This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/s7GDkjokuUYxyp2lQ-fvutk8xwQ.roa File: s7GDkjokuUYxyp2lQ-fvutk8xwQ.roa (raw, json) Hash identifier: S9y1l3t7Vl3BwVyHLi7rIW0xWtA+1bV+FnwqTAqHN28= Subject key identifier: B3:B1:83:92:3A:24:B9:46:31:CA:9D:A5:43:E7:EF:BA:D9:3C:C7:04 Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88 Certificate serial: 019B7DCAC61B8BFFE6617D9FD85E6F66089B Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/s7GDkjokuUYxyp2lQ-fvutk8xwQ.roa Signing time: Fri 02 Jan 2026 08:19:59 +0000 ROA not before: Fri 02 Jan 2026 08:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214923 IP address blocks: 94.184.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:c6:1b:8b:ff:e6:61:7d:9f:d8:5e:6f:66:08:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88 Validity Not Before: Jan 2 08:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3b183923a24b94631ca9da543e7efbad93cc704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:86:c0:ea:5d:51:df:83:01:e0:d5:6d:e3:4b: 7e:e5:f3:d4:d2:c9:de:8d:31:20:04:83:37:3f:47: 88:64:ac:5f:5e:86:f0:dd:34:75:f9:f0:83:10:09: 6c:bd:52:3e:b6:15:4e:75:ee:d7:17:9a:e3:b2:99: d0:e6:41:66:85:f3:e2:fc:06:fb:f0:59:05:69:ba: c2:82:6f:bd:19:f1:db:7a:4c:75:b2:8f:89:36:44: 20:83:fd:aa:8d:df:da:44:60:e6:e5:40:db:52:1d: eb:7e:de:fa:d3:ed:d6:43:06:3e:39:98:cd:13:2e: 3c:e7:6e:8a:54:da:ba:4b:b1:1a:8e:54:46:a9:28: 22:cc:aa:c3:a3:b7:b2:b0:aa:cc:8e:79:90:83:bb: d7:ec:1c:3c:70:47:64:aa:14:7c:49:a4:ec:24:54: 7a:60:fb:11:7d:ea:00:3d:06:26:11:0c:f6:c3:4b: 50:24:df:20:be:89:a5:9d:83:92:78:d7:3f:ca:9a: 5c:fa:02:41:60:31:fb:c8:69:a9:74:dd:26:d6:17: 22:2f:d0:38:cb:4b:05:30:7a:e4:a7:60:38:d4:d5: 8c:d0:be:95:68:ab:0b:21:fa:ed:c6:fa:1c:b1:c1: bb:76:7e:cc:17:eb:6e:ba:1b:d2:12:73:ab:38:1d: 13:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B1:83:92:3A:24:B9:46:31:CA:9D:A5:43:E7:EF:BA:D9:3C:C7:04 X509v3 Authority Key Identifier: keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/s7GDkjokuUYxyp2lQ-fvutk8xwQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.184.22.0/24 Signature Algorithm: sha256WithRSAEncryption 41:39:cb:21:5b:8c:87:35:71:01:bf:8e:39:8c:34:be:8d:08: 36:23:ab:09:b6:e8:65:10:a7:f0:f5:d5:67:e3:9b:4e:d1:10: f2:71:77:5f:1d:b0:01:98:1f:7e:90:fd:94:52:43:ff:2d:42: 92:b9:dc:5c:8e:c4:2a:7c:60:9f:a6:02:4d:20:cd:4e:9d:71: 93:c5:76:2a:11:eb:00:31:96:e9:a3:c5:d5:af:27:f2:e7:00: 82:3f:dd:4c:84:e9:b9:25:d2:29:93:58:f3:05:aa:30:7f:3b: 90:61:3e:2e:cf:04:82:d1:24:c9:02:42:f8:9e:f9:26:2f:15: a1:ed:95:5e:b3:d6:f1:ca:81:2e:2b:87:fb:8d:d4:ca:12:41: 0e:20:79:0d:e5:3c:55:59:84:e6:6d:63:04:0c:25:06:51:5b: ae:55:fe:22:68:f2:5a:29:d5:9a:df:36:dd:dd:f7:61:24:fc: ce:f0:3d:bf:c7:2e:88:29:23:ac:ac:04:28:94:2a:26:57:fa: ed:17:2c:4f:a4:ba:23:75:57:9f:31:8a:62:18:1b:36:c7:45: f5:6a:39:ba:07:4b:f7:f6:10:62:81:88:9f:df:71:9b:80:5f: 42:7f:18:59:7b:16:76:6e:67:f3:4e:e1:d8:92:68:52:0d:55: 19:d9:8f:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ysYbi//mYX2f2F5vZgibMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3 YjBhODgwHhcNMjYwMTAyMDgxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2IxODM5MjNhMjRiOTQ2MzFjYTlkYTU0M2U3ZWZiYWQ5M2NjNzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YbA6l1R34MB4NVt40t+5fPU0sne jTEgBIM3P0eIZKxfXobw3TR1+fCDEAlsvVI+thVOde7XF5rjspnQ5kFmhfPi/Ab7 8FkFabrCgm+9GfHbekx1so+JNkQgg/2qjd/aRGDm5UDbUh3rft760+3WQwY+OZjN Ey48526KVNq6S7EajlRGqSgizKrDo7eysKrMjnmQg7vX7Bw8cEdkqhR8SaTsJFR6 YPsRfeoAPQYmEQz2w0tQJN8gvomlnYOSeNc/yppc+gJBYDH7yGmpdN0m1hciL9A4 y0sFMHrkp2A41NWM0L6VaKsLIfrtxvocscG7dn7MF+tuuhvSEnOrOB0TIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLOxg5I6JLlGMcqdpUPn77rZPMcEMB8GA1UdIwQY MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt ZGE2MTUzODg1ZjNiLzEvczdHRGtqb2t1VVl4eXAybFEtZnZ1dGs4eHdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrgWMA0G CSqGSIb3DQEBCwUAA4IBAQBBOcshW4yHNXEBv445jDS+jQg2I6sJtuhlEKfw9dVn 45tO0RDycXdfHbABmB9+kP2UUkP/LUKSudxcjsQqfGCfpgJNIM1OnXGTxXYqEesA MZbpo8XVryfy5wCCP91MhOm5JdIpk1jzBaowfzuQYT4uzwSC0STJAkL4nvkmLxWh 7ZVes9bxyoEuK4f7jdTKEkEOIHkN5TxVWYTmbWMEDCUGUVuuVf4iaPJaKdWa3zbd 3fdhJPzO8D2/xy6IKSOsrAQolComV/rtFyxPpLojdVefMYpiGBs2x0X1ajm6B0v3 9hBigYif33GbgF9CfxhZexZ2bmfzTuHYkmhSDVUZ2Y8f -----END CERTIFICATE-----Generated at Mon Jan 26 23:00:55 2026 by rpki-client