This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/1-yB-aN02FvvexRrc-rBff7cVXYQ.roa File: 1-yB-aN02FvvexRrc-rBff7cVXYQ.roa (raw, json) Hash identifier: hfqxjUEwIBgbMLOiBaRuABJ5snVrD/mvftwY9OHnyNU= Subject key identifier: FB:20:7E:68:DD:36:16:FB:DE:C5:1A:DC:FA:B0:5F:7F:B7:15:5D:84 Certificate issuer: /CN=b453a86fd3081b803edc10d23bbeda91d7932025 Certificate serial: 019B7FF22D369EF3BD1F6D771EB8D8D216CC Authority key identifier: B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/1-yB-aN02FvvexRrc-rBff7cVXYQ.roa Signing time: Fri 02 Jan 2026 18:22:16 +0000 ROA not before: Fri 02 Jan 2026 18:22:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 193.22.32.0/20 maxlen: 23 193.22.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:2d:36:9e:f3:bd:1f:6d:77:1e:b8:d8:d2:16:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b453a86fd3081b803edc10d23bbeda91d7932025 Validity Not Before: Jan 2 18:22:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb207e68dd3616fbdec51adcfab05f7fb7155d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:36:c3:45:6c:27:53:2e:be:e4:7b:b7:97:f7: de:3e:47:5d:b8:2a:57:4e:2e:59:d1:d3:42:31:38: 4b:aa:42:c2:ce:5a:e1:98:1b:bd:74:89:da:fd:5f: b9:b8:4b:cc:90:6c:a6:8f:04:4e:0b:a1:69:7f:80: c3:0a:19:53:a0:fb:80:d5:5f:e0:63:51:85:ab:0a: 08:54:a2:c4:97:50:e4:17:63:b7:f0:da:51:08:ff: 0f:56:11:43:6d:a5:06:53:36:56:82:a2:13:eb:49: ba:b1:1b:fd:db:b3:4f:37:df:8f:b5:25:78:4a:1d: db:9f:b1:05:d9:b2:e4:99:f2:3a:ac:9d:38:26:07: 4a:26:fe:62:91:2d:92:62:a9:62:94:f9:fc:9b:46: 5a:e1:9a:e7:e4:d4:f6:c9:e1:66:e9:53:a5:c3:26: 2b:aa:a8:6c:ee:65:62:bf:27:93:be:88:be:25:e0: d8:ba:9f:cd:81:07:80:5b:2c:bd:90:d1:ff:80:c5: 53:29:4b:02:76:22:3d:98:c4:d5:93:42:10:6b:17: 80:25:f3:a1:e8:fc:87:56:0e:94:0b:8e:c7:25:71: 14:24:05:7d:7a:2f:b4:82:1d:5c:d8:aa:ed:7d:4a: c6:86:42:6b:68:bf:4b:c2:46:45:5f:51:b2:c1:7a: 4a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:20:7E:68:DD:36:16:FB:DE:C5:1A:DC:FA:B0:5F:7F:B7:15:5D:84 X509v3 Authority Key Identifier: keyid:B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/1-yB-aN02FvvexRrc-rBff7cVXYQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.32.0-193.22.49.255 Signature Algorithm: sha256WithRSAEncryption 17:8c:cd:70:c0:1c:98:e4:aa:4d:d4:68:a7:2d:81:39:9c:e3: 69:63:86:34:3a:73:e3:15:2e:74:24:7a:cf:e0:c1:40:ef:6f: 39:fc:f8:6c:4d:27:86:e1:59:02:54:ca:30:d6:d1:ad:43:fb: fc:0d:f3:b2:d1:93:e7:bc:9c:65:0c:11:35:b0:75:6a:97:10: db:43:a4:ca:1a:a1:1a:ac:a2:61:f9:87:98:af:a4:aa:20:5d: 74:39:74:e3:fe:2d:c7:52:40:17:1e:db:90:7f:c9:7f:92:7c: 7a:f7:ed:55:bf:25:64:3c:20:c8:7e:80:eb:c9:81:0d:f4:27: ac:7c:1e:e0:94:8e:0b:5f:55:d0:78:d1:75:98:08:35:e2:9a: 97:c8:80:9a:b1:73:1c:05:a7:bc:45:5d:fd:13:e3:31:6b:79: 3f:e3:78:4e:e9:b0:df:79:30:d2:5e:04:73:b0:8c:62:d3:78: 92:c4:17:ae:8f:cc:31:70:3b:5e:33:26:fb:e7:b6:3a:bf:2b: 47:62:93:bc:a2:52:46:4f:5e:0a:3b:5b:c5:55:c1:ed:13:ad: 89:f3:4c:d2:a0:cf:92:10:2c:48:29:eb:44:09:ac:82:b1:ba: 0e:0d:c6:04:53:fe:72:08:22:29:6e:6e:2e:e8:5f:0e:1f:f7: c6:2e:32:6a -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgISAZt/8i02nvO9H213HrjY0hbMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTNhODZmZDMwODFiODAzZWRjMTBkMjNiYmVkYTkxZDc5 MzIwMjUwHhcNMjYwMTAyMTgyMjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjIwN2U2OGRkMzYxNmZiZGVjNTFhZGNmYWIwNWY3ZmI3MTU1ZDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDbDRWwnUy6+5Hu3l/fePkdduCpX Ti5Z0dNCMThLqkLCzlrhmBu9dIna/V+5uEvMkGymjwROC6Fpf4DDChlToPuA1V/g Y1GFqwoIVKLEl1DkF2O38NpRCP8PVhFDbaUGUzZWgqIT60m6sRv927NPN9+PtSV4 Sh3bn7EF2bLkmfI6rJ04JgdKJv5ikS2SYqlilPn8m0Za4Zrn5NT2yeFm6VOlwyYr qqhs7mVivyeTvoi+JeDYup/NgQeAWyy9kNH/gMVTKUsCdiI9mMTVk0IQaxeAJfOh 6PyHVg6UC47HJXEUJAV9ei+0gh1c2KrtfUrGhkJraL9LwkZFX1GywXpKtwIDAQAB o4ICEjCCAg4wHQYDVR0OBBYEFPsgfmjdNhb73sUa3PqwX3+3FV2EMB8GA1UdIwQY MBaAFLRTqG/TCBuAPtwQ0ju+2pHXkyAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZPb2I5TUlHNEEtM0JEU083N2FrZGVUSUNVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yMjVhZjktZjNmNS00OWU0LWJhMTAt ZjVlYTAxMmI4NGZjLzEvMS15Qi1hTjAyRnZ2ZXhScmMtckJmZjdjVlhZUS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvN2EvMjI1YWY5LWYzZjUtNDllNC1iYTEwLWY1ZWEwMTJiODRm Yy8xL3RGT29iOU1JRzRBLTNCRFNPNzdha2RlVElDVS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQFwRYg AwQBwRYwMA0GCSqGSIb3DQEBCwUAA4IBAQAXjM1wwByY5KpN1GinLYE5nONpY4Y0 OnPjFS50JHrP4MFA7285/PhsTSeG4VkCVMow1tGtQ/v8DfOy0ZPnvJxlDBE1sHVq lxDbQ6TKGqEarKJh+YeYr6SqIF10OXTj/i3HUkAXHtuQf8l/knx69+1VvyVkPCDI foDryYEN9CesfB7glI4LX1XQeNF1mAg14pqXyICasXMcBae8RV39E+Mxa3k/43hO 6bDfeTDSXgRzsIxi03iSxBeuj8wxcDteMyb757Y6vytHYpO8olJGT14KO1vFVcHt E62J80zSoM+SECxIKetECayCsboODcYEU/5yCCIpbm4u6F8OH/fGLjJq -----END CERTIFICATE-----Generated at Tue Jan 27 11:28:27 2026 by rpki-client