This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/sepG3pxZRZJ3Di5V4GRgL0kUvN4.roa File: sepG3pxZRZJ3Di5V4GRgL0kUvN4.roa (raw, json) Hash identifier: PbnSJH+4OvfmcPPPKdc+xJ2H4YgZN0xN7LiBfutNtAs= Subject key identifier: B1:EA:46:DE:9C:59:45:92:77:0E:2E:55:E0:64:60:2F:49:14:BC:DE Certificate issuer: /CN=51e591e54903d2f9ea840a146955ba3459e33ea1 Certificate serial: 019B7B3568E06A002F05D2491CA39093305C Authority key identifier: 51:E5:91:E5:49:03:D2:F9:EA:84:0A:14:69:55:BA:34:59:E3:3E:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/sepG3pxZRZJ3Di5V4GRgL0kUvN4.roa Signing time: Thu 01 Jan 2026 20:17:36 +0000 ROA not before: Thu 01 Jan 2026 20:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28940 IP address blocks: 193.97.168.0/21 maxlen: 21 2001:67c:29dc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:68:e0:6a:00:2f:05:d2:49:1c:a3:90:93:30:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51e591e54903d2f9ea840a146955ba3459e33ea1 Validity Not Before: Jan 1 20:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1ea46de9c594592770e2e55e064602f4914bcde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e2:c9:37:35:f4:49:af:a7:47:73:5b:56:fb: e9:ba:cf:59:d0:7f:cd:da:34:c3:47:e1:b4:24:d3: 4d:9d:3b:f7:ff:61:07:16:84:fa:bc:88:f9:ea:4f: ad:0e:24:e5:1d:22:50:13:f5:1c:7e:43:df:ce:df: 97:f9:54:83:9e:c3:e3:36:e2:9f:d9:26:6b:26:bc: 1e:dc:3d:f6:90:d6:2f:42:93:88:1d:2e:c4:07:86: 30:ca:2c:0e:03:e1:92:9d:16:4d:b6:22:9e:47:b4: 73:18:6b:e7:8f:c5:08:c3:4f:ee:a3:7a:bf:2c:57: 40:6f:57:7c:5b:44:a5:66:92:2f:b2:2e:35:a0:b4: 16:4a:bb:db:90:fe:1a:0f:ef:82:bb:a4:32:ab:76: f6:9e:ec:b0:d1:cc:ac:5a:c9:e8:ed:89:99:c6:11: 00:7b:eb:b0:9a:cc:af:78:2d:88:0d:d5:16:12:16: ec:18:6c:00:9b:1b:b3:8f:fe:07:bb:42:70:a7:8a: c3:7f:20:e7:f4:8f:11:17:e6:10:66:a3:39:5c:65: 76:ba:87:f7:1b:0d:b7:1c:8e:af:ec:c9:11:8c:c3: c5:d3:8a:26:c0:a1:b3:00:7f:c0:89:d7:b2:a9:79: 17:24:ab:0a:b1:20:53:37:ca:74:e5:e0:43:45:50: 6a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:EA:46:DE:9C:59:45:92:77:0E:2E:55:E0:64:60:2F:49:14:BC:DE X509v3 Authority Key Identifier: keyid:51:E5:91:E5:49:03:D2:F9:EA:84:0A:14:69:55:BA:34:59:E3:3E:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/sepG3pxZRZJ3Di5V4GRgL0kUvN4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.97.168.0/21 IPv6: 2001:67c:29dc::/48 Signature Algorithm: sha256WithRSAEncryption 90:a1:ac:43:fc:75:2f:bc:b0:52:f7:f9:c1:40:c6:98:1f:56: 6e:26:32:84:c7:8e:fd:55:01:7c:e0:2f:68:71:4d:2a:b4:77: 94:16:b9:75:a0:03:62:98:8b:8b:cb:dd:88:19:90:88:31:dd: 05:17:ce:7b:9b:a0:78:c9:b9:82:73:70:e8:3b:f2:0d:44:8c: 3a:d1:27:40:d5:80:44:ad:97:d0:f7:34:4d:68:65:06:43:35: 17:16:1e:22:76:b4:e2:85:8d:ec:72:f3:38:07:6e:31:17:f0: 2a:1e:ca:e3:88:5a:3d:f2:05:13:7a:2b:a5:38:b9:e1:6f:42: 8b:6d:c8:0e:3b:8d:2b:b3:c1:a8:d5:ea:73:c5:8c:a0:06:9b: 3e:f0:91:77:14:09:25:bd:d1:94:50:86:8a:c3:76:04:98:70: 1b:7a:31:28:c9:ec:42:68:bb:1e:11:f1:0d:04:c5:a4:cc:d2: ba:c0:2e:a4:19:c0:2d:05:55:56:35:2f:37:a9:5c:ab:a1:81: 9d:58:40:a7:bc:c4:37:3a:c3:72:20:3b:7e:60:db:2d:39:d2: 69:9e:ba:a2:4f:46:d4:7a:96:59:6c:5c:fd:47:e5:96:58:4a: 74:e7:4d:db:41:d2:d8:02:8c:9c:fb:98:c2:8f:60:a2:69:fb: 91:38:f1:50 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7NWjgagAvBdJJHKOQkzBcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZTU5MWU1NDkwM2QyZjllYTg0MGExNDY5NTViYTM0NTll MzNlYTEwHhcNMjYwMTAxMjAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWVhNDZkZTljNTk0NTkyNzcwZTJlNTVlMDY0NjAyZjQ5MTRiY2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+LJNzX0Sa+nR3NbVvvpus9Z0H/N 2jTDR+G0JNNNnTv3/2EHFoT6vIj56k+tDiTlHSJQE/UcfkPfzt+X+VSDnsPjNuKf 2SZrJrwe3D32kNYvQpOIHS7EB4YwyiwOA+GSnRZNtiKeR7RzGGvnj8UIw0/uo3q/ LFdAb1d8W0SlZpIvsi41oLQWSrvbkP4aD++Cu6Qyq3b2nuyw0cysWsno7YmZxhEA e+uwmsyveC2IDdUWEhbsGGwAmxuzj/4Hu0Jwp4rDfyDn9I8RF+YQZqM5XGV2uof3 Gw23HI6v7MkRjMPF04omwKGzAH/AideyqXkXJKsKsSBTN8p05eBDRVBqOwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLHqRt6cWUWSdw4uVeBkYC9JFLzeMB8GA1UdIwQY MBaAFFHlkeVJA9L56oQKFGlVujRZ4z6hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWVXUjVVa0Qwdm5xaEFvVWFWVzZORm5qUHFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi83MWE3NDgtYjJiYy00NzI4LTllZjAt YTY5Y2Q5ZDE1ZTMxLzEvc2VwRzNweFpSWkozRGk1VjRHUmdMMGtVdk40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi83MWE3NDgtYjJiYy00NzI4LTllZjAtYTY5Y2Q5ZDE1ZTMx LzEvVWVXUjVVa0Qwdm5xaEFvVWFWVzZORm5qUHFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwWGoMA8E AgACMAkDBwAgAQZ8KdwwDQYJKoZIhvcNAQELBQADggEBAJChrEP8dS+8sFL3+cFA xpgfVm4mMoTHjv1VAXzgL2hxTSq0d5QWuXWgA2KYi4vL3YgZkIgx3QUXznuboHjJ uYJzcOg78g1EjDrRJ0DVgEStl9D3NE1oZQZDNRcWHiJ2tOKFjexy8zgHbjEX8Coe yuOIWj3yBRN6K6U4ueFvQottyA47jSuzwajV6nPFjKAGmz7wkXcUCSW90ZRQhorD dgSYcBt6MSjJ7EJoux4R8Q0ExaTM0rrALqQZwC0FVVY1LzepXKuhgZ1YQKe8xDc6 w3IgO35g2y050mmeuqJPRtR6lllsXP1H5ZZYSnTnTdtB0tgCjJz7mMKPYKJp+5E4 8VA= -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:51 2026 by rpki-client