This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/7f1HjHk-QuYdyKPRtRTB6zRtniI.roa File: 7f1HjHk-QuYdyKPRtRTB6zRtniI.roa (raw, json) Hash identifier: JfV00R7e1ilZPLpfLYf2At7NSLWNCp/ArWaOcO/+rJ4= Subject key identifier: ED:FD:47:8C:79:3E:42:E6:1D:C8:A3:D1:B5:14:C1:EB:34:6D:9E:22 Certificate issuer: /CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17 Certificate serial: 019B7EA470B77805F65BBC14895DD0BE842C Authority key identifier: 46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/7f1HjHk-QuYdyKPRtRTB6zRtniI.roa Signing time: Fri 02 Jan 2026 12:17:44 +0000 ROA not before: Fri 02 Jan 2026 12:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5578 IP address blocks: 185.161.174.0/24 maxlen: 24 185.161.175.0/24 maxlen: 24 2a07:c387::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:70:b7:78:05:f6:5b:bc:14:89:5d:d0:be:84:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17 Validity Not Before: Jan 2 12:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edfd478c793e42e61dc8a3d1b514c1eb346d9e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:82:d1:b7:ad:92:71:b0:60:14:c5:f0:d6:23: b3:62:2d:f8:2e:d5:1a:1c:40:b6:18:ba:a2:7e:48: fa:ce:d3:0d:66:b6:c6:f9:5c:e8:7a:c9:4c:78:27: 0f:4a:c4:54:a2:51:b2:b6:bb:74:b8:f4:e5:57:de: 77:cf:02:c1:d3:77:aa:ed:60:d2:ba:96:c6:9b:5a: 80:28:25:ba:f8:7d:87:85:21:d2:c0:a5:00:9d:2a: 78:c6:7b:76:2e:92:4d:99:17:7a:09:4f:1a:2b:12: 91:8e:b5:0a:a5:8e:bf:6c:9d:a5:07:79:0b:a5:35: b2:c8:99:0d:19:6e:86:0a:57:a3:4b:7e:c3:64:d4: f4:72:91:2c:e6:a2:08:93:82:92:da:5f:b2:17:d6: 9f:44:2f:5f:94:62:e2:ca:09:53:d2:ce:0e:79:5f: c7:b5:e6:e5:53:0b:b1:af:d9:dc:ca:24:90:d9:ac: df:4e:83:8f:18:eb:b9:b2:9e:f7:ba:90:db:42:c4: 4c:5f:74:8f:c4:3f:3e:01:17:e2:67:17:cb:1d:5d: 7f:11:b5:7f:db:fb:86:c3:14:02:13:13:cd:ad:99: 2d:d7:e4:06:31:89:5f:0f:f7:49:5d:06:1b:cb:f4: c2:21:cc:44:0e:56:bd:f5:22:2b:bf:8a:90:e9:db: a7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:FD:47:8C:79:3E:42:E6:1D:C8:A3:D1:B5:14:C1:EB:34:6D:9E:22 X509v3 Authority Key Identifier: keyid:46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/7f1HjHk-QuYdyKPRtRTB6zRtniI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.174.0/23 IPv6: 2a07:c387::/32 Signature Algorithm: sha256WithRSAEncryption 2a:c8:fd:8a:48:0d:8c:71:4b:12:29:96:a4:2c:1d:a0:84:d9: 41:dd:3a:6c:df:4f:f2:72:f0:70:1f:54:7f:06:e8:a7:0a:5c: 12:d9:a6:0f:0d:c1:f2:c1:d2:a2:c6:fd:b3:03:f6:69:d8:9d: 92:31:7d:c2:31:be:fa:f1:e7:56:e7:6b:8f:34:93:65:34:3b: 6c:b1:46:57:54:b6:16:9c:14:a8:c1:6c:82:c7:4a:d8:a9:7f: 28:1d:a4:49:84:07:b0:8b:ac:aa:25:9a:b5:1c:13:df:8e:6b: b1:2c:b9:ac:3f:84:99:b6:4b:ad:bb:bb:b5:17:6f:39:b8:6c: 80:d4:e9:30:62:f3:27:2c:f1:e2:f1:37:95:92:49:4e:79:d6: 32:b6:b0:1e:60:c8:e5:22:5d:f8:47:ff:ea:35:a1:7b:31:f2: bd:c8:ac:39:5e:c3:3c:06:ff:31:04:8b:e9:62:f7:09:dd:9e: 20:9c:6e:97:1f:25:ad:90:fa:95:b8:9b:88:de:df:7b:a8:67: b4:4a:f2:ba:f7:41:32:73:dc:51:f5:8b:bc:50:f9:c8:06:93: af:c8:b5:10:7a:3d:f5:b2:f7:ba:ae:3c:4f:9d:1c:0f:aa:40: c3:46:e0:f5:63:86:c3:cd:f8:bf:21:7b:21:ba:ff:06:e2:2f: dd:42:f6:46 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pHC3eAX2W7wUiV3QvoQsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZmJjZmMxM2Q0ZDVmZjZkMzdjMjI2ZjExZTEyMTIwNGMz NjdkMTcwHhcNMjYwMTAyMTIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGZkNDc4Yzc5M2U0MmU2MWRjOGEzZDFiNTE0YzFlYjM0NmQ5ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4LRt62ScbBgFMXw1iOzYi34LtUa HEC2GLqifkj6ztMNZrbG+VzoeslMeCcPSsRUolGytrt0uPTlV953zwLB03eq7WDS upbGm1qAKCW6+H2HhSHSwKUAnSp4xnt2LpJNmRd6CU8aKxKRjrUKpY6/bJ2lB3kL pTWyyJkNGW6GClejS37DZNT0cpEs5qIIk4KS2l+yF9afRC9flGLiyglT0s4OeV/H teblUwuxr9ncyiSQ2azfToOPGOu5sp73upDbQsRMX3SPxD8+ARfiZxfLHV1/EbV/ 2/uGwxQCExPNrZkt1+QGMYlfD/dJXQYby/TCIcxEDla99SIrv4qQ6dunMwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFO39R4x5PkLmHcij0bUUwes0bZ4iMB8GA1UdIwQY MBaAFEb7z8E9TV/203wibxHhISBMNn0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnZ2UHdUMU5YX2JUZkNKdkVlRWhJRXcyZlJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZTkzNWItMjM0MC00ODA2LWIzM2It ZmFjYTBlYjMzNTdkLzEvN2YxSGpIay1RdVlkeUtQUnRSVEI2elJ0bmlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81ZTkzNWItMjM0MC00ODA2LWIzM2ItZmFjYTBlYjMzNTdk LzEvUnZ2UHdUMU5YX2JUZkNKdkVlRWhJRXcyZlJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuaGuMA0E AgACMAcDBQAqB8OHMA0GCSqGSIb3DQEBCwUAA4IBAQAqyP2KSA2McUsSKZakLB2g hNlB3Tps30/ycvBwH1R/BuinClwS2aYPDcHywdKixv2zA/Zp2J2SMX3CMb768edW 52uPNJNlNDtssUZXVLYWnBSowWyCx0rYqX8oHaRJhAewi6yqJZq1HBPfjmuxLLms P4SZtkutu7u1F285uGyA1OkwYvMnLPHi8TeVkklOedYytrAeYMjlIl34R//qNaF7 MfK9yKw5XsM8Bv8xBIvpYvcJ3Z4gnG6XHyWtkPqVuJuI3t97qGe0SvK690Eyc9xR 9Yu8UPnIBpOvyLUQej31sve6rjxPnRwPqkDDRuD1Y4bDzfi/IXshuv8G4i/dQvZG -----END CERTIFICATE-----Generated at Mon Jan 26 14:47:03 2026 by rpki-client