This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/7cbmKxiY12VaOeoUKIR9SmepuCo.roa File: 7cbmKxiY12VaOeoUKIR9SmepuCo.roa (raw, json) Hash identifier: syZva8gWm4IUbaEoWBjl+ff+RLbEyoL0h+fvMsftH24= Subject key identifier: ED:C6:E6:2B:18:98:D7:65:5A:39:EA:14:28:84:7D:4A:67:A9:B8:2A Certificate issuer: /CN=54f87b5a62c1ff0f522812e9add1756bc73384c5 Certificate serial: 019B7F15B02FFD8800D2213D96B97124266A Authority key identifier: 54:F8:7B:5A:62:C1:FF:0F:52:28:12:E9:AD:D1:75:6B:C7:33:84:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/7cbmKxiY12VaOeoUKIR9SmepuCo.roa Signing time: Fri 02 Jan 2026 14:21:26 +0000 ROA not before: Fri 02 Jan 2026 14:21:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208444 IP address blocks: 185.192.170.0/23 maxlen: 32 2a06:5d07::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/VPh7WmLB_w9SKBLprdF1a8czhMU.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/VPh7WmLB_w9SKBLprdF1a8czhMU.mft rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b0:2f:fd:88:00:d2:21:3d:96:b9:71:24:26:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54f87b5a62c1ff0f522812e9add1756bc73384c5 Validity Not Before: Jan 2 14:21:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edc6e62b1898d7655a39ea1428847d4a67a9b82a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9f:2c:5d:2d:1e:9b:1e:90:a4:a9:a2:c3:13: ad:91:b1:04:f0:8e:76:28:8d:d2:8c:d1:b2:4e:ab: fd:c1:e2:42:aa:a0:a6:43:43:3b:b2:ef:b9:ae:a9: 28:42:28:a8:80:06:f7:b9:05:69:b1:c8:5a:02:8a: 3f:6c:80:91:67:c4:8f:c0:1b:a0:2d:39:a0:f8:db: 0a:59:02:aa:fd:04:cd:7b:cb:2f:fe:e6:32:d7:5b: c7:f2:31:f2:25:6e:34:db:64:80:b9:a4:fc:3c:c5: 25:d8:ec:7e:78:94:b4:e8:0a:1a:b7:93:eb:66:48: 30:6f:5b:6c:e0:8e:45:a9:2a:51:9c:18:41:45:91: 50:6b:a3:70:43:aa:d9:13:cb:3d:41:46:49:e7:d1: 8c:cc:57:7b:e9:9e:a6:54:32:04:86:05:6a:47:8c: 25:07:4c:04:e3:60:d9:a8:73:31:d1:99:de:69:fe: e1:f3:03:ef:c5:5c:ae:9d:d2:da:64:36:52:cc:a4: b6:79:20:ea:bb:bf:fb:e0:a4:c4:78:a8:fd:d7:07: 50:f4:71:df:91:ef:f2:5c:bd:dd:6c:84:58:f9:cf: c7:08:72:0a:b0:8e:e1:7c:e6:85:de:f2:bf:76:55: 2a:34:b2:b1:fb:ab:d4:b5:62:43:88:50:42:1d:3d: 86:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C6:E6:2B:18:98:D7:65:5A:39:EA:14:28:84:7D:4A:67:A9:B8:2A X509v3 Authority Key Identifier: keyid:54:F8:7B:5A:62:C1:FF:0F:52:28:12:E9:AD:D1:75:6B:C7:33:84:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/7cbmKxiY12VaOeoUKIR9SmepuCo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/VPh7WmLB_w9SKBLprdF1a8czhMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.192.170.0/23 IPv6: 2a06:5d07::/32 Signature Algorithm: sha256WithRSAEncryption 17:42:ad:f5:a6:f3:56:57:6b:20:17:6c:cb:a0:a2:9b:4f:9b: 4f:c4:e6:88:55:54:7d:34:0b:68:5a:27:b9:a5:a0:08:a1:63: 8d:ce:15:b0:e2:95:38:99:26:f7:f8:69:09:e0:36:81:1e:2c: 2f:be:3b:2a:46:9f:b4:5c:72:18:22:21:0e:6e:2d:f0:a4:25: d4:47:bc:6d:d1:38:85:ae:7b:06:2b:aa:92:b3:28:9d:b2:57: dd:6f:52:16:71:ce:ff:13:0c:2d:0a:b9:0d:48:06:42:ff:3d: 75:e9:c9:30:e8:d8:59:ed:ff:c7:31:35:82:99:1f:b4:d8:bc: f9:92:71:15:37:0e:4f:db:ab:98:6c:65:af:c6:5b:6f:ec:39: b6:92:cb:5f:5c:d7:ac:d6:90:27:98:f4:45:99:51:ff:f2:f3: 08:f2:67:46:a2:d9:9f:18:3d:e5:67:72:20:22:37:cb:19:00: d7:2b:0e:5f:a3:b1:08:e2:4c:52:80:97:42:6e:6e:91:4f:01: ca:63:8e:17:06:98:6d:09:99:f6:51:df:c3:f0:b4:04:d9:6c: 5a:b3:dc:92:4c:8f:2e:44:4e:67:45:d5:08:e1:50:4a:90:51: aa:34:54:b0:8e:c5:6d:da:4a:a1:2e:fd:66:92:f8:10:de:ab: e5:75:74:d7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FbAv/YgA0iE9lrlxJCZqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Zjg3YjVhNjJjMWZmMGY1MjI4MTJlOWFkZDE3NTZiYzcz Mzg0YzUwHhcNMjYwMTAyMTQyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGM2ZTYyYjE4OThkNzY1NWEzOWVhMTQyODg0N2Q0YTY3YTliODJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ8sXS0emx6QpKmiwxOtkbEE8I52 KI3SjNGyTqv9weJCqqCmQ0M7su+5rqkoQiiogAb3uQVpschaAoo/bICRZ8SPwBug LTmg+NsKWQKq/QTNe8sv/uYy11vH8jHyJW4022SAuaT8PMUl2Ox+eJS06Aoat5Pr Zkgwb1ts4I5FqSpRnBhBRZFQa6NwQ6rZE8s9QUZJ59GMzFd76Z6mVDIEhgVqR4wl B0wE42DZqHMx0Zneaf7h8wPvxVyundLaZDZSzKS2eSDqu7/74KTEeKj91wdQ9HHf ke/yXL3dbIRY+c/HCHIKsI7hfOaF3vK/dlUqNLKx+6vUtWJDiFBCHT2GUwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFO3G5isYmNdlWjnqFCiEfUpnqbgqMB8GA1UdIwQY MBaAFFT4e1piwf8PUigS6a3RdWvHM4TFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlBoN1dtTEJfdzlTS0JMcHJkRjFhOGN6aE1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yY2M0MTktOGUzNC00MWE5LWIyNDMt ODU1NDE4ZmZlZDQxLzEvN2NibUt4aVkxMlZhT2VvVUtJUjlTbWVwdUNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8yY2M0MTktOGUzNC00MWE5LWIyNDMtODU1NDE4ZmZlZDQx LzEvVlBoN1dtTEJfdzlTS0JMcHJkRjFhOGN6aE1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBucCqMA0E AgACMAcDBQAqBl0HMA0GCSqGSIb3DQEBCwUAA4IBAQAXQq31pvNWV2sgF2zLoKKb T5tPxOaIVVR9NAtoWie5paAIoWONzhWw4pU4mSb3+GkJ4DaBHiwvvjsqRp+0XHIY IiEObi3wpCXUR7xt0TiFrnsGK6qSsyidslfdb1IWcc7/EwwtCrkNSAZC/z116ckw 6NhZ7f/HMTWCmR+02Lz5knEVNw5P26uYbGWvxltv7Dm2kstfXNes1pAnmPRFmVH/ 8vMI8mdGotmfGD3lZ3IgIjfLGQDXKw5fo7EI4kxSgJdCbm6RTwHKY44XBphtCZn2 Ud/D8LQE2Wxas9ySTI8uRE5nRdUI4VBKkFGqNFSwjsVt2kqhLv1mkvgQ3qvldXTX -----END CERTIFICATE-----Generated at Sun Jan 25 17:00:28 2026 by rpki-client