This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/s7yoUaWs_cdTcfxb23hHNbYxU34.roa File: s7yoUaWs_cdTcfxb23hHNbYxU34.roa (raw, json) Hash identifier: HOPZhoocxgo394BFWR+fVdoYGl8HfSPhqPdNa7STymE= Subject key identifier: B3:BC:A8:51:A5:AC:FD:C7:53:71:FC:5B:DB:78:47:35:B6:31:53:7E Certificate issuer: /CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5 Certificate serial: 019B7E389E02DB4D5E7957A047113A92EE78 Authority key identifier: C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/s7yoUaWs_cdTcfxb23hHNbYxU34.roa Signing time: Fri 02 Jan 2026 10:19:58 +0000 ROA not before: Fri 02 Jan 2026 10:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29335 IP address blocks: 193.19.152.0/23 maxlen: 32 193.19.152.0/24 maxlen: 32 193.19.153.0/24 maxlen: 32 193.19.154.0/23 maxlen: 32 193.19.154.0/24 maxlen: 32 193.19.155.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:9e:02:db:4d:5e:79:57:a0:47:11:3a:92:ee:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5 Validity Not Before: Jan 2 10:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3bca851a5acfdc75371fc5bdb784735b631537e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:96:f8:e5:1a:9d:93:02:72:5a:fe:a8:87:70: 5c:12:8c:6a:69:56:13:d3:a8:33:d8:00:f7:78:8b: 23:00:12:2f:44:80:84:d6:2d:ec:c1:81:82:d6:0f: 99:49:b5:74:8f:ca:98:4d:cb:18:51:d4:6e:1a:0f: e5:26:ff:90:6e:62:90:3b:0d:08:31:1a:41:9a:0e: f6:db:ba:23:94:6a:e5:89:93:d4:77:8e:e7:09:40: 32:49:90:b7:c4:01:54:ef:9f:33:0c:4c:d1:8a:bd: 75:43:24:96:f1:cc:dd:a9:7b:f4:07:11:7b:7b:6b: 1d:3b:c2:51:41:d2:09:4e:e6:df:3e:22:05:83:ff: 4f:a7:73:be:e5:bc:c3:c4:f2:55:cb:90:f0:99:f9: 32:62:a4:5f:83:47:e4:0c:a2:80:63:15:27:e9:53: 9b:78:14:1d:92:3c:97:23:c8:17:a1:f7:74:7e:3e: 17:01:1e:75:0e:30:ed:83:3b:e1:e8:e1:65:4a:5b: 76:c8:67:2f:77:89:a2:a2:a8:48:c2:cc:2d:40:57: 22:26:a7:70:6f:51:2a:31:63:c5:f2:dc:ef:41:9c: c9:c9:b6:63:e0:cd:e3:72:5c:9c:1d:39:f6:9a:bc: 9d:af:f2:c3:4f:09:02:01:64:32:92:e8:41:36:9c: 77:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:BC:A8:51:A5:AC:FD:C7:53:71:FC:5B:DB:78:47:35:B6:31:53:7E X509v3 Authority Key Identifier: keyid:C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/s7yoUaWs_cdTcfxb23hHNbYxU34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.19.152.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:7e:62:03:12:8b:62:92:cc:8c:9c:9f:84:27:62:ed:ff:5b: e7:a2:c8:55:0e:2b:bd:a7:1b:74:6f:aa:fa:cb:19:64:b0:59: 0e:1a:d9:8b:d8:0c:2c:cf:88:1d:8a:9a:8e:a1:9c:af:e9:93: 00:43:d8:79:5b:5e:d1:e9:75:d2:15:52:3e:d2:b4:70:76:b1: 6d:4e:61:1e:7d:02:81:d7:0e:3b:1d:c9:44:80:e1:9c:f0:21: 79:76:11:c7:da:b5:f0:ca:ea:88:02:e8:73:4e:24:ae:ff:6d: de:75:2b:3a:ff:cf:34:bb:43:28:37:4e:57:58:62:1f:fd:c0: 96:bd:b1:9b:b5:38:14:75:0d:cc:02:61:fd:98:55:3e:ca:d4: 12:c7:8f:b5:98:ac:bf:75:15:6e:0d:23:16:61:74:1b:8a:19: ca:c1:a4:a9:d3:ae:d4:f6:f5:07:9f:60:98:02:4a:35:60:47: cd:cb:44:01:37:ff:76:76:07:24:10:1d:d1:1e:0a:9d:cc:b9: b7:80:28:3c:b6:0c:35:3e:f4:94:ce:c2:d4:fe:8f:96:3e:6c: 9b:83:3f:e3:d4:1e:d0:9f:7a:18:1f:25:64:03:fc:ce:df:8a: 88:e2:5b:68:35:9b:d7:65:38:4c:a3:e4:a8:4a:e5:16:d3:b1: 09:b5:91:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJ4C201eeVegRxE6ku54MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4YzY4OTJhNjhjZTUwYTE4NmMwZDYwY2Q1YzllNGM5ODhj ZTE2YzUwHhcNMjYwMTAyMTAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2JjYTg1MWE1YWNmZGM3NTM3MWZjNWJkYjc4NDczNWI2MzE1MzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5b45RqdkwJyWv6oh3BcEoxqaVYT 06gz2AD3eIsjABIvRICE1i3swYGC1g+ZSbV0j8qYTcsYUdRuGg/lJv+QbmKQOw0I MRpBmg7227ojlGrliZPUd47nCUAySZC3xAFU758zDEzRir11QySW8czdqXv0BxF7 e2sdO8JRQdIJTubfPiIFg/9Pp3O+5bzDxPJVy5DwmfkyYqRfg0fkDKKAYxUn6VOb eBQdkjyXI8gXofd0fj4XAR51DjDtgzvh6OFlSlt2yGcvd4mioqhIwswtQFciJqdw b1EqMWPF8tzvQZzJybZj4M3jclycHTn2mrydr/LDTwkCAWQykuhBNpx34wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLO8qFGlrP3HU3H8W9t4RzW2MVN+MB8GA1UdIwQY MBaAFMjGiSpozlChhsDWDNXJ5MmIzhbFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU1hSkttak9VS0dHd05ZTTFjbmt5WWpPRnNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mZjVmZmMtMjJmZi00NmExLThkMmIt ZDM0ZDEyMDI4N2QzLzEvczd5b1VhV3NfY2RUY2Z4YjIzaEhOYll4VTM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9mZjVmZmMtMjJmZi00NmExLThkMmItZDM0ZDEyMDI4N2Qz LzEveU1hSkttak9VS0dHd05ZTTFjbmt5WWpPRnNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwROYMA0G CSqGSIb3DQEBCwUAA4IBAQCafmIDEotiksyMnJ+EJ2Lt/1vnoshVDiu9pxt0b6r6 yxlksFkOGtmL2Awsz4gdipqOoZyv6ZMAQ9h5W17R6XXSFVI+0rRwdrFtTmEefQKB 1w47HclEgOGc8CF5dhHH2rXwyuqIAuhzTiSu/23edSs6/880u0MoN05XWGIf/cCW vbGbtTgUdQ3MAmH9mFU+ytQSx4+1mKy/dRVuDSMWYXQbihnKwaSp067U9vUHn2CY Ako1YEfNy0QBN/92dgckEB3RHgqdzLm3gCg8tgw1PvSUzsLU/o+WPmybgz/j1B7Q n3oYHyVkA/zO34qI4ltoNZvXZThMo+SoSuUW07EJtZHJ -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:06 2026 by rpki-client