This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7w0sEKKX4jkSRjHDVaUsU4gDkw0.roa File: 7w0sEKKX4jkSRjHDVaUsU4gDkw0.roa (raw, json) Hash identifier: CYs6G3yNQmL3kaHQtpcSQPydXb/BhS/89MLSg6RFw1c= Subject key identifier: EF:0D:2C:10:A2:97:E2:39:12:46:31:C3:55:A5:2C:53:88:03:93:0D Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F850A72C210EFB17E43B2E26149BC1C Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7w0sEKKX4jkSRjHDVaUsU4gDkw0.roa Signing time: Fri 02 Jan 2026 16:23:03 +0000 ROA not before: Fri 02 Jan 2026 16:23:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209932 IP address blocks: 146.120.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:0a:72:c2:10:ef:b1:7e:43:b2:e2:61:49:bc:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef0d2c10a297e239124631c355a52c538803930d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a4:6f:e6:53:ee:4e:9e:d3:6c:01:2c:3c:62: aa:70:e7:f9:7f:d2:de:e8:24:22:a8:f9:4c:18:be: 5e:0b:90:04:2c:ca:b9:8d:48:79:5c:ec:eb:b8:64: 84:c1:92:b9:fd:27:db:37:6c:ce:5b:57:53:09:a1: 44:57:fc:65:bf:15:7f:53:5e:cc:60:c3:3b:e0:f0: 4f:ef:e1:89:d4:05:b0:02:06:47:c9:f2:a0:1b:fe: 4c:16:78:4a:17:08:bd:e5:a2:b2:b4:55:b1:19:6b: 4a:3d:86:59:3a:b4:20:44:37:4d:79:6a:21:82:9a: 38:ec:d2:a8:20:2d:69:45:7c:19:23:73:ea:44:61: 15:7a:10:16:25:4a:bf:0f:1c:30:0f:70:ef:59:9c: ad:0a:0f:73:58:9f:39:47:77:43:74:63:0e:b7:e2: 7e:31:6e:28:2f:8a:d9:dd:ce:7c:ac:38:b4:33:95: 61:d5:4f:26:1e:ea:81:10:a5:f4:64:62:0b:37:f3: af:b6:95:f7:cd:cf:31:db:cd:d8:6c:b1:79:be:f8: 60:74:db:a5:fb:88:18:67:57:2a:07:63:e5:11:bb: ab:58:6a:5d:3b:e9:e9:43:b6:57:81:bf:a9:bb:c6: 34:54:03:db:04:f0:b6:30:ef:fb:09:bb:2b:e4:f7: 02:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:0D:2C:10:A2:97:E2:39:12:46:31:C3:55:A5:2C:53:88:03:93:0D X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7w0sEKKX4jkSRjHDVaUsU4gDkw0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.120.215.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:ad:bc:cd:2b:75:e5:f6:69:d9:80:59:bf:ff:97:75:9d:9c: 18:30:13:96:92:f3:c4:16:23:fe:df:d8:f4:d3:bb:81:f0:14: 3c:a4:97:af:0a:1c:35:f0:a1:a5:c8:47:3f:c5:2d:db:67:f9: 98:3d:ef:7e:bb:0b:61:4a:3c:2c:ea:5e:06:65:97:1d:93:ac: f2:91:b6:8d:53:8a:e7:67:81:1c:f0:73:9c:d6:f8:31:6d:66: a4:76:3f:c3:32:fe:c9:bd:d7:2d:73:72:39:38:7f:7e:75:79: 82:2f:ee:37:24:4c:77:24:eb:c8:c2:09:74:98:84:af:80:25: 16:31:8b:5a:da:a6:a2:d9:70:a7:01:53:9b:18:aa:a5:8c:cc: 08:1a:7a:5a:73:a7:cc:35:96:64:c9:a7:2f:0a:92:3e:70:b4: 88:de:0a:fc:29:97:bc:e9:64:d6:60:8f:d0:b3:ae:68:96:33: 0a:fd:fe:c7:be:e5:7e:46:93:ec:7b:3e:d0:77:43:91:a6:b3: 44:f9:74:16:36:1c:26:8b:55:61:94:be:33:52:40:60:98:b7: c1:1d:51:1e:ce:32:ad:e1:e6:72:fe:0c:b9:3f:5c:c2:53:7e: 45:6d:76:7e:d8:63:db:36:39:9a:9f:61:2d:36:32:b0:c7:99: 7c:d3:62:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hQpywhDvsX5DsuJhSbwcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjBkMmMxMGEyOTdlMjM5MTI0NjMxYzM1NWE1MmM1Mzg4MDM5MzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKRv5lPuTp7TbAEsPGKqcOf5f9Le 6CQiqPlMGL5eC5AELMq5jUh5XOzruGSEwZK5/SfbN2zOW1dTCaFEV/xlvxV/U17M YMM74PBP7+GJ1AWwAgZHyfKgG/5MFnhKFwi95aKytFWxGWtKPYZZOrQgRDdNeWoh gpo47NKoIC1pRXwZI3PqRGEVehAWJUq/DxwwD3DvWZytCg9zWJ85R3dDdGMOt+J+ MW4oL4rZ3c58rDi0M5Vh1U8mHuqBEKX0ZGILN/OvtpX3zc8x283YbLF5vvhgdNul +4gYZ1cqB2PlEburWGpdO+npQ7ZXgb+pu8Y0VAPbBPC2MO/7Cbsr5PcCzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO8NLBCil+I5EkYxw1WlLFOIA5MNMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvN3cwc0VLS1g0amtTUmpIRFZhVXNVNGdEa3cwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAknjXMA0G CSqGSIb3DQEBCwUAA4IBAQBKrbzNK3Xl9mnZgFm//5d1nZwYMBOWkvPEFiP+39j0 07uB8BQ8pJevChw18KGlyEc/xS3bZ/mYPe9+uwthSjws6l4GZZcdk6zykbaNU4rn Z4Ec8HOc1vgxbWakdj/DMv7Jvdctc3I5OH9+dXmCL+43JEx3JOvIwgl0mISvgCUW MYta2qai2XCnAVObGKqljMwIGnpac6fMNZZkyacvCpI+cLSI3gr8KZe86WTWYI/Q s65oljMK/f7HvuV+RpPsez7Qd0ORprNE+XQWNhwmi1VhlL4zUkBgmLfBHVEezjKt 4eZy/gy5P1zCU35FbXZ+2GPbNjman2EtNjKwx5l802Jq -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:39 2026 by rpki-client