This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/7Br6QJMiBJoDhVb_EXiCriWN_AY.roa File: 7Br6QJMiBJoDhVb_EXiCriWN_AY.roa (raw, json) Hash identifier: gsWLGvyw0Im/+vXwSUKiwI1f5wizI+ESV/TWVUu641o= Subject key identifier: EC:1A:FA:40:93:22:04:9A:03:85:56:FF:11:78:82:AE:25:8D:FC:06 Certificate issuer: /CN=54ace15e45efb5a0060c065e274ea8e3afb025eb Certificate serial: 019B79102B80D30044F3E4AD904299BD9D45 Authority key identifier: 54:AC:E1:5E:45:EF:B5:A0:06:0C:06:5E:27:4E:A8:E3:AF:B0:25:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKzhXkXvtaAGDAZeJ06o46-wJes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/7Br6QJMiBJoDhVb_EXiCriWN_AY.roa Signing time: Thu 01 Jan 2026 10:17:41 +0000 ROA not before: Thu 01 Jan 2026 10:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12625 IP address blocks: 193.29.64.0/19 maxlen: 24 2a00:7440::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.crl rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.mft rsync://rpki.ripe.net/repository/DEFAULT/VKzhXkXvtaAGDAZeJ06o46-wJes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:2b:80:d3:00:44:f3:e4:ad:90:42:99:bd:9d:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54ace15e45efb5a0060c065e274ea8e3afb025eb Validity Not Before: Jan 1 10:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec1afa409322049a038556ff117882ae258dfc06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3a:da:39:a0:5f:24:d7:35:40:2e:3b:02:7c: f1:60:66:6c:65:dd:ed:9b:11:02:d5:7d:04:25:9f: 7d:61:14:df:fc:68:f9:6f:b8:95:cc:dc:76:a9:24: 9b:4b:d8:2b:9e:d0:b3:c0:1d:b2:69:48:d6:24:51: a7:fd:97:34:c3:a1:77:e7:52:b6:17:74:a7:48:71: 3b:6e:da:99:e3:f1:5d:6e:24:dd:b5:e4:78:b5:ad: 89:f8:98:60:4e:87:e6:ba:23:17:c6:07:be:68:4b: 9b:20:6f:c8:8a:1f:43:84:27:c0:4d:e6:32:68:a1: d8:35:52:df:cf:06:da:11:f1:c8:b3:df:f0:17:fb: 40:c5:a8:03:b7:aa:00:ec:5d:69:cb:57:0b:b2:de: 8a:17:35:0b:43:8d:76:cb:04:5c:2e:44:fc:fe:83: 7b:d2:07:3a:2b:8c:f2:c1:6d:0c:02:74:db:a7:e8: 03:4c:0b:0d:6f:a0:ef:9e:37:48:3b:27:61:bb:19: 47:f0:02:2d:30:39:cd:5c:b1:f9:b6:35:96:83:a8: 16:c9:b3:9b:f7:d5:f7:c0:8b:92:1f:81:1a:e8:f6: 92:cc:49:2f:12:2d:b0:1e:55:33:19:28:d9:83:1b: b4:8c:d6:b0:eb:95:ab:39:07:ee:aa:2f:ee:b8:68: 90:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:1A:FA:40:93:22:04:9A:03:85:56:FF:11:78:82:AE:25:8D:FC:06 X509v3 Authority Key Identifier: keyid:54:AC:E1:5E:45:EF:B5:A0:06:0C:06:5E:27:4E:A8:E3:AF:B0:25:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKzhXkXvtaAGDAZeJ06o46-wJes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/7Br6QJMiBJoDhVb_EXiCriWN_AY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.29.64.0/19 IPv6: 2a00:7440::/32 Signature Algorithm: sha256WithRSAEncryption 72:79:d7:25:79:b8:74:ce:ec:da:5d:bb:fc:4b:cb:f1:02:95: 37:13:f7:47:15:45:29:66:d4:18:f9:4a:26:62:1a:6f:4d:35: 8f:e4:e9:a3:b2:08:7f:79:04:34:d8:ef:73:31:35:66:1d:7a: 81:13:1f:5a:1c:47:c5:ec:93:61:04:f3:8b:46:80:00:85:21: 5f:7c:fe:7c:21:5f:01:ee:fe:46:98:4c:a4:88:38:79:14:b1: 49:ec:a3:28:7b:a2:91:58:e2:09:88:d7:cf:d2:a7:79:04:7a: 79:b5:45:50:ab:90:9e:87:5e:56:87:a4:06:c6:4d:0d:62:b8: 04:f0:17:71:8e:81:23:39:bb:d6:ef:13:8e:8c:00:fa:dc:75: af:05:4e:7d:2b:15:06:03:46:84:9d:9e:87:2e:c2:93:bc:3f: ca:6c:01:9f:8b:8c:67:29:d9:8b:fb:62:fb:7c:ba:b9:a8:48: 57:7c:4b:90:50:65:8a:c3:5c:13:dc:c2:f7:9a:79:99:35:99: 5e:ea:e5:a2:97:a1:75:95:94:b1:2c:cd:88:c0:b1:ee:43:08: b8:4f:23:b2:23:82:b9:23:70:7f:57:14:f8:39:f6:f4:b6:27: 77:fe:b4:6f:8a:51:b1:36:ce:1d:0c:ff:39:85:13:2f:3c:24: 64:e3:52:86 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5ECuA0wBE8+StkEKZvZ1FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YWNlMTVlNDVlZmI1YTAwNjBjMDY1ZTI3NGVhOGUzYWZi MDI1ZWIwHhcNMjYwMTAxMTAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzFhZmE0MDkzMjIwNDlhMDM4NTU2ZmYxMTc4ODJhZTI1OGRmYzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TraOaBfJNc1QC47AnzxYGZsZd3t mxEC1X0EJZ99YRTf/Gj5b7iVzNx2qSSbS9grntCzwB2yaUjWJFGn/Zc0w6F351K2 F3SnSHE7btqZ4/FdbiTdteR4ta2J+JhgTofmuiMXxge+aEubIG/Iih9DhCfATeYy aKHYNVLfzwbaEfHIs9/wF/tAxagDt6oA7F1py1cLst6KFzULQ412ywRcLkT8/oN7 0gc6K4zywW0MAnTbp+gDTAsNb6DvnjdIOydhuxlH8AItMDnNXLH5tjWWg6gWybOb 99X3wIuSH4Ea6PaSzEkvEi2wHlUzGSjZgxu0jNaw65WrOQfuqi/uuGiQPwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOwa+kCTIgSaA4VW/xF4gq4ljfwGMB8GA1UdIwQY MBaAFFSs4V5F77WgBgwGXidOqOOvsCXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkt6aFhrWHZ0YUFHREFaZUowNm80Ni13SmVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny84ZWZhNDUtOTJhOC00NTEzLTlmOWEt YWQyYjYxMzgwYmUxLzEvN0JyNlFKTWlCSm9EaFZiX0VYaUNyaVdOX0FZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny84ZWZhNDUtOTJhOC00NTEzLTlmOWEtYWQyYjYxMzgwYmUx LzEvVkt6aFhrWHZ0YUFHREFaZUowNm80Ni13SmVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFwR1AMA0E AgACMAcDBQAqAHRAMA0GCSqGSIb3DQEBCwUAA4IBAQByedclebh0zuzaXbv8S8vx ApU3E/dHFUUpZtQY+UomYhpvTTWP5Omjsgh/eQQ02O9zMTVmHXqBEx9aHEfF7JNh BPOLRoAAhSFffP58IV8B7v5GmEykiDh5FLFJ7KMoe6KRWOIJiNfP0qd5BHp5tUVQ q5Ceh15Wh6QGxk0NYrgE8BdxjoEjObvW7xOOjAD63HWvBU59KxUGA0aEnZ6HLsKT vD/KbAGfi4xnKdmL+2L7fLq5qEhXfEuQUGWKw1wT3ML3mnmZNZle6uWil6F1lZSx LM2IwLHuQwi4TyOyI4K5I3B/VxT4Ofb0tid3/rRvilGxNs4dDP85hRMvPCRk41KG -----END CERTIFICATE-----Generated at Mon Jan 26 17:24:25 2026 by rpki-client