This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/I7YXP0e9AeKaTFzKGTeQ9F6tKeQ.roa File: I7YXP0e9AeKaTFzKGTeQ9F6tKeQ.roa (raw, json) Hash identifier: Ovvw/LdenOk9Jm8tj055vgjBEOTG9nXANOu8VZ/Wp6g= Subject key identifier: 23:B6:17:3F:47:BD:01:E2:9A:4C:5C:CA:19:37:90:F4:5E:AD:29:E4 Certificate issuer: /CN=7bbf58975b81e8f9f9c15e4d8b899190cec00687 Certificate serial: 019B78355CF55F41605356FB2A13FFF9F42D Authority key identifier: 7B:BF:58:97:5B:81:E8:F9:F9:C1:5E:4D:8B:89:91:90:CE:C0:06:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/I7YXP0e9AeKaTFzKGTeQ9F6tKeQ.roa Signing time: Thu 01 Jan 2026 06:18:41 +0000 ROA not before: Thu 01 Jan 2026 06:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211219 IP address blocks: 194.31.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.crl rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.mft rsync://rpki.ripe.net/repository/DEFAULT/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:5c:f5:5f:41:60:53:56:fb:2a:13:ff:f9:f4:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bbf58975b81e8f9f9c15e4d8b899190cec00687 Validity Not Before: Jan 1 06:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23b6173f47bd01e29a4c5cca193790f45ead29e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:68:6b:82:82:1e:dd:6b:f0:cf:93:be:cc:3b: 7e:3e:23:fa:db:ba:a9:ae:ef:4a:a6:c7:f5:ac:69: d0:73:80:67:17:ad:e5:54:3e:7c:47:9f:ad:1e:8c: 4a:17:67:8f:e6:8e:ce:ed:cd:b6:dc:e1:d4:1b:13: fa:07:cf:a2:2e:a2:d3:43:61:a7:4a:89:fe:dd:66: e1:d9:01:bb:8d:fe:65:4f:86:11:c6:1d:c5:a9:1a: 1e:f8:9d:17:c9:8a:0e:c4:97:bf:a1:f6:c4:b1:03: ac:f1:08:c4:1a:40:b5:2e:56:fb:c3:38:33:81:4c: b1:4e:87:c9:48:c5:28:f4:10:c1:de:12:38:00:27: 0a:59:e1:ce:86:a6:74:6b:32:e8:0e:81:58:7e:39: 96:fc:bf:10:ba:e9:06:5a:69:2c:99:12:78:75:e2: ba:94:cd:e7:87:1c:19:64:6d:60:39:68:61:24:6e: 1d:06:2b:97:c3:a1:bd:e7:ed:04:e6:08:00:15:2f: 55:61:aa:75:c8:6e:f9:fe:dc:cd:7f:24:9d:ed:37: ce:0f:13:91:f8:74:ce:08:9a:5d:27:05:e1:ee:0e: 35:0e:54:7f:91:e3:39:6c:24:15:92:de:3c:bd:d2: 46:46:aa:4d:fe:44:9e:1b:3f:5f:a4:72:20:ce:99: c5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B6:17:3F:47:BD:01:E2:9A:4C:5C:CA:19:37:90:F4:5E:AD:29:E4 X509v3 Authority Key Identifier: keyid:7B:BF:58:97:5B:81:E8:F9:F9:C1:5E:4D:8B:89:91:90:CE:C0:06:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/I7YXP0e9AeKaTFzKGTeQ9F6tKeQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.253.0/24 Signature Algorithm: sha256WithRSAEncryption 38:15:bb:8a:52:84:9c:fb:79:08:60:80:09:eb:ca:20:46:d2: 48:83:80:ec:ae:d4:68:71:6d:de:2c:b9:08:cf:68:32:cf:ca: 50:87:30:c5:1a:3d:5c:4c:ec:17:7d:ae:ea:27:eb:78:0c:7f: 43:0e:87:d5:0f:99:c8:91:06:87:c9:61:49:45:07:80:82:9f: a1:af:1c:56:72:17:e0:e6:b7:3c:e0:40:6b:6e:26:41:9d:78: c5:34:72:03:52:22:8e:99:e1:ed:82:75:75:ef:19:51:f5:60: e3:b0:8f:c4:26:fc:c3:e3:76:6e:e9:88:ce:b9:f8:fc:9c:2a: fa:9e:e3:49:36:58:c7:da:c3:f1:56:d9:52:33:f1:d6:6b:55: e7:6b:01:c0:03:28:2d:ac:82:bf:f4:78:32:c4:32:62:f0:cf: d4:b0:8c:4d:29:63:7c:c2:60:6e:77:60:bf:d2:54:15:3b:f8: da:fb:40:b6:87:b3:0e:80:7d:71:2f:ff:cc:4e:93:21:30:aa: d0:b5:32:3a:50:4d:7c:46:7e:4c:9e:c4:a4:93:4d:31:5e:9e: 02:cf:7b:13:64:78:93:2a:84:ee:7b:ed:5a:e6:c5:26:01:7f: c8:09:66:c6:5f:02:91:89:bd:a0:7e:89:62:68:4b:b4:48:32: 32:fd:47:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NVz1X0FgU1b7KhP/+fQtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYmY1ODk3NWI4MWU4ZjlmOWMxNWU0ZDhiODk5MTkwY2Vj MDA2ODcwHhcNMjYwMTAxMDYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2I2MTczZjQ3YmQwMWUyOWE0YzVjY2ExOTM3OTBmNDVlYWQyOWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGhrgoIe3Wvwz5O+zDt+PiP627qp ru9Kpsf1rGnQc4BnF63lVD58R5+tHoxKF2eP5o7O7c223OHUGxP6B8+iLqLTQ2Gn Son+3Wbh2QG7jf5lT4YRxh3FqRoe+J0XyYoOxJe/ofbEsQOs8QjEGkC1Llb7wzgz gUyxTofJSMUo9BDB3hI4ACcKWeHOhqZ0azLoDoFYfjmW/L8QuukGWmksmRJ4deK6 lM3nhxwZZG1gOWhhJG4dBiuXw6G95+0E5ggAFS9VYap1yG75/tzNfySd7TfODxOR +HTOCJpdJwXh7g41DlR/keM5bCQVkt48vdJGRqpN/kSeGz9fpHIgzpnFDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCO2Fz9HvQHimkxcyhk3kPRerSnkMB8GA1UdIwQY MBaAFHu/WJdbgej5+cFeTYuJkZDOwAaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTc5WWwxdUI2UG41d1Y1Tmk0bVJrTTdBQm9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wZWE5Y2EtYWM5Ny00M2YwLTg1Nzct MWM3MGQxZTdiNzgyLzEvSTdZWFAwZTlBZUthVEZ6S0dUZVE5RjZ0S2VRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8wZWE5Y2EtYWM5Ny00M2YwLTg1NzctMWM3MGQxZTdiNzgy LzEvZTc5WWwxdUI2UG41d1Y1Tmk0bVJrTTdBQm9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh/9MA0G CSqGSIb3DQEBCwUAA4IBAQA4FbuKUoSc+3kIYIAJ68ogRtJIg4DsrtRocW3eLLkI z2gyz8pQhzDFGj1cTOwXfa7qJ+t4DH9DDofVD5nIkQaHyWFJRQeAgp+hrxxWchfg 5rc84EBrbiZBnXjFNHIDUiKOmeHtgnV17xlR9WDjsI/EJvzD43Zu6YjOufj8nCr6 nuNJNljH2sPxVtlSM/HWa1XnawHAAygtrIK/9HgyxDJi8M/UsIxNKWN8wmBud2C/ 0lQVO/ja+0C2h7MOgH1xL//MTpMhMKrQtTI6UE18Rn5MnsSkk00xXp4Cz3sTZHiT KoTue+1a5sUmAX/ICWbGXwKRib2gfoliaEu0SDIy/Uc1 -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:31 2026 by rpki-client