This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/bcf272-d751-45be-9856-018a3770da77/1/iu7FFkG2QJaHmPA7RGTX_kUyXKI.roa File: iu7FFkG2QJaHmPA7RGTX_kUyXKI.roa (raw, json) Hash identifier: QTLspgP39MYk5PSZszpGPAjQcEqECucB1FhWpPvxaIM= Subject key identifier: 8A:EE:C5:16:41:B6:40:96:87:98:F0:3B:44:64:D7:FE:45:32:5C:A2 Certificate issuer: /CN=29f14d411c20ecfc496215fcdb0f43d847219096 Certificate serial: 019B7910BA15AD470ADC46E0F3C99EB73C94 Authority key identifier: 29:F1:4D:41:1C:20:EC:FC:49:62:15:FC:DB:0F:43:D8:47:21:90:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfFNQRwg7PxJYhX82w9D2EchkJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/bcf272-d751-45be-9856-018a3770da77/1/iu7FFkG2QJaHmPA7RGTX_kUyXKI.roa Signing time: Thu 01 Jan 2026 10:18:17 +0000 ROA not before: Thu 01 Jan 2026 10:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41926 IP address blocks: 193.34.100.0/24 maxlen: 24 193.34.101.0/24 maxlen: 24 193.34.102.0/24 maxlen: 24 193.34.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/bcf272-d751-45be-9856-018a3770da77/1/KfFNQRwg7PxJYhX82w9D2EchkJY.crl rsync://rpki.ripe.net/repository/DEFAULT/18/bcf272-d751-45be-9856-018a3770da77/1/KfFNQRwg7PxJYhX82w9D2EchkJY.mft rsync://rpki.ripe.net/repository/DEFAULT/KfFNQRwg7PxJYhX82w9D2EchkJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ba:15:ad:47:0a:dc:46:e0:f3:c9:9e:b7:3c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29f14d411c20ecfc496215fcdb0f43d847219096 Validity Not Before: Jan 1 10:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8aeec51641b640968798f03b4464d7fe45325ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f6:c7:f6:24:0a:6d:16:49:43:93:b7:aa:00: 1b:14:61:4f:40:96:b7:31:b3:da:e1:3b:48:fa:06: 22:c7:c2:37:47:9d:dd:2a:b8:b7:4f:4d:cc:c4:ee: 9e:c4:7c:1c:93:14:eb:46:60:67:7c:b7:7b:87:55: a0:44:cc:ae:1c:02:a3:b2:7a:b2:c5:85:68:cf:e1: cc:a6:c3:39:47:24:3d:90:ed:ea:3f:13:e2:82:8b: d6:47:a5:30:b5:63:dc:8a:47:64:e4:18:ed:1d:46: 03:c1:f7:3e:67:be:2c:97:db:34:2f:de:96:11:9d: 58:85:52:63:c8:80:e3:4b:33:9f:25:f4:0b:98:69: 60:a1:e6:5b:fb:12:fa:0b:27:51:ca:5d:a5:7a:bb: 86:1b:34:4c:34:49:ff:77:78:f3:02:1f:da:0b:37: 12:d0:fe:d0:26:e3:10:11:c0:76:6c:35:0c:29:26: 21:17:e3:bc:48:1d:1b:75:21:d5:b9:c5:f6:d5:db: ae:49:52:6d:3f:b9:79:30:2a:e1:aa:a8:5a:1a:99: 84:ff:08:fd:8b:eb:12:a8:1d:14:dd:55:50:dd:87: f1:c0:b5:c0:78:e8:a1:f7:62:cc:e8:4f:53:1d:df: ef:92:07:3f:f8:29:7b:7e:4e:01:bb:fc:f8:45:28: 6a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:EE:C5:16:41:B6:40:96:87:98:F0:3B:44:64:D7:FE:45:32:5C:A2 X509v3 Authority Key Identifier: keyid:29:F1:4D:41:1C:20:EC:FC:49:62:15:FC:DB:0F:43:D8:47:21:90:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfFNQRwg7PxJYhX82w9D2EchkJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bcf272-d751-45be-9856-018a3770da77/1/iu7FFkG2QJaHmPA7RGTX_kUyXKI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bcf272-d751-45be-9856-018a3770da77/1/KfFNQRwg7PxJYhX82w9D2EchkJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.100.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:67:17:8c:76:1c:68:7d:2c:0b:e5:d0:5b:b7:0b:64:c7:1e: df:b8:41:15:fc:95:47:18:6a:36:45:ec:68:fa:33:48:e1:0f: e2:c4:65:f4:4f:ed:2f:20:51:04:40:10:4e:d5:79:15:38:39: de:fe:4a:4a:dc:b3:c5:54:2b:46:43:0d:a6:9a:4a:91:5f:c1: 5e:d9:1a:ea:19:2a:70:b5:10:b3:ab:e4:c2:ec:14:c0:ac:37: ed:33:5f:2a:3d:70:86:38:c6:5b:18:82:69:16:67:01:8d:88: 5c:eb:64:d5:23:fd:16:02:5d:8a:5c:56:e6:0b:33:e4:c1:9d: 05:ce:b3:bb:d7:95:32:9c:c1:07:b9:b5:a4:cf:0e:68:3d:ab: fd:c5:59:9b:14:09:b8:06:0b:f9:a6:5b:20:5a:ca:15:0a:16: db:79:56:ab:3a:21:61:48:36:78:c8:a8:31:cf:7a:3c:52:f2: a1:3d:39:ed:d7:d5:71:2f:29:ba:33:85:de:04:69:4a:b0:65: dc:98:ff:1a:5e:9f:70:60:3d:75:6e:43:e8:65:aa:43:13:54: dc:dc:21:db:45:49:61:7c:f9:eb:60:d1:09:3e:72:b8:f7:4c: 80:e1:b2:68:c8:5f:24:0c:ff:d4:9c:b9:71:07:61:d8:5f:b4: f8:72:19:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ELoVrUcK3Ebg88metzyUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZjE0ZDQxMWMyMGVjZmM0OTYyMTVmY2RiMGY0M2Q4NDcy MTkwOTYwHhcNMjYwMTAxMTAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWVlYzUxNjQxYjY0MDk2ODc5OGYwM2I0NDY0ZDdmZTQ1MzI1Y2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/bH9iQKbRZJQ5O3qgAbFGFPQJa3 MbPa4TtI+gYix8I3R53dKri3T03MxO6exHwckxTrRmBnfLd7h1WgRMyuHAKjsnqy xYVoz+HMpsM5RyQ9kO3qPxPigovWR6UwtWPcikdk5BjtHUYDwfc+Z74sl9s0L96W EZ1YhVJjyIDjSzOfJfQLmGlgoeZb+xL6CydRyl2leruGGzRMNEn/d3jzAh/aCzcS 0P7QJuMQEcB2bDUMKSYhF+O8SB0bdSHVucX21duuSVJtP7l5MCrhqqhaGpmE/wj9 i+sSqB0U3VVQ3YfxwLXAeOih92LM6E9THd/vkgc/+Cl7fk4Bu/z4RShqOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIruxRZBtkCWh5jwO0Rk1/5FMlyiMB8GA1UdIwQY MBaAFCnxTUEcIOz8SWIV/NsPQ9hHIZCWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZGTlFSd2c3UHhKWWhYODJ3OUQyRWNoa0pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iY2YyNzItZDc1MS00NWJlLTk4NTYt MDE4YTM3NzBkYTc3LzEvaXU3RkZrRzJRSmFIbVBBN1JHVFhfa1V5WEtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iY2YyNzItZDc1MS00NWJlLTk4NTYtMDE4YTM3NzBkYTc3 LzEvS2ZGTlFSd2c3UHhKWWhYODJ3OUQyRWNoa0pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwSJkMA0G CSqGSIb3DQEBCwUAA4IBAQA7ZxeMdhxofSwL5dBbtwtkxx7fuEEV/JVHGGo2Rexo +jNI4Q/ixGX0T+0vIFEEQBBO1XkVODne/kpK3LPFVCtGQw2mmkqRX8Fe2RrqGSpw tRCzq+TC7BTArDftM18qPXCGOMZbGIJpFmcBjYhc62TVI/0WAl2KXFbmCzPkwZ0F zrO715UynMEHubWkzw5oPav9xVmbFAm4Bgv5plsgWsoVChbbeVarOiFhSDZ4yKgx z3o8UvKhPTnt19VxLym6M4XeBGlKsGXcmP8aXp9wYD11bkPoZapDE1Tc3CHbRUlh fPnrYNEJPnK490yA4bJoyF8kDP/UnLlxB2HYX7T4chl5 -----END CERTIFICATE-----Generated at Fri Jan 9 00:12:10 2026 by rpki-client