This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/73UCxpDNZULQFzYAsKDQ1A7nLKI.roa File: 73UCxpDNZULQFzYAsKDQ1A7nLKI.roa (raw, json) Hash identifier: Puc2EYq06Fc5Snei+nqiCectlFMfZtUPb3hps442dL8= Subject key identifier: EF:75:02:C6:90:CD:65:42:D0:17:36:00:B0:A0:D0:D4:0E:E7:2C:A2 Certificate issuer: /CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b Certificate serial: 019B7DC9F6B2858342BDFD9861C6D1473F76 Authority key identifier: AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/73UCxpDNZULQFzYAsKDQ1A7nLKI.roa Signing time: Fri 02 Jan 2026 08:19:06 +0000 ROA not before: Fri 02 Jan 2026 08:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41485 IP address blocks: 193.227.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:f6:b2:85:83:42:bd:fd:98:61:c6:d1:47:3f:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b Validity Not Before: Jan 2 08:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef7502c690cd6542d0173600b0a0d0d40ee72ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:55:ad:87:26:99:02:bc:f3:d1:55:3f:89:d7: db:ec:e8:e9:9e:f5:c1:ad:a9:54:b0:7a:1c:2a:4e: 3e:e2:17:c2:b6:56:19:ff:ec:3a:4e:ad:f4:c4:62: 22:cb:e2:59:90:c2:3f:8b:8b:8b:73:a5:52:4d:6b: 2d:2b:38:fc:b0:28:35:b0:d7:26:39:c8:74:ef:86: 12:93:df:5a:df:7c:c5:bb:42:b8:67:10:e9:8d:ce: d5:76:15:28:c3:17:d0:1d:ab:5b:22:d0:da:7d:dc: 53:8c:64:d4:23:6e:de:ce:2e:4a:53:63:8b:a9:84: 7e:1b:fd:51:91:c7:4d:42:1d:a7:1a:4c:e6:fd:fa: b5:19:cb:ba:64:9b:fd:4c:a3:43:57:9d:a2:a8:32: b9:ca:ef:ce:6c:db:9d:45:60:12:8a:42:78:87:2b: 92:b1:cb:00:04:72:f2:92:1d:cb:25:ff:16:7f:24: 60:47:67:79:20:30:fa:ad:8b:ad:b1:2d:a9:a8:0e: ca:8c:5f:b5:b9:23:bc:d7:8e:57:ea:22:4b:2f:f3: 8b:53:3a:29:47:95:5f:4a:dd:9d:71:12:7b:4a:fe: 2f:b6:99:a5:72:28:b5:32:c9:e5:fd:e8:a2:2f:5e: e9:c4:cc:dc:d9:5f:95:06:0c:82:ae:3d:e8:6e:d0: 4c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:75:02:C6:90:CD:65:42:D0:17:36:00:B0:A0:D0:D4:0E:E7:2C:A2 X509v3 Authority Key Identifier: keyid:AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/73UCxpDNZULQFzYAsKDQ1A7nLKI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.227.96.0/24 Signature Algorithm: sha256WithRSAEncryption 78:68:9b:ac:cf:67:31:ff:97:3e:7f:20:00:2c:63:49:a6:4a: ad:62:4b:0f:5a:38:d7:c8:5d:ab:82:2b:b4:7d:13:c8:03:34: 78:b9:6a:d0:34:a9:ea:98:eb:e9:52:c7:35:75:99:54:f3:77: 85:f3:33:d8:2a:0d:df:cf:23:53:74:83:3a:56:ab:ee:a2:c6: ab:28:fd:b2:cc:68:df:a8:55:66:72:a3:33:68:fc:19:58:d5: 8e:72:af:0e:8a:b8:db:1e:5f:33:eb:c5:a4:24:35:a2:a3:1d: 1c:44:da:cc:93:f8:ad:42:6e:b0:ea:94:63:f8:f7:7d:81:36: 19:7c:f0:49:45:4d:1b:32:37:c9:9b:ee:1c:cc:cf:07:ca:94: 45:1a:a7:2e:ff:40:3d:a4:e0:37:e0:9f:aa:75:76:bf:f8:26: 7f:84:bb:bc:b0:f1:89:45:f0:35:78:da:ef:b1:f0:51:5c:29: f6:1e:d5:3d:8a:2f:90:06:c5:4d:5c:1a:c1:12:1f:c5:5e:17: 09:e7:27:3d:3e:2b:57:7b:01:e4:ef:36:63:40:42:c5:ec:67: ba:6e:51:1b:ad:18:3b:c2:bc:46:b1:96:50:50:f1:f0:7a:4c: e3:55:fa:dd:21:53:cb:4e:91:19:cf:ae:53:d1:dc:24:20:9b: 69:cc:76:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yfayhYNCvf2YYcbRRz92MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhN2E3ZGExZTIyM2IxODMwYTBiOTFiNWQ2MWM4M2FkMjYw YzExMWIwHhcNMjYwMTAyMDgxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjc1MDJjNjkwY2Q2NTQyZDAxNzM2MDBiMGEwZDBkNDBlZTcyY2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFWthyaZArzz0VU/idfb7OjpnvXB ralUsHocKk4+4hfCtlYZ/+w6Tq30xGIiy+JZkMI/i4uLc6VSTWstKzj8sCg1sNcm Och074YSk99a33zFu0K4ZxDpjc7VdhUowxfQHatbItDafdxTjGTUI27ezi5KU2OL qYR+G/1RkcdNQh2nGkzm/fq1Gcu6ZJv9TKNDV52iqDK5yu/ObNudRWASikJ4hyuS scsABHLykh3LJf8WfyRgR2d5IDD6rYutsS2pqA7KjF+1uSO8145X6iJLL/OLUzop R5VfSt2dcRJ7Sv4vtpmlcii1Msnl/eiiL17pxMzc2V+VBgyCrj3obtBMcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO91AsaQzWVC0Bc2ALCg0NQO5yyiMB8GA1UdIwQY MBaAFKp6faHiI7GDCguRtdYcg60mDBEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW5wOW9lSWpzWU1LQzVHMTFoeURyU1lNRVJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lNTdmYjEtMmQ1YS00NjYxLTgwMWQt MGViOGYzN2EwMTc5LzEvNzNVQ3hwRE5aVUxRRnpZQXNLRFExQTduTEtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lNTdmYjEtMmQ1YS00NjYxLTgwMWQtMGViOGYzN2EwMTc5 LzEvcW5wOW9lSWpzWU1LQzVHMTFoeURyU1lNRVJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweNgMA0G CSqGSIb3DQEBCwUAA4IBAQB4aJusz2cx/5c+fyAALGNJpkqtYksPWjjXyF2rgiu0 fRPIAzR4uWrQNKnqmOvpUsc1dZlU83eF8zPYKg3fzyNTdIM6VqvuosarKP2yzGjf qFVmcqMzaPwZWNWOcq8OirjbHl8z68WkJDWiox0cRNrMk/itQm6w6pRj+Pd9gTYZ fPBJRU0bMjfJm+4czM8HypRFGqcu/0A9pOA34J+qdXa/+CZ/hLu8sPGJRfA1eNrv sfBRXCn2HtU9ii+QBsVNXBrBEh/FXhcJ5yc9PitXewHk7zZjQELF7Ge6blEbrRg7 wrxGsZZQUPHwekzjVfrdIVPLTpEZz65T0dwkIJtpzHaz -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:09 2026 by rpki-client