This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/7cFFSltaTzKar_lekHqmoQLmOjY.roa File: 7cFFSltaTzKar_lekHqmoQLmOjY.roa (raw, json) Hash identifier: qmBTDHWY1/L+M5j3+Gq1o691+G2ktSyrcJHxvmERmfA= Subject key identifier: ED:C1:45:4A:5B:5A:4F:32:9A:AF:F9:5E:90:7A:A6:A1:02:E6:3A:36 Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 019B7E38E2C4F79587031015F5348BA1A0BB Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/7cFFSltaTzKar_lekHqmoQLmOjY.roa Signing time: Fri 02 Jan 2026 10:20:15 +0000 ROA not before: Fri 02 Jan 2026 10:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397241 IP address blocks: 37.209.192.0/24 maxlen: 24 37.209.194.0/24 maxlen: 24 37.209.196.0/24 maxlen: 24 37.209.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e2:c4:f7:95:87:03:10:15:f5:34:8b:a1:a0:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Jan 2 10:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edc1454a5b5a4f329aaff95e907aa6a102e63a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cf:94:ee:ea:02:c8:9e:13:67:0e:7f:ce:78: 69:13:c3:bd:09:d8:f7:a5:36:55:12:70:17:b0:86: d2:48:ca:1f:53:59:74:c4:9d:11:83:26:62:c2:37: dc:4b:33:4a:85:8c:c1:51:8c:a9:3a:0c:5c:f0:f3: 77:2e:69:ea:03:db:53:e8:f9:cb:bf:fc:a0:93:4f: 11:53:8c:05:7b:e9:a4:f8:7e:36:84:62:02:f9:79: aa:b7:03:01:86:97:b0:af:ff:b8:f5:de:21:47:81: b7:8d:62:11:fb:70:2d:2a:0b:4e:83:e4:c2:3e:ab: 60:fb:22:89:28:9f:ac:6f:d4:49:b2:f1:d0:21:e2: bd:df:25:7a:67:af:89:f6:9d:4d:01:27:6d:c1:a7: d9:9e:60:a9:ce:e0:88:4b:b0:75:7c:a9:bf:b6:91: 5b:27:84:e7:2a:1a:bd:40:34:f8:fc:4f:60:26:96: c9:9b:e6:83:8b:1e:a4:ba:99:6a:db:5f:e8:8e:ed: 13:80:69:5e:10:a8:83:fc:56:aa:c4:70:b5:3d:80: 01:32:99:73:8d:dc:27:4f:03:4a:f5:11:1d:73:dd: ff:b7:f2:a0:f5:61:ac:d7:42:b7:ad:41:34:a9:ba: a8:eb:ff:9b:1f:57:51:ef:f1:26:5d:a9:a7:4d:8f: ab:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C1:45:4A:5B:5A:4F:32:9A:AF:F9:5E:90:7A:A6:A1:02:E6:3A:36 X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/7cFFSltaTzKar_lekHqmoQLmOjY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.192.0/24 37.209.194.0/24 37.209.196.0/24 37.209.198.0/24 Signature Algorithm: sha256WithRSAEncryption 48:f6:37:df:ed:8d:9f:95:1b:74:80:4a:c1:35:d4:b3:ec:37: 65:b2:66:d9:3c:d1:8c:03:6d:39:e0:83:ef:3c:ad:88:2a:f8: 20:7a:3c:49:07:33:9f:f8:b3:b3:58:6a:08:16:12:3d:f6:e5: 6f:22:41:e2:55:24:c6:94:19:1a:b4:d9:15:31:a1:49:05:84: 55:ee:2e:7f:15:b0:8d:63:d9:e1:30:28:80:69:0a:86:7e:66: b4:3c:34:cf:5a:55:98:8a:fc:f0:b3:5d:72:c4:85:74:8a:0e: 47:57:73:6f:77:9d:98:a2:9c:39:e7:dd:95:c9:25:90:53:c2: da:6d:fd:11:f9:5b:52:44:ed:b4:a6:8b:29:89:c9:8c:4b:b3: d4:bf:89:bd:27:6f:30:7d:dd:95:08:4d:e6:74:bc:7c:28:01: 8d:53:84:a6:6f:6e:62:42:ae:d8:83:a7:2d:c0:c3:14:0e:be: 88:f9:cd:44:c9:1e:e8:61:0f:f4:e9:4c:3f:ba:96:74:76:32: 8b:25:23:d3:05:35:0b:0a:8d:8c:50:80:03:e0:68:c0:fd:a2: 00:04:1b:a6:c5:78:a7:94:ab:f2:3a:ed:81:ff:dc:f9:c9:4b: 71:4d:57:a8:84:1f:70:eb:ce:52:cd:6c:c5:ae:99:d0:fd:e6: 06:20:fc:08 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+OOLE95WHAxAV9TSLoaC7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjYwMTAyMTAyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGMxNDU0YTViNWE0ZjMyOWFhZmY5NWU5MDdhYTZhMTAyZTYzYTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos+U7uoCyJ4TZw5/znhpE8O9Cdj3 pTZVEnAXsIbSSMofU1l0xJ0RgyZiwjfcSzNKhYzBUYypOgxc8PN3LmnqA9tT6PnL v/ygk08RU4wFe+mk+H42hGIC+XmqtwMBhpewr/+49d4hR4G3jWIR+3AtKgtOg+TC Pqtg+yKJKJ+sb9RJsvHQIeK93yV6Z6+J9p1NASdtwafZnmCpzuCIS7B1fKm/tpFb J4TnKhq9QDT4/E9gJpbJm+aDix6kuplq21/oju0TgGleEKiD/FaqxHC1PYABMplz jdwnTwNK9REdc93/t/Kg9WGs10K3rUE0qbqo6/+bH1dR7/EmXamnTY+reQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFO3BRUpbWk8ymq/5XpB6pqEC5jo2MB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvN2NGRlNsdGFUekthcl9sZWtIcW1vUUxtT2pZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQBI9jff7Y2flRt0gErB NdSz7DdlsmbZPNGMA2054IPvPK2IKvggejxJBzOf+LOzWGoIFhI99uVvIkHiVSTG lBkatNkVMaFJBYRV7i5/FbCNY9nhMCiAaQqGfma0PDTPWlWYivzws11yxIV0ig5H V3Nvd52Yopw5592VySWQU8Labf0R+VtSRO20pospicmMS7PUv4m9J28wfd2VCE3m dLx8KAGNU4Smb25iQq7Yg6ctwMMUDr6I+c1EyR7oYQ/06Uw/upZ0djKLJSPTBTUL Co2MUIAD4GjA/aIABBumxXinlKvyOu2B/9z5yUtxTVeohB9w685SzWzFrpnQ/eYG IPwI -----END CERTIFICATE-----Generated at Sun Jan 25 10:38:01 2026 by rpki-client