This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/07rXMz57aCvPfzZgqTtv0tfd--k.roa File: 07rXMz57aCvPfzZgqTtv0tfd--k.roa (raw, json) Hash identifier: Zf7FLTeUlrTimYkYJqQH9p6Rab0OTFZZ2orzaq4XoQw= Subject key identifier: D3:BA:D7:33:3E:7B:68:2B:CF:7F:36:60:A9:3B:6F:D2:D7:DD:FB:E9 Certificate issuer: /CN=65e0062e54a5fcb6a0c99e598557fed6f37a4629 Certificate serial: 019B76EB25170B6D24F72B7EAE74AD12BA4E Authority key identifier: 65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/07rXMz57aCvPfzZgqTtv0tfd--k.roa Signing time: Thu 01 Jan 2026 00:18:00 +0000 ROA not before: Thu 01 Jan 2026 00:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211491 IP address blocks: 193.22.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:25:17:0b:6d:24:f7:2b:7e:ae:74:ad:12:ba:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65e0062e54a5fcb6a0c99e598557fed6f37a4629 Validity Not Before: Jan 1 00:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3bad7333e7b682bcf7f3660a93b6fd2d7ddfbe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e0:93:67:06:0b:c3:67:cd:66:18:56:ed:bd: d9:9f:6e:e6:f8:ad:be:4f:48:79:f9:74:84:62:46: 00:ac:90:41:e8:f7:d2:a3:87:f8:33:64:31:ae:41: 49:62:95:5e:57:93:51:21:10:96:30:67:d2:e2:ed: 9b:8f:a1:22:7d:c1:18:89:15:c9:36:9c:11:bb:1b: 9f:eb:9d:c9:6c:0e:9f:c5:2c:00:02:82:74:18:4d: 91:3f:e9:62:7a:b7:7d:ca:6f:4c:27:2d:45:c4:63: dc:07:9e:12:1b:ef:f9:f7:35:42:b1:73:fd:e3:bf: 24:7d:4c:5c:a3:c4:e7:7f:a2:3f:fc:ba:37:94:d1: 1d:64:d2:3e:17:6b:ee:05:40:1e:ce:59:e6:23:68: f0:af:39:91:5f:a3:71:72:a2:73:22:e6:ac:4d:e6: 17:a6:cf:54:6a:8a:8e:e3:3f:40:1b:2c:c3:99:f8: 56:e7:d4:c4:06:ed:04:05:1d:31:73:5c:d0:7f:67: 3f:52:f4:81:fc:55:c4:74:c5:ff:3b:53:7e:04:b6: 03:43:4e:1d:22:56:e2:28:56:56:b1:52:af:d1:22: 45:3a:a5:a7:81:c7:85:f7:b4:bb:a7:30:b5:aa:c2: 8e:df:d4:97:4a:a4:49:22:5c:cf:43:95:5f:d5:90: 03:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BA:D7:33:3E:7B:68:2B:CF:7F:36:60:A9:3B:6F:D2:D7:DD:FB:E9 X509v3 Authority Key Identifier: keyid:65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/07rXMz57aCvPfzZgqTtv0tfd--k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.20.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:8a:77:df:46:a1:b4:1a:0d:c2:d9:ab:c8:9b:69:34:a6:ae: a6:71:85:46:18:2d:e4:e3:39:c5:ed:79:17:51:5e:13:ad:3a: 88:f0:2c:7e:be:53:2e:25:00:10:ca:6e:2f:6a:70:b0:92:57: 1e:28:e7:c6:4a:e7:7f:73:ef:d8:f5:59:1b:04:57:03:82:28: ab:2b:c3:18:c3:b7:22:ee:9b:3d:07:db:d1:43:ca:75:ee:80: f9:18:b9:a7:31:0a:cf:1d:7f:29:79:d3:f6:8f:6a:cc:d0:e7: 18:e1:12:82:7e:19:e6:6e:db:4f:25:6c:ca:9c:b6:4d:7c:38: 32:4b:81:2d:ba:85:2e:ac:e4:ed:62:da:8a:39:00:5b:4a:95: 52:1f:03:fb:ee:bf:55:0e:85:bb:af:aa:65:f7:13:fe:7c:46: 31:ca:7c:7b:4f:1f:8d:f0:1d:1e:d2:f4:e7:85:55:16:5b:15: 7c:17:3c:65:da:3b:89:06:02:a0:86:b6:8b:97:8e:10:d0:7e: a4:9e:bc:10:f2:5c:c8:2e:0b:7f:8f:85:b2:f9:6b:96:bc:c0: 64:1f:b9:6a:be:4c:be:93:bf:dd:0c:6c:8c:be:1d:0c:9b:e4: 72:a9:31:49:ca:20:97:6b:8a:05:3a:73:b0:1d:72:fe:2b:8a: 8d:80:a7:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26yUXC20k9yt+rnStErpOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZTAwNjJlNTRhNWZjYjZhMGM5OWU1OTg1NTdmZWQ2ZjM3 YTQ2MjkwHhcNMjYwMTAxMDAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2JhZDczMzNlN2I2ODJiY2Y3ZjM2NjBhOTNiNmZkMmQ3ZGRmYmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueCTZwYLw2fNZhhW7b3Zn27m+K2+ T0h5+XSEYkYArJBB6PfSo4f4M2QxrkFJYpVeV5NRIRCWMGfS4u2bj6EifcEYiRXJ NpwRuxuf653JbA6fxSwAAoJ0GE2RP+lierd9ym9MJy1FxGPcB54SG+/59zVCsXP9 478kfUxco8Tnf6I//Lo3lNEdZNI+F2vuBUAezlnmI2jwrzmRX6NxcqJzIuasTeYX ps9UaoqO4z9AGyzDmfhW59TEBu0EBR0xc1zQf2c/UvSB/FXEdMX/O1N+BLYDQ04d IlbiKFZWsVKv0SJFOqWngceF97S7pzC1qsKO39SXSqRJIlzPQ5Vf1ZADbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNO61zM+e2grz382YKk7b9LX3fvpMB8GA1UdIwQY MBaAFGXgBi5Upfy2oMmeWYVX/tbzekYpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmVBR0xsU2xfTGFneVo1WmhWZi0xdk42UmlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85NzVlNjgtODY2Mi00M2I5LThlZDIt YWFlOTdlNjUwMTVjLzEvMDdyWE16NTdhQ3ZQZnpaZ3FUdHYwdGZkLS1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85NzVlNjgtODY2Mi00M2I5LThlZDItYWFlOTdlNjUwMTVj LzEvWmVBR0xsU2xfTGFneVo1WmhWZi0xdk42UmlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRYUMA0G CSqGSIb3DQEBCwUAA4IBAQA8inffRqG0Gg3C2avIm2k0pq6mcYVGGC3k4znF7XkX UV4TrTqI8Cx+vlMuJQAQym4vanCwklceKOfGSud/c+/Y9VkbBFcDgiirK8MYw7ci 7ps9B9vRQ8p17oD5GLmnMQrPHX8pedP2j2rM0OcY4RKCfhnmbttPJWzKnLZNfDgy S4EtuoUurOTtYtqKOQBbSpVSHwP77r9VDoW7r6pl9xP+fEYxynx7Tx+N8B0e0vTn hVUWWxV8Fzxl2juJBgKghraLl44Q0H6knrwQ8lzILgt/j4Wy+WuWvMBkH7lqvky+ k7/dDGyMvh0Mm+RyqTFJyiCXa4oFOnOwHXL+K4qNgKc6 -----END CERTIFICATE-----Generated at Tue Feb 10 00:08:33 2026 by rpki-client