This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/7GQw0x5KqIsgeFzJvLB4KZmgC4w.roa File: 7GQw0x5KqIsgeFzJvLB4KZmgC4w.roa (raw, json) Hash identifier: SeWjQt30/zP5wJWgCETZ2WU8SMyQZP06xEXIUI0AM3E= Subject key identifier: EC:64:30:D3:1E:4A:A8:8B:20:78:5C:C9:BC:B0:78:29:99:A0:0B:8C Certificate issuer: /CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a Certificate serial: 019B7A5AC698944C1EEC70E9CF9234615550 Authority key identifier: 6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/7GQw0x5KqIsgeFzJvLB4KZmgC4w.roa Signing time: Thu 01 Jan 2026 16:18:47 +0000 ROA not before: Thu 01 Jan 2026 16:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57119 IP address blocks: 185.212.20.0/22 maxlen: 22 185.212.20.0/24 maxlen: 24 185.212.21.0/24 maxlen: 24 185.212.22.0/24 maxlen: 24 185.212.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c6:98:94:4c:1e:ec:70:e9:cf:92:34:61:55:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a Validity Not Before: Jan 1 16:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec6430d31e4aa88b20785cc9bcb0782999a00b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:15:7a:01:52:dc:2a:1a:de:64:f9:ae:85:55: ef:36:00:40:0a:d3:bf:77:88:f8:72:84:cd:a4:c8: 2f:df:60:e6:2b:a3:31:33:25:e0:6e:6c:f9:56:c3: 2a:18:9d:9a:7b:b6:3b:f8:4e:14:8d:c9:7e:b2:59: d0:b7:0f:a3:bf:ce:b8:f5:8b:34:e3:56:9f:ae:45: 84:02:1e:55:0a:0f:7e:e0:3f:26:d0:6f:15:dd:fb: 2b:f3:77:a9:23:dd:b8:d5:41:3a:80:a5:86:dd:fe: 45:b2:59:cc:a7:6c:82:c6:8a:91:71:94:af:1d:a5: 84:f6:e1:4f:e7:df:50:91:24:44:58:19:54:40:87: 28:e7:76:53:2a:48:72:89:f4:ea:2f:35:9d:d4:f0: 01:92:ec:41:71:a5:56:8b:fd:57:14:67:a8:7c:d4: d8:93:59:e1:6b:71:b3:09:e0:e3:e8:b8:79:d9:5a: 98:26:af:38:f0:ce:39:6a:f0:ba:7e:31:cd:42:10: b8:8c:6e:84:c3:00:da:2b:7a:65:15:a9:98:5f:ee: d0:94:9e:75:b6:f9:c8:5a:8c:97:ba:b0:c4:c0:77: 04:5a:bf:2d:7d:a3:60:60:18:78:4d:bd:d4:59:45: f5:e5:cb:cd:55:fc:39:3c:bc:0a:19:57:20:56:6d: d5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:64:30:D3:1E:4A:A8:8B:20:78:5C:C9:BC:B0:78:29:99:A0:0B:8C X509v3 Authority Key Identifier: keyid:6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/7GQw0x5KqIsgeFzJvLB4KZmgC4w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.212.20.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:3c:a5:51:66:a7:fe:7b:39:39:43:b8:a1:23:96:80:6f:fd: c5:8f:0c:85:c6:6b:30:4c:0c:6c:fa:2e:c5:4f:ad:a7:5e:4a: 24:00:cc:b6:a8:b4:91:33:30:9e:5d:e1:57:bb:d6:a9:43:af: 37:29:5d:b5:72:d0:8e:e4:33:bb:56:5d:86:ac:8a:89:e9:7f: 70:a3:68:70:9e:97:5d:b9:ff:9b:af:01:3e:7e:34:00:97:77: a8:3e:93:39:76:80:1b:d5:01:93:f8:9d:40:7e:3b:be:e0:47: 9e:65:ad:90:1c:d9:de:6f:cc:27:96:1b:9b:f6:56:66:d6:77: 12:f4:42:a5:54:23:7f:6a:0f:67:77:26:ac:f6:ed:78:86:db: 06:06:72:47:79:91:b0:75:f9:7c:df:ab:06:0a:7b:20:aa:56: 96:f0:4e:22:fd:9f:35:1a:b0:dd:76:ff:64:00:6e:03:2e:9e: c1:c9:cb:f4:76:2b:2a:ab:57:62:46:d6:c7:3a:b1:ee:85:f1: 84:36:d9:69:f9:16:44:18:ed:7a:8b:27:44:7e:95:91:59:18: e0:e8:44:aa:9e:d3:f4:e5:9b:a4:b8:44:f5:2e:04:a9:5f:af: 39:94:87:29:a8:fc:0e:08:d3:4e:6b:fe:29:a0:4c:27:33:31: b3:0d:95:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WsaYlEwe7HDpz5I0YVVQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZWE5ZjBmZjc2OTZlMDk3MzY3NDY1ZGUzNGI0ZWJkMDFi NWQ3MmEwHhcNMjYwMTAxMTYxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzY0MzBkMzFlNGFhODhiMjA3ODVjYzliY2IwNzgyOTk5YTAwYjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxV6AVLcKhreZPmuhVXvNgBACtO/ d4j4coTNpMgv32DmK6MxMyXgbmz5VsMqGJ2ae7Y7+E4Ujcl+slnQtw+jv8649Ys0 41afrkWEAh5VCg9+4D8m0G8V3fsr83epI9241UE6gKWG3f5FslnMp2yCxoqRcZSv HaWE9uFP599QkSREWBlUQIco53ZTKkhyifTqLzWd1PABkuxBcaVWi/1XFGeofNTY k1nha3GzCeDj6Lh52VqYJq848M45avC6fjHNQhC4jG6EwwDaK3plFamYX+7QlJ51 tvnIWoyXurDEwHcEWr8tfaNgYBh4Tb3UWUX15cvNVfw5PLwKGVcgVm3VuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOxkMNMeSqiLIHhcybyweCmZoAuMMB8GA1UdIwQY MBaAFG3qnw/3aW4Jc2dGXeNLTr0BtdcqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmVxZkRfZHBiZ2x6WjBaZDQwdE92UUcxMXlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZmUxZWItM2ExYi00NGVlLWI4ZTIt MWE5YWJhYjI0ZGM5LzEvN0dRdzB4NUtxSXNnZUZ6SnZMQjRLWm1nQzR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZmUxZWItM2ExYi00NGVlLWI4ZTItMWE5YWJhYjI0ZGM5 LzEvYmVxZkRfZHBiZ2x6WjBaZDQwdE92UUcxMXlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudQUMA0G CSqGSIb3DQEBCwUAA4IBAQBOPKVRZqf+ezk5Q7ihI5aAb/3FjwyFxmswTAxs+i7F T62nXkokAMy2qLSRMzCeXeFXu9apQ683KV21ctCO5DO7Vl2GrIqJ6X9wo2hwnpdd uf+brwE+fjQAl3eoPpM5doAb1QGT+J1Afju+4EeeZa2QHNneb8wnlhub9lZm1ncS 9EKlVCN/ag9ndyas9u14htsGBnJHeZGwdfl836sGCnsgqlaW8E4i/Z81GrDddv9k AG4DLp7Bycv0disqq1diRtbHOrHuhfGENtlp+RZEGO16iydEfpWRWRjg6ESqntP0 5ZukuET1LgSpX685lIcpqPwOCNNOa/4poEwnMzGzDZU9 -----END CERTIFICATE-----Generated at Mon Jan 26 07:40:15 2026 by rpki-client