This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/7UvzRj5QP_dEFTSa2_ky9OFIs_w.roa File: 7UvzRj5QP_dEFTSa2_ky9OFIs_w.roa (raw, json) Hash identifier: DHzqaUg1W01FdP3m2dDSV47MKZBzpdl5evM0P3dBnbg= Subject key identifier: ED:4B:F3:46:3E:50:3F:F7:44:15:34:9A:DB:F9:32:F4:E1:48:B3:FC Certificate issuer: /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e Certificate serial: 019B7F1586243F998145406D28E0679B42C9 Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/7UvzRj5QP_dEFTSa2_ky9OFIs_w.roa Signing time: Fri 02 Jan 2026 14:21:15 +0000 ROA not before: Fri 02 Jan 2026 14:21:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54014 IP address blocks: 31.132.36.0/22 maxlen: 24 193.30.32.0/22 maxlen: 24 2a0c:8540::/43 maxlen: 48 2a0c:8541::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:86:24:3f:99:81:45:40:6d:28:e0:67:9b:42:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e Validity Not Before: Jan 2 14:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed4bf3463e503ff74415349adbf932f4e148b3fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:66:be:4b:0b:a0:70:2c:6f:4d:41:82:3f:1d: 3d:70:90:e2:64:39:dc:79:9c:df:49:04:da:44:dc: 25:14:de:81:3d:fc:a8:e4:68:89:06:94:9c:d2:e3: f4:ff:3c:b9:d0:da:d7:85:85:0a:ae:d4:8d:9b:5a: 05:d0:e3:4b:fb:d0:56:12:57:44:89:1c:d1:fe:a8: 61:31:7f:cc:c0:f7:b9:2f:ae:3d:62:cf:3d:dc:e3: 86:1d:7d:ea:e6:8e:fe:7c:0e:0c:04:af:ad:ab:da: c4:ae:f4:eb:70:99:af:f3:af:61:de:eb:41:4f:8a: b3:fb:c7:85:61:5f:18:8a:d8:91:fd:c6:26:01:95: b4:83:1a:e0:4a:ab:62:f3:95:4f:4e:1f:11:e4:f5: 0f:cd:20:c1:89:4a:c5:e4:63:ae:d6:3c:39:a4:9c: 22:a3:cd:a7:5c:d8:92:fe:99:93:85:e5:b3:ff:42: 34:54:2c:1b:05:39:89:eb:17:27:d7:c6:45:08:b2: 8f:f0:a4:f8:53:25:bb:8e:6a:9f:5a:e5:ad:0f:11: 7f:e7:24:75:ed:58:40:d5:c6:03:41:ea:69:95:29: 75:c3:00:cf:e6:3d:65:06:4a:50:d0:9c:96:f8:99: f0:5c:00:69:ae:f7:24:fa:86:97:26:ce:ad:98:e9: cd:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:4B:F3:46:3E:50:3F:F7:44:15:34:9A:DB:F9:32:F4:E1:48:B3:FC X509v3 Authority Key Identifier: keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/7UvzRj5QP_dEFTSa2_ky9OFIs_w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.132.36.0/22 193.30.32.0/22 IPv6: 2a0c:8540::/43 2a0c:8541::/32 Signature Algorithm: sha256WithRSAEncryption 2e:48:2f:39:01:34:3a:28:af:39:06:75:de:c4:a2:d4:10:e2: fc:29:d0:1c:ed:eb:95:d1:d9:2c:75:06:f8:ed:0d:0f:e2:a7: 30:23:18:57:f3:af:7c:74:ac:ae:8a:45:29:d2:16:6c:3f:e2: e3:50:7e:90:46:84:4c:b8:df:16:c2:c3:ce:bc:a7:58:e1:fb: b9:38:23:08:99:89:73:92:ea:de:7b:23:e2:d0:27:d9:86:cc: b2:51:b3:e7:9c:05:34:99:75:69:e4:e5:4a:a0:af:79:de:70: 23:1d:ab:f8:0d:da:55:95:a3:c0:a2:a8:4d:5d:73:e4:c9:39: b0:7d:bc:31:50:7a:71:e1:28:93:1f:e0:17:12:b6:da:d8:e2: 95:a1:c6:cd:78:78:ff:38:37:dd:67:11:f3:fd:e7:8d:22:51: e2:a9:76:dd:58:4b:fc:9b:1e:47:ea:45:22:c7:f9:a1:a7:76: df:c4:3a:41:f3:9b:d8:73:0b:79:71:91:be:23:85:ba:97:3d: 3b:ae:fe:d3:d4:7c:79:e3:70:38:44:13:72:64:2b:2c:b7:44: ae:91:a6:e8:d0:db:3d:95:ac:f1:7a:44:e6:a4:4c:b8:6c:a5: 07:d8:a2:52:a5:bf:c8:b9:d0:65:88:c3:7b:82:41:2f:6f:af: 9f:87:a7:a6 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt/FYYkP5mBRUBtKOBnm0LJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NDdhMzA0MjgyNTRjOTk3MGZjZmJkZmZlZjA2YjBkNmI0 OTBmMGUwHhcNMjYwMTAyMTQyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDRiZjM0NjNlNTAzZmY3NDQxNTM0OWFkYmY5MzJmNGUxNDhiM2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWa+SwugcCxvTUGCPx09cJDiZDnc eZzfSQTaRNwlFN6BPfyo5GiJBpSc0uP0/zy50NrXhYUKrtSNm1oF0ONL+9BWEldE iRzR/qhhMX/MwPe5L649Ys893OOGHX3q5o7+fA4MBK+tq9rErvTrcJmv869h3utB T4qz+8eFYV8YitiR/cYmAZW0gxrgSqti85VPTh8R5PUPzSDBiUrF5GOu1jw5pJwi o82nXNiS/pmTheWz/0I0VCwbBTmJ6xcn18ZFCLKP8KT4UyW7jmqfWuWtDxF/5yR1 7VhA1cYDQepplSl1wwDP5j1lBkpQ0JyW+JnwXABprvck+oaXJs6tmOnN9wIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFO1L80Y+UD/3RBU0mtv5MvThSLP8MB8GA1UdIwQY MBaAFDRHowQoJUyZcPz73/7waw1rSQ8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAt YmRlMDI4YWQ1OTMwLzEvN1V2elJqNVFQX2RFRlRTYTJfa3k5T0ZJc193LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAtYmRlMDI4YWQ1OTMw LzEvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQCH4QkAwQC wR4gMBYEAgACMBADBwUqDIVAAAADBQAqDIVBMA0GCSqGSIb3DQEBCwUAA4IBAQAu SC85ATQ6KK85BnXexKLUEOL8KdAc7euV0dksdQb47Q0P4qcwIxhX8698dKyuikUp 0hZsP+LjUH6QRoRMuN8WwsPOvKdY4fu5OCMImYlzkureeyPi0CfZhsyyUbPnnAU0 mXVp5OVKoK953nAjHav4DdpVlaPAoqhNXXPkyTmwfbwxUHpx4SiTH+AXErba2OKV ocbNeHj/ODfdZxHz/eeNIlHiqXbdWEv8mx5H6kUix/mhp3bfxDpB85vYcwt5cZG+ I4W6lz07rv7T1Hx543A4RBNyZCsst0Sukabo0Ns9lazxekTmpEy4bKUH2KJSpb/I udBliMN7gkEvb6+fh6em -----END CERTIFICATE-----Generated at Sat Jan 10 22:34:39 2026 by rpki-client