This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/7pIMIhuGxXcE3W7zciFIP5BEo_k.roa File: 7pIMIhuGxXcE3W7zciFIP5BEo_k.roa (raw, json) Hash identifier: mE/zLPchlQyoVv0rtLgnlONfnqRwLmeY7eY7SowuKF8= Subject key identifier: EE:92:0C:22:1B:86:C5:77:04:DD:6E:F3:72:21:48:3F:90:44:A3:F9 Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df Certificate serial: 019B7E37F62765F1896B0D2901482BD64DBA Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/7pIMIhuGxXcE3W7zciFIP5BEo_k.roa Signing time: Fri 02 Jan 2026 10:19:15 +0000 ROA not before: Fri 02 Jan 2026 10:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16097 IP address blocks: 129.233.172.0/24 maxlen: 24 129.233.216.0/24 maxlen: 24 153.96.27.0/24 maxlen: 24 153.96.84.0/23 maxlen: 23 153.96.86.0/24 maxlen: 24 153.96.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:f6:27:65:f1:89:6b:0d:29:01:48:2b:d6:4d:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df Validity Not Before: Jan 2 10:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee920c221b86c57704dd6ef37221483f9044a3f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:1c:2d:40:8a:6b:17:36:02:ef:84:3b:79:74: c4:95:68:0e:e0:92:1a:76:56:ec:ba:62:11:6f:2e: 7d:ac:04:2e:ba:9c:87:dc:69:c6:91:b7:5a:f5:09: 0a:aa:89:13:bf:87:0a:f1:0a:d9:8f:ff:6c:99:a2: f7:a5:f4:ca:05:74:03:43:e1:7e:33:26:73:8e:56: f4:de:fb:74:f0:de:27:3e:d6:ff:90:36:36:b0:24: c0:c9:82:55:20:1a:f9:0f:fc:b3:33:31:a9:f2:f1: 2d:fd:59:23:98:cd:c6:f0:9e:21:86:e0:15:72:2f: 36:00:68:29:23:9c:81:e9:17:93:9d:48:ab:36:ed: 14:62:42:2a:6c:21:a1:dd:16:60:59:94:d4:06:ed: 43:cc:25:f0:bd:36:d5:df:bf:aa:a8:e0:51:a4:37: b8:be:85:d7:62:ca:05:28:18:cd:e4:76:97:2f:30: 85:d8:cc:d6:66:e7:b0:d1:aa:60:5d:95:ca:55:88: 64:60:a3:91:19:74:d5:62:49:de:a6:56:a1:35:cf: 93:6f:dc:a3:97:a6:1f:9e:b3:96:1e:33:28:2b:21: 6e:a3:69:c3:a7:f6:7d:80:e9:0e:b4:bd:ca:62:c9: fd:23:19:2a:19:d8:44:56:7a:dd:e3:62:5a:b5:18: c5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:92:0C:22:1B:86:C5:77:04:DD:6E:F3:72:21:48:3F:90:44:A3:F9 X509v3 Authority Key Identifier: keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/7pIMIhuGxXcE3W7zciFIP5BEo_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 129.233.172.0/24 129.233.216.0/24 153.96.27.0/24 153.96.84.0-153.96.86.255 153.96.132.0/24 Signature Algorithm: sha256WithRSAEncryption b5:3c:ac:a8:56:7c:3b:72:b4:8b:7a:04:a3:01:a2:0c:37:b0: a2:8a:ae:df:2f:1b:92:aa:6d:e5:68:cf:f5:c3:09:81:44:e8: 1d:00:48:08:0b:fd:fd:eb:c6:c0:87:0d:21:d2:f8:09:d1:0e: e8:2a:cb:c5:06:ec:43:cc:56:6b:18:67:13:d4:88:50:f6:fa: c6:f4:29:95:58:b7:a2:41:a6:44:d6:08:01:e4:0c:c9:b5:b4: b5:a3:38:98:c9:c1:ce:f6:ac:ef:e0:5c:74:ce:55:e3:47:8b: 80:ba:3c:a8:2e:24:67:44:17:47:02:b1:94:1a:47:e0:1a:b3: f5:fa:15:3d:de:cc:90:8e:5d:8c:d7:7a:44:49:f2:76:94:89: 9a:d0:84:71:cd:41:1f:6d:bb:3c:aa:5a:05:5c:be:d8:25:08: 81:b7:2f:df:48:0f:0c:4b:68:40:8f:b7:1c:8c:9b:bb:fb:2f: 51:2e:21:a7:1f:ed:0b:3f:09:d7:d5:30:8c:fc:d2:6c:00:54: 28:9a:5b:3e:78:ab:79:c7:54:ef:40:7d:1e:39:ce:a4:c6:2f: 9c:a8:1b:0a:6c:25:2b:a5:f2:5c:73:59:65:8c:96:23:fa:7a: 65:c8:11:3c:ab:7f:49:89:03:ae:89:af:43:ff:96:b1:f6:7c: cb:50:24:f0 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt+N/YnZfGJaw0pAUgr1k26MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YTc1ODI2ZTk5MTIyNWE0MjlmZjhhMWU3ZmZkYzgwNDY2 NDIwZGYwHhcNMjYwMTAyMTAxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTkyMGMyMjFiODZjNTc3MDRkZDZlZjM3MjIxNDgzZjkwNDRhM2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xwtQIprFzYC74Q7eXTElWgO4JIa dlbsumIRby59rAQuupyH3GnGkbda9QkKqokTv4cK8QrZj/9smaL3pfTKBXQDQ+F+ MyZzjlb03vt08N4nPtb/kDY2sCTAyYJVIBr5D/yzMzGp8vEt/VkjmM3G8J4hhuAV ci82AGgpI5yB6ReTnUirNu0UYkIqbCGh3RZgWZTUBu1DzCXwvTbV37+qqOBRpDe4 voXXYsoFKBjN5HaXLzCF2MzWZuew0apgXZXKVYhkYKORGXTVYkneplahNc+Tb9yj l6YfnrOWHjMoKyFuo2nDp/Z9gOkOtL3KYsn9IxkqGdhEVnrd42JatRjFqQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFO6SDCIbhsV3BN1u83IhSD+QRKP5MB8GA1UdIwQY MBaAFHanWCbpkSJaQp/4oef/3IBGZCDfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTct YWQ4ZmJlYWE4ZGQ5LzEvN3BJTUlodUd4WGNFM1c3emNpRklQNUJFb19rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTctYWQ4ZmJlYWE4ZGQ5 LzEvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAgemsAwQA genYAwQAmWAbMAwDBAKZYFQDBACZYFYDBACZYIQwDQYJKoZIhvcNAQELBQADggEB ALU8rKhWfDtytIt6BKMBogw3sKKKrt8vG5KqbeVoz/XDCYFE6B0ASAgL/f3rxsCH DSHS+AnRDugqy8UG7EPMVmsYZxPUiFD2+sb0KZVYt6JBpkTWCAHkDMm1tLWjOJjJ wc72rO/gXHTOVeNHi4C6PKguJGdEF0cCsZQaR+Aas/X6FT3ezJCOXYzXekRJ8naU iZrQhHHNQR9tuzyqWgVcvtglCIG3L99IDwxLaECPtxyMm7v7L1EuIacf7Qs/CdfV MIz80mwAVCiaWz54q3nHVO9AfR45zqTGL5yoGwpsJSul8lxzWWWMliP6emXIETyr f0mJA66Jr0P/lrH2fMtQJPA= -----END CERTIFICATE-----Generated at Wed Jan 21 14:40:54 2026 by rpki-client