This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/gzEeLn8k2jwlK3xhzJAk6qQBIRE.roa File: gzEeLn8k2jwlK3xhzJAk6qQBIRE.roa (raw, json) Hash identifier: h9UA/W0Zw0p4v9+Tj8AioNknXk0T9pDxNFrZrGENW2I= Subject key identifier: 83:31:1E:2E:7F:24:DA:3C:25:2B:7C:61:CC:90:24:EA:A4:01:21:11 Certificate issuer: /CN=365b4abab716ad1407a902e5176560ecc37c966d Certificate serial: 019B797EDE730283AA48827FB671470770D6 Authority key identifier: 36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/gzEeLn8k2jwlK3xhzJAk6qQBIRE.roa Signing time: Thu 01 Jan 2026 12:18:36 +0000 ROA not before: Thu 01 Jan 2026 12:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29405 IP address blocks: 130.193.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:de:73:02:83:aa:48:82:7f:b6:71:47:07:70:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=365b4abab716ad1407a902e5176560ecc37c966d Validity Not Before: Jan 1 12:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83311e2e7f24da3c252b7c61cc9024eaa4012111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:29:87:9f:57:7b:9e:71:aa:f4:e6:c0:6d:a9: 8a:07:0a:da:44:c7:d8:74:82:c3:99:6d:15:3a:89: bf:e6:56:96:fc:99:a1:6d:7f:a1:0a:f4:69:a4:25: bb:ac:21:67:6c:8c:5c:2b:f2:a5:01:cf:cb:68:cf: 6b:ac:40:31:f7:9e:b3:69:4f:9e:98:2a:96:54:1f: ce:91:18:2d:77:92:3c:71:2c:78:b6:46:3d:96:93: 39:3e:a8:b4:1c:0c:94:3d:2a:e6:85:f0:0f:61:af: 90:21:cb:9a:56:0e:c7:d2:c2:fc:06:72:f1:52:e3: 5c:92:72:37:c5:e0:e6:17:f0:7e:d5:c2:c9:c3:59: d9:89:1c:60:e1:5f:c3:eb:a4:bd:ef:bc:34:fd:8c: 28:93:f0:78:dd:a8:1e:2a:7b:30:f5:a2:92:97:23: 30:7f:7c:8f:20:ae:91:a3:58:d2:d7:f9:7c:ab:5f: 3c:24:e0:59:0c:c5:84:df:9e:07:9d:ba:2e:c6:36: d4:98:d3:45:47:c8:36:bc:f4:84:67:ec:fb:22:78: 64:06:db:d4:2a:97:ad:12:81:3f:f9:24:ef:15:2f: cd:1e:f8:89:e2:a4:6b:35:da:db:a8:64:2c:26:ed: 26:71:db:66:bc:d6:53:85:b4:06:18:54:96:71:7d: 03:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:31:1E:2E:7F:24:DA:3C:25:2B:7C:61:CC:90:24:EA:A4:01:21:11 X509v3 Authority Key Identifier: keyid:36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/gzEeLn8k2jwlK3xhzJAk6qQBIRE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.193.18.0/24 Signature Algorithm: sha256WithRSAEncryption c4:f5:a6:24:fb:ca:83:cc:f0:77:eb:f0:81:5d:a5:5c:e2:4d: 3f:c1:33:aa:46:08:44:ea:99:d4:eb:47:aa:1a:53:85:ec:a6: 4e:d5:e3:cc:02:ff:d5:58:c2:00:64:41:97:5d:6f:12:1e:c8: 37:b6:0a:42:6d:f7:5a:55:cb:16:50:76:fc:ad:b2:88:3d:03: 43:78:4b:f0:14:d9:dc:74:f2:95:a3:66:4e:0b:65:61:1a:d6: bd:63:da:13:ef:7f:52:c9:2e:9d:94:85:83:5a:35:ac:84:62: 16:21:33:46:5e:77:7a:ae:07:e1:b5:25:8a:de:b4:34:58:84: be:fe:32:fe:5e:fa:f5:fd:b0:cc:34:fe:45:73:e9:65:6d:cb: a9:b6:76:e2:e6:b9:fd:57:35:3c:db:ac:c3:3f:eb:a7:4b:0a: 1b:aa:0e:40:8e:46:b1:03:90:7e:c7:d7:38:85:1c:3d:8c:d9: 4b:6a:25:3f:3a:b0:99:59:00:00:c9:d0:55:fa:49:ee:eb:41: 20:26:d6:c1:a0:79:1e:94:ce:87:d5:6c:06:bc:46:ad:af:c8: ae:a9:63:40:75:43:bf:99:76:0b:df:98:0c:d4:3d:39:4f:a8: b2:ec:5e:ce:00:e7:4c:79:c7:3b:cb:db:76:7f:27:4b:fc:cf: 2d:9e:52:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ft5zAoOqSIJ/tnFHB3DWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NWI0YWJhYjcxNmFkMTQwN2E5MDJlNTE3NjU2MGVjYzM3 Yzk2NmQwHhcNMjYwMTAxMTIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzMxMWUyZTdmMjRkYTNjMjUyYjdjNjFjYzkwMjRlYWE0MDEyMTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSmHn1d7nnGq9ObAbamKBwraRMfY dILDmW0VOom/5laW/JmhbX+hCvRppCW7rCFnbIxcK/KlAc/LaM9rrEAx956zaU+e mCqWVB/OkRgtd5I8cSx4tkY9lpM5Pqi0HAyUPSrmhfAPYa+QIcuaVg7H0sL8BnLx UuNcknI3xeDmF/B+1cLJw1nZiRxg4V/D66S977w0/Ywok/B43ageKnsw9aKSlyMw f3yPIK6Ro1jS1/l8q188JOBZDMWE354HnbouxjbUmNNFR8g2vPSEZ+z7InhkBtvU KpetEoE/+STvFS/NHviJ4qRrNdrbqGQsJu0mcdtmvNZThbQGGFSWcX0DTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIMxHi5/JNo8JSt8YcyQJOqkASERMB8GA1UdIwQY MBaAFDZbSrq3Fq0UB6kC5RdlYOzDfJZtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmx0S3VyY1dyUlFIcVFMbEYyVmc3TU44bG0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lMzVhYzEtMDVkMS00MDZkLWI2Njgt MzZlYWY3OTQ4NTMxLzEvZ3pFZUxuOGsyandsSzN4aHpKQWs2cVFCSVJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9lMzVhYzEtMDVkMS00MDZkLWI2NjgtMzZlYWY3OTQ4NTMx LzEvTmx0S3VyY1dyUlFIcVFMbEYyVmc3TU44bG0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgsESMA0G CSqGSIb3DQEBCwUAA4IBAQDE9aYk+8qDzPB36/CBXaVc4k0/wTOqRghE6pnU60eq GlOF7KZO1ePMAv/VWMIAZEGXXW8SHsg3tgpCbfdaVcsWUHb8rbKIPQNDeEvwFNnc dPKVo2ZOC2VhGta9Y9oT739SyS6dlIWDWjWshGIWITNGXnd6rgfhtSWK3rQ0WIS+ /jL+Xvr1/bDMNP5Fc+llbcuptnbi5rn9VzU826zDP+unSwobqg5AjkaxA5B+x9c4 hRw9jNlLaiU/OrCZWQAAydBV+knu60EgJtbBoHkelM6H1WwGvEatr8iuqWNAdUO/ mXYL35gM1D05T6iy7F7OAOdMecc7y9t2fydL/M8tnlLV -----END CERTIFICATE-----Generated at Mon Jan 26 21:18:52 2026 by rpki-client