This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/F7uNYW_BAZq9rI9uR7hZmoD2t2c.roa File: F7uNYW_BAZq9rI9uR7hZmoD2t2c.roa (raw, json) Hash identifier: 66sSkYjfMPB1iz46OvsCyBJxFuzzlDOw8irePRrhJqo= Subject key identifier: 17:BB:8D:61:6F:C1:01:9A:BD:AC:8F:6E:47:B8:59:9A:80:F6:B7:67 Certificate issuer: /CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39 Certificate serial: 019B791060188FE9D114C54CF00D8BB4C44F Authority key identifier: 68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/F7uNYW_BAZq9rI9uR7hZmoD2t2c.roa Signing time: Thu 01 Jan 2026 10:17:54 +0000 ROA not before: Thu 01 Jan 2026 10:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 147.78.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:60:18:8f:e9:d1:14:c5:4c:f0:0d:8b:b4:c4:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39 Validity Not Before: Jan 1 10:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17bb8d616fc1019abdac8f6e47b8599a80f6b767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8e:09:61:58:50:0f:1c:f7:56:14:0b:2a:69: 3f:28:eb:3e:e7:e2:72:5e:bd:e7:1c:0c:d5:95:fd: ed:f0:d7:3b:f3:1d:3d:43:5c:5a:04:5c:50:e4:92: 3f:a3:1c:7e:d7:0e:14:73:96:8c:05:03:b9:99:61: 50:bc:f7:a6:fc:1d:12:b3:7a:74:32:f5:13:4e:24: 07:4f:1c:0e:41:f7:91:34:f9:9c:11:2e:5d:cf:58: ad:a4:4a:63:8e:62:01:bb:30:00:a4:2a:36:c5:5e: 91:78:75:1a:17:2a:9b:c3:87:e8:d4:5d:29:68:f9: 19:9d:d6:ec:78:84:ab:16:a0:1c:fd:1d:e5:e1:e8: 6d:ce:4a:98:ad:d0:24:ca:06:2a:14:c6:2c:5a:ee: bb:4f:de:0c:f5:57:d7:27:51:26:f2:cc:82:01:83: 1f:f9:3a:38:58:ce:d4:9c:50:89:50:38:25:92:5c: 07:33:a1:56:c1:c3:f6:fa:9f:a0:0a:41:e9:a3:ae: b3:e2:0b:7f:41:62:d4:64:1a:52:81:e1:ae:f5:a4: 9a:64:31:b0:f9:45:04:7a:50:48:54:2e:71:8f:cc: 73:d6:ec:e8:02:0f:cc:fc:49:e7:aa:9d:9c:20:ab: b8:00:85:cc:1f:bc:56:38:b4:62:82:6b:8a:0a:e9: cc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BB:8D:61:6F:C1:01:9A:BD:AC:8F:6E:47:B8:59:9A:80:F6:B7:67 X509v3 Authority Key Identifier: keyid:68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/F7uNYW_BAZq9rI9uR7hZmoD2t2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.32.0/24 Signature Algorithm: sha256WithRSAEncryption 87:91:44:a1:86:88:e7:d2:56:8e:ea:73:82:52:d8:02:ab:13: 67:6c:2a:93:33:87:78:eb:32:c6:1a:82:2e:1f:92:4f:0c:39: b6:23:d3:06:59:e6:9a:c5:96:50:0d:85:5f:27:05:8c:94:d1: 38:a1:94:e0:21:03:e0:73:12:c3:36:ea:f0:b0:22:be:4b:08: c0:bb:38:30:f7:58:f0:90:33:7f:a8:c4:34:8a:8a:d6:0b:53: 51:2d:b6:d6:7b:2c:2d:1b:c1:cb:31:17:1c:74:cd:dd:75:cc: 1b:82:66:be:7d:e4:68:2a:84:88:9c:bb:eb:33:c6:6a:3e:ff: 60:f8:c0:67:86:7f:5d:14:f7:88:dd:3a:72:a9:7b:8a:87:06: 66:23:39:dc:13:c9:c2:49:71:be:be:87:b6:7a:ed:c1:90:43: 40:e6:d4:82:2a:9a:c3:63:e3:0e:c9:d1:c2:c8:53:71:5b:f1: b3:3f:f6:e1:e0:da:3f:62:24:f5:d9:a3:c2:80:cb:ed:92:92: 3e:e9:ba:6c:f4:17:60:b0:7e:91:1f:a4:89:84:09:fd:64:95: e9:da:f8:52:04:53:de:85:d1:94:f7:c4:77:6c:39:16:63:80: fb:3b:42:b6:92:49:0a:c9:d4:90:37:37:00:d7:45:62:83:47: 66:d2:d0:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EGAYj+nRFMVM8A2LtMRPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZThiYWVhOTVkNDA0MDM0OGYwYTg5ZWM0ZTRiZDE1Mjc1 ZjZjMzkwHhcNMjYwMTAxMTAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2JiOGQ2MTZmYzEwMTlhYmRhYzhmNmU0N2I4NTk5YTgwZjZiNzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY4JYVhQDxz3VhQLKmk/KOs+5+Jy Xr3nHAzVlf3t8Nc78x09Q1xaBFxQ5JI/oxx+1w4Uc5aMBQO5mWFQvPem/B0Ss3p0 MvUTTiQHTxwOQfeRNPmcES5dz1itpEpjjmIBuzAApCo2xV6ReHUaFyqbw4fo1F0p aPkZndbseISrFqAc/R3l4ehtzkqYrdAkygYqFMYsWu67T94M9VfXJ1Em8syCAYMf +To4WM7UnFCJUDglklwHM6FWwcP2+p+gCkHpo66z4gt/QWLUZBpSgeGu9aSaZDGw +UUEelBIVC5xj8xz1uzoAg/M/Ennqp2cIKu4AIXMH7xWOLRigmuKCunM7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBe7jWFvwQGavayPbke4WZqA9rdnMB8GA1UdIwQY MBaAFGjouuqV1AQDSPConsTkvRUnX2w5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU9pNjZwWFVCQU5JOEtpZXhPUzlGU2RmYkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83NjUzZTAtOGE3Mi00MzUxLWJmY2Ut MzcxMWZhZThjYTc3LzEvRjd1TllXX0JBWnE5ckk5dVI3aFptb0QydDJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny83NjUzZTAtOGE3Mi00MzUxLWJmY2UtMzcxMWZhZThjYTc3 LzEvYU9pNjZwWFVCQU5JOEtpZXhPUzlGU2RmYkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk04gMA0G CSqGSIb3DQEBCwUAA4IBAQCHkUShhojn0laO6nOCUtgCqxNnbCqTM4d46zLGGoIu H5JPDDm2I9MGWeaaxZZQDYVfJwWMlNE4oZTgIQPgcxLDNurwsCK+SwjAuzgw91jw kDN/qMQ0iorWC1NRLbbWeywtG8HLMRccdM3ddcwbgma+feRoKoSInLvrM8ZqPv9g +MBnhn9dFPeI3TpyqXuKhwZmIzncE8nCSXG+voe2eu3BkENA5tSCKprDY+MOydHC yFNxW/GzP/bh4No/YiT12aPCgMvtkpI+6bps9BdgsH6RH6SJhAn9ZJXp2vhSBFPe hdGU98R3bDkWY4D7O0K2kkkKydSQNzcA10Vig0dm0tCa -----END CERTIFICATE-----Generated at Fri Jan 2 11:03:59 2026 by rpki-client