This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/I7P5hrATQOr4FMojmomQFSpigt8.roa File: I7P5hrATQOr4FMojmomQFSpigt8.roa (raw, json) Hash identifier: cp4VK2ZuXPC8H2sQqnOgkjqJPdpF+R6ME3S2G7buLzE= Subject key identifier: 23:B3:F9:86:B0:13:40:EA:F8:14:CA:23:9A:89:90:15:2A:62:82:DF Certificate issuer: /CN=daaec597d1b379ea83236312c6f8b2bce7439773 Certificate serial: 019B791124542A9184094122D9A30317FD58 Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/I7P5hrATQOr4FMojmomQFSpigt8.roa Signing time: Thu 01 Jan 2026 10:18:45 +0000 ROA not before: Thu 01 Jan 2026 10:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28820 IP address blocks: 193.29.55.0/24 maxlen: 24 195.225.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:24:54:2a:91:84:09:41:22:d9:a3:03:17:fd:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773 Validity Not Before: Jan 1 10:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23b3f986b01340eaf814ca239a8990152a6282df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e9:40:ce:95:16:47:df:9b:44:9e:b5:1f:8a: 22:17:9f:02:5d:57:e9:ca:9e:36:b0:9e:d5:c0:87: 33:fc:85:9a:c8:ef:4e:37:a1:3f:62:4c:32:b9:8e: ec:19:b0:05:e8:33:71:40:91:95:97:b9:c3:07:44: d8:de:83:dc:cf:d5:c9:79:e3:d6:24:ad:28:35:da: f2:f4:34:a7:a1:7d:a0:0e:28:72:27:e5:44:53:2f: e5:cb:7e:e0:5e:03:8d:06:25:ad:4d:48:1b:9e:b5: 18:4b:ea:31:cd:5d:f4:5f:4e:e5:38:c8:ce:bf:49: 04:43:a0:fa:e6:88:a8:c4:87:9d:0a:29:17:82:0f: 61:16:4c:79:04:75:61:6c:d4:ac:d0:86:08:6b:2d: dc:ea:28:49:45:26:19:69:5f:f8:19:f7:81:91:f6: 7d:9a:21:a1:6d:1a:7d:98:98:cc:eb:ad:91:eb:31: 90:1e:e1:c8:9f:74:2d:6b:d0:88:51:5f:2d:cc:3e: fe:f6:06:d7:96:12:e9:3f:a9:f1:68:79:e2:26:79: aa:25:65:ac:46:50:b8:6d:19:05:56:c6:09:f4:25: 4b:53:c1:b0:d7:60:a7:42:8b:f8:b3:e6:de:53:ae: 1a:cc:32:6c:2b:df:81:01:fc:d8:cd:a6:71:23:95: 8a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B3:F9:86:B0:13:40:EA:F8:14:CA:23:9A:89:90:15:2A:62:82:DF X509v3 Authority Key Identifier: keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/I7P5hrATQOr4FMojmomQFSpigt8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.29.55.0/24 195.225.252.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:6d:a1:23:65:48:48:d8:86:1a:33:f8:13:d8:22:ea:2e:15: 0c:c7:61:79:65:6c:b7:29:48:88:ca:de:3f:08:a4:1e:37:e4: c6:cd:1d:c3:d3:07:e3:92:e0:e6:ff:2d:e3:9d:a7:e9:7f:2e: 0e:ba:6b:23:a1:ca:98:67:c6:04:3a:8e:e8:2a:e3:eb:f2:48: 54:ba:6c:71:e8:6a:00:72:f9:a5:5d:50:02:0b:e9:8c:7a:6a: 31:6f:b6:86:9d:94:63:9b:08:d9:34:b7:ce:82:4d:ed:3f:37: 7e:59:cb:2e:16:5c:8e:85:00:d7:40:79:a3:3d:20:24:fe:9c: b7:d1:e4:a9:9b:68:7f:62:e6:ba:b0:df:1d:a1:23:1a:a6:4b: 52:17:93:72:95:b4:ea:0a:9f:dd:49:0c:d1:92:eb:65:27:44: 79:69:48:9e:0f:a5:2c:36:be:12:83:c7:bb:7e:e2:f0:36:31: bf:fe:f9:a8:94:65:81:09:b7:30:46:98:21:11:95:6f:26:70: 6b:f1:5b:0b:e9:42:d4:cb:e6:cf:22:de:c6:c6:d4:fc:95:f9: 74:74:1a:a5:45:86:41:4c:45:d8:f6:1d:37:68:89:d2:05:55: ff:e2:86:28:cb:41:64:65:27:c0:6b:63:04:7c:01:c4:d6:47: 7c:e2:9b:ee -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ESRUKpGECUEi2aMDF/1YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWVjNTk3ZDFiMzc5ZWE4MzIzNjMxMmM2ZjhiMmJjZTc0 Mzk3NzMwHhcNMjYwMTAxMTAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2IzZjk4NmIwMTM0MGVhZjgxNGNhMjM5YTg5OTAxNTJhNjI4MmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+lAzpUWR9+bRJ61H4oiF58CXVfp yp42sJ7VwIcz/IWayO9ON6E/YkwyuY7sGbAF6DNxQJGVl7nDB0TY3oPcz9XJeePW JK0oNdry9DSnoX2gDihyJ+VEUy/ly37gXgONBiWtTUgbnrUYS+oxzV30X07lOMjO v0kEQ6D65oioxIedCikXgg9hFkx5BHVhbNSs0IYIay3c6ihJRSYZaV/4GfeBkfZ9 miGhbRp9mJjM662R6zGQHuHIn3Qta9CIUV8tzD7+9gbXlhLpP6nxaHniJnmqJWWs RlC4bRkFVsYJ9CVLU8Gw12CnQov4s+beU64azDJsK9+BAfzYzaZxI5WKLQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCOz+YawE0Dq+BTKI5qJkBUqYoLfMB8GA1UdIwQY MBaAFNquxZfRs3nqgyNjEsb4srznQ5dzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE3Rmw5R3plZXFESTJNU3h2aXl2T2REbDNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yZDhlZmMtYjlmYS00MzJjLTk3Mjct OGI4NWIyOGZiYjc5LzEvSTdQNWhyQVRRT3I0Rk1vam1vbVFGU3BpZ3Q4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yZDhlZmMtYjlmYS00MzJjLTk3MjctOGI4NWIyOGZiYjc5 LzEvMnE3Rmw5R3plZXFESTJNU3h2aXl2T2REbDNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwR03AwQC w+H8MA0GCSqGSIb3DQEBCwUAA4IBAQALbaEjZUhI2IYaM/gT2CLqLhUMx2F5ZWy3 KUiIyt4/CKQeN+TGzR3D0wfjkuDm/y3jnafpfy4OumsjocqYZ8YEOo7oKuPr8khU umxx6GoAcvmlXVACC+mMemoxb7aGnZRjmwjZNLfOgk3tPzd+WcsuFlyOhQDXQHmj PSAk/py30eSpm2h/Yua6sN8doSMapktSF5NylbTqCp/dSQzRkutlJ0R5aUieD6Us Nr4Sg8e7fuLwNjG//vmolGWBCbcwRpghEZVvJnBr8VsL6ULUy+bPIt7GxtT8lfl0 dBqlRYZBTEXY9h03aInSBVX/4oYoy0FkZSfAa2MEfAHE1kd84pvu -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:27 2026 by rpki-client