This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/7P6Im5vS7MUJ-yzLLIAK6fKBDP8.roa File: 7P6Im5vS7MUJ-yzLLIAK6fKBDP8.roa (raw, json) Hash identifier: 1brCRxslIloGUfdpm6U1pSbh0q8gMyESOmn7LpzNMpo= Subject key identifier: EC:FE:88:9B:9B:D2:EC:C5:09:FB:2C:CB:2C:80:0A:E9:F2:81:0C:FF Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378 Certificate serial: 019B7CEE57A36DC50A03D1B1A2691CD2190A Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/7P6Im5vS7MUJ-yzLLIAK6fKBDP8.roa Signing time: Fri 02 Jan 2026 04:19:13 +0000 ROA not before: Fri 02 Jan 2026 04:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21140 IP address blocks: 185.212.88.0/23 maxlen: 23 185.212.90.0/24 maxlen: 24 185.212.91.0/24 maxlen: 24 2a0b:7540::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:57:a3:6d:c5:0a:03:d1:b1:a2:69:1c:d2:19:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378 Validity Not Before: Jan 2 04:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ecfe889b9bd2ecc509fb2ccb2c800ae9f2810cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b7:9c:fc:d0:2b:c4:72:3f:6c:d4:ea:c5:54: bd:0f:9f:59:42:01:89:44:4d:bd:ef:e9:b9:55:6c: 28:74:3e:e4:24:2f:87:b6:4c:93:61:2e:4d:62:94: f1:6d:57:10:86:de:cf:cb:04:d9:62:5d:61:51:9d: ce:b8:05:12:a3:53:1a:32:e2:40:e1:aa:ef:ce:52: 02:8d:62:b1:3c:79:2f:fc:7d:1b:6b:ea:10:b4:ff: eb:2b:a7:80:15:62:f6:57:59:af:fc:fe:a4:c0:cd: 27:3b:c1:cd:9f:0a:aa:fc:a2:30:28:83:9f:4e:be: 85:9f:49:66:79:70:a6:2f:6a:ef:fd:24:fa:ae:da: 2c:02:b0:78:05:6b:f1:69:61:4e:17:61:a1:84:a6: 9d:53:05:89:85:1f:f5:43:7c:b3:b1:8f:b5:8f:7a: a9:f7:18:80:6e:d9:78:02:97:03:f2:20:15:fc:12: 82:34:2d:6d:a3:04:1a:f4:2b:a9:3b:0b:e0:df:0e: 75:38:a9:b9:b0:5b:f0:3d:77:43:12:62:e0:3b:53: e6:4a:36:6d:74:4f:bb:a1:cf:e9:24:61:9e:e7:db: 0a:8c:00:5f:0e:1d:8c:b9:0b:27:61:c7:84:4f:f6: 86:20:b2:de:af:18:7a:34:3a:6a:1e:d7:20:6d:e4: 64:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FE:88:9B:9B:D2:EC:C5:09:FB:2C:CB:2C:80:0A:E9:F2:81:0C:FF X509v3 Authority Key Identifier: keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/7P6Im5vS7MUJ-yzLLIAK6fKBDP8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.212.88.0/22 IPv6: 2a0b:7540::/29 Signature Algorithm: sha256WithRSAEncryption 30:b3:e5:f5:33:f3:de:6c:9e:eb:fa:a3:6d:e3:cf:6e:bb:d4: f1:71:3c:69:ac:7a:bd:00:42:24:73:48:7c:c6:f0:b9:40:d7: a3:f3:72:86:82:e6:30:36:7b:19:7d:ad:c0:e7:3e:96:fa:aa: c9:4f:35:af:5b:44:ac:2a:86:41:49:fb:7e:91:b1:42:1c:3c: 88:0f:55:be:58:7e:61:8d:66:66:83:f5:69:bf:f9:a4:76:ad: 4b:ee:66:3a:ca:26:1c:a6:72:d3:79:40:ef:9e:9e:a5:4a:13: 79:c8:9b:5c:7d:55:12:57:4f:11:d0:b0:d5:e4:90:30:c3:80: d5:b2:f1:fb:e1:6e:63:e8:29:2f:2c:e6:1d:54:24:cc:36:b5: 78:e9:21:48:96:3c:85:e9:2c:fc:d3:a8:fd:63:c5:9e:15:8e: 97:32:a9:98:2f:1a:b7:3a:c1:ce:73:fe:df:97:20:43:9f:b1: 5d:e1:82:dd:d2:c9:d4:60:43:f6:74:e3:75:e6:65:a2:77:a3: 2f:1a:a6:ea:d2:1c:e0:b5:70:d0:b8:03:cb:2d:15:46:4c:54: df:c1:b2:63:e1:59:9e:e9:2c:05:f0:31:f1:36:ce:95:9b:98: 89:1f:e8:a3:1a:ca:1a:41:62:29:9a:54:ef:d4:4f:54:55:ab: 09:7f:04:78 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87lejbcUKA9Gxomkc0hkKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzcxOTYzNDBkMjE0NGI4Y2E3YjA3Nzg5ODRiYjA0YmMx Y2IzNzgwHhcNMjYwMTAyMDQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2ZlODg5YjliZDJlY2M1MDlmYjJjY2IyYzgwMGFlOWYyODEwY2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bec/NArxHI/bNTqxVS9D59ZQgGJ RE297+m5VWwodD7kJC+HtkyTYS5NYpTxbVcQht7PywTZYl1hUZ3OuAUSo1MaMuJA 4arvzlICjWKxPHkv/H0ba+oQtP/rK6eAFWL2V1mv/P6kwM0nO8HNnwqq/KIwKIOf Tr6Fn0lmeXCmL2rv/ST6rtosArB4BWvxaWFOF2GhhKadUwWJhR/1Q3yzsY+1j3qp 9xiAbtl4ApcD8iAV/BKCNC1towQa9CupOwvg3w51OKm5sFvwPXdDEmLgO1PmSjZt dE+7oc/pJGGe59sKjABfDh2MuQsnYceET/aGILLerxh6NDpqHtcgbeRk/QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOz+iJub0uzFCfssyyyACunygQz/MB8GA1UdIwQY MBaAFAp3GWNA0hRLjKewd4mEuwS8HLN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80OTg5YmEtOWFmMy00ZTNkLTg0NWQt ZWI5NzcxNjRhN2U0LzEvN1A2SW01dlM3TVVKLXl6TExJQUs2ZktCRFA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS80OTg5YmEtOWFmMy00ZTNkLTg0NWQtZWI5NzcxNjRhN2U0 LzEvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudRYMA0E AgACMAcDBQMqC3VAMA0GCSqGSIb3DQEBCwUAA4IBAQAws+X1M/PebJ7r+qNt489u u9TxcTxprHq9AEIkc0h8xvC5QNej83KGguYwNnsZfa3A5z6W+qrJTzWvW0SsKoZB Sft+kbFCHDyID1W+WH5hjWZmg/Vpv/mkdq1L7mY6yiYcpnLTeUDvnp6lShN5yJtc fVUSV08R0LDV5JAww4DVsvH74W5j6CkvLOYdVCTMNrV46SFIljyF6Sz806j9Y8We FY6XMqmYLxq3OsHOc/7flyBDn7Fd4YLd0snUYEP2dON15mWid6MvGqbq0hzgtXDQ uAPLLRVGTFTfwbJj4Vme6SwF8DHxNs6Vm5iJH+ijGsoaQWIpmlTv1E9UVasJfwR4 -----END CERTIFICATE-----Generated at Mon Jan 26 00:59:34 2026 by rpki-client