This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/n7tDB9WVKLvlzbrTHI3vLNe5dIs.roa File: n7tDB9WVKLvlzbrTHI3vLNe5dIs.roa (raw, json) Hash identifier: BfpWIrEApwHB8saHvg5FCOOfhPalX/1cWv3N79uY4jg= Subject key identifier: 9F:BB:43:07:D5:95:28:BB:E5:CD:BA:D3:1C:8D:EF:2C:D7:B9:74:8B Certificate issuer: /CN=e017872403452f3e008ab798047342db24edb35a Certificate serial: 019B76EB5E0B50B6DFCFBE2D123CC62A6E95 Authority key identifier: E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/n7tDB9WVKLvlzbrTHI3vLNe5dIs.roa Signing time: Thu 01 Jan 2026 00:18:15 +0000 ROA not before: Thu 01 Jan 2026 00:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212415 IP address blocks: 193.104.187.0/24 maxlen: 24 194.153.85.0/24 maxlen: 24 2001:67c:28d0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:5e:0b:50:b6:df:cf:be:2d:12:3c:c6:2a:6e:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e017872403452f3e008ab798047342db24edb35a Validity Not Before: Jan 1 00:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fbb4307d59528bbe5cdbad31c8def2cd7b9748b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:13:f4:e1:45:78:87:e7:b9:69:0b:bb:15:70: 7b:95:c8:ce:31:57:41:11:f0:ee:3c:9e:9b:2b:62: 4e:16:47:38:9d:08:84:96:fd:bb:18:72:68:cc:e7: a7:73:c9:6a:75:98:bd:80:d5:f4:7b:c7:22:77:d4: 4c:60:78:78:9b:8a:44:7b:07:4e:3b:e9:6d:56:9d: 47:92:0f:59:3b:2d:33:82:0d:5e:6f:91:90:2d:ad: 67:16:7f:73:83:60:41:67:ad:31:31:92:99:2c:99: f1:94:b7:95:b8:62:d0:af:d7:df:ee:a1:51:cf:60: 04:8c:bb:af:4c:29:43:99:a8:81:d4:05:1b:7c:18: 17:dc:1e:e3:a2:f5:96:34:33:52:9f:d0:7b:a2:76: c7:38:69:16:5f:dd:c6:52:ca:b9:c8:a5:3c:fe:75: 68:22:44:b7:3d:73:86:d4:05:d8:21:a2:a0:1c:0e: 56:60:e7:5f:3d:a3:1e:22:bc:db:a0:f0:6d:89:59: f3:ba:6c:32:17:51:ec:5d:d9:0e:1d:e6:f6:6e:66: 5e:f6:a3:c8:d1:27:72:ca:b6:e7:6d:4b:55:21:fa: 05:c8:a6:fc:13:6b:e7:46:9c:f3:d6:be:e7:b9:11: 72:96:eb:d9:4e:1c:84:e7:68:5b:70:58:52:5c:6c: 1a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BB:43:07:D5:95:28:BB:E5:CD:BA:D3:1C:8D:EF:2C:D7:B9:74:8B X509v3 Authority Key Identifier: keyid:E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/n7tDB9WVKLvlzbrTHI3vLNe5dIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.187.0/24 194.153.85.0/24 IPv6: 2001:67c:28d0::/48 Signature Algorithm: sha256WithRSAEncryption 69:32:8b:b5:a6:26:29:3d:75:4a:57:89:86:c8:c8:02:b2:ea: 99:36:08:9c:6c:55:99:d4:48:d6:31:84:16:f6:9c:2a:8a:9f: 79:15:80:ad:d8:3d:69:f5:c0:26:98:16:23:b0:bc:49:30:ab: c8:e4:21:e5:3d:87:87:a4:2a:79:09:c0:56:e4:73:e6:af:a0: 3d:fc:0a:c9:97:ad:d1:52:48:af:0d:03:59:a7:6c:b1:fc:ea: 4c:b5:ca:02:d7:07:8d:3b:13:57:22:d7:70:76:1f:71:7c:35: fe:0e:8f:30:1c:3b:fa:0f:d9:83:bd:3b:2b:54:28:a0:f0:cd: 8b:e9:13:f3:9a:31:8e:19:7a:27:1d:a7:c3:38:d8:55:54:84: b8:3f:62:09:45:31:e4:4d:b0:c2:a7:53:e1:ad:69:5c:30:f4: 98:0a:ee:a5:49:94:06:3d:88:f9:c4:43:44:e9:47:81:92:d0: 5d:f7:e7:91:10:2d:7e:93:c6:f5:5e:2e:30:a9:30:67:8b:ee: 49:e3:a8:04:59:a4:6d:98:84:ca:25:dd:13:78:03:7f:af:81: d2:d4:3a:82:62:09:d9:e0:72:3b:eb:b4:04:0e:f4:67:7b:39: fe:80:cc:96:cc:a6:42:4f:d7:bb:c6:0b:dc:b2:64:38:ec:5f: 2c:59:13:89 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt2614LULbfz74tEjzGKm6VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMTc4NzI0MDM0NTJmM2UwMDhhYjc5ODA0NzM0MmRiMjRl ZGIzNWEwHhcNMjYwMTAxMDAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmJiNDMwN2Q1OTUyOGJiZTVjZGJhZDMxYzhkZWYyY2Q3Yjk3NDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBP04UV4h+e5aQu7FXB7lcjOMVdB EfDuPJ6bK2JOFkc4nQiElv27GHJozOenc8lqdZi9gNX0e8cid9RMYHh4m4pEewdO O+ltVp1Hkg9ZOy0zgg1eb5GQLa1nFn9zg2BBZ60xMZKZLJnxlLeVuGLQr9ff7qFR z2AEjLuvTClDmaiB1AUbfBgX3B7jovWWNDNSn9B7onbHOGkWX93GUsq5yKU8/nVo IkS3PXOG1AXYIaKgHA5WYOdfPaMeIrzboPBtiVnzumwyF1HsXdkOHeb2bmZe9qPI 0SdyyrbnbUtVIfoFyKb8E2vnRpzz1r7nuRFyluvZThyE52hbcFhSXGwaZwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFJ+7QwfVlSi75c260xyN7yzXuXSLMB8GA1UdIwQY MBaAFOAXhyQDRS8+AIq3mARzQtsk7bNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEJlSEpBTkZMejRBaXJlWUJITkMyeVR0czFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS80Y2MxNDUtOTY3ZC00ZDhkLWFmNWMt ODc3ZTBlODY2YjI0LzEvbjd0REI5V1ZLTHZsemJyVEhJM3ZMTmU1ZElzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS80Y2MxNDUtOTY3ZC00ZDhkLWFmNWMtODc3ZTBlODY2YjI0 LzEvNEJlSEpBTkZMejRBaXJlWUJITkMyeVR0czFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwWi7AwQA wplVMA8EAgACMAkDBwAgAQZ8KNAwDQYJKoZIhvcNAQELBQADggEBAGkyi7WmJik9 dUpXiYbIyAKy6pk2CJxsVZnUSNYxhBb2nCqKn3kVgK3YPWn1wCaYFiOwvEkwq8jk IeU9h4ekKnkJwFbkc+avoD38CsmXrdFSSK8NA1mnbLH86ky1ygLXB407E1ci13B2 H3F8Nf4OjzAcO/oP2YO9OytUKKDwzYvpE/OaMY4Zeicdp8M42FVUhLg/YglFMeRN sMKnU+GtaVww9JgK7qVJlAY9iPnEQ0TpR4GS0F3355EQLX6TxvVeLjCpMGeL7knj qARZpG2YhMol3RN4A3+vgdLUOoJiCdngcjvrtAQO9Gd7Of6AzJbMpkJP17vGC9yy ZDjsXyxZE4k= -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:12 2026 by rpki-client