This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/C7f6La2RHnovZkVXPsCMvF_ZrpU.roa File: C7f6La2RHnovZkVXPsCMvF_ZrpU.roa (raw, json) Hash identifier: vor63A+KF0/+NLo3bRvMmDXK5iRB2pgk/JSZQYxp0os= Subject key identifier: 0B:B7:FA:2D:AD:91:1E:7A:2F:66:45:57:3E:C0:8C:BC:5F:D9:AE:95 Certificate issuer: /CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1 Certificate serial: 019B7BA41AEB2A3CB0A805022D231838411A Authority key identifier: 65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/C7f6La2RHnovZkVXPsCMvF_ZrpU.roa Signing time: Thu 01 Jan 2026 22:18:30 +0000 ROA not before: Thu 01 Jan 2026 22:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 194.59.96.0/19 maxlen: 19 194.59.121.0/24 maxlen: 24 2001:67c:67c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:1a:eb:2a:3c:b0:a8:05:02:2d:23:18:38:41:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1 Validity Not Before: Jan 1 22:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bb7fa2dad911e7a2f6645573ec08cbc5fd9ae95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:92:ef:8f:2b:97:b1:4e:e6:43:78:ea:e5:11: ad:3c:5a:5b:fb:10:ae:6e:2f:cb:84:5a:0e:c7:39: c3:8d:b6:29:47:b5:f2:fb:96:5c:81:da:45:c3:e0: bb:32:fd:47:c7:95:30:16:52:b2:82:41:7f:67:4d: 53:f1:e4:19:99:d2:7a:1d:d1:55:af:74:6f:4f:36: 7f:0a:b7:14:70:ec:a0:e9:8d:6e:43:fa:2b:5d:ea: 7c:54:95:88:9a:c7:78:2c:00:72:b3:97:0f:a9:fa: 57:da:56:f4:c7:36:64:c9:59:48:f8:98:a2:a1:e5: 3f:47:20:7a:88:9b:3c:94:ea:c0:a9:8b:c0:51:df: b5:09:fa:a4:dc:1f:00:05:09:22:db:73:56:12:6e: 9e:b8:5b:7b:0c:59:c6:df:c8:bd:01:bf:e0:ea:d0: 65:0a:a0:4f:e8:cb:2b:95:5b:51:fb:9c:89:11:6d: 89:83:f7:0d:4f:42:62:a9:35:e1:f5:97:ec:1d:2e: 0d:46:2a:6e:85:0b:e9:1e:3a:3d:23:9f:ee:09:09: ae:c3:8f:7f:4a:b2:79:84:9f:c6:ca:f0:c6:57:f6: e6:40:6f:2a:c3:34:c0:a3:17:d3:78:45:cf:7f:89: 72:c9:00:8c:0d:3f:e4:fb:56:a6:d0:84:aa:f8:78: 15:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B7:FA:2D:AD:91:1E:7A:2F:66:45:57:3E:C0:8C:BC:5F:D9:AE:95 X509v3 Authority Key Identifier: keyid:65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/C7f6La2RHnovZkVXPsCMvF_ZrpU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.59.96.0/19 IPv6: 2001:67c:67c::/48 Signature Algorithm: sha256WithRSAEncryption 4e:8e:70:62:84:2a:e9:5d:22:5a:56:4c:d5:ee:83:78:6e:fb: 4e:21:a2:9a:22:29:96:68:3b:64:0a:44:ce:f7:f4:14:f9:f1: 13:2e:f3:5d:f2:fb:e3:58:62:45:6e:e8:a5:f9:e3:5d:31:4e: e8:10:bf:a0:9e:d5:a4:5d:90:2a:cd:f5:c6:b4:53:84:b6:48: 0a:ed:d4:5f:b2:91:df:c5:27:ca:3e:44:13:8d:dc:87:fd:4c: d8:db:4d:c2:0b:2d:c4:b7:97:9c:1f:7f:15:35:6c:44:82:e0: 85:71:d2:1d:9d:a6:9a:ec:54:34:cc:ce:30:7a:5f:73:44:c3: 65:8e:b7:2f:d7:b9:01:39:11:23:e2:6d:ea:d5:81:0f:e5:5e: fc:e2:74:ce:51:38:83:fc:01:75:1d:9c:c9:9d:61:b5:07:26: d6:81:91:02:6c:cf:49:1c:3c:35:1a:04:4c:3e:94:10:5d:52: 82:2c:f2:1b:2e:aa:0d:74:4a:b4:a0:aa:7f:9a:56:f5:02:eb: 58:aa:04:a8:70:2a:39:4c:08:d3:e8:af:32:8e:63:a7:c1:23: 1b:7c:8e:75:99:08:ce:c9:42:9d:7a:bc:72:9d:40:37:cb:5a: 97:44:3e:35:c8:06:7a:3e:05:8a:b1:8c:92:66:39:e7:0b:35: a8:99:14:cc -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7pBrrKjywqAUCLSMYOEEaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZDdmMGZkNjIyYWZkNmJkNGEyZDZjZTBmMWNiY2MwN2E5 YzQxZjEwHhcNMjYwMTAxMjIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmI3ZmEyZGFkOTExZTdhMmY2NjQ1NTczZWMwOGNiYzVmZDlhZTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5LvjyuXsU7mQ3jq5RGtPFpb+xCu bi/LhFoOxznDjbYpR7Xy+5ZcgdpFw+C7Mv1Hx5UwFlKygkF/Z01T8eQZmdJ6HdFV r3RvTzZ/CrcUcOyg6Y1uQ/orXep8VJWImsd4LABys5cPqfpX2lb0xzZkyVlI+Jii oeU/RyB6iJs8lOrAqYvAUd+1Cfqk3B8ABQki23NWEm6euFt7DFnG38i9Ab/g6tBl CqBP6MsrlVtR+5yJEW2Jg/cNT0JiqTXh9ZfsHS4NRipuhQvpHjo9I5/uCQmuw49/ SrJ5hJ/GyvDGV/bmQG8qwzTAoxfTeEXPf4lyyQCMDT/k+1am0ISq+HgVawIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAu3+i2tkR56L2ZFVz7AjLxf2a6VMB8GA1UdIwQY MBaAFGXX8P1iKv1r1KLWzg8cvMB6nEHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmRmd19XSXFfV3ZVb3RiT0R4eTh3SHFjUWZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83M2YzNmMtZjRmNy00MDY1LTlkNDYt OGJlNGFkNTc3NzNiLzEvQzdmNkxhMlJIbm92WmtWWFBzQ012Rl9acnBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC83M2YzNmMtZjRmNy00MDY1LTlkNDYtOGJlNGFkNTc3NzNi LzEvWmRmd19XSXFfV3ZVb3RiT0R4eTh3SHFjUWZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQFwjtgMA8E AgACMAkDBwAgAQZ8BnwwDQYJKoZIhvcNAQELBQADggEBAE6OcGKEKuldIlpWTNXu g3hu+04hopoiKZZoO2QKRM739BT58RMu813y++NYYkVu6KX5410xTugQv6Ce1aRd kCrN9ca0U4S2SArt1F+ykd/FJ8o+RBON3If9TNjbTcILLcS3l5wffxU1bESC4IVx 0h2dpprsVDTMzjB6X3NEw2WOty/XuQE5ESPiberVgQ/lXvzidM5ROIP8AXUdnMmd YbUHJtaBkQJsz0kcPDUaBEw+lBBdUoIs8hsuqg10SrSgqn+aVvUC61iqBKhwKjlM CNPorzKOY6fBIxt8jnWZCM7JQp16vHKdQDfLWpdEPjXIBno+BYqxjJJmOecLNaiZ FMw= -----END CERTIFICATE-----Generated at Wed Jan 21 13:18:03 2026 by rpki-client