This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/7geGfuYNebN29vuSfOy_GV5rEnI.roa File: 7geGfuYNebN29vuSfOy_GV5rEnI.roa (raw, json) Hash identifier: HCwsGLsuz7RM9sjbDLuG2DbSJJu30k5afVWUwaIVEjo= Subject key identifier: EE:07:86:7E:E6:0D:79:B3:76:F6:FB:92:7C:EC:BF:19:5E:6B:12:72 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 019B78A31910C1AAFE2D5A11FFEE4A41C399 Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/7geGfuYNebN29vuSfOy_GV5rEnI.roa Signing time: Thu 01 Jan 2026 08:18:33 +0000 ROA not before: Thu 01 Jan 2026 08:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207416 IP address blocks: 212.113.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:19:10:c1:aa:fe:2d:5a:11:ff:ee:4a:41:c3:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Jan 1 08:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee07867ee60d79b376f6fb927cecbf195e6b1272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bf:0d:a6:32:98:01:e7:be:63:be:0e:b6:fc: f0:ed:cc:7e:4c:b9:01:2a:3c:d3:3e:4b:7a:8b:81: b0:b3:26:38:a1:4b:02:5c:16:7c:95:0f:48:e9:53: 48:17:5e:ba:8e:ec:96:39:a2:2d:04:d2:b5:03:6e: 12:cc:43:84:3e:b5:3b:ba:d3:bf:85:48:0f:30:47: 2b:19:90:ee:bd:ec:e5:44:28:88:34:c3:d7:32:23: 66:bb:13:bb:49:5a:25:7c:29:91:d9:90:90:c3:9a: f3:4c:ba:df:41:3f:c1:23:10:3b:22:85:7e:b6:be: 0c:bb:c3:e3:0f:b4:a8:c9:93:a9:6c:f9:3a:cc:2e: b2:2b:57:f6:b5:d0:0a:87:56:0e:c0:ae:59:f9:96: f8:43:c8:ec:3c:84:0d:a4:c7:fd:f6:55:b0:46:5f: 9f:89:b4:38:14:12:0e:c3:95:65:27:dc:7f:f1:8b: 74:f9:f1:2b:05:dd:89:4f:55:91:b3:8e:cb:6a:83: 02:e2:78:f8:11:61:37:47:63:ca:c8:77:b8:4f:1f: df:fb:35:2c:84:37:ae:c2:1d:03:4f:3d:ff:c0:f1: 9e:b6:c3:6d:13:15:a6:c0:e3:bc:27:fa:54:47:c6: 1b:75:9b:58:97:5c:ad:f0:52:c3:f4:aa:a5:88:ac: 23:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:07:86:7E:E6:0D:79:B3:76:F6:FB:92:7C:EC:BF:19:5E:6B:12:72 X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/7geGfuYNebN29vuSfOy_GV5rEnI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.113.98.0/24 Signature Algorithm: sha256WithRSAEncryption 59:94:0c:a9:d8:40:fb:26:f4:6b:99:1f:33:1f:7b:d2:fa:71: 6b:ac:b2:e7:f6:6b:c4:e0:32:fa:ea:5d:0c:a8:84:4a:11:33: 82:dd:62:3e:9f:4a:dd:28:92:16:56:e0:41:a4:0a:f3:b8:af: 9e:57:3c:2b:cd:bb:96:6e:3c:3b:dc:df:fb:b7:a5:96:fe:74: 93:4c:b4:7d:0c:1b:6d:2e:8a:b7:2d:53:af:b3:fb:7f:fa:0e: be:b5:2e:04:82:00:ff:93:1c:9a:4b:74:00:8f:cc:82:1e:38: c1:f7:94:87:e8:34:4d:ac:6d:38:58:a2:5e:e9:fe:35:bc:56: ee:3c:af:e6:73:15:9a:66:e9:24:82:42:da:24:52:4e:f4:99: 8c:bb:6b:0a:0a:bb:e3:94:2f:57:c6:09:47:7f:ad:0d:23:b9: ca:3b:cc:93:d8:39:1d:71:e9:5e:fa:0a:98:b0:0b:20:ab:34: be:5f:06:ea:49:ab:4f:79:4e:d9:58:38:52:f2:3f:1d:51:06: 2e:a6:3c:3a:33:73:24:7e:83:14:ce:3c:bf:05:d0:a7:6d:8b: 50:ab:57:eb:39:a9:bd:90:97:23:d4:a3:62:12:8b:03:df:10: 9c:4f:a3:67:c6:20:67:77:ae:ba:f1:57:f2:6d:e8:66:45:90: 8e:8f:d1:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oxkQwar+LVoR/+5KQcOZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjYwMTAxMDgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTA3ODY3ZWU2MGQ3OWIzNzZmNmZiOTI3Y2VjYmYxOTVlNmIxMjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb8NpjKYAee+Y74Otvzw7cx+TLkB KjzTPkt6i4GwsyY4oUsCXBZ8lQ9I6VNIF166juyWOaItBNK1A24SzEOEPrU7utO/ hUgPMEcrGZDuvezlRCiINMPXMiNmuxO7SVolfCmR2ZCQw5rzTLrfQT/BIxA7IoV+ tr4Mu8PjD7SoyZOpbPk6zC6yK1f2tdAKh1YOwK5Z+Zb4Q8jsPIQNpMf99lWwRl+f ibQ4FBIOw5VlJ9x/8Yt0+fErBd2JT1WRs47LaoMC4nj4EWE3R2PKyHe4Tx/f+zUs hDeuwh0DTz3/wPGetsNtExWmwOO8J/pUR8YbdZtYl1yt8FLD9KqliKwjuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO4Hhn7mDXmzdvb7knzsvxleaxJyMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvN2dlR2Z1WU5lYk4yOXZ1U2ZPeV9HVjVyRW5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1HFiMA0G CSqGSIb3DQEBCwUAA4IBAQBZlAyp2ED7JvRrmR8zH3vS+nFrrLLn9mvE4DL66l0M qIRKETOC3WI+n0rdKJIWVuBBpArzuK+eVzwrzbuWbjw73N/7t6WW/nSTTLR9DBtt Loq3LVOvs/t/+g6+tS4EggD/kxyaS3QAj8yCHjjB95SH6DRNrG04WKJe6f41vFbu PK/mcxWaZukkgkLaJFJO9JmMu2sKCrvjlC9XxglHf60NI7nKO8yT2Dkdcele+gqY sAsgqzS+XwbqSatPeU7ZWDhS8j8dUQYupjw6M3MkfoMUzjy/BdCnbYtQq1frOam9 kJcj1KNiEosD3xCcT6NnxiBnd6668VfybehmRZCOj9Ff -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:35 2026 by rpki-client