This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/s7VJoHD0hBpVP0JfW2MgMdyr8Y0.roa File: s7VJoHD0hBpVP0JfW2MgMdyr8Y0.roa (raw, json) Hash identifier: 3dNcn5nfQCOn3nOuz9gztwsMAWS61sZQeaI9Kk8/SgM= Subject key identifier: B3:B5:49:A0:70:F4:84:1A:55:3F:42:5F:5B:63:20:31:DC:AB:F1:8D Certificate issuer: /CN=2ceadee58f864f472eb422b0b95497b85075a12b Certificate serial: 019B7C129EA743070004B2985F1EC76E6F36 Authority key identifier: 2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/s7VJoHD0hBpVP0JfW2MgMdyr8Y0.roa Signing time: Fri 02 Jan 2026 00:19:13 +0000 ROA not before: Fri 02 Jan 2026 00:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59437 IP address blocks: 91.194.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:9e:a7:43:07:00:04:b2:98:5f:1e:c7:6e:6f:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ceadee58f864f472eb422b0b95497b85075a12b Validity Not Before: Jan 2 00:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3b549a070f4841a553f425f5b632031dcabf18d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8a:6d:20:8b:c3:d9:2d:90:71:5d:38:53:7d: 88:f3:05:19:90:82:6c:54:1b:68:26:43:0a:ae:7c: fc:e1:71:43:ec:53:ad:a0:a7:cb:05:22:7b:ec:14: f5:31:89:57:93:b1:31:a2:86:20:5a:e1:ed:cc:60: 75:b5:27:0f:37:f7:bb:98:96:ad:14:b1:ba:cd:11: a6:2d:75:38:19:bf:5b:f3:7d:62:fd:37:a4:64:84: 08:a2:ee:e3:d7:8d:c5:a4:83:62:14:69:31:21:f4: 32:c7:b5:1c:db:78:13:57:94:f3:f2:9d:97:a7:0e: bf:e9:15:a4:c1:44:b3:bd:1a:5f:33:4f:c2:e9:29: 1c:a3:39:03:ba:40:cc:19:7b:fb:e6:99:91:1b:43: a2:54:14:2a:ed:4d:77:d9:55:ee:88:ed:b9:7c:5e: 1e:a5:ac:90:9f:08:eb:3f:cf:fd:62:a0:f5:89:29: 20:58:5c:8b:cb:8f:e3:ae:44:68:db:6c:26:fe:70: ca:ef:9a:9a:47:65:19:eb:98:66:da:a7:57:4a:07: be:d8:00:af:f9:5d:2a:39:b6:a7:26:ff:e0:9f:7b: 33:25:1c:33:da:39:fd:0f:8a:00:7d:e0:dc:d7:42: 71:c6:ff:f0:81:be:95:ef:60:a0:67:6d:8c:24:53: 02:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B5:49:A0:70:F4:84:1A:55:3F:42:5F:5B:63:20:31:DC:AB:F1:8D X509v3 Authority Key Identifier: keyid:2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/s7VJoHD0hBpVP0JfW2MgMdyr8Y0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.200.0/24 Signature Algorithm: sha256WithRSAEncryption b2:d2:e2:c8:f7:13:69:c2:3b:98:94:98:02:cd:89:bc:ac:d9: e1:85:00:e0:93:e2:08:00:95:0c:5d:09:7a:0c:09:26:5e:64: af:d3:94:3a:5d:e8:06:a2:35:6d:8c:23:fc:bc:2e:c7:01:69: 40:ca:29:51:9a:ac:30:1d:ca:e3:08:e9:c6:b4:b6:cc:9a:c2: 36:16:14:54:b6:5f:b1:d6:89:98:1d:6b:15:24:7b:50:f7:23: 30:7a:50:ae:c6:56:b1:51:d6:76:0e:52:c6:e1:2f:dc:dd:37: 51:b0:d8:f5:04:c8:27:ba:1c:04:9e:15:0a:b6:03:15:8f:a3: d4:ce:81:ff:22:d5:d8:77:1e:e7:47:7d:e4:64:6f:9b:8a:ef: 09:89:cc:7f:ba:db:25:a8:4f:9d:2f:5a:ba:32:f5:15:4e:78: ea:81:7e:3b:55:3f:4b:65:bb:b9:45:13:15:83:0f:7d:fc:85: 4d:4f:cb:e5:41:89:5e:e0:25:7b:f7:e4:35:cc:55:ec:d8:a6: e8:cf:4e:c0:b3:8d:b3:20:c3:b7:37:91:ad:6e:40:93:43:3e: ce:ff:ec:af:3e:1c:06:8d:ed:c7:83:c3:9f:e0:fd:df:08:57: 4c:45:b6:a3:04:49:b1:25:54:60:55:bf:5c:2a:20:17:a1:de: 23:2e:37:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ep6nQwcABLKYXx7Hbm82MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZWFkZWU1OGY4NjRmNDcyZWI0MjJiMGI5NTQ5N2I4NTA3 NWExMmIwHhcNMjYwMTAyMDAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2I1NDlhMDcwZjQ4NDFhNTUzZjQyNWY1YjYzMjAzMWRjYWJmMThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4ptIIvD2S2QcV04U32I8wUZkIJs VBtoJkMKrnz84XFD7FOtoKfLBSJ77BT1MYlXk7ExooYgWuHtzGB1tScPN/e7mJat FLG6zRGmLXU4Gb9b831i/TekZIQIou7j143FpINiFGkxIfQyx7Uc23gTV5Tz8p2X pw6/6RWkwUSzvRpfM0/C6SkcozkDukDMGXv75pmRG0OiVBQq7U132VXuiO25fF4e payQnwjrP8/9YqD1iSkgWFyLy4/jrkRo22wm/nDK75qaR2UZ65hm2qdXSge+2ACv +V0qObanJv/gn3szJRwz2jn9D4oAfeDc10Jxxv/wgb6V72CgZ22MJFMCSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLO1SaBw9IQaVT9CX1tjIDHcq/GNMB8GA1UdIwQY MBaAFCzq3uWPhk9HLrQisLlUl7hQdaErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE9yZTVZLUdUMGN1dENLd3VWU1h1RkIxb1NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83YzJlODQtZTZjYy00NzUxLTg4N2It YmM3YTI0YzJlMjE5LzEvczdWSm9IRDBoQnBWUDBKZlcyTWdNZHlyOFkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi83YzJlODQtZTZjYy00NzUxLTg4N2ItYmM3YTI0YzJlMjE5 LzEvTE9yZTVZLUdUMGN1dENLd3VWU1h1RkIxb1NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8LIMA0G CSqGSIb3DQEBCwUAA4IBAQCy0uLI9xNpwjuYlJgCzYm8rNnhhQDgk+IIAJUMXQl6 DAkmXmSv05Q6XegGojVtjCP8vC7HAWlAyilRmqwwHcrjCOnGtLbMmsI2FhRUtl+x 1omYHWsVJHtQ9yMwelCuxlaxUdZ2DlLG4S/c3TdRsNj1BMgnuhwEnhUKtgMVj6PU zoH/ItXYdx7nR33kZG+biu8Jicx/utslqE+dL1q6MvUVTnjqgX47VT9LZbu5RRMV gw99/IVNT8vlQYle4CV79+Q1zFXs2Kboz07As42zIMO3N5GtbkCTQz7O/+yvPhwG je3Hg8Of4P3fCFdMRbajBEmxJVRgVb9cKiAXod4jLjcu -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:50 2026 by rpki-client