This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/7eeJa0U2qcKAGp0vuc7G1i_Xfdg.roa File: 7eeJa0U2qcKAGp0vuc7G1i_Xfdg.roa (raw, json) Hash identifier: 6yzb4IyrkEC+K5uXeKilipetVZMTuGxsELTtAvQLsDo= Subject key identifier: ED:E7:89:6B:45:36:A9:C2:80:1A:9D:2F:B9:CE:C6:D6:2F:D7:7D:D8 Certificate issuer: /CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8 Certificate serial: 019B7B3597812220689BB4187A9913AD1D16 Authority key identifier: 0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/7eeJa0U2qcKAGp0vuc7G1i_Xfdg.roa Signing time: Thu 01 Jan 2026 20:17:48 +0000 ROA not before: Thu 01 Jan 2026 20:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15992 IP address blocks: 91.207.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:97:81:22:20:68:9b:b4:18:7a:99:13:ad:1d:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8 Validity Not Before: Jan 1 20:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ede7896b4536a9c2801a9d2fb9cec6d62fd77dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3f:07:ac:7a:f2:27:49:59:8e:10:2a:7d:1e: 09:44:ce:30:9f:f3:47:fa:2c:02:79:5f:93:d8:d2: 63:15:8a:e3:51:00:96:47:ff:1d:4f:74:83:c5:a2: 2c:49:ff:1e:25:71:6d:e3:e2:8b:96:06:32:8e:dc: e5:b2:c4:9f:37:71:be:2a:ab:f4:e5:bd:e6:7f:ed: 65:f7:ad:54:04:da:d4:1a:8c:cb:11:36:ec:f7:60: 9c:64:e4:a5:e0:6a:cd:47:aa:4b:14:89:7f:51:ed: 45:21:c0:12:d4:b7:a5:37:dc:ef:34:44:94:1e:eb: e6:54:be:bd:61:70:4b:e3:1d:c2:60:3f:e5:82:96: 77:4b:6e:84:4f:a1:28:d0:76:69:72:1b:31:f0:79: f8:17:95:ae:28:c8:7f:8a:5a:cb:c4:25:35:9a:21: c5:9c:7a:a3:36:97:f2:82:67:48:fc:86:4e:2f:87: 4e:22:63:f5:42:17:e9:a6:cc:ee:80:e5:05:0b:34: b8:9b:34:41:aa:3a:cb:65:67:13:85:42:42:e5:5c: e6:7f:f2:d9:3a:a3:75:06:67:2d:cd:8a:08:a5:1b: 5b:f2:4a:ef:ab:f6:b9:a2:ae:17:57:fd:c4:eb:ab: d5:1a:ab:5b:b9:d0:47:e9:f6:48:f9:48:dd:1a:0c: 1a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E7:89:6B:45:36:A9:C2:80:1A:9D:2F:B9:CE:C6:D6:2F:D7:7D:D8 X509v3 Authority Key Identifier: keyid:0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/7eeJa0U2qcKAGp0vuc7G1i_Xfdg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.192.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:94:01:b6:d7:46:b6:a6:9c:6f:60:b3:34:cf:9f:d3:8b:1b: 27:95:15:52:0d:65:83:d5:8e:85:c5:f6:d2:dc:3b:d9:c1:92: 7f:29:f5:43:0a:d9:94:7f:b8:bc:4e:dd:ef:42:af:67:56:04: 80:0f:83:54:ac:f5:2d:f1:8f:7a:0f:39:5e:b7:6e:14:2e:2e: 91:78:66:31:3c:d8:94:09:c5:90:9a:4c:89:86:09:49:e6:38: b3:e3:bb:ec:2e:72:4b:90:b0:f6:ba:4b:6b:8d:2e:95:c1:3a: 30:7e:56:82:25:a1:97:f1:58:3f:fc:2d:a4:fb:0c:57:86:3f: 1b:59:e5:3e:e7:c1:c9:10:90:aa:24:95:b7:c5:f6:4c:12:ea: 1c:74:7c:34:65:85:f0:c6:ee:b1:11:b8:e1:a5:3c:0b:34:f7: e1:52:1c:e8:7e:75:ad:8d:1e:f6:aa:12:a1:a7:6c:03:4a:9f: a4:2f:51:60:ca:4b:79:bc:17:8b:01:36:b1:b3:a2:da:52:0e: 31:6d:bb:2d:f7:2a:29:56:bb:33:42:fb:ca:b2:5b:56:2d:c3: b2:d5:46:25:43:60:f4:7d:a1:6d:3d:54:ba:ff:08:d4:9c:18: c3:d6:c6:5b:5c:c4:4c:0d:4c:26:72:14:48:e1:95:6a:6d:c6: 26:3c:8a:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NZeBIiBom7QYepkTrR0WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNzRlNWFmMmZhNzIxNWNhNDY5YjI3YzEwNzlmMWZmZDVm Y2FlZjgwHhcNMjYwMTAxMjAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGU3ODk2YjQ1MzZhOWMyODAxYTlkMmZiOWNlYzZkNjJmZDc3ZGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD8HrHryJ0lZjhAqfR4JRM4wn/NH +iwCeV+T2NJjFYrjUQCWR/8dT3SDxaIsSf8eJXFt4+KLlgYyjtzlssSfN3G+Kqv0 5b3mf+1l961UBNrUGozLETbs92CcZOSl4GrNR6pLFIl/Ue1FIcAS1LelN9zvNESU HuvmVL69YXBL4x3CYD/lgpZ3S26ET6Eo0HZpchsx8Hn4F5WuKMh/ilrLxCU1miHF nHqjNpfygmdI/IZOL4dOImP1QhfppszugOUFCzS4mzRBqjrLZWcThUJC5Vzmf/LZ OqN1BmctzYoIpRtb8krvq/a5oq4XV/3E66vVGqtbudBH6fZI+UjdGgwaowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO3niWtFNqnCgBqdL7nOxtYv133YMB8GA1UdIwQY MBaAFA905a8vpyFcpGmyfBB58f/V/K74MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDNUbHJ5LW5JVnlrYWJKOEVIbnhfOVg4cnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80OWFjZTgtMjkxZC00ZDRmLTkyMmUt ZWFiY2JjMDgzZjliLzEvN2VlSmEwVTJxY0tBR3AwdnVjN0cxaV9YZmRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC80OWFjZTgtMjkxZC00ZDRmLTkyMmUtZWFiY2JjMDgzZjli LzEvRDNUbHJ5LW5JVnlrYWJKOEVIbnhfOVg4cnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8/AMA0G CSqGSIb3DQEBCwUAA4IBAQBblAG210a2ppxvYLM0z5/TixsnlRVSDWWD1Y6FxfbS 3DvZwZJ/KfVDCtmUf7i8Tt3vQq9nVgSAD4NUrPUt8Y96Dzlet24ULi6ReGYxPNiU CcWQmkyJhglJ5jiz47vsLnJLkLD2uktrjS6VwTowflaCJaGX8Vg//C2k+wxXhj8b WeU+58HJEJCqJJW3xfZMEuocdHw0ZYXwxu6xEbjhpTwLNPfhUhzofnWtjR72qhKh p2wDSp+kL1Fgykt5vBeLATaxs6LaUg4xbbst9yopVrszQvvKsltWLcOy1UYlQ2D0 faFtPVS6/wjUnBjD1sZbXMRMDUwmchRI4ZVqbcYmPIrj -----END CERTIFICATE-----Generated at Mon Jan 26 11:26:57 2026 by rpki-client