This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/s7AnIMBWFcao-dbPnG3NGpeppdE.roa File: s7AnIMBWFcao-dbPnG3NGpeppdE.roa (raw, json) Hash identifier: uM0/Gb1QJj63m1aOHeWULTaWA/xK5/bpQpEosjfVypk= Subject key identifier: B3:B0:27:20:C0:56:15:C6:A8:F9:D6:CF:9C:6D:CD:1A:97:A9:A5:D1 Certificate issuer: /CN=7ea66f9dd6b72c56718c85c5e18f6685f5795c75 Certificate serial: 019B797EFCA55469E39BAC1CE466340F887F Authority key identifier: 7E:A6:6F:9D:D6:B7:2C:56:71:8C:85:C5:E1:8F:66:85:F5:79:5C:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqZvnda3LFZxjIXF4Y9mhfV5XHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/s7AnIMBWFcao-dbPnG3NGpeppdE.roa Signing time: Thu 01 Jan 2026 12:18:43 +0000 ROA not before: Thu 01 Jan 2026 12:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29389 IP address blocks: 195.137.240.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.crl rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft rsync://rpki.ripe.net/repository/DEFAULT/fqZvnda3LFZxjIXF4Y9mhfV5XHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:fc:a5:54:69:e3:9b:ac:1c:e4:66:34:0f:88:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ea66f9dd6b72c56718c85c5e18f6685f5795c75 Validity Not Before: Jan 1 12:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3b02720c05615c6a8f9d6cf9c6dcd1a97a9a5d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:81:5e:5c:e8:1c:e2:b7:80:fd:49:3f:24:ee: 4d:b4:8c:8d:98:a9:d8:f3:57:7d:f4:9a:f8:83:ca: f0:97:cf:55:32:2e:b3:ba:5f:47:af:4f:8a:c3:9e: 3d:b8:5e:ba:e7:f1:07:64:72:ac:e3:a1:d0:51:8b: 6b:17:49:8b:4b:d4:90:ad:f9:b7:b7:f6:03:a7:2a: 4f:77:5d:72:f4:24:ca:10:72:f8:27:2b:ff:9e:ff: 47:d6:44:df:35:49:37:2a:03:b9:a4:30:d2:77:8a: 3a:88:03:f9:f4:1b:d0:70:c6:08:b1:17:ee:e8:b4: 29:ea:f0:d7:79:f6:8a:f5:30:a8:8f:5f:7a:95:24: 3c:9f:f9:08:49:62:4c:70:8c:58:fe:36:60:98:76: 4b:aa:86:05:1f:11:11:3b:be:be:58:51:c3:e8:9b: 79:f4:09:30:b2:39:45:14:64:ee:9f:2e:19:0d:d5: 2d:cd:35:95:3d:33:a9:3f:39:31:4c:fa:2c:e6:9f: a0:31:b2:52:fe:d9:7c:dc:72:42:33:34:36:3c:77: 9b:a3:ad:20:85:15:88:62:3e:ca:83:fe:c4:7d:39: c9:4e:5e:f1:0f:36:23:7e:32:a7:fd:44:c3:81:3c: ad:48:88:51:b4:25:36:aa:eb:f5:d5:66:7c:68:8a: 63:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B0:27:20:C0:56:15:C6:A8:F9:D6:CF:9C:6D:CD:1A:97:A9:A5:D1 X509v3 Authority Key Identifier: keyid:7E:A6:6F:9D:D6:B7:2C:56:71:8C:85:C5:E1:8F:66:85:F5:79:5C:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqZvnda3LFZxjIXF4Y9mhfV5XHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/s7AnIMBWFcao-dbPnG3NGpeppdE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.137.240.0/23 Signature Algorithm: sha256WithRSAEncryption a6:27:fb:de:58:ac:c4:f4:d5:d2:84:98:a6:95:2a:c5:d5:a9: bb:75:34:d0:79:73:d3:c0:0e:28:2f:27:86:77:65:2c:15:80: 40:ae:40:de:a4:6b:09:32:bf:60:03:e5:79:0a:79:ea:eb:67: ec:22:9a:c1:0a:8e:fd:e2:35:a9:84:8f:42:e4:a5:3b:49:97: 68:bc:78:7a:13:98:3a:ca:24:77:3e:dd:d3:51:a1:39:2f:df: c6:61:03:57:7c:fa:71:a6:64:62:14:66:0f:55:c3:62:fe:6d: cb:44:20:62:50:5e:fc:95:4d:72:2c:6b:76:e5:8f:51:16:d8: 3b:b4:9c:51:39:b1:97:a4:dd:02:d8:18:ca:a1:f7:0d:58:02: 66:7b:d5:9f:2c:77:65:56:49:3d:b6:97:a8:a7:24:8f:09:d5: 25:45:0a:42:b3:3d:fc:55:40:95:89:3a:91:69:f2:7e:ec:60: d2:d0:21:63:7e:65:34:d4:8f:9a:aa:34:ba:9b:36:59:61:b5: 8c:61:e2:e4:e7:df:b7:d8:8b:12:63:4a:3a:82:fb:c8:ee:10: 48:26:0a:b0:06:09:61:57:2a:a3:68:92:d6:b9:94:cc:54:73: dc:a0:50:21:2f:88:ae:f4:8c:41:9c:08:49:bf:cb:7e:df:e2: 00:55:f9:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fvylVGnjm6wc5GY0D4h/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYTY2ZjlkZDZiNzJjNTY3MThjODVjNWUxOGY2Njg1ZjU3 OTVjNzUwHhcNMjYwMTAxMTIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2IwMjcyMGMwNTYxNWM2YThmOWQ2Y2Y5YzZkY2QxYTk3YTlhNWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64FeXOgc4reA/Uk/JO5NtIyNmKnY 81d99Jr4g8rwl89VMi6zul9Hr0+Kw549uF665/EHZHKs46HQUYtrF0mLS9SQrfm3 t/YDpypPd11y9CTKEHL4Jyv/nv9H1kTfNUk3KgO5pDDSd4o6iAP59BvQcMYIsRfu 6LQp6vDXefaK9TCoj196lSQ8n/kISWJMcIxY/jZgmHZLqoYFHxERO76+WFHD6Jt5 9AkwsjlFFGTuny4ZDdUtzTWVPTOpPzkxTPos5p+gMbJS/tl83HJCMzQ2PHebo60g hRWIYj7Kg/7EfTnJTl7xDzYjfjKn/UTDgTytSIhRtCU2quv11WZ8aIpjEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLOwJyDAVhXGqPnWz5xtzRqXqaXRMB8GA1UdIwQY MBaAFH6mb53WtyxWcYyFxeGPZoX1eVx1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnFadm5kYTNMRlp4aklYRjRZOW1oZlY1WEhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9jYmE1N2EtNjMwNi00YzljLTllOGMt MWYyZjQ2NGJlYTJhLzEvczdBbklNQldGY2FvLWRiUG5HM05HcGVwcGRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9jYmE1N2EtNjMwNi00YzljLTllOGMtMWYyZjQ2NGJlYTJh LzEvZnFadm5kYTNMRlp4aklYRjRZOW1oZlY1WEhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw4nwMA0G CSqGSIb3DQEBCwUAA4IBAQCmJ/veWKzE9NXShJimlSrF1am7dTTQeXPTwA4oLyeG d2UsFYBArkDepGsJMr9gA+V5Cnnq62fsIprBCo794jWphI9C5KU7SZdovHh6E5g6 yiR3Pt3TUaE5L9/GYQNXfPpxpmRiFGYPVcNi/m3LRCBiUF78lU1yLGt25Y9RFtg7 tJxRObGXpN0C2BjKofcNWAJme9WfLHdlVkk9tpeopySPCdUlRQpCsz38VUCViTqR afJ+7GDS0CFjfmU01I+aqjS6mzZZYbWMYeLk59+32IsSY0o6gvvI7hBIJgqwBglh VyqjaJLWuZTMVHPcoFAhL4iu9IxBnAhJv8t+3+IAVflm -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:00 2026 by rpki-client