This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/ta7hQSc7ARZjjGzwCStEeYhJ0BE.roa File: ta7hQSc7ARZjjGzwCStEeYhJ0BE.roa (raw, json) Hash identifier: Py8T1t5CIRrQnYUBu52tDBLLob8RSsHoARPvObfZdB0= Subject key identifier: B5:AE:E1:41:27:3B:01:16:63:8C:6C:F0:09:2B:44:79:88:49:D0:11 Certificate issuer: /CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df Certificate serial: 019B7AC85A7502CBB70E3707F2075FD6D100 Authority key identifier: 1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/ta7hQSc7ARZjjGzwCStEeYhJ0BE.roa Signing time: Thu 01 Jan 2026 18:18:29 +0000 ROA not before: Thu 01 Jan 2026 18:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205463 IP address blocks: 193.164.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:5a:75:02:cb:b7:0e:37:07:f2:07:5f:d6:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df Validity Not Before: Jan 1 18:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5aee141273b0116638c6cf0092b44798849d011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f3:ba:af:6e:8e:59:ec:c4:09:74:72:c4:19: ec:ef:d0:58:fa:2a:e7:dc:b9:c7:b1:20:3a:3d:39: 5d:46:df:00:28:14:e5:76:1a:d1:d9:bf:d0:6a:cb: 3b:ba:c7:83:02:6d:e4:cf:bc:2b:fe:d6:65:1b:5e: f4:72:dc:dc:2d:ff:b7:02:1a:76:97:a8:39:98:ae: 63:a0:75:8e:b1:ce:4c:84:55:96:54:ab:81:fe:6c: c1:70:32:c3:98:61:91:38:24:2c:f7:71:b2:0e:05: 23:9a:44:30:e6:b5:86:7a:6d:5e:c2:61:19:c3:a0: f0:d4:9b:e0:41:be:13:c0:70:1b:f5:58:d1:52:7d: 66:ed:9f:8b:5d:7e:b2:3b:78:eb:b1:80:40:b2:eb: cb:d7:cf:f9:bb:a2:9f:b5:ab:4a:15:0c:d1:6d:b5: b5:37:d0:ae:74:79:67:5c:ba:cc:53:6e:99:e1:69: 25:a8:50:73:f1:f3:c8:7e:c5:af:27:ee:d5:7f:65: b7:22:91:55:f1:df:d6:df:f6:38:b0:70:b1:2b:e7: 81:f1:62:b0:b5:d2:5a:8f:b6:11:51:12:55:d0:c9: d2:7f:9d:96:bf:1a:7f:2d:c4:76:75:52:ab:db:5f: 16:0e:1c:36:43:47:7f:18:0a:d4:cb:98:09:78:91: fb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AE:E1:41:27:3B:01:16:63:8C:6C:F0:09:2B:44:79:88:49:D0:11 X509v3 Authority Key Identifier: keyid:1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/ta7hQSc7ARZjjGzwCStEeYhJ0BE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.164.5.0/24 Signature Algorithm: sha256WithRSAEncryption 12:c0:7c:44:f4:a2:a0:91:09:f5:97:07:6f:b8:20:6c:73:f4: d9:42:be:eb:13:08:29:fd:a7:0e:e0:91:ff:83:ea:f0:2c:d3: ee:34:76:3e:bd:3f:07:c8:13:4a:4b:f0:41:eb:a5:de:17:fd: 3b:2c:36:a8:3a:b1:4c:b1:f3:9d:fd:44:2d:a2:9c:fa:6e:63: 0a:5d:02:32:0e:d9:0b:f4:d5:65:c0:c0:e9:0a:69:55:0d:22: c7:0f:8a:cc:43:f3:d7:a7:28:d3:0b:5e:1b:b8:4d:47:d7:c4: 7d:6a:b5:e1:83:27:6a:ba:f3:cb:09:f3:29:ce:62:21:54:f7: 48:7c:83:84:c9:f6:a1:8b:f7:64:1f:5c:cd:51:bb:9e:69:0e: c8:b4:76:66:f9:08:50:34:ea:dc:a5:f0:7f:6e:9e:f0:49:e7: 2e:3b:0e:df:fc:1b:35:db:f3:a4:76:93:ae:25:ff:79:51:5b: 8b:9e:06:f2:32:0f:61:61:46:71:9f:d7:b8:09:a9:d9:fd:7e: 83:d6:92:da:ae:1f:60:a5:31:ac:42:eb:f9:28:16:eb:a9:5c: 80:bb:7c:35:26:cd:be:af:40:46:d6:25:ab:59:1e:5b:dc:17: cd:d6:54:8d:ae:29:85:6d:02:71:5d:5f:ae:42:4a:03:39:e5: 38:f5:12:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yFp1Asu3DjcH8gdf1tEAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYmM5ZmIzMzEyYTRhYmYxZGRjMjg1MThlNzYwOGUwZWMz Mjc1ZGYwHhcNMjYwMTAxMTgxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWFlZTE0MTI3M2IwMTE2NjM4YzZjZjAwOTJiNDQ3OTg4NDlkMDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PO6r26OWezECXRyxBns79BY+irn 3LnHsSA6PTldRt8AKBTldhrR2b/Qass7useDAm3kz7wr/tZlG170ctzcLf+3Ahp2 l6g5mK5joHWOsc5MhFWWVKuB/mzBcDLDmGGROCQs93GyDgUjmkQw5rWGem1ewmEZ w6Dw1JvgQb4TwHAb9VjRUn1m7Z+LXX6yO3jrsYBAsuvL18/5u6KftatKFQzRbbW1 N9CudHlnXLrMU26Z4WklqFBz8fPIfsWvJ+7Vf2W3IpFV8d/W3/Y4sHCxK+eB8WKw tdJaj7YRURJV0MnSf52Wvxp/LcR2dVKr218WDhw2Q0d/GArUy5gJeJH7NwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLWu4UEnOwEWY4xs8AkrRHmISdARMB8GA1UdIwQY MBaAFBq8n7MxKkq/HdwoUY52CODsMnXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3J5ZnN6RXFTcjhkM0NoUmpuWUk0T3d5ZGQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yNmU3N2YtZmEzNy00OTAwLWEzM2Qt ZDFkNmRlYTk4NzkwLzEvdGE3aFFTYzdBUlpqakd6d0NTdEVlWWhKMEJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8yNmU3N2YtZmEzNy00OTAwLWEzM2QtZDFkNmRlYTk4Nzkw LzEvR3J5ZnN6RXFTcjhkM0NoUmpuWUk0T3d5ZGQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaQFMA0G CSqGSIb3DQEBCwUAA4IBAQASwHxE9KKgkQn1lwdvuCBsc/TZQr7rEwgp/acO4JH/ g+rwLNPuNHY+vT8HyBNKS/BB66XeF/07LDaoOrFMsfOd/UQtopz6bmMKXQIyDtkL 9NVlwMDpCmlVDSLHD4rMQ/PXpyjTC14buE1H18R9arXhgydquvPLCfMpzmIhVPdI fIOEyfahi/dkH1zNUbueaQ7ItHZm+QhQNOrcpfB/bp7wSecuOw7f/Bs12/OkdpOu Jf95UVuLngbyMg9hYUZxn9e4CanZ/X6D1pLarh9gpTGsQuv5KBbrqVyAu3w1Js2+ r0BG1iWrWR5b3BfN1lSNrimFbQJxXV+uQkoDOeU49RL7 -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:53 2026 by rpki-client