This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/sYLKdeDOUeQxy_Kv2E_Cnj0I44k.roa File: sYLKdeDOUeQxy_Kv2E_Cnj0I44k.roa (raw, json) Hash identifier: 7UjSkmLEewaWHHfvbCaxDyZlIQWGWRAv2o5SfuX7IBI= Subject key identifier: B1:82:CA:75:E0:CE:51:E4:31:CB:F2:AF:D8:4F:C2:9E:3D:08:E3:89 Certificate issuer: /CN=464d733de81fbd486d442358e0c15370520f9312 Certificate serial: 019B7A5ADBB1BA5D764DA1F05CBEDB875C35 Authority key identifier: 46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/sYLKdeDOUeQxy_Kv2E_Cnj0I44k.roa Signing time: Thu 01 Jan 2026 16:18:53 +0000 ROA not before: Thu 01 Jan 2026 16:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8241 IP address blocks: 195.146.64.0/19 maxlen: 19 213.181.0.0/20 maxlen: 20 213.181.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:db:b1:ba:5d:76:4d:a1:f0:5c:be:db:87:5c:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464d733de81fbd486d442358e0c15370520f9312 Validity Not Before: Jan 1 16:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b182ca75e0ce51e431cbf2afd84fc29e3d08e389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b4:2b:c9:a8:3f:23:56:e2:3f:92:82:b9:2b: fe:58:18:ee:e6:b0:4f:ac:38:48:c7:f2:78:2a:ca: 23:8f:70:43:18:63:3d:23:c8:aa:66:cf:f0:60:2d: e4:17:2f:d2:1d:65:8b:ef:75:bb:4f:b9:67:01:e9: 95:64:a9:ff:f1:73:d8:39:65:cb:de:d3:dd:9b:45: 61:1c:6c:73:3e:05:3d:1c:28:ae:86:02:f0:26:21: c9:54:70:20:06:0d:73:13:f9:3f:5a:dd:b4:68:a7: 51:99:c2:a3:00:97:93:3e:95:b9:cd:65:30:91:05: db:54:cb:21:29:1b:6b:89:f5:0d:a3:50:d9:ed:8b: 42:33:ea:82:30:06:dd:c0:74:35:78:88:b1:34:a7: cc:27:9d:0a:6a:7f:75:c4:76:94:70:4a:c0:16:5b: af:c0:71:a1:eb:dc:81:38:aa:54:b0:44:94:65:bb: 8f:57:9f:05:51:b0:4d:02:ba:5c:d6:a1:99:3f:35: 4f:2e:a7:25:b6:70:ed:4d:d3:37:c5:6e:86:f8:b7: 96:a7:6f:fa:76:c9:11:43:f5:36:aa:d0:36:e1:aa: 7f:dd:55:ca:7d:67:01:1a:c7:51:fb:19:2a:e0:14: 50:d3:5e:ea:d3:7e:f0:12:8b:f6:e5:5d:3b:a2:e6: e1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:82:CA:75:E0:CE:51:E4:31:CB:F2:AF:D8:4F:C2:9E:3D:08:E3:89 X509v3 Authority Key Identifier: keyid:46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/sYLKdeDOUeQxy_Kv2E_Cnj0I44k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.146.64.0/19 213.181.0.0-213.181.19.255 Signature Algorithm: sha256WithRSAEncryption 30:20:36:65:f1:88:cc:cf:ea:90:69:a6:6a:33:8a:0c:40:60: 25:df:9f:6a:38:25:2b:9c:5f:13:e0:81:dc:ef:74:33:55:23: dd:32:b1:81:77:bd:6d:b7:a3:51:05:75:34:80:eb:4a:c4:5e: 66:d3:d2:f5:61:c2:1c:3f:25:7b:ff:c7:d9:da:67:81:49:e2: 87:46:aa:b0:a7:52:32:37:c3:03:d9:32:6b:fc:04:2c:1a:a3: 33:2f:71:43:00:4d:87:38:c0:31:9d:12:e7:c4:f5:b8:cc:15: 39:d1:bb:c0:fb:95:5c:d4:dd:50:b2:21:d5:bc:bd:a0:9a:f8: c5:91:d9:00:54:17:c2:e1:57:ac:bf:53:00:d4:18:a7:2b:44: 5c:87:23:13:18:59:0e:5c:f4:0a:6e:41:8c:da:ad:91:b3:30: e1:cf:a4:42:fb:6e:27:09:7b:89:16:39:cd:9e:fa:7d:ad:62: c0:9d:3a:ec:b2:5c:02:ed:00:45:a4:c6:83:2d:a4:77:fe:6d: a8:53:d2:71:d0:71:22:1e:0d:b0:91:7e:2b:5b:0d:ce:1a:17: 2e:61:40:ce:14:7d:4e:56:76:22:4a:5d:af:01:d1:81:88:3d: b1:ed:e8:6c:eb:9f:c7:1a:51:13:b3:b3:08:12:e9:f0:68:e9: 64:d6:d3:40 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt6Wtuxul12TaHwXL7bh1w1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NGQ3MzNkZTgxZmJkNDg2ZDQ0MjM1OGUwYzE1MzcwNTIw ZjkzMTIwHhcNMjYwMTAxMTYxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTgyY2E3NWUwY2U1MWU0MzFjYmYyYWZkODRmYzI5ZTNkMDhlMzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67Qryag/I1biP5KCuSv+WBju5rBP rDhIx/J4Ksojj3BDGGM9I8iqZs/wYC3kFy/SHWWL73W7T7lnAemVZKn/8XPYOWXL 3tPdm0VhHGxzPgU9HCiuhgLwJiHJVHAgBg1zE/k/Wt20aKdRmcKjAJeTPpW5zWUw kQXbVMshKRtrifUNo1DZ7YtCM+qCMAbdwHQ1eIixNKfMJ50Kan91xHaUcErAFluv wHGh69yBOKpUsESUZbuPV58FUbBNArpc1qGZPzVPLqcltnDtTdM3xW6G+LeWp2/6 dskRQ/U2qtA24ap/3VXKfWcBGsdR+xkq4BRQ017q037wEov25V07oubh8wIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFLGCynXgzlHkMcvyr9hPwp49COOJMB8GA1UdIwQY MBaAFEZNcz3oH71IbUQjWODBU3BSD5MSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmsxelBlZ2Z2VWh0UkNOWTRNRlRjRklQa3hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kN2ZmZWQtNmMxZC00MTMxLTk1MGYt YTQ5ZDFhMDA2ZGM5LzEvc1lMS2RlRE9VZVF4eV9LdjJFX0NuajBJNDRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9kN2ZmZWQtNmMxZC00MTMxLTk1MGYtYTQ5ZDFhMDA2ZGM5 LzEvUmsxelBlZ2Z2VWh0UkNOWTRNRlRjRklQa3hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQFw5JAMAsD AwDVtQMEAtW1EDANBgkqhkiG9w0BAQsFAAOCAQEAMCA2ZfGIzM/qkGmmajOKDEBg Jd+fajglK5xfE+CB3O90M1Uj3TKxgXe9bbejUQV1NIDrSsReZtPS9WHCHD8le//H 2dpngUnih0aqsKdSMjfDA9kya/wELBqjMy9xQwBNhzjAMZ0S58T1uMwVOdG7wPuV XNTdULIh1by9oJr4xZHZAFQXwuFXrL9TANQYpytEXIcjExhZDlz0Cm5BjNqtkbMw 4c+kQvtuJwl7iRY5zZ76fa1iwJ067LJcAu0ARaTGgy2kd/5tqFPScdBxIh4NsJF+ K1sNzhoXLmFAzhR9TlZ2IkpdrwHRgYg9se3obOufxxpRE7OzCBLp8GjpZNbTQA== -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:00 2026 by rpki-client