This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/7Z33QDavuHgd5c0lf13GqikH2Do.roa File: 7Z33QDavuHgd5c0lf13GqikH2Do.roa (raw, json) Hash identifier: Kdhm3RrxwQkPOHFJSAutIOPr9L0gtEsvyYYv5RdS4n8= Subject key identifier: ED:9D:F7:40:36:AF:B8:78:1D:E5:CD:25:7F:5D:C6:AA:29:07:D8:3A Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77593CC5AAC5268C8C30A870BF75A2F8 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/7Z33QDavuHgd5c0lf13GqikH2Do.roa Signing time: Thu 01 Jan 2026 02:18:15 +0000 ROA not before: Thu 01 Jan 2026 02:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6663 IP address blocks: 46.102.108.0/24 maxlen: 24 94.176.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:3c:c5:aa:c5:26:8c:8c:30:a8:70:bf:75:a2:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed9df74036afb8781de5cd257f5dc6aa2907d83a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:65:b0:5a:7d:e8:58:4b:ac:e3:96:8c:62:c1: 19:8a:fb:77:a1:39:5e:06:5d:7d:41:52:84:96:d9: ac:13:87:ab:c7:a3:34:4c:99:8b:eb:31:31:fe:c5: 78:88:05:e6:23:6e:b6:07:f0:a3:4c:e7:d9:69:1c: 1d:c9:49:1c:40:25:95:db:51:6d:32:8c:89:7a:e7: 93:00:9b:ad:22:2f:95:dc:ac:83:99:85:d6:49:5b: df:dd:81:63:33:b9:98:54:8f:8b:9a:87:7b:c1:09: 08:90:e4:75:c0:3c:70:47:e3:ba:bb:16:a8:d8:7c: ed:00:a8:9c:f5:34:20:a5:6c:ac:3c:53:24:b4:5a: d2:b3:ac:cb:5b:93:03:a0:75:2c:f2:7f:4d:a4:b2: 52:0f:92:3a:bb:86:04:8e:7b:fe:07:3a:7d:f8:a3: 4e:4e:4f:0c:85:81:97:ca:9a:6e:35:e7:86:ac:87: 8d:bc:08:e4:47:45:52:17:5f:42:29:66:77:5f:e5: 31:c2:63:c3:1b:f5:56:88:d3:62:7c:5a:02:de:af: e2:ef:f9:84:f6:f1:6c:b1:58:48:d7:61:32:9d:0a: 2d:52:e3:66:23:7c:79:08:20:fa:05:fe:25:cd:8d: 81:ae:a3:00:3e:53:5a:ba:63:2e:11:44:34:a5:51: 20:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9D:F7:40:36:AF:B8:78:1D:E5:CD:25:7F:5D:C6:AA:29:07:D8:3A X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/7Z33QDavuHgd5c0lf13GqikH2Do.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.102.108.0/24 94.176.5.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:92:27:f3:68:62:03:92:33:ff:f2:38:cd:a1:11:40:81:5a: e0:49:c9:2c:3a:85:d9:2c:55:a8:98:f5:98:fe:2e:16:2a:89: 37:f6:91:94:83:47:31:a6:c1:9b:7f:a3:95:6d:99:fe:a0:4d: e6:3a:3b:85:62:d7:b4:44:24:d3:e3:09:a2:f0:a5:d4:08:2d: f0:63:12:ad:ed:1e:5e:71:90:a3:0e:40:43:13:bf:da:61:23: 1a:db:30:e8:63:e6:0f:9d:65:15:0e:89:4f:cd:94:39:60:cf: 8f:a9:d0:cf:c6:8f:5e:9b:41:99:e6:99:d1:10:a5:19:83:97: 36:67:5e:8f:2b:de:a7:4e:5d:ac:7d:a4:e8:1c:82:14:cd:56: 5d:b5:0d:a8:71:c0:f3:c8:b9:45:21:73:f7:ee:fc:6c:a6:80: 51:94:0e:e4:9b:c6:a0:6d:74:f2:23:be:2d:34:9a:5c:df:08: 09:61:0c:aa:5c:a1:43:f3:a8:79:d9:47:19:9b:7d:80:6f:a8: 7d:a2:3b:49:e8:12:ce:bd:30:4c:64:db:41:4a:7d:3d:97:34: 3c:ce:d8:a2:f6:b9:ab:54:e6:54:80:c7:1d:6d:73:db:d8:2f: f3:83:01:80:58:40:4c:90:b7:ce:3b:b0:c8:55:8e:87:47:69: 1b:ce:13:33 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3WTzFqsUmjIwwqHC/daL4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDlkZjc0MDM2YWZiODc4MWRlNWNkMjU3ZjVkYzZhYTI5MDdkODNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GWwWn3oWEus45aMYsEZivt3oTle Bl19QVKEltmsE4erx6M0TJmL6zEx/sV4iAXmI262B/CjTOfZaRwdyUkcQCWV21Ft MoyJeueTAJutIi+V3KyDmYXWSVvf3YFjM7mYVI+Lmod7wQkIkOR1wDxwR+O6uxao 2HztAKic9TQgpWysPFMktFrSs6zLW5MDoHUs8n9NpLJSD5I6u4YEjnv+Bzp9+KNO Tk8MhYGXyppuNeeGrIeNvAjkR0VSF19CKWZ3X+UxwmPDG/VWiNNifFoC3q/i7/mE 9vFssVhI12EynQotUuNmI3x5CCD6Bf4lzY2BrqMAPlNaumMuEUQ0pVEgqQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFO2d90A2r7h4HeXNJX9dxqopB9g6MB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xLzdaMzNRRGF2dUhnZDVjMGxmMTNHcWlrSDJEby5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAAuZmwD BABesAUwDQYJKoZIhvcNAQELBQADggEBAB6SJ/NoYgOSM//yOM2hEUCBWuBJySw6 hdksVaiY9Zj+LhYqiTf2kZSDRzGmwZt/o5Vtmf6gTeY6O4Vi17REJNPjCaLwpdQI LfBjEq3tHl5xkKMOQEMTv9phIxrbMOhj5g+dZRUOiU/NlDlgz4+p0M/Gj16bQZnm mdEQpRmDlzZnXo8r3qdOXax9pOgcghTNVl21DahxwPPIuUUhc/fu/GymgFGUDuSb xqBtdPIjvi00mlzfCAlhDKpcoUPzqHnZRxmbfYBvqH2iO0noEs69MExk20FKfT2X NDzO2KL2uatU5lSAxx1tc9vYL/ODAYBYQEyQt847sMhVjodHaRvOEzM= -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:27 2026 by rpki-client