This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/7i0rCeFLYOfrWMrFd0FDjA_1uy8.roa File: 7i0rCeFLYOfrWMrFd0FDjA_1uy8.roa (raw, json) Hash identifier: jd+NyNAswzvZX584xQrQEmV3Udo0JMPIWH1l9hHAcA8= Subject key identifier: EE:2D:2B:09:E1:4B:60:E7:EB:58:CA:C5:77:41:43:8C:0F:F5:BB:2F Certificate issuer: /CN=06edfd28350f73d39855c475a1516ae0b7791a0f Certificate serial: 019B7E3827F2D37B010CC06BCE0A1E8ED6DF Authority key identifier: 06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/7i0rCeFLYOfrWMrFd0FDjA_1uy8.roa Signing time: Fri 02 Jan 2026 10:19:27 +0000 ROA not before: Fri 02 Jan 2026 10:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41562 IP address blocks: 195.34.72.0/23 maxlen: 23 195.34.72.0/24 maxlen: 24 195.34.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:27:f2:d3:7b:01:0c:c0:6b:ce:0a:1e:8e:d6:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06edfd28350f73d39855c475a1516ae0b7791a0f Validity Not Before: Jan 2 10:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee2d2b09e14b60e7eb58cac57741438c0ff5bb2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fb:5f:53:ff:af:76:13:7d:4c:1c:57:f0:88: 19:48:14:14:12:cc:83:d1:d7:31:fb:f6:51:f9:19: d0:b4:a4:ee:69:75:c2:e8:4e:c6:ba:ae:5e:de:a5: 37:f8:68:74:bf:c0:81:f2:ec:f6:e4:e5:15:cc:c1: 63:49:fa:00:e0:27:cf:45:6d:82:00:31:72:ee:58: e3:4e:0b:0f:74:07:cd:8e:a2:58:fc:c1:2c:50:af: 9b:32:c9:75:61:1c:a5:fc:ed:b2:c5:f3:66:92:87: 5d:4a:49:bc:b7:a7:08:05:c3:7a:5a:3b:e3:04:79: 78:77:53:7d:7b:c0:71:69:72:5e:72:5b:40:6d:cf: 03:cd:cd:fa:00:cd:5e:da:c6:b9:08:e8:ef:50:e9: d7:dc:07:7e:d4:0f:c4:61:b2:09:e0:75:2d:25:c8: a1:e0:2f:01:87:dc:be:32:94:bc:66:18:04:bf:2d: 92:03:bc:3f:89:ab:1f:92:37:92:8f:12:68:4c:4d: 8d:92:79:42:80:66:3a:51:7c:6e:18:93:18:2b:53: 26:a1:7d:71:8f:b2:4a:67:11:92:59:cf:7a:a1:b1: 1c:39:68:c6:c6:8e:03:46:c2:9e:29:88:57:10:68: b5:14:31:4d:52:bd:d5:8a:95:4e:63:88:3c:40:6b: 57:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2D:2B:09:E1:4B:60:E7:EB:58:CA:C5:77:41:43:8C:0F:F5:BB:2F X509v3 Authority Key Identifier: keyid:06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/7i0rCeFLYOfrWMrFd0FDjA_1uy8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.34.72.0/23 Signature Algorithm: sha256WithRSAEncryption d7:b5:41:fe:87:cd:02:22:6e:a7:5d:a1:74:59:15:82:45:c4: 13:6a:4c:3d:d7:58:5e:64:a4:13:0d:c8:35:0f:e9:65:a5:5d: 8c:b4:e0:c6:6d:68:f5:f6:2e:1c:be:71:b5:1f:d6:5c:96:12: 96:64:04:b5:61:bc:c1:02:2e:47:de:21:33:26:a8:72:f0:8f: 8f:2b:e7:75:42:e0:7e:97:8d:a0:9f:fd:1e:98:23:20:b4:94: 24:0f:5f:8e:53:cd:c6:e2:64:df:9d:7f:01:54:5d:38:77:5f: 23:bb:c1:08:f9:08:73:f8:90:15:5d:b6:24:97:6e:a6:61:79: 6a:aa:5b:50:e8:d8:86:53:50:48:75:ca:ad:ed:7a:ee:ee:2e: 10:a6:c2:25:a7:f5:fc:db:ab:28:a0:1f:cd:33:66:c2:7f:ba: 21:a3:f8:a9:4d:84:4b:eb:f6:a7:3b:38:07:78:81:1d:e4:e0: 8d:fe:43:81:2d:60:87:8f:1e:74:89:23:f3:2b:2a:3f:00:6c: 18:9e:90:65:73:de:69:d7:da:89:a9:44:61:a1:70:27:be:b1: 1c:01:09:9b:82:0b:6c:7d:db:10:64:f9:11:63:a0:dd:df:50: 84:9f:37:6b:f7:04:34:04:6c:0f:cd:ba:2f:05:3f:34:2a:19: 30:93:97:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OCfy03sBDMBrzgoejtbfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ZWRmZDI4MzUwZjczZDM5ODU1YzQ3NWExNTE2YWUwYjc3 OTFhMGYwHhcNMjYwMTAyMTAxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTJkMmIwOWUxNGI2MGU3ZWI1OGNhYzU3NzQxNDM4YzBmZjViYjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPtfU/+vdhN9TBxX8IgZSBQUEsyD 0dcx+/ZR+RnQtKTuaXXC6E7Guq5e3qU3+Gh0v8CB8uz25OUVzMFjSfoA4CfPRW2C ADFy7ljjTgsPdAfNjqJY/MEsUK+bMsl1YRyl/O2yxfNmkoddSkm8t6cIBcN6Wjvj BHl4d1N9e8BxaXJecltAbc8Dzc36AM1e2sa5COjvUOnX3Ad+1A/EYbIJ4HUtJcih 4C8Bh9y+MpS8ZhgEvy2SA7w/iasfkjeSjxJoTE2NknlCgGY6UXxuGJMYK1MmoX1x j7JKZxGSWc96obEcOWjGxo4DRsKeKYhXEGi1FDFNUr3VipVOY4g8QGtX6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO4tKwnhS2Dn61jKxXdBQ4wP9bsvMB8GA1UdIwQY MBaAFAbt/Sg1D3PTmFXEdaFRauC3eRoPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnUzOUtEVVBjOU9ZVmNSMW9WRnE0TGQ1R2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi82MTNmYjQtOGEwMC00YjJkLThkMWMt ZjZkNzI5YTkzZWM4LzEvN2kwckNlRkxZT2ZyV01yRmQwRkRqQV8xdXk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi82MTNmYjQtOGEwMC00YjJkLThkMWMtZjZkNzI5YTkzZWM4 LzEvQnUzOUtEVVBjOU9ZVmNSMW9WRnE0TGQ1R2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwyJIMA0G CSqGSIb3DQEBCwUAA4IBAQDXtUH+h80CIm6nXaF0WRWCRcQTakw911heZKQTDcg1 D+llpV2MtODGbWj19i4cvnG1H9ZclhKWZAS1YbzBAi5H3iEzJqhy8I+PK+d1QuB+ l42gn/0emCMgtJQkD1+OU83G4mTfnX8BVF04d18ju8EI+Qhz+JAVXbYkl26mYXlq qltQ6NiGU1BIdcqt7Xru7i4QpsIlp/X826sooB/NM2bCf7oho/ipTYRL6/anOzgH eIEd5OCN/kOBLWCHjx50iSPzKyo/AGwYnpBlc95p19qJqURhoXAnvrEcAQmbggts fdsQZPkRY6Dd31CEnzdr9wQ0BGwPzbovBT80Khkwk5eJ -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:16 2026 by rpki-client