This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/7KYP34wmJxSAxpxN5TJWnn10TaI.roa File: 7KYP34wmJxSAxpxN5TJWnn10TaI.roa (raw, json) Hash identifier: kRP35rR2IusbtLXnd/iyDag2PoeLXCHjgTayPC6GmLY= Subject key identifier: EC:A6:0F:DF:8C:26:27:14:80:C6:9C:4D:E5:32:56:9E:7D:74:4D:A2 Certificate issuer: /CN=f970877985b0c5cf69167c91e837424c47d9a425 Certificate serial: 019B7D5ABE793EBB0EE0BFC9358591AF2BA9 Authority key identifier: F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/7KYP34wmJxSAxpxN5TJWnn10TaI.roa Signing time: Fri 02 Jan 2026 06:17:37 +0000 ROA not before: Fri 02 Jan 2026 06:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35800 IP address blocks: 194.88.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:be:79:3e:bb:0e:e0:bf:c9:35:85:91:af:2b:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f970877985b0c5cf69167c91e837424c47d9a425 Validity Not Before: Jan 2 06:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eca60fdf8c26271480c69c4de532569e7d744da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e0:d9:4c:3b:a7:70:1b:7f:78:7c:ab:ea:a8: a5:c7:f7:66:b1:a8:ed:4d:c4:c4:ed:ce:47:52:72: ed:c8:6d:25:8d:37:66:2e:ff:00:5d:b7:a8:b3:d1: 70:7a:2b:d7:ed:08:62:21:7d:26:ce:df:cd:39:13: 58:01:a6:a2:b3:c7:04:4f:56:6a:c7:28:8b:4b:44: 45:41:f5:9a:a2:3a:82:e6:27:06:aa:8a:6c:80:84: 17:20:4b:fe:a6:fb:d7:eb:05:7c:cc:05:22:e3:3a: e6:33:4e:a0:c8:56:b7:22:3f:95:1a:9f:22:3f:ce: c3:c6:4a:2e:a9:ae:66:ad:55:44:fb:e2:df:ba:6b: 0c:ad:69:21:60:a5:a0:20:11:ec:7d:66:45:cc:ba: c8:48:17:94:c3:06:12:2b:bf:a6:86:46:fd:11:a1: 08:58:72:b6:b7:19:96:1b:d3:6c:1a:62:6f:83:e5: 77:2b:88:cf:e1:53:e2:af:6b:f2:3f:88:f5:f3:0d: a9:2c:cd:bf:00:9a:38:69:2c:1e:fe:57:3f:56:7c: 7e:2d:a7:01:1b:f5:11:40:db:91:84:7f:b8:c3:a9: 7d:ca:1f:ae:e2:cd:f4:6b:90:34:74:8e:47:f7:d7: 3d:a3:42:22:53:4b:88:a2:f0:40:06:10:37:b1:d6: 28:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A6:0F:DF:8C:26:27:14:80:C6:9C:4D:E5:32:56:9E:7D:74:4D:A2 X509v3 Authority Key Identifier: keyid:F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/7KYP34wmJxSAxpxN5TJWnn10TaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.88.152.0/23 Signature Algorithm: sha256WithRSAEncryption 90:3a:50:86:4a:2b:b4:62:38:4a:6e:64:59:a3:0e:71:8e:9d: 08:02:bc:b3:b7:e5:3a:d5:68:5e:fc:8f:1a:e2:72:7a:fe:78: 25:be:e1:6e:5f:c5:e6:19:93:c3:46:85:70:d0:1e:fc:90:cf: 14:48:a9:c5:95:da:00:3a:b3:c9:3f:d9:d0:40:a1:c0:09:c1: 49:4d:b3:23:e2:f3:75:7c:77:59:f6:2a:9b:ae:3e:51:ec:81: d8:1f:84:fd:fa:ae:ee:36:4c:ea:17:77:56:3a:26:22:a9:c3: c1:6a:6f:a8:d8:0e:dc:45:11:84:78:4b:c7:38:21:54:c3:d7: 60:a7:80:2a:fd:47:82:18:ef:07:7f:ea:b1:2c:38:c3:a5:56: ea:c0:27:16:46:53:5a:91:11:84:0f:96:6b:0c:03:f6:b7:42: 3a:b3:3f:3f:26:24:ee:01:10:a9:0e:10:6d:df:25:77:44:57: 2d:cc:8e:9b:59:64:28:fc:05:66:b5:fc:2e:fa:50:83:06:fd: 4a:7c:71:6b:03:82:e5:3b:42:ca:ae:e1:07:e7:48:44:00:1c: 81:a2:e7:7f:26:b0:cf:0b:02:f0:9a:5a:5f:b6:80:d9:27:6a: 1d:65:dc:ce:b8:ec:32:96:6f:ce:1f:5d:f2:54:ec:51:f0:75: 13:ee:2b:33 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9Wr55PrsO4L/JNYWRryupMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NzA4Nzc5ODViMGM1Y2Y2OTE2N2M5MWU4Mzc0MjRjNDdk OWE0MjUwHhcNMjYwMTAyMDYxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2E2MGZkZjhjMjYyNzE0ODBjNjljNGRlNTMyNTY5ZTdkNzQ0ZGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuDZTDuncBt/eHyr6qilx/dmsajt TcTE7c5HUnLtyG0ljTdmLv8AXbeos9FweivX7QhiIX0mzt/NORNYAaais8cET1Zq xyiLS0RFQfWaojqC5icGqopsgIQXIEv+pvvX6wV8zAUi4zrmM06gyFa3Ij+VGp8i P87Dxkouqa5mrVVE++LfumsMrWkhYKWgIBHsfWZFzLrISBeUwwYSK7+mhkb9EaEI WHK2txmWG9NsGmJvg+V3K4jP4VPir2vyP4j18w2pLM2/AJo4aSwe/lc/Vnx+LacB G/URQNuRhH+4w6l9yh+u4s30a5A0dI5H99c9o0IiU0uIovBABhA3sdYoVwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFOymD9+MJicUgMacTeUyVp59dE2iMB8GA1UdIwQY MBaAFPlwh3mFsMXPaRZ8keg3QkxH2aQlMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1YQ0hlWVd3eGM5cEZueVI2RGRDVEVmWnBDVS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvZDlkYjk4LTQwMTAtNDMyOC04NDQ1 LWVlY2ZlN2ZjZjFjMC8xLzdLWVAzNHdtSnhTQXhweE41VEpXbm4xMFRhSS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZjQvZDlkYjk4LTQwMTAtNDMyOC04NDQ1LWVlY2ZlN2ZjZjFj MC8xLzEtWENIZVlXd3hjOXBGbnlSNkRkQ1RFZlpwQ1UuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHCWJgw DQYJKoZIhvcNAQELBQADggEBAJA6UIZKK7RiOEpuZFmjDnGOnQgCvLO35TrVaF78 jxricnr+eCW+4W5fxeYZk8NGhXDQHvyQzxRIqcWV2gA6s8k/2dBAocAJwUlNsyPi 83V8d1n2KpuuPlHsgdgfhP36ru42TOoXd1Y6JiKpw8Fqb6jYDtxFEYR4S8c4IVTD 12CngCr9R4IY7wd/6rEsOMOlVurAJxZGU1qREYQPlmsMA/a3QjqzPz8mJO4BEKkO EG3fJXdEVy3MjptZZCj8BWa1/C76UIMG/Up8cWsDguU7Qsqu4QfnSEQAHIGi538m sM8LAvCaWl+2gNknah1l3M647DKWb84fXfJU7FHwdRPuKzM= -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:45 2026 by rpki-client