This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/tMsRhfH9sWJ3Fy1XJjR3Xmqy4qE.roa File: tMsRhfH9sWJ3Fy1XJjR3Xmqy4qE.roa (raw, json) Hash identifier: Jl8LkxNR4pUQ43z7aMXFu5xUlhypzoTBQjcKVVtIYkw= Subject key identifier: B4:CB:11:85:F1:FD:B1:62:77:17:2D:57:26:34:77:5E:6A:B2:E2:A1 Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Certificate serial: 019B7E38B22415E717152285502BD4BE11AD Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/tMsRhfH9sWJ3Fy1XJjR3Xmqy4qE.roa Signing time: Fri 02 Jan 2026 10:20:03 +0000 ROA not before: Fri 02 Jan 2026 10:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54339 IP address blocks: 193.109.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 19:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b2:24:15:e7:17:15:22:85:50:2b:d4:be:11:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Validity Not Before: Jan 2 10:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4cb1185f1fdb16277172d572634775e6ab2e2a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b4:b5:aa:1b:3e:d7:c8:54:8f:bf:56:18:7a: 63:42:b9:2f:42:d7:5e:e1:0c:fc:ce:33:39:cb:16: 4c:10:a9:f9:c8:6e:4a:20:e2:19:24:98:6c:96:d2: 32:1d:91:75:9a:84:5e:7c:37:d4:cb:5d:f5:db:ca: 79:f9:3b:97:ec:65:30:55:c3:69:66:bc:b0:9b:49: 38:66:a2:69:b5:7a:c6:d7:52:07:b4:2a:f0:0a:5f: d5:b2:ec:d9:e7:da:bb:c1:99:56:85:81:cf:b9:c2: 1a:fa:80:65:4e:2a:c8:90:90:76:4a:51:d0:33:7f: 12:c5:a9:55:00:2b:39:97:d0:75:8a:0d:1a:5d:b7: 7f:59:e4:d9:6e:f0:c5:f8:0d:0d:0f:db:08:5a:5d: c1:7b:51:27:4b:40:e0:eb:d5:4b:68:25:83:78:a9: f6:f0:86:28:f9:b6:d1:43:85:25:df:30:de:f0:15: 6b:67:5d:82:ac:86:f9:bb:7e:73:c1:43:9c:e2:96: 8f:9d:de:f9:74:3f:1e:19:99:59:7e:9f:3c:77:e3: e0:af:8c:f2:16:27:30:c7:ab:73:b3:52:f5:06:ae: b0:eb:ed:c1:f7:89:f3:fc:1e:10:4b:34:f9:a9:fe: f1:87:81:a4:f3:d0:3e:89:ee:71:97:2b:c2:6c:9c: 11:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:CB:11:85:F1:FD:B1:62:77:17:2D:57:26:34:77:5E:6A:B2:E2:A1 X509v3 Authority Key Identifier: keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/tMsRhfH9sWJ3Fy1XJjR3Xmqy4qE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.160.0/22 Signature Algorithm: sha256WithRSAEncryption 99:05:f3:ee:03:40:a4:2d:73:32:5f:35:bb:44:e2:32:57:74: d7:48:d0:01:5e:c8:e4:d6:e8:4c:d5:69:41:b5:e4:10:45:70: d5:1a:e2:7a:51:af:66:20:ea:00:8e:45:5f:ae:8f:08:54:76: de:4d:7d:9f:94:9c:43:a3:78:1f:96:1b:bc:a8:a0:3e:bd:92: 49:c3:f1:56:4b:aa:fe:f5:37:53:26:3c:96:ef:62:d7:59:52: fc:f5:4e:6a:73:36:6d:a9:3a:c4:7d:65:95:f7:84:b2:e4:d7: 5c:d4:54:b7:17:71:65:82:30:b2:4e:46:45:b6:4f:c6:dd:10: 46:25:50:b0:e7:2e:ea:14:a7:78:6f:60:7f:bb:a0:01:01:71: 34:d9:31:b4:72:e3:59:1c:a1:7b:01:8a:ee:5b:e3:e7:10:e4: fd:07:a2:b5:fc:2d:ba:ba:21:28:aa:96:d0:f1:5a:30:68:50: bf:ce:11:f2:94:b2:a5:72:d9:33:59:76:21:e5:d2:31:61:e8: 57:60:cd:78:fe:1d:48:90:cb:96:b4:db:7e:d9:d6:03:71:99: 9e:e4:df:2a:94:f1:1c:57:97:34:6f:30:69:e3:13:ad:d8:7f: 7c:4f:bf:4a:c5:e3:42:45:0a:45:79:2b:09:e5:42:ac:a4:b5: 37:8d:cb:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OLIkFecXFSKFUCvUvhGtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx OWZiMjAwHhcNMjYwMTAyMTAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGNiMTE4NWYxZmRiMTYyNzcxNzJkNTcyNjM0Nzc1ZTZhYjJlMmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrS1qhs+18hUj79WGHpjQrkvQtde 4Qz8zjM5yxZMEKn5yG5KIOIZJJhsltIyHZF1moRefDfUy13128p5+TuX7GUwVcNp Zrywm0k4ZqJptXrG11IHtCrwCl/VsuzZ59q7wZlWhYHPucIa+oBlTirIkJB2SlHQ M38SxalVACs5l9B1ig0aXbd/WeTZbvDF+A0ND9sIWl3Be1EnS0Dg69VLaCWDeKn2 8IYo+bbRQ4Ul3zDe8BVrZ12CrIb5u35zwUOc4paPnd75dD8eGZlZfp88d+Pgr4zy Ficwx6tzs1L1Bq6w6+3B94nz/B4QSzT5qf7xh4Gk89A+ie5xlyvCbJwRUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLTLEYXx/bFidxctVyY0d15qsuKhMB8GA1UdIwQY MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt NDI2OWI1NmJmN2Q0LzEvdE1zUmhmSDlzV0ozRnkxWEpqUjNYbXF5NHFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0 LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwW2gMA0G CSqGSIb3DQEBCwUAA4IBAQCZBfPuA0CkLXMyXzW7ROIyV3TXSNABXsjk1uhM1WlB teQQRXDVGuJ6Ua9mIOoAjkVfro8IVHbeTX2flJxDo3gflhu8qKA+vZJJw/FWS6r+ 9TdTJjyW72LXWVL89U5qczZtqTrEfWWV94Sy5Ndc1FS3F3FlgjCyTkZFtk/G3RBG JVCw5y7qFKd4b2B/u6ABAXE02TG0cuNZHKF7AYruW+PnEOT9B6K1/C26uiEoqpbQ 8VowaFC/zhHylLKlctkzWXYh5dIxYehXYM14/h1IkMuWtNt+2dYDcZme5N8qlPEc V5c0bzBp4xOt2H98T79KxeNCRQpFeSsJ5UKspLU3jcu8 -----END CERTIFICATE-----Generated at Wed Jan 21 04:59:24 2026 by rpki-client