This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/7uY4ucLuDTzAkIvYNKlzKzp5j1E.roa File: 7uY4ucLuDTzAkIvYNKlzKzp5j1E.roa (raw, json) Hash identifier: 296vCRxAo5cZb7UuQyjQwaHXTgI9ntaF24x/VO11CVg= Subject key identifier: EE:E6:38:B9:C2:EE:0D:3C:C0:90:8B:D8:34:A9:73:2B:3A:79:8F:51 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B791054B289563CE1831F7D533612DFA1 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/7uY4ucLuDTzAkIvYNKlzKzp5j1E.roa Signing time: Thu 01 Jan 2026 10:17:51 +0000 ROA not before: Thu 01 Jan 2026 10:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197428 IP address blocks: 212.68.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:54:b2:89:56:3c:e1:83:1f:7d:53:36:12:df:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eee638b9c2ee0d3cc0908bd834a9732b3a798f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3b:fe:c1:bb:d6:72:ea:2f:fa:2d:6b:9c:c0: 8c:6e:56:93:40:e2:dc:30:62:c4:bb:5a:d8:44:6d: 30:43:de:ad:9a:bf:b3:a4:88:b1:0d:39:f0:f3:2d: 36:ab:76:24:da:b9:59:39:61:17:35:f6:c6:42:9f: 6b:49:65:0e:81:0f:fc:ce:72:7e:d2:73:c6:56:b7: e1:45:1d:91:2f:e6:01:70:0a:b9:4b:da:4d:62:46: 3e:15:15:78:68:e8:d2:0b:96:51:ea:44:a2:41:13: 50:83:43:7a:a7:67:93:8f:3f:94:5e:73:a5:26:0f: 63:4b:e4:54:49:1b:eb:15:1c:7a:04:dc:f9:32:4a: c7:b9:9e:65:1a:1c:a3:ce:93:d4:65:45:78:e5:24: 81:23:76:5f:b0:7b:03:ad:43:66:52:e4:25:15:8d: 34:ac:4a:fb:6b:c1:36:ee:6f:a0:0d:84:be:9a:93: bf:64:07:3c:2e:d9:61:10:4f:5b:f4:62:09:70:f6: 1c:84:26:88:93:a0:9e:7b:78:e4:ed:f8:fe:f9:98: a7:57:f1:13:61:24:d1:91:ee:ce:e2:c9:e5:ab:a5: 60:2f:b5:eb:5a:05:e3:7e:28:d0:08:e0:1f:4f:ee: 17:b5:66:9e:02:5a:d0:54:bb:4c:d9:34:fd:cf:bf: 0f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E6:38:B9:C2:EE:0D:3C:C0:90:8B:D8:34:A9:73:2B:3A:79:8F:51 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/7uY4ucLuDTzAkIvYNKlzKzp5j1E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.68.48.0/24 Signature Algorithm: sha256WithRSAEncryption 05:29:37:ab:fc:dd:3e:af:68:2e:97:5e:3c:4c:7a:68:87:77: 8e:c6:b9:b2:4f:c1:ae:21:04:a4:f7:bb:45:a1:6d:da:18:6e: 76:d3:31:7c:e0:81:9b:ae:1c:ac:ec:66:55:07:a1:cb:2e:e2: 78:fc:80:3c:68:b4:47:70:a1:61:ea:39:af:6f:32:a9:5b:17: eb:79:f9:0e:1b:c9:32:94:09:ae:15:6f:77:d9:ca:68:10:d8: 09:4f:29:e8:a8:71:f5:bf:7a:3e:b0:fe:3a:59:ea:9b:01:6d: fd:b2:18:4f:d7:fb:e2:a4:bd:6e:3f:d6:e0:84:89:0e:22:30: a1:ef:d5:be:d8:70:1e:58:9d:64:cd:8a:10:ce:50:7d:7d:55: ed:48:4e:79:0d:e5:6f:4d:ca:34:3d:78:e2:f7:1e:77:72:94: 9a:f5:cc:85:ca:22:04:ce:fd:3e:0f:30:8f:8b:2a:61:5d:be: f4:b8:39:f1:31:9f:0d:b4:fe:6b:24:74:1e:d5:41:90:1e:bf: 2d:2c:88:2e:77:53:ab:be:68:10:fd:55:89:3d:9a:f5:39:96: ad:bb:f2:d2:54:45:75:6d:f8:6e:8e:16:62:64:18:16:af:41: 8f:26:e3:7f:aa:94:da:58:01:02:7f:3e:a0:40:ce:ef:7d:d6: af:67:b8:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EFSyiVY84YMffVM2Et+hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWU2MzhiOWMyZWUwZDNjYzA5MDhiZDgzNGE5NzMyYjNhNzk4ZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzv+wbvWcuov+i1rnMCMblaTQOLc MGLEu1rYRG0wQ96tmr+zpIixDTnw8y02q3Yk2rlZOWEXNfbGQp9rSWUOgQ/8znJ+ 0nPGVrfhRR2RL+YBcAq5S9pNYkY+FRV4aOjSC5ZR6kSiQRNQg0N6p2eTjz+UXnOl Jg9jS+RUSRvrFRx6BNz5MkrHuZ5lGhyjzpPUZUV45SSBI3ZfsHsDrUNmUuQlFY00 rEr7a8E27m+gDYS+mpO/ZAc8LtlhEE9b9GIJcPYchCaIk6Cee3jk7fj++ZinV/ET YSTRke7O4snlq6VgL7XrWgXjfijQCOAfT+4XtWaeAlrQVLtM2TT9z78PIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO7mOLnC7g08wJCL2DSpcys6eY9RMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvN3VZNHVjTHVEVHpBa0l2WU5LbHpLenA1ajFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EQwMA0G CSqGSIb3DQEBCwUAA4IBAQAFKTer/N0+r2gul148THpoh3eOxrmyT8GuIQSk97tF oW3aGG520zF84IGbrhys7GZVB6HLLuJ4/IA8aLRHcKFh6jmvbzKpWxfrefkOG8ky lAmuFW932cpoENgJTynoqHH1v3o+sP46WeqbAW39shhP1/vipL1uP9bghIkOIjCh 79W+2HAeWJ1kzYoQzlB9fVXtSE55DeVvTco0PXji9x53cpSa9cyFyiIEzv0+DzCP iyphXb70uDnxMZ8NtP5rJHQe1UGQHr8tLIgud1OrvmgQ/VWJPZr1OZatu/LSVEV1 bfhujhZiZBgWr0GPJuN/qpTaWAECfz6gQM7vfdavZ7io -----END CERTIFICATE-----Generated at Wed Jan 21 13:33:13 2026 by rpki-client