WiOyjBDLEM/+2F9SPnWzw7qVSTJISFPldO0qWvJLqn1mmICr4YSmr1hBb Nw4bkmUTCyZfdKRMcuB3QzOclA7tUDQzXUqztmvelKgb -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:01 2026 by rpki-client