This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/H7G_7bTeqdvtcXVR3yqogaf3lfQ.roa File: H7G_7bTeqdvtcXVR3yqogaf3lfQ.roa (raw, json) Hash identifier: RgEJccL4YxP+zy0/GbaL0v6Pn2wFJVH4GOhtxU+cMZc= Subject key identifier: 1F:B1:BF:ED:B4:DE:A9:DB:ED:71:75:51:DF:2A:A8:81:A7:F7:95:F4 Certificate issuer: /CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34 Certificate serial: 019B7B35DF5AA467B49666CC9500BB5D574A Authority key identifier: 5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/H7G_7bTeqdvtcXVR3yqogaf3lfQ.roa Signing time: Thu 01 Jan 2026 20:18:06 +0000 ROA not before: Thu 01 Jan 2026 20:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211449 IP address blocks: 193.57.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:df:5a:a4:67:b4:96:66:cc:95:00:bb:5d:57:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34 Validity Not Before: Jan 1 20:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fb1bfedb4dea9dbed717551df2aa881a7f795f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bc:7f:fd:53:e4:e7:a0:51:9d:e2:c0:39:03: 05:b6:47:52:46:ef:8d:92:13:19:4a:9c:29:1b:6e: 35:65:b8:11:d7:16:e1:03:2a:1c:0a:8a:c4:0b:cc: 21:52:a2:31:86:57:0f:e4:fe:51:6b:61:8f:94:74: 8a:09:d9:71:40:3a:2d:51:6d:6b:59:f3:d7:45:27: c9:51:0b:22:98:70:c9:14:de:2b:22:f4:27:7a:07: 6f:bb:b6:8f:30:39:26:58:a1:27:42:57:2c:65:84: ee:d5:39:c0:ed:16:14:26:01:5e:50:09:be:70:73: b9:64:c2:4d:28:9b:87:2a:12:c7:c1:13:07:cc:5f: 19:c8:b9:99:96:4e:15:de:96:7f:a3:94:63:1c:09: 02:12:7b:3c:ce:06:99:09:e5:41:ac:24:9b:3e:bd: 94:6b:d0:7a:4a:3d:5d:b8:70:b5:23:65:0e:93:0c: e2:a2:fa:db:df:81:29:0d:b9:0d:26:19:1f:48:5a: c2:49:8a:ae:17:24:39:09:5e:7d:c0:1e:06:57:dd: 1f:a9:cc:18:1c:6c:92:2b:f4:13:6d:35:77:ba:0f: 50:c9:1a:e7:5e:61:e2:6a:01:e2:3c:6b:c1:7c:82: a3:60:96:bf:85:dc:40:ba:9c:7d:14:b8:ca:8b:86: 8e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B1:BF:ED:B4:DE:A9:DB:ED:71:75:51:DF:2A:A8:81:A7:F7:95:F4 X509v3 Authority Key Identifier: keyid:5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/H7G_7bTeqdvtcXVR3yqogaf3lfQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.57.224.0/24 Signature Algorithm: sha256WithRSAEncryption 46:06:09:af:98:f4:18:1f:97:69:11:86:33:ed:db:f3:98:16: 10:bf:75:45:f1:08:64:32:6e:08:b5:8c:4c:83:18:0f:96:cc: c8:13:af:3c:7f:14:a7:a1:9f:73:ff:97:e8:e5:f5:e1:99:7a: 7b:0a:e9:86:db:9f:ce:0d:1a:ed:48:8e:46:1e:17:80:2e:22: 90:03:a7:b7:6f:b9:10:c7:da:39:62:77:ea:2f:5d:76:88:82: ae:47:d3:7f:de:82:46:56:5d:3d:05:f7:b8:ed:cc:57:12:71: 89:4b:14:95:d2:ed:d8:5d:33:46:1c:45:4f:fe:c0:bb:7a:30: 75:d6:ce:ae:65:8b:0e:e6:53:fc:c3:86:21:1e:20:f7:87:51: 07:0b:a6:36:20:48:70:44:5f:56:91:91:d9:36:5b:a1:38:54: a0:36:7f:f6:14:fd:ab:e8:71:22:47:46:0c:ce:fa:55:58:b6: af:66:f6:1d:b7:54:67:51:3c:db:c4:e4:58:6c:5e:4d:89:ce: aa:04:a4:74:d3:e6:cf:d9:d9:07:0e:d8:54:35:8d:70:68:7c: df:05:57:79:47:a4:45:7f:f2:62:25:a3:43:9d:6e:30:f6:75: ef:9b:d2:58:72:22:4a:71:8a:1f:84:23:85:46:e8:4f:d8:f7: 04:e6:93:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nd9apGe0lmbMlQC7XVdKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViY2Q0MGQxMGI1NmYzYjUzMmZhMGRmZDAxZDgxN2VmOTNk YTFhMzQwHhcNMjYwMTAxMjAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmIxYmZlZGI0ZGVhOWRiZWQ3MTc1NTFkZjJhYTg4MWE3Zjc5NWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbx//VPk56BRneLAOQMFtkdSRu+N khMZSpwpG241ZbgR1xbhAyocCorEC8whUqIxhlcP5P5Ra2GPlHSKCdlxQDotUW1r WfPXRSfJUQsimHDJFN4rIvQnegdvu7aPMDkmWKEnQlcsZYTu1TnA7RYUJgFeUAm+ cHO5ZMJNKJuHKhLHwRMHzF8ZyLmZlk4V3pZ/o5RjHAkCEns8zgaZCeVBrCSbPr2U a9B6Sj1duHC1I2UOkwziovrb34EpDbkNJhkfSFrCSYquFyQ5CV59wB4GV90fqcwY HGySK/QTbTV3ug9QyRrnXmHiagHiPGvBfIKjYJa/hdxAupx9FLjKi4aO+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB+xv+203qnb7XF1Ud8qqIGn95X0MB8GA1UdIwQY MBaAFFvNQNELVvO1MvoN/QHYF++T2ho0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzgxQTBRdFc4N1V5LWczOUFkZ1g3NVBhR2pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iZmY3NTgtNGI4My00NzNkLWIwNzIt YTJjZTFjYzhiODdmLzEvSDdHXzdiVGVxZHZ0Y1hWUjN5cW9nYWYzbGZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9iZmY3NTgtNGI4My00NzNkLWIwNzItYTJjZTFjYzhiODdm LzEvVzgxQTBRdFc4N1V5LWczOUFkZ1g3NVBhR2pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTngMA0G CSqGSIb3DQEBCwUAA4IBAQBGBgmvmPQYH5dpEYYz7dvzmBYQv3VF8QhkMm4ItYxM gxgPlszIE688fxSnoZ9z/5fo5fXhmXp7CumG25/ODRrtSI5GHheALiKQA6e3b7kQ x9o5YnfqL112iIKuR9N/3oJGVl09Bfe47cxXEnGJSxSV0u3YXTNGHEVP/sC7ejB1 1s6uZYsO5lP8w4YhHiD3h1EHC6Y2IEhwRF9WkZHZNluhOFSgNn/2FP2r6HEiR0YM zvpVWLavZvYdt1RnUTzbxORYbF5Nic6qBKR00+bP2dkHDthUNY1waHzfBVd5R6RF f/JiJaNDnW4w9nXvm9JYciJKcYofhCOFRuhP2PcE5pNi -----END CERTIFICATE-----Generated at Thu Jan 29 09:58:02 2026 by rpki-client