This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/4H7cLZ6KiTbPw85TsPK0UjZTTGk.roa File: 4H7cLZ6KiTbPw85TsPK0UjZTTGk.roa (raw, json) Hash identifier: tVH6e7cYLN0f9K/raOQzGrbNIWG9CoxnIdfOseQ+WE0= Subject key identifier: E0:7E:DC:2D:9E:8A:89:36:CF:C3:CE:53:B0:F2:B4:52:36:53:4C:69 Certificate issuer: /CN=136eba73c3d95fef69b1a6302417a38b9bf2276d Certificate serial: 019B7EA68D7A7BB87B63B3B3985CFDC9C90B Authority key identifier: 13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/4H7cLZ6KiTbPw85TsPK0UjZTTGk.roa Signing time: Fri 02 Jan 2026 12:20:02 +0000 ROA not before: Fri 02 Jan 2026 12:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47214 IP address blocks: 193.34.197.128/25 maxlen: 25 193.43.0.0/26 maxlen: 26 2001:7f8:6d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:8d:7a:7b:b8:7b:63:b3:b3:98:5c:fd:c9:c9:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=136eba73c3d95fef69b1a6302417a38b9bf2276d Validity Not Before: Jan 2 12:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e07edc2d9e8a8936cfc3ce53b0f2b45236534c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ca:0d:b3:77:de:61:b4:59:1e:c9:e3:f3:1f: 75:95:30:12:d9:22:1c:54:a1:0e:f5:d2:ae:2a:bd: 62:13:f7:db:5f:2f:f0:75:a7:d8:d6:28:5d:b2:1a: 4d:6f:06:10:84:91:eb:24:f6:19:b1:30:95:6d:3b: ec:89:22:88:47:69:9c:33:33:20:09:c1:9c:4d:a4: d5:0a:23:2f:d9:6b:26:e9:8c:9f:00:50:c1:7c:10: ed:d4:66:74:ae:dc:95:df:78:d5:1b:07:39:ab:72: 1c:2e:74:fb:fc:b8:28:57:15:fc:6b:7f:28:d5:86: 28:1f:e0:a2:90:16:49:3b:ef:55:87:b6:8b:e0:89: 75:21:2a:24:2b:41:50:8f:08:9f:7d:02:17:b5:90: 09:1d:2a:55:ab:3b:c0:15:3c:00:ca:6d:d6:08:79: 08:fe:41:03:d2:ef:fa:46:33:63:89:d6:2e:08:5b: ed:00:a6:33:f7:14:26:2c:5a:2b:c0:3b:84:a6:fa: 84:06:73:3b:e1:7a:03:42:b7:9c:54:0c:4c:75:7f: b9:9b:60:af:b9:4c:9a:eb:e7:7c:5f:b9:2c:84:c2: ca:63:33:df:8b:ad:13:e7:66:ed:3d:4f:06:6a:ba: 21:42:09:4b:c1:30:9d:7d:d5:dd:49:75:32:73:fd: 7e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7E:DC:2D:9E:8A:89:36:CF:C3:CE:53:B0:F2:B4:52:36:53:4C:69 X509v3 Authority Key Identifier: keyid:13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/4H7cLZ6KiTbPw85TsPK0UjZTTGk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.197.128/25 193.43.0.0/26 IPv6: 2001:7f8:6d::/48 Signature Algorithm: sha256WithRSAEncryption 1e:c0:93:cd:de:04:d2:85:14:3c:36:91:b0:1f:83:a9:dc:f0: 6b:40:5f:2e:04:1f:0d:bb:cc:38:2a:e3:52:4d:60:08:00:fa: 2c:19:87:87:1e:a4:ca:c7:b5:e7:65:12:e2:8f:eb:cf:78:4e: bb:63:cd:8c:70:94:3a:0d:b7:70:4e:75:af:ba:3f:4e:c7:72: 62:f2:99:31:57:95:bc:01:4e:9f:56:57:75:15:4a:a1:7d:16: 01:c4:39:df:7f:64:0e:c5:4e:52:d2:3e:8f:42:d0:9a:9c:0a: 97:8a:8b:e8:bb:ef:b5:fc:f8:14:b7:ed:dd:b5:64:50:af:42: 99:90:23:a6:40:46:30:7b:2e:12:2e:72:b9:9d:a2:1c:61:37: b3:49:55:3b:ac:59:2c:55:3e:6a:ba:c5:bf:35:76:a5:1f:68: a0:a7:c0:e7:c6:df:c9:12:95:c3:e5:3d:f0:03:3a:dc:44:67: 0b:df:bd:11:d0:4c:41:39:86:db:f1:8c:12:8f:42:2f:40:b6: 18:07:7a:ec:4d:97:5f:c3:50:af:4f:ad:83:4d:28:d1:66:16: 85:13:db:e7:1b:35:98:18:09:77:49:ae:54:36:4f:69:ea:5d: ad:29:26:63:c7:8b:a2:1f:0b:cd:1e:37:c8:cd:eb:a9:63:53: 62:3e:4a:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt+po16e7h7Y7OzmFz9yckLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNmViYTczYzNkOTVmZWY2OWIxYTYzMDI0MTdhMzhiOWJm MjI3NmQwHhcNMjYwMTAyMTIyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDdlZGMyZDllOGE4OTM2Y2ZjM2NlNTNiMGYyYjQ1MjM2NTM0YzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsoNs3feYbRZHsnj8x91lTAS2SIc VKEO9dKuKr1iE/fbXy/wdafY1ihdshpNbwYQhJHrJPYZsTCVbTvsiSKIR2mcMzMg CcGcTaTVCiMv2Wsm6YyfAFDBfBDt1GZ0rtyV33jVGwc5q3IcLnT7/LgoVxX8a38o 1YYoH+CikBZJO+9Vh7aL4Il1ISokK0FQjwiffQIXtZAJHSpVqzvAFTwAym3WCHkI /kED0u/6RjNjidYuCFvtAKYz9xQmLForwDuEpvqEBnM74XoDQrecVAxMdX+5m2Cv uUya6+d8X7kshMLKYzPfi60T52btPU8GarohQglLwTCdfdXdSXUyc/1+QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOB+3C2eiok2z8POU7DytFI2U0xpMB8GA1UdIwQY MBaAFBNuunPD2V/vabGmMCQXo4ub8idtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTI2NmM4UFpYLTlwc2FZd0pCZWppNXZ5SjIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wZmUzMjctOTZlNS00MmZjLWFhYjEt NjI1MDI4MzMwZWM2LzEvNEg3Y0xaNktpVGJQdzg1VHNQSzBValpUVEdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wZmUzMjctOTZlNS00MmZjLWFhYjEtNjI1MDI4MzMwZWM2 LzEvRTI2NmM4UFpYLTlwc2FZd0pCZWppNXZ5SjIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOAwUHwSLFgAMF BsErAAAwDwQCAAIwCQMHACABB/gAbTANBgkqhkiG9w0BAQsFAAOCAQEAHsCTzd4E 0oUUPDaRsB+Dqdzwa0BfLgQfDbvMOCrjUk1gCAD6LBmHhx6kyse152US4o/rz3hO u2PNjHCUOg23cE51r7o/TsdyYvKZMVeVvAFOn1ZXdRVKoX0WAcQ5339kDsVOUtI+ j0LQmpwKl4qL6Lvvtfz4FLft3bVkUK9CmZAjpkBGMHsuEi5yuZ2iHGE3s0lVO6xZ LFU+arrFvzV2pR9ooKfA58bfyRKVw+U98AM63ERnC9+9EdBMQTmG2/GMEo9CL0C2 GAd67E2XX8NQr0+tg00o0WYWhRPb5xs1mBgJd0muVDZPaepdrSkmY8eLoh8LzR43 yM3rqWNTYj5KOA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:45 2026 by rpki-client