This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/l7Roa3smZDJ-vTeHH3psSnXeo-A.roa File: l7Roa3smZDJ-vTeHH3psSnXeo-A.roa (raw, json) Hash identifier: kcERe/PNUx80u10ZpY891WUn5xBSVUP+AKxB0Aofgu8= Subject key identifier: 97:B4:68:6B:7B:26:64:32:7E:BD:37:87:1F:7A:6C:4A:75:DE:A3:E0 Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019B7F15CB0174E2285443F55B1C5DA20970 Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/l7Roa3smZDJ-vTeHH3psSnXeo-A.roa Signing time: Fri 02 Jan 2026 14:21:33 +0000 ROA not before: Fri 02 Jan 2026 14:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212335 IP address blocks: 2.58.233.0/24 maxlen: 24 45.9.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:cb:01:74:e2:28:54:43:f5:5b:1c:5d:a2:09:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Jan 2 14:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97b4686b7b2664327ebd37871f7a6c4a75dea3e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1b:5c:fd:00:84:d5:85:a1:df:9f:96:bf:38: a8:a3:df:a4:9d:6f:74:20:05:2d:27:e3:3e:bd:f9: 0a:7a:04:0c:e4:fe:2d:7f:71:dd:3e:5c:3f:4a:19: 4a:10:47:8d:64:ba:06:05:94:8f:58:10:35:83:dc: 90:52:94:f1:39:39:0a:87:40:00:ba:1b:22:35:31: 1e:ae:06:e2:37:de:d2:26:66:ea:4f:89:96:8a:06: 7b:d6:9d:eb:6c:36:b4:a1:3f:9b:e5:10:b7:64:e6: 9c:0b:6d:b8:d1:17:bd:24:63:ec:c5:1a:01:7f:88: 6c:df:3a:d4:f0:ea:ff:69:c8:bb:66:dc:94:d1:c6: d0:5e:e0:5a:68:c6:de:f0:cf:2b:74:26:a3:c6:f5: 74:96:71:46:20:ed:96:87:be:c0:26:11:4b:43:8d: c4:e3:73:9f:0a:cb:76:c4:6a:eb:38:10:83:21:a5: f6:68:5f:39:c8:3a:32:97:16:81:e5:32:54:6b:95: 9e:bb:02:18:af:be:ef:62:00:f2:ed:be:50:1f:d3: 22:18:03:9d:45:3c:64:3e:6a:9c:c5:18:f5:87:c8: 8d:e9:62:0a:34:f5:c4:76:21:f2:5a:52:e3:ff:63: 4a:81:01:5e:b9:12:a8:b9:e1:95:85:05:88:e1:05: eb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B4:68:6B:7B:26:64:32:7E:BD:37:87:1F:7A:6C:4A:75:DE:A3:E0 X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/l7Roa3smZDJ-vTeHH3psSnXeo-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.233.0/24 45.9.154.0/24 Signature Algorithm: sha256WithRSAEncryption 46:55:2c:90:5c:e3:bc:69:a4:7d:97:ea:73:53:b7:3a:e3:33: 3f:22:c5:b3:ec:76:6a:7e:6f:16:92:04:e5:95:1c:96:55:1c: eb:83:fe:49:14:32:ec:02:95:ec:94:c7:cb:8d:ba:29:41:6b: c5:f0:4c:47:09:87:b7:bc:a6:be:ac:61:52:1c:46:0d:43:d8: bf:ef:99:1f:b8:56:63:4a:90:de:59:b4:2d:04:0f:a6:58:9f: 30:e4:fb:4d:3d:fd:36:85:54:b4:3b:d7:58:aa:22:00:f5:4f: 69:c6:7e:2a:34:c2:f6:fb:c1:71:85:23:c1:9d:f6:da:cf:10: a2:63:98:02:38:92:c9:50:61:c8:af:6b:61:f6:22:f3:39:93: 40:24:21:e2:79:17:cd:09:f4:ef:15:52:43:34:34:fc:5c:64: 02:59:20:70:9a:c6:49:79:51:ed:7b:e0:3b:d0:7d:d1:0d:12: 2d:70:e8:79:01:20:d5:ba:a3:e1:ac:1a:52:d7:24:e0:21:df: b3:d9:c7:8c:79:c1:9a:a9:0f:39:10:a3:e0:18:6e:88:44:35: b7:02:55:43:5a:66:7b:85:c9:9f:96:de:e9:8f:d8:3d:62:94: a8:6f:d9:52:9f:fb:11:f3:0d:16:0e:ec:e6:8e:d5:6b:dc:d6: 18:d2:58:10 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FcsBdOIoVEP1WxxdoglwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjYwMTAyMTQyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2I0Njg2YjdiMjY2NDMyN2ViZDM3ODcxZjdhNmM0YTc1ZGVhM2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBtc/QCE1YWh35+Wvzioo9+knW90 IAUtJ+M+vfkKegQM5P4tf3HdPlw/ShlKEEeNZLoGBZSPWBA1g9yQUpTxOTkKh0AA uhsiNTEergbiN97SJmbqT4mWigZ71p3rbDa0oT+b5RC3ZOacC2240Re9JGPsxRoB f4hs3zrU8Or/aci7ZtyU0cbQXuBaaMbe8M8rdCajxvV0lnFGIO2Wh77AJhFLQ43E 43OfCst2xGrrOBCDIaX2aF85yDoylxaB5TJUa5WeuwIYr77vYgDy7b5QH9MiGAOd RTxkPmqcxRj1h8iN6WIKNPXEdiHyWlLj/2NKgQFeuRKoueGVhQWI4QXrCwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJe0aGt7JmQyfr03hx96bEp13qPgMB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvbDdSb2Ezc21aREotdlRlSEgzcHNTblhlby1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAjrpAwQA LQmaMA0GCSqGSIb3DQEBCwUAA4IBAQBGVSyQXOO8aaR9l+pzU7c64zM/IsWz7HZq fm8WkgTllRyWVRzrg/5JFDLsApXslMfLjbopQWvF8ExHCYe3vKa+rGFSHEYNQ9i/ 75kfuFZjSpDeWbQtBA+mWJ8w5PtNPf02hVS0O9dYqiIA9U9pxn4qNML2+8FxhSPB nfbazxCiY5gCOJLJUGHIr2th9iLzOZNAJCHieRfNCfTvFVJDNDT8XGQCWSBwmsZJ eVHte+A70H3RDRItcOh5ASDVuqPhrBpS1yTgId+z2ceMecGaqQ85EKPgGG6IRDW3 AlVDWmZ7hcmflt7pj9g9YpSob9lSn/sR8w0WDuzmjtVr3NYY0lgQ -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:36 2026 by rpki-client