This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/7yXVbkDIped5AlVJWBLhNwB93qU.roa File: 7yXVbkDIped5AlVJWBLhNwB93qU.roa (raw, json) Hash identifier: U+X2A4hl4OztYccmnndX5mgP9l1pKYkV+aIE4TVtE9o= Subject key identifier: EF:25:D5:6E:40:C8:A5:E7:79:02:55:49:58:12:E1:37:00:7D:DE:A5 Certificate issuer: /CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad Certificate serial: 019B7AC8A89F584C96F1CE57362C3EF00BFC Authority key identifier: B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/7yXVbkDIped5AlVJWBLhNwB93qU.roa Signing time: Thu 01 Jan 2026 18:18:49 +0000 ROA not before: Thu 01 Jan 2026 18:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 194.99.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a8:9f:58:4c:96:f1:ce:57:36:2c:3e:f0:0b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad Validity Not Before: Jan 1 18:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef25d56e40c8a5e7790255495812e137007ddea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6b:7b:9c:e3:10:4a:fc:b9:a9:d5:6c:5d:40: ec:d5:64:cc:63:6f:fa:a4:11:15:cb:ca:29:5b:2d: c1:7e:6d:b9:62:87:8d:75:de:67:93:b3:ed:d1:fb: c6:8b:54:ad:fa:a9:48:a8:e4:fa:08:7d:92:a1:83: cc:5d:5a:54:63:c5:ec:80:9f:95:dd:40:13:3b:54: 99:7a:73:55:cc:1f:cc:9c:1b:07:9c:16:82:f9:84: 18:52:35:9a:87:fb:0a:9e:63:2a:e4:db:9a:d5:b6: 94:b6:04:0a:e4:05:c1:20:c9:63:48:22:aa:f9:0d: e0:3b:fc:a9:49:86:4f:71:3a:30:20:11:a0:b9:27: cd:7a:9d:6f:11:48:a1:11:f0:c9:21:21:4e:de:8e: 61:44:ba:8d:cc:8d:d2:31:8b:32:68:24:80:de:b2: 51:6d:5f:f4:f8:98:fd:27:87:15:55:63:10:cc:46: d8:36:f4:46:b1:f1:80:f5:e7:f8:20:08:55:5c:ce: 3d:b4:a7:12:87:47:2f:3e:10:08:aa:ac:0b:09:2a: b6:56:87:ca:a3:6a:a3:5d:2d:c4:73:61:ee:0c:90: 28:77:ab:62:e2:f1:63:4f:64:58:0a:66:f8:7f:91: c1:4c:bc:af:86:8b:3e:9c:d8:99:b2:3c:f2:03:7b: 3e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:25:D5:6E:40:C8:A5:E7:79:02:55:49:58:12:E1:37:00:7D:DE:A5 X509v3 Authority Key Identifier: keyid:B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/7yXVbkDIped5AlVJWBLhNwB93qU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.99.96.0/23 Signature Algorithm: sha256WithRSAEncryption 13:5e:01:be:83:b9:9a:89:83:20:b1:57:0c:3b:2a:4b:c4:fd: 54:3b:6f:c1:eb:d5:61:d7:76:26:1a:5e:cf:5b:4a:60:34:60: ee:70:27:a2:37:51:13:75:aa:33:0f:35:81:48:dc:dd:76:2d: ef:8d:0f:58:a8:a5:81:80:5d:76:7f:4c:f7:79:94:90:c1:5e: 2c:d9:9f:7f:c4:c2:8a:63:30:f5:b9:36:2b:a8:b2:36:1c:fd: fe:95:fb:a3:b2:ea:2b:95:17:41:b2:e1:b6:80:1b:27:24:16: e2:17:d5:14:1c:2e:0a:dd:3b:b5:dc:a9:88:f6:1d:d6:0e:25: db:47:ab:7e:c8:f4:49:9e:ae:7d:6b:da:f5:0c:7e:23:7c:39: 0c:fe:71:e4:16:d4:1a:17:4a:4c:d4:9d:8e:ec:52:7e:75:3d: a7:c1:a8:e0:b4:d2:89:d1:10:48:8e:31:4d:ba:b9:20:69:88: 8a:e2:41:06:2d:a9:90:6f:d3:c6:09:34:d7:d3:6a:99:78:c3: 5e:66:3f:8a:53:e5:78:b3:6e:29:a6:ce:5f:e8:12:a9:95:0f: 9d:dd:a2:99:35:7c:fb:b1:bf:50:49:88:db:fe:46:31:34:a1: a3:a3:75:9f:91:d1:da:aa:94:17:b8:05:97:35:4f:aa:41:43: 5d:05:f1:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yKifWEyW8c5XNiw+8Av8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NGNlM2YzYzVlNWEyZjlkOGI4YTRjNzdhODM2MWY4YTIx NmYzYWQwHhcNMjYwMTAxMTgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjI1ZDU2ZTQwYzhhNWU3NzkwMjU1NDk1ODEyZTEzNzAwN2RkZWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWt7nOMQSvy5qdVsXUDs1WTMY2/6 pBEVy8opWy3Bfm25YoeNdd5nk7Pt0fvGi1St+qlIqOT6CH2SoYPMXVpUY8XsgJ+V 3UATO1SZenNVzB/MnBsHnBaC+YQYUjWah/sKnmMq5Nua1baUtgQK5AXBIMljSCKq +Q3gO/ypSYZPcTowIBGguSfNep1vEUihEfDJISFO3o5hRLqNzI3SMYsyaCSA3rJR bV/0+Jj9J4cVVWMQzEbYNvRGsfGA9ef4IAhVXM49tKcSh0cvPhAIqqwLCSq2VofK o2qjXS3Ec2HuDJAod6ti4vFjT2RYCmb4f5HBTLyvhos+nNiZsjzyA3s+nQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO8l1W5AyKXneQJVSVgS4TcAfd6lMB8GA1UdIwQY MBaAFLdM4/PF5aL52Likx3qDYfiiFvOtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDB6ajg4WGxvdm5ZdUtUSGVvTmgtS0lXODYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hYzY4MWYtMDVkMi00MDQ1LWFlMTAt NWViZGQ5ZTI4ODdjLzEvN3lYVmJrRElwZWQ1QWxWSldCTGhOd0I5M3FVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9hYzY4MWYtMDVkMi00MDQ1LWFlMTAtNWViZGQ5ZTI4ODdj LzEvdDB6ajg4WGxvdm5ZdUtUSGVvTmgtS0lXODYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwmNgMA0G CSqGSIb3DQEBCwUAA4IBAQATXgG+g7maiYMgsVcMOypLxP1UO2/B69Vh13YmGl7P W0pgNGDucCeiN1ETdaozDzWBSNzddi3vjQ9YqKWBgF12f0z3eZSQwV4s2Z9/xMKK YzD1uTYrqLI2HP3+lfujsuorlRdBsuG2gBsnJBbiF9UUHC4K3Tu13KmI9h3WDiXb R6t+yPRJnq59a9r1DH4jfDkM/nHkFtQaF0pM1J2O7FJ+dT2nwajgtNKJ0RBIjjFN urkgaYiK4kEGLamQb9PGCTTX02qZeMNeZj+KU+V4s24pps5f6BKplQ+d3aKZNXz7 sb9QSYjb/kYxNKGjo3WfkdHaqpQXuAWXNU+qQUNdBfF7 -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:03 2026 by rpki-client