This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/7GdR-ztaTRn19Yt-WsmRIgRVujQ.roa File: 7GdR-ztaTRn19Yt-WsmRIgRVujQ.roa (raw, json) Hash identifier: HfZCjmrWqajO9olTomgs0/tEbACxzkhacfiOTO+EKaQ= Subject key identifier: EC:67:51:FB:3B:5A:4D:19:F5:F5:8B:7E:5A:C9:91:22:04:55:BA:34 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B775948D2005A7F9D95565BF1D9410DD3 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/7GdR-ztaTRn19Yt-WsmRIgRVujQ.roa Signing time: Thu 01 Jan 2026 02:18:18 +0000 ROA not before: Thu 01 Jan 2026 02:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39385 IP address blocks: 94.176.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:48:d2:00:5a:7f:9d:95:56:5b:f1:d9:41:0d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec6751fb3b5a4d19f5f58b7e5ac991220455ba34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e6:e9:b5:45:25:f8:3f:e8:85:40:fa:e8:30: f3:fc:92:6f:cf:b5:af:4d:ec:94:08:94:63:0f:ae: 05:9c:bf:2b:55:f1:e7:42:09:88:f2:ff:b9:30:75: 62:dc:ba:74:c2:a0:b9:59:eb:f2:03:3a:d3:c0:81: 78:4b:bb:54:69:35:f2:26:bb:e1:6a:11:a7:1e:82: 74:f8:6f:30:a6:c1:68:a6:79:ee:f8:35:43:05:9e: 8c:28:e5:af:db:8b:66:19:1c:5c:5b:f8:f8:de:f5: d8:76:ba:16:18:41:a3:e6:50:7a:eb:5c:7d:b4:3d: 63:f6:9f:99:05:71:c3:9d:66:72:9e:7d:7b:3b:be: c8:d2:96:a4:fa:18:22:19:0a:e8:19:4d:de:2b:e7: 1b:83:b9:e2:50:25:d4:44:84:f4:9e:31:79:68:8f: a2:53:52:b2:54:cb:93:f9:54:44:01:51:49:17:d4: 3c:d0:94:e5:26:a9:6e:a4:65:79:70:d5:4a:61:23: 1d:a2:e1:97:0c:93:09:36:3a:b4:34:da:e5:77:39: a2:e9:a5:aa:e8:e1:ea:b9:96:73:76:b0:98:75:28: f0:9d:0b:70:61:ce:5d:07:8e:cf:2c:84:8c:d4:ee: b7:96:d7:1a:65:42:23:da:e5:87:ac:b2:ad:cb:eb: 4b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:67:51:FB:3B:5A:4D:19:F5:F5:8B:7E:5A:C9:91:22:04:55:BA:34 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/7GdR-ztaTRn19Yt-WsmRIgRVujQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.176.135.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:14:ef:92:03:17:8b:b2:26:e1:c2:a2:7b:4e:b3:5e:6d:09: 41:2f:12:ae:67:fb:c0:05:6b:ea:5d:52:dd:c7:4e:88:bb:e3: 32:aa:a7:33:5b:72:04:22:d7:7e:55:87:37:0b:a2:50:99:97: fc:52:5c:12:40:d6:a6:1e:f1:ef:4d:2b:d1:03:e7:73:a2:89: 98:46:78:52:56:f1:74:19:bb:7f:b4:72:49:00:fe:78:aa:c0: c2:dd:2d:9e:34:1c:f9:d3:d9:a5:01:5a:4c:a0:0f:1a:c3:bb: c6:bf:9b:8d:83:b8:95:50:0b:d1:8a:12:09:0b:1b:13:c3:95: b4:b8:56:a0:24:7f:9e:e4:10:05:c6:4d:f0:03:c5:43:b0:13: 86:61:e7:d6:96:1a:d8:e8:0d:f9:11:3c:31:7f:1a:39:69:ee: 94:d3:57:24:1f:74:49:ee:cf:68:d0:3a:5d:db:87:f4:4c:81: 56:4f:00:af:cd:23:4e:4d:d3:a4:c7:7e:98:6a:7a:21:b8:63: 6b:79:ea:99:0f:41:4f:0a:db:98:20:bc:68:33:ce:e9:7d:81: 6d:21:ef:a4:39:a7:5b:f9:39:9c:46:37:ba:70:38:f7:7a:04: 3f:ff:3c:13:37:23:e9:87:5f:fc:2c:26:f6:72:fc:42:e4:fe: 71:ff:71:d2 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WUjSAFp/nZVWW/HZQQ3TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzY3NTFmYjNiNWE0ZDE5ZjVmNThiN2U1YWM5OTEyMjA0NTViYTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsubptUUl+D/ohUD66DDz/JJvz7Wv TeyUCJRjD64FnL8rVfHnQgmI8v+5MHVi3Lp0wqC5WevyAzrTwIF4S7tUaTXyJrvh ahGnHoJ0+G8wpsFopnnu+DVDBZ6MKOWv24tmGRxcW/j43vXYdroWGEGj5lB661x9 tD1j9p+ZBXHDnWZynn17O77I0pak+hgiGQroGU3eK+cbg7niUCXURIT0njF5aI+i U1KyVMuT+VREAVFJF9Q80JTlJqlupGV5cNVKYSMdouGXDJMJNjq0NNrldzmi6aWq 6OHquZZzdrCYdSjwnQtwYc5dB47PLISM1O63ltcaZUIj2uWHrLKty+tLTQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFOxnUfs7Wk0Z9fWLflrJkSIEVbo0MB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xLzdHZFItenRhVFJuMTlZdC1Xc21SSWdSVnVqUS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABesIcw DQYJKoZIhvcNAQELBQADggEBAB0U75IDF4uyJuHContOs15tCUEvEq5n+8AFa+pd Ut3HToi74zKqpzNbcgQi135VhzcLolCZl/xSXBJA1qYe8e9NK9ED53OiiZhGeFJW 8XQZu3+0ckkA/niqwMLdLZ40HPnT2aUBWkygDxrDu8a/m42DuJVQC9GKEgkLGxPD lbS4VqAkf57kEAXGTfADxUOwE4Zh59aWGtjoDfkRPDF/Gjlp7pTTVyQfdEnuz2jQ Ol3bh/RMgVZPAK/NI05N06THfphqeiG4Y2t56pkPQU8K25ggvGgzzul9gW0h76Q5 p1v5OZxGN7pwOPd6BD//PBM3I+mHX/wsJvZy/ELk/nH/cdI= -----END CERTIFICATE-----Generated at Sun Jan 25 16:13:02 2026 by rpki-client