This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/el7Foe7CpoESR0E_lBDRq_2Ohz8.roa File: el7Foe7CpoESR0E_lBDRq_2Ohz8.roa (raw, json) Hash identifier: /kLAJJz2VIOJRlWwXrYI0vRC2jlyRUsDvBRbglDgwCs= Subject key identifier: 7A:5E:C5:A1:EE:C2:A6:81:12:47:41:3F:94:10:D1:AB:FD:8E:87:3F Certificate issuer: /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20 Certificate serial: 019B79102577D07CD53A72D387CCD1CF8B70 Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/el7Foe7CpoESR0E_lBDRq_2Ohz8.roa Signing time: Thu 01 Jan 2026 10:17:39 +0000 ROA not before: Thu 01 Jan 2026 10:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12301 IP address blocks: 46.31.182.0/24 maxlen: 24 77.243.208.0/20 maxlen: 20 185.91.140.0/24 maxlen: 24 185.91.141.0/24 maxlen: 24 185.91.142.0/23 maxlen: 23 185.91.143.0/24 maxlen: 24 2a00:df80::/48 maxlen: 48 2a00:df80:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:25:77:d0:7c:d5:3a:72:d3:87:cc:d1:cf:8b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20 Validity Not Before: Jan 1 10:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a5ec5a1eec2a6811247413f9410d1abfd8e873f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e2:e0:b6:94:e5:b9:20:fd:88:7e:d8:d3:70: 86:fd:74:7a:53:ad:9f:10:90:9b:fb:bd:60:df:3e: 4d:7e:80:59:d9:cd:12:be:fa:ed:a5:bb:b9:87:de: 2c:18:a9:f0:bb:8e:92:98:d9:e1:a1:0d:42:88:f9: 06:ac:16:7a:65:53:e2:95:e1:23:5a:3a:2d:79:2f: a7:bb:7c:a2:6a:12:43:54:4f:18:41:16:c5:25:6e: e5:4f:3e:8d:54:48:1e:eb:89:d5:64:cc:d2:be:0a: 83:14:46:6f:e8:da:61:84:4c:32:cc:56:81:fd:48: 74:56:19:f5:a9:6a:f1:62:80:61:03:09:ef:6d:87: f5:c2:bb:2a:22:28:17:a1:9f:ee:88:32:19:fc:1b: 20:2d:6b:bb:9a:c6:85:31:15:65:be:40:37:84:7a: b0:e9:a6:41:ee:ec:0e:f3:6c:8f:a1:1c:d4:d9:22: e6:d5:a3:a3:c1:66:a6:94:d5:b9:bb:62:bf:91:7d: be:c5:0a:7f:df:c3:19:4f:af:9e:73:56:aa:dc:cf: d3:56:09:33:84:96:fd:47:31:f9:42:18:69:9a:8b: 04:37:e3:8a:bf:bc:8b:50:44:d3:93:55:92:10:0a: 7c:57:db:f8:83:eb:87:6f:ea:80:2f:40:c9:c2:14: 87:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5E:C5:A1:EE:C2:A6:81:12:47:41:3F:94:10:D1:AB:FD:8E:87:3F X509v3 Authority Key Identifier: keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/el7Foe7CpoESR0E_lBDRq_2Ohz8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.182.0/24 77.243.208.0/20 185.91.140.0/22 IPv6: 2a00:df80::/47 Signature Algorithm: sha256WithRSAEncryption 37:d6:d7:ff:d0:d8:57:cc:ac:2e:d5:14:8b:52:10:77:18:92: a0:da:48:ad:e1:e4:24:7f:af:ce:93:85:e0:79:d1:7b:38:be: 8f:03:58:5a:14:05:98:f5:d9:5d:7b:e0:6a:01:ae:4f:2d:cc: 42:2f:f0:f9:84:e3:46:14:ce:58:90:3b:55:82:88:4e:ce:00: ac:01:b8:2d:35:22:e0:5b:5c:8e:c0:57:5d:98:e1:0b:b5:eb: fb:8b:c2:2d:5d:2e:76:c9:dd:8f:e4:70:15:61:27:43:16:27: 61:05:fd:b8:1c:3e:16:23:d2:63:cd:78:43:67:9f:4d:df:d8: e0:eb:c8:d7:ff:b5:8b:25:63:02:1b:ce:98:71:7a:5a:9b:8a: 71:53:8d:3f:87:60:2e:23:92:bb:bb:a2:d1:f7:6e:15:a9:ec: 61:77:35:43:33:53:93:35:be:f0:4c:99:8a:fb:88:0d:22:63: 58:36:a1:a6:6e:45:86:11:76:4a:f2:f4:23:67:47:e9:54:70: dd:7a:41:28:62:16:16:d1:f1:fb:54:96:15:fe:ac:41:cd:77: 0c:f3:c4:67:35:f7:55:49:84:72:08:a5:1e:d7:bf:0a:02:85: 16:5a:0a:d3:db:d8:94:be:82:25:12:82:14:74:19:f0:bb:34: 6f:94:a2:b0 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt5ECV30HzVOnLTh8zRz4twMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYWMwMzIyYjNlYWI2NTcyZWNlMmEwYWM1YWJmMTY0YTVi YmZmMjAwHhcNMjYwMTAxMTAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTVlYzVhMWVlYzJhNjgxMTI0NzQxM2Y5NDEwZDFhYmZkOGU4NzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuLgtpTluSD9iH7Y03CG/XR6U62f EJCb+71g3z5NfoBZ2c0Svvrtpbu5h94sGKnwu46SmNnhoQ1CiPkGrBZ6ZVPileEj WjoteS+nu3yiahJDVE8YQRbFJW7lTz6NVEge64nVZMzSvgqDFEZv6NphhEwyzFaB /Uh0Vhn1qWrxYoBhAwnvbYf1wrsqIigXoZ/uiDIZ/BsgLWu7msaFMRVlvkA3hHqw 6aZB7uwO82yPoRzU2SLm1aOjwWamlNW5u2K/kX2+xQp/38MZT6+ec1aq3M/TVgkz hJb9RzH5QhhpmosEN+OKv7yLUETTk1WSEAp8V9v4g+uHb+qAL0DJwhSHMwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFHpexaHuwqaBEkdBP5QQ0av9joc/MB8GA1UdIwQY MBaAFOGsAyKz6rZXLs4qCsWr8WSlu/8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZjAwMzYtODMxMy00YjNkLWFkN2Yt OGQ4MWZkYzZmMTcwLzEvZWw3Rm9lN0Nwb0VTUjBFX2xCRFJxXzJPaHo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9mZjAwMzYtODMxMy00YjNkLWFkN2YtOGQ4MWZkYzZmMTcw LzEvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQALh+2AwQE TfPQAwQCuVuMMA8EAgACMAkDBwEqAN+AAAAwDQYJKoZIhvcNAQELBQADggEBADfW 1//Q2FfMrC7VFItSEHcYkqDaSK3h5CR/r86TheB50Xs4vo8DWFoUBZj12V174GoB rk8tzEIv8PmE40YUzliQO1WCiE7OAKwBuC01IuBbXI7AV12Y4Qu16/uLwi1dLnbJ 3Y/kcBVhJ0MWJ2EF/bgcPhYj0mPNeENnn03f2ODryNf/tYslYwIbzphxelqbinFT jT+HYC4jkru7otH3bhWp7GF3NUMzU5M1vvBMmYr7iA0iY1g2oaZuRYYRdkry9CNn R+lUcN16QShiFhbR8ftUlhX+rEHNdwzzxGc191VJhHIIpR7XvwoChRZaCtPb2JS+ giUSghR0GfC7NG+UorA= -----END CERTIFICATE-----Generated at Sun Jan 25 17:41:40 2026 by rpki-client