This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/ImpO7LSnSh8T-SAP2SuJNfFSJgE.roa File: ImpO7LSnSh8T-SAP2SuJNfFSJgE.roa (raw, json) Hash identifier: dSmKjTB9FQy0lASiaAn8YI8srtKhdTfzJGvqm7f0pf4= Subject key identifier: 22:6A:4E:EC:B4:A7:4A:1F:13:F9:20:0F:D9:2B:89:35:F1:52:26:01 Certificate issuer: /CN=10543a5197eb2544447e9d36b3ebf14452c777eb Certificate serial: 019B797EE870432F350D02E9782BE4007609 Authority key identifier: 10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/ImpO7LSnSh8T-SAP2SuJNfFSJgE.roa Signing time: Thu 01 Jan 2026 12:18:38 +0000 ROA not before: Thu 01 Jan 2026 12:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32787 IP address blocks: 193.120.17.0/24 maxlen: 24 193.120.42.0/24 maxlen: 24 193.120.52.0/24 maxlen: 24 193.120.98.0/24 maxlen: 24 193.120.216.0/24 maxlen: 24 212.2.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e8:70:43:2f:35:0d:02:e9:78:2b:e4:00:76:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10543a5197eb2544447e9d36b3ebf14452c777eb Validity Not Before: Jan 1 12:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=226a4eecb4a74a1f13f9200fd92b8935f1522601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3c:b1:eb:6e:6d:88:78:cf:ba:25:ad:bf:16: 9f:3a:01:27:c7:3a:12:e8:53:25:61:fd:f1:84:27: df:e0:7e:0d:e5:39:e1:97:5b:bb:a2:19:22:bc:c1: 02:21:0b:37:08:35:71:70:63:72:47:e7:d1:c1:3e: 8e:a8:ae:05:5f:f5:35:3b:60:f3:bd:a6:7f:66:bd: 2f:85:65:9a:10:a4:1f:68:d7:e2:f6:46:04:71:3a: cc:a4:35:46:fb:66:cc:af:4c:4d:79:03:01:10:1b: c0:34:34:f0:91:7f:91:78:f4:98:39:f3:14:c5:c2: a9:95:10:74:b1:3a:42:4d:44:82:d3:a4:ae:88:78: 32:df:3d:30:43:c5:d4:ec:96:60:46:ff:87:fd:bc: da:a9:89:e2:97:53:6f:e0:5a:99:83:27:69:c5:75: 31:b1:4a:b3:cc:bf:5b:02:e2:a1:29:76:2d:78:fe: ab:a8:a5:83:a8:d9:86:9b:bf:24:dc:e2:cc:5f:ee: 36:82:6a:67:3b:dd:be:b4:1c:29:89:37:b9:fa:ff: 45:f4:84:c5:b1:d6:eb:74:5d:ed:47:e2:fa:c6:85: 97:6b:e0:a2:b4:63:5d:eb:97:01:56:cb:f0:1e:bd: 19:ee:40:c7:80:42:85:a3:b7:5c:fb:cb:50:91:a2: b0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6A:4E:EC:B4:A7:4A:1F:13:F9:20:0F:D9:2B:89:35:F1:52:26:01 X509v3 Authority Key Identifier: keyid:10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/ImpO7LSnSh8T-SAP2SuJNfFSJgE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.120.17.0/24 193.120.42.0/24 193.120.52.0/24 193.120.98.0/24 193.120.216.0/24 212.2.187.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:1f:5f:9c:42:cd:1f:f1:00:2d:84:4f:95:37:6f:ca:51:e9: 51:f6:ec:8a:4e:3e:02:5a:61:be:f5:5b:53:b3:60:cc:bc:80: 87:37:a1:ec:a7:27:76:d7:a7:68:d6:3f:d5:8a:9e:33:f1:4e: 70:6f:a6:7e:17:8a:c4:83:48:f5:ff:20:0a:3b:d9:23:7e:4e: 06:e5:e0:91:0f:37:0b:71:fb:9f:af:2a:2a:04:58:2b:6b:37: e7:fd:f4:45:ba:60:2f:1c:4e:68:fe:7a:ed:8b:22:96:d9:50: 6d:98:4b:63:3d:60:4d:44:c2:8f:7e:3d:bd:dd:54:c0:08:56: 41:d7:f3:e9:29:6f:e8:5a:9e:54:53:cb:d5:51:5f:bb:70:52: f7:84:4a:2d:f2:b1:f9:70:53:3f:5d:63:78:d9:f3:59:db:c2: d9:a5:9e:a7:b6:91:de:86:5e:65:62:2d:d8:95:9a:15:4f:c8: 85:01:ec:7b:88:4a:3d:09:d0:05:32:45:46:54:6f:e7:ce:f9: 84:84:eb:a5:e2:eb:4a:58:64:40:8a:b2:58:2e:34:c6:a2:15: cb:9d:04:84:be:8e:d5:39:22:22:d1:c8:a3:ea:b7:72:10:58: f0:47:3b:36:e6:ae:83:13:e0:94:36:06:99:9e:0f:48:87:81: d1:49:99:28 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt5fuhwQy81DQLpeCvkAHYJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNTQzYTUxOTdlYjI1NDQ0NDdlOWQzNmIzZWJmMTQ0NTJj Nzc3ZWIwHhcNMjYwMTAxMTIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjZhNGVlY2I0YTc0YTFmMTNmOTIwMGZkOTJiODkzNWYxNTIyNjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzyx625tiHjPuiWtvxafOgEnxzoS 6FMlYf3xhCff4H4N5Tnhl1u7ohkivMECIQs3CDVxcGNyR+fRwT6OqK4FX/U1O2Dz vaZ/Zr0vhWWaEKQfaNfi9kYEcTrMpDVG+2bMr0xNeQMBEBvANDTwkX+RePSYOfMU xcKplRB0sTpCTUSC06SuiHgy3z0wQ8XU7JZgRv+H/bzaqYnil1Nv4FqZgydpxXUx sUqzzL9bAuKhKXYteP6rqKWDqNmGm78k3OLMX+42gmpnO92+tBwpiTe5+v9F9ITF sdbrdF3tR+L6xoWXa+CitGNd65cBVsvwHr0Z7kDHgEKFo7dc+8tQkaKwwwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFCJqTuy0p0ofE/kgD9kriTXxUiYBMB8GA1UdIwQY MBaAFBBUOlGX6yVERH6dNrPr8URSx3frMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUZRNlVaZnJKVVJFZnAwMnMtdnhSRkxIZC1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xYmU3YmMtYjY0Mi00YTBkLThlNmIt ZjdlMGM1ZTI3MDJlLzEvSW1wTzdMU25TaDhULVNBUDJTdUpOZkZTSmdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8xYmU3YmMtYjY0Mi00YTBkLThlNmItZjdlMGM1ZTI3MDJl LzEvRUZRNlVaZnJKVVJFZnAwMnMtdnhSRkxIZC1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAwXgRAwQA wXgqAwQAwXg0AwQAwXhiAwQAwXjYAwQA1AK7MA0GCSqGSIb3DQEBCwUAA4IBAQBN H1+cQs0f8QAthE+VN2/KUelR9uyKTj4CWmG+9VtTs2DMvICHN6Hspyd216do1j/V ip4z8U5wb6Z+F4rEg0j1/yAKO9kjfk4G5eCRDzcLcfufryoqBFgrazfn/fRFumAv HE5o/nrtiyKW2VBtmEtjPWBNRMKPfj293VTACFZB1/PpKW/oWp5UU8vVUV+7cFL3 hEot8rH5cFM/XWN42fNZ28LZpZ6ntpHehl5lYi3YlZoVT8iFAex7iEo9CdAFMkVG VG/nzvmEhOul4utKWGRAirJYLjTGohXLnQSEvo7VOSIi0cij6rdyEFjwRzs25q6D E+CUNgaZng9Ih4HRSZko -----END CERTIFICATE-----Generated at Tue Jan 20 07:56:31 2026 by rpki-client