This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/7t8wgjK41lzapDs5jikBb5vTFhI.roa File: 7t8wgjK41lzapDs5jikBb5vTFhI.roa (raw, json) Hash identifier: pNcEvtuu1o2hH2eMF61QKg8HYUfp8zz08CbYNkIzxoY= Subject key identifier: EE:DF:30:82:32:B8:D6:5C:DA:A4:3B:39:8E:29:01:6F:9B:D3:16:12 Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Certificate serial: 019B7DCB29E0E5A4FA899B734E52CE088265 Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/7t8wgjK41lzapDs5jikBb5vTFhI.roa Signing time: Fri 02 Jan 2026 08:20:25 +0000 ROA not before: Fri 02 Jan 2026 08:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35782 IP address blocks: 82.150.144.0/24 maxlen: 24 2a02:10:104::/48 maxlen: 48 2a02:10:105::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:29:e0:e5:a4:fa:89:9b:73:4e:52:ce:08:82:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Validity Not Before: Jan 2 08:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eedf308232b8d65cdaa43b398e29016f9bd31612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f2:86:c3:93:70:37:00:ce:30:06:51:f0:af: 0e:b3:87:01:ec:c5:66:02:6e:ee:82:f1:7a:f1:4c: a4:7b:58:ca:b7:03:88:e4:d7:c3:02:8c:26:ca:ba: 77:bf:50:45:ea:73:c0:5c:5f:0f:b0:63:79:86:7c: 87:09:40:a4:34:04:8f:78:5a:4d:a9:7a:2a:c4:4b: bd:e9:b9:63:8b:a7:a2:b1:5e:dd:46:07:ec:21:34: 2e:24:ee:4f:59:47:30:68:5f:3c:a5:d1:70:99:bd: bb:bc:3a:cf:9a:bc:9b:17:5a:03:82:17:57:de:6f: 49:ec:c8:30:8d:35:4f:5e:06:6f:f5:7d:e6:fe:7a: 8a:c1:3c:0e:02:c3:44:45:3a:a2:88:01:ae:74:50: 3a:aa:8e:08:ff:3d:9e:0c:12:4f:33:b0:73:43:8e: 56:34:8b:93:87:4f:ef:68:c6:10:09:c1:38:ee:7a: 24:82:7e:3c:84:00:4b:fd:0c:e9:83:c4:77:60:f8: e7:2b:07:db:28:c1:57:f5:0d:d8:64:b8:16:86:35: 5e:af:c0:f7:9a:e0:e8:fa:e6:56:90:1c:b9:33:e1: 7d:ae:b2:96:37:3a:6c:eb:02:c6:6d:f6:97:dc:21: 68:0e:d0:fc:88:58:50:df:17:ae:7c:1c:41:de:ca: 54:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:DF:30:82:32:B8:D6:5C:DA:A4:3B:39:8E:29:01:6F:9B:D3:16:12 X509v3 Authority Key Identifier: keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/7t8wgjK41lzapDs5jikBb5vTFhI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.150.144.0/24 IPv6: 2a02:10:104::/47 Signature Algorithm: sha256WithRSAEncryption 89:8b:f8:8d:7e:31:21:0a:1e:17:cf:2c:09:7c:ed:52:83:25: e9:e3:8b:c2:26:52:73:8f:e0:49:d0:1e:0a:97:1f:ba:cd:62: 07:95:05:6e:68:a7:76:1a:a1:e1:36:28:a1:46:82:fc:73:8a: 2d:95:69:08:ea:e6:79:e0:21:a0:f7:f6:3c:83:2d:71:cc:cf: 2d:4a:54:80:b9:11:f0:b5:f7:8f:a8:dd:9b:20:53:61:78:32: 40:3e:ea:7f:d9:32:ca:c7:f9:28:d9:d1:86:11:a0:b8:b9:08: b7:c1:2d:41:89:94:13:83:37:21:05:4e:2f:cd:dc:13:f2:5d: a9:a0:91:cb:c4:32:ec:93:f9:6b:b1:6a:97:22:c6:f5:09:a1: 03:99:73:da:db:c7:a0:92:7f:29:e7:33:52:6f:5b:a8:db:ed: 1f:fa:12:7f:46:7f:57:8d:41:69:8d:61:f1:8c:d3:c0:3e:7c: 50:f2:01:7c:08:75:aa:33:62:7f:92:a7:e8:b1:75:3f:2a:9d: 97:ec:16:28:1a:64:62:f5:35:92:df:18:36:4d:66:06:95:76: 1b:f7:53:2c:e2:46:af:6b:26:1f:6d:c3:8f:86:98:c8:1b:50: 0e:d0:d2:55:f5:e6:9a:06:36:00:fb:9c:3a:53:d9:47:b4:9f: 15:39:3f:f3 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9yyng5aT6iZtzTlLOCIJlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMWZlMzBmYzZiNGIwZDBmNmRiNGUxYmZiYmQ1MDE5NWRj YTU3NWMwHhcNMjYwMTAyMDgyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWRmMzA4MjMyYjhkNjVjZGFhNDNiMzk4ZTI5MDE2ZjliZDMxNjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/KGw5NwNwDOMAZR8K8Os4cB7MVm Am7ugvF68Uyke1jKtwOI5NfDAowmyrp3v1BF6nPAXF8PsGN5hnyHCUCkNASPeFpN qXoqxEu96blji6eisV7dRgfsITQuJO5PWUcwaF88pdFwmb27vDrPmrybF1oDghdX 3m9J7MgwjTVPXgZv9X3m/nqKwTwOAsNERTqiiAGudFA6qo4I/z2eDBJPM7BzQ45W NIuTh0/vaMYQCcE47nokgn48hABL/Qzpg8R3YPjnKwfbKMFX9Q3YZLgWhjVer8D3 muDo+uZWkBy5M+F9rrKWNzps6wLGbfaX3CFoDtD8iFhQ3xeufBxB3spUAwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFO7fMIIyuNZc2qQ7OY4pAW+b0xYSMB8GA1UdIwQY MBaAFCAf4w/GtLDQ9ttOG/u9UBldyldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYt ZmMxMjFjODAwYjMwLzEvN3Q4d2dqSzQxbHphcERzNWppa0JiNXZURmhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYtZmMxMjFjODAwYjMw LzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAUpaQMA8E AgACMAkDBwEqAgAQAQQwDQYJKoZIhvcNAQELBQADggEBAImL+I1+MSEKHhfPLAl8 7VKDJenji8ImUnOP4EnQHgqXH7rNYgeVBW5op3YaoeE2KKFGgvxzii2VaQjq5nng IaD39jyDLXHMzy1KVIC5EfC194+o3ZsgU2F4MkA+6n/ZMsrH+SjZ0YYRoLi5CLfB LUGJlBODNyEFTi/N3BPyXamgkcvEMuyT+WuxapcixvUJoQOZc9rbx6CSfynnM1Jv W6jb7R/6En9Gf1eNQWmNYfGM08A+fFDyAXwIdaozYn+Sp+ixdT8qnZfsFigaZGL1 NZLfGDZNZgaVdhv3UyziRq9rJh9tw4+GmMgbUA7Q0lX15poGNgD7nDpT2Ue0nxU5 P/M= -----END CERTIFICATE-----Generated at Sun Jan 25 19:39:35 2026 by rpki-client