This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/H7fYzgAywiwtcT8-20X5WOux6fs.roa File: H7fYzgAywiwtcT8-20X5WOux6fs.roa (raw, json) Hash identifier: h+Uh5Kz1qJdgzCKaZAX98ps/QJeCnLPBc45Zv+eXiYA= Subject key identifier: 1F:B7:D8:CE:00:32:C2:2C:2D:71:3F:3E:DB:45:F9:58:EB:B1:E9:FB Certificate issuer: /CN=753d476db96de1e58623119a70b9d7b00b676da0 Certificate serial: 019B7D5CC02625A99A44B16CD3FF623E37C0 Authority key identifier: 75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/H7fYzgAywiwtcT8-20X5WOux6fs.roa Signing time: Fri 02 Jan 2026 06:19:49 +0000 ROA not before: Fri 02 Jan 2026 06:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 193.108.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c0:26:25:a9:9a:44:b1:6c:d3:ff:62:3e:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=753d476db96de1e58623119a70b9d7b00b676da0 Validity Not Before: Jan 2 06:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fb7d8ce0032c22c2d713f3edb45f958ebb1e9fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6f:79:e5:02:16:62:ea:ab:c1:76:c4:d6:b2: cb:22:6f:b7:2d:d8:e5:a4:ce:a7:63:b2:83:67:fa: 31:bc:0f:a2:5d:0b:04:2e:d7:31:42:81:92:cf:db: d1:c3:7d:56:c7:7e:5b:6f:50:e6:7d:50:9f:34:75: d3:60:f9:20:7b:4c:76:6e:e4:07:e4:57:68:f2:08: 0a:f6:86:fe:01:d4:f4:e7:05:bd:25:87:a6:62:e5: c1:34:73:7b:f6:d7:bf:1a:e8:07:1c:72:c8:db:53: a1:26:a1:1d:aa:7a:15:91:e7:e5:bf:b0:d3:35:4b: 17:e6:94:24:35:1c:15:29:6b:e8:a2:89:80:7e:3d: 5d:b2:41:90:b7:ae:d2:19:c1:d8:47:49:17:ec:b7: 87:76:09:83:91:cd:8d:5d:9c:17:fb:e5:49:a0:0f: 5a:83:40:37:cd:4b:4e:9d:64:b5:ef:3c:aa:f0:c3: 5f:a8:9c:52:52:38:1f:0c:7e:8b:42:1f:7c:7a:ac: 11:f4:d0:35:1d:73:9b:0f:e4:87:10:f3:91:9d:97: 0b:08:59:30:a0:fc:f8:8d:ef:00:e3:da:8f:26:08: bf:e0:91:12:be:c4:c4:e7:27:a7:90:04:ef:3d:3e: 10:59:84:6c:8c:24:d7:16:44:77:6a:4f:c8:ed:ee: df:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B7:D8:CE:00:32:C2:2C:2D:71:3F:3E:DB:45:F9:58:EB:B1:E9:FB X509v3 Authority Key Identifier: keyid:75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/H7fYzgAywiwtcT8-20X5WOux6fs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.108.15.0/24 Signature Algorithm: sha256WithRSAEncryption 86:f7:58:27:c8:9a:91:2d:ae:af:d0:70:bc:90:5c:c1:3e:41: c5:5e:1b:56:43:45:27:e2:5a:58:3e:b5:52:83:97:04:d3:48: b8:db:ff:18:37:9f:1f:f3:32:f0:4f:bd:a8:94:b9:d0:91:e4: 02:64:ef:5c:9e:8c:c6:5a:84:71:79:6f:fc:5f:38:6a:08:9c: 9b:af:7c:b7:33:ef:98:ae:5b:f9:6a:52:7f:50:85:f9:35:8f: 60:3b:9c:37:2a:4b:00:ec:da:cd:04:15:e5:20:a0:34:66:34: ac:4a:ef:76:41:75:43:ee:22:94:08:54:59:2d:62:40:c4:f8: 25:62:a7:72:f3:0c:f7:82:38:8d:60:65:8f:20:f1:18:35:01: e6:28:b8:e0:22:f6:93:2d:e2:d2:d5:01:75:c6:56:26:ff:3f: d6:c7:ec:ce:ca:7a:35:28:22:3b:b1:17:94:46:2e:57:39:8d: 13:32:2f:26:ef:9e:27:f8:72:93:4a:d5:86:9b:33:cf:78:8f: ba:f9:65:15:bb:53:33:88:6d:20:fa:62:e1:35:8a:c0:b8:19: 30:f8:d2:70:a6:e5:07:bc:d5:b1:c0:98:13:b0:28:97:2c:48: c0:4c:8e:ec:a7:55:ab:b6:b8:70:c0:94:4d:a4:5e:b9:71:40: 4c:c7:26:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XMAmJamaRLFs0/9iPjfAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1M2Q0NzZkYjk2ZGUxZTU4NjIzMTE5YTcwYjlkN2IwMGI2 NzZkYTAwHhcNMjYwMTAyMDYxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmI3ZDhjZTAwMzJjMjJjMmQ3MTNmM2VkYjQ1Zjk1OGViYjFlOWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2955QIWYuqrwXbE1rLLIm+3Ldjl pM6nY7KDZ/oxvA+iXQsELtcxQoGSz9vRw31Wx35bb1DmfVCfNHXTYPkge0x2buQH 5Fdo8ggK9ob+AdT05wW9JYemYuXBNHN79te/GugHHHLI21OhJqEdqnoVkeflv7DT NUsX5pQkNRwVKWvooomAfj1dskGQt67SGcHYR0kX7LeHdgmDkc2NXZwX++VJoA9a g0A3zUtOnWS17zyq8MNfqJxSUjgfDH6LQh98eqwR9NA1HXObD+SHEPORnZcLCFkw oPz4je8A49qPJgi/4JESvsTE5yenkATvPT4QWYRsjCTXFkR3ak/I7e7f/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB+32M4AMsIsLXE/PttF+Vjrsen7MB8GA1UdIwQY MBaAFHU9R225beHlhiMRmnC517ALZ22gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82YTljZjktYzBjYy00MDExLTg2MGUt NDY4NTc4MmFjMmMzLzEvSDdmWXpnQXl3aXd0Y1Q4LTIwWDVXT3V4NmZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi82YTljZjktYzBjYy00MDExLTg2MGUtNDY4NTc4MmFjMmMz LzEvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWwPMA0G CSqGSIb3DQEBCwUAA4IBAQCG91gnyJqRLa6v0HC8kFzBPkHFXhtWQ0Un4lpYPrVS g5cE00i42/8YN58f8zLwT72olLnQkeQCZO9cnozGWoRxeW/8XzhqCJybr3y3M++Y rlv5alJ/UIX5NY9gO5w3KksA7NrNBBXlIKA0ZjSsSu92QXVD7iKUCFRZLWJAxPgl Yqdy8wz3gjiNYGWPIPEYNQHmKLjgIvaTLeLS1QF1xlYm/z/Wx+zOyno1KCI7sReU Ri5XOY0TMi8m754n+HKTStWGmzPPeI+6+WUVu1MziG0g+mLhNYrAuBkw+NJwpuUH vNWxwJgTsCiXLEjATI7sp1WrtrhwwJRNpF65cUBMxybp -----END CERTIFICATE-----Generated at Fri Jan 9 06:22:18 2026 by rpki-client