This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/7qlkFJrqlJHjJMafd1z2Ovx1xMg.roa File: 7qlkFJrqlJHjJMafd1z2Ovx1xMg.roa (raw, json) Hash identifier: /c/xy57bwbSPlEYy8aSToJUMaj9SVT1GxDFV+ZgmcDw= Subject key identifier: EE:A9:64:14:9A:EA:94:91:E3:24:C6:9F:77:5C:F6:3A:FC:75:C4:C8 Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Certificate serial: 019B7D5CFA166FCA271536016421B6CDC62C Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/7qlkFJrqlJHjJMafd1z2Ovx1xMg.roa Signing time: Fri 02 Jan 2026 06:20:03 +0000 ROA not before: Fri 02 Jan 2026 06:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 193.28.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fa:16:6f:ca:27:15:36:01:64:21:b6:cd:c6:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Validity Not Before: Jan 2 06:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eea964149aea9491e324c69f775cf63afc75c4c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8c:00:25:33:74:c5:b7:e6:66:e2:cf:e2:74: 22:e9:f2:c1:b0:33:ea:49:67:b8:19:b3:c9:08:05: 1d:e2:c9:ee:52:43:6f:4d:17:a2:d7:74:61:e8:f1: 79:22:61:cd:82:c8:c6:c3:dc:82:72:41:33:1c:29: 7c:3b:1b:a8:02:60:a9:d6:dd:40:a3:0d:cc:ee:0d: 2d:bb:46:9f:60:7f:20:1e:71:8c:95:56:e4:1c:a7: d9:be:50:32:a0:81:ec:2a:1a:78:3d:41:7f:91:08: 1f:b3:31:bd:28:92:ac:8a:e6:6c:56:76:c9:97:da: d5:45:66:11:9e:cf:75:67:44:e1:d2:39:3b:47:46: 9c:2a:10:57:46:94:38:13:92:a8:86:63:c4:b8:41: 9b:bb:3d:9a:7c:9d:95:4c:90:df:36:98:5d:36:f4: 56:57:85:bd:6d:88:56:2d:2a:12:87:0d:15:df:64: 83:cb:9e:a0:77:50:53:7a:5a:0e:e5:70:12:3a:f0: 07:a0:41:c0:27:0d:0a:b9:b5:0e:2f:01:75:ca:de: 2e:2d:a6:17:27:71:f6:8b:50:5e:e0:cb:49:3a:1e: 1c:97:bb:0d:6a:e1:59:ae:06:89:c3:9f:b9:f5:d8: f5:3a:75:5c:4e:fc:ff:70:d1:65:c8:a6:67:4e:f0: 25:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A9:64:14:9A:EA:94:91:E3:24:C6:9F:77:5C:F6:3A:FC:75:C4:C8 X509v3 Authority Key Identifier: keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/7qlkFJrqlJHjJMafd1z2Ovx1xMg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.28.71.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:71:a1:99:6c:84:fa:3e:c5:2c:3f:17:28:71:65:28:65:37: c9:07:ab:cc:36:07:68:ae:99:79:6b:a3:3e:18:c9:c1:ac:c9: 55:a1:8c:81:30:97:4b:bf:24:16:be:a4:91:19:86:56:9c:7e: 80:8f:2b:4b:5b:b1:7c:d2:3c:2a:9c:74:75:cb:13:af:a6:db: 04:6c:a4:73:ab:a1:96:b2:df:64:d3:28:c4:a7:01:6a:37:58: e1:33:aa:46:b5:6d:d4:d5:cb:a2:b5:a9:1a:71:e9:19:de:2c: 34:23:7f:d6:d5:14:d8:ad:e9:ec:52:e8:45:b5:a8:0f:db:5e: da:05:c1:84:ef:d0:9f:af:4c:18:44:ac:32:c7:ce:bf:18:0c: f8:9f:06:26:8f:67:a7:e4:ed:50:b1:c2:81:17:f6:af:53:d4: ab:0a:01:dc:11:2c:14:84:0d:05:e5:09:34:9b:5c:5d:e1:ef: 4e:4f:b0:10:71:02:60:82:59:5f:bd:ff:4b:f9:e8:53:41:24: 06:63:89:ee:fc:60:74:9c:fa:77:94:ed:7f:90:7e:0a:66:79: a9:a7:11:40:92:b1:58:4d:e6:6c:04:f3:78:72:8b:1e:47:db: 0d:3e:9b:e1:8d:d7:3d:bc:6e:f3:e2:18:61:1b:ce:26:f2:e9: c6:cf:73:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XPoWb8onFTYBZCG2zcYsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGU5MWEwZmIxZjRkZDE3OTAwZDA2ZGI2ZTg4MzM2Zjc4 YjVjMDUwHhcNMjYwMTAyMDYyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWE5NjQxNDlhZWE5NDkxZTMyNGM2OWY3NzVjZjYzYWZjNzVjNGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIwAJTN0xbfmZuLP4nQi6fLBsDPq SWe4GbPJCAUd4snuUkNvTRei13Rh6PF5ImHNgsjGw9yCckEzHCl8OxuoAmCp1t1A ow3M7g0tu0afYH8gHnGMlVbkHKfZvlAyoIHsKhp4PUF/kQgfszG9KJKsiuZsVnbJ l9rVRWYRns91Z0Th0jk7R0acKhBXRpQ4E5KohmPEuEGbuz2afJ2VTJDfNphdNvRW V4W9bYhWLSoShw0V32SDy56gd1BTeloO5XASOvAHoEHAJw0KubUOLwF1yt4uLaYX J3H2i1Be4MtJOh4cl7sNauFZrgaJw5+59dj1OnVcTvz/cNFlyKZnTvAltQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO6pZBSa6pSR4yTGn3dc9jr8dcTIMB8GA1UdIwQY MBaAFN7ekaD7H03ReQDQbbbogzb3i1wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMt MjFhNzAwYzcxMTlmLzEvN3Fsa0ZKcnFsSkhqSk1hZmQxejJPdngxeE1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMtMjFhNzAwYzcxMTlm LzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRxHMA0G CSqGSIb3DQEBCwUAA4IBAQAscaGZbIT6PsUsPxcocWUoZTfJB6vMNgdorpl5a6M+ GMnBrMlVoYyBMJdLvyQWvqSRGYZWnH6AjytLW7F80jwqnHR1yxOvptsEbKRzq6GW st9k0yjEpwFqN1jhM6pGtW3U1cuitakacekZ3iw0I3/W1RTYrensUuhFtagP217a BcGE79Cfr0wYRKwyx86/GAz4nwYmj2en5O1QscKBF/avU9SrCgHcESwUhA0F5Qk0 m1xd4e9OT7AQcQJggllfvf9L+ehTQSQGY4nu/GB0nPp3lO1/kH4KZnmppxFAkrFY TeZsBPN4coseR9sNPpvhjdc9vG7z4hhhG84m8unGz3PQ -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:08 2026 by rpki-client