This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/ckQTnkSUQPsSdshk8Omus99xebQ.roa File: ckQTnkSUQPsSdshk8Omus99xebQ.roa (raw, json) Hash identifier: MhtseyAntznzcttGsRLktO2yJXlkXfQDzN8JLV5mmTY= Subject key identifier: 72:44:13:9E:44:94:40:FB:12:76:C8:64:F0:E9:AE:B3:DF:71:79:B4 Certificate issuer: /CN=7a7cf1a2aa83b126ff4ceef473a47397abf8ff0d Certificate serial: 019B7D5C7C77D8D1EF168618A1D11D985C70 Authority key identifier: 7A:7C:F1:A2:AA:83:B1:26:FF:4C:EE:F4:73:A4:73:97:AB:F8:FF:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enzxoqqDsSb_TO70c6Rzl6v4_w0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/ckQTnkSUQPsSdshk8Omus99xebQ.roa Signing time: Fri 02 Jan 2026 06:19:31 +0000 ROA not before: Fri 02 Jan 2026 06:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201150 IP address blocks: 45.84.156.0/22 maxlen: 24 46.249.120.0/21 maxlen: 24 2a00:4c60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/enzxoqqDsSb_TO70c6Rzl6v4_w0.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/enzxoqqDsSb_TO70c6Rzl6v4_w0.mft rsync://rpki.ripe.net/repository/DEFAULT/enzxoqqDsSb_TO70c6Rzl6v4_w0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:7c:77:d8:d1:ef:16:86:18:a1:d1:1d:98:5c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a7cf1a2aa83b126ff4ceef473a47397abf8ff0d Validity Not Before: Jan 2 06:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7244139e449440fb1276c864f0e9aeb3df7179b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:64:ed:1e:85:22:6c:fa:1c:11:0e:dc:76:73: ea:68:57:79:f8:9e:f0:9d:12:48:47:69:e6:e0:8c: 6c:d8:6c:07:a1:8f:8c:ca:61:d8:9a:58:1a:bd:69: cb:98:94:c2:1e:4a:b3:54:2a:b0:9c:17:ae:e2:b1: 62:3d:f9:5b:25:f3:bc:d6:85:2e:77:4d:bc:84:c3: c4:fb:fe:43:dc:4e:fc:94:ba:fe:49:76:f3:71:52: 90:c0:48:07:1f:f3:94:9f:22:4e:12:36:0a:77:0a: a5:33:96:cb:d4:83:da:63:22:18:5f:f7:61:30:f5: 02:75:92:2e:0e:86:d6:21:00:fa:67:1a:b6:73:a4: 23:08:85:54:f7:a8:8a:08:98:60:83:17:26:33:0f: f8:1b:1c:a8:d7:e6:29:70:23:a9:63:eb:19:02:67: 63:d2:04:40:30:09:02:dd:9d:b3:85:d6:52:55:a5: 2d:a2:d8:1c:1a:e2:16:8b:f8:81:da:09:a0:e8:97: ac:be:48:af:bb:2b:5a:f9:d0:8d:8d:a5:7d:dd:c9: 6e:88:ea:0d:a0:9d:5b:a5:d3:66:8e:03:70:62:1a: 18:08:0b:b9:52:e4:e4:85:ef:90:18:b3:eb:7b:bd: e2:80:68:14:0a:85:cb:35:05:14:93:7f:4d:55:d2: f1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:44:13:9E:44:94:40:FB:12:76:C8:64:F0:E9:AE:B3:DF:71:79:B4 X509v3 Authority Key Identifier: keyid:7A:7C:F1:A2:AA:83:B1:26:FF:4C:EE:F4:73:A4:73:97:AB:F8:FF:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enzxoqqDsSb_TO70c6Rzl6v4_w0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/ckQTnkSUQPsSdshk8Omus99xebQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/enzxoqqDsSb_TO70c6Rzl6v4_w0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.156.0/22 46.249.120.0/21 IPv6: 2a00:4c60::/32 Signature Algorithm: sha256WithRSAEncryption 2e:20:eb:24:02:b7:c7:c8:38:12:c1:88:c4:11:b1:1e:c1:81: e6:55:14:2a:78:03:b2:75:55:5d:8b:6a:d8:df:85:6c:9b:81: 69:e6:76:5c:44:3b:8a:5c:10:26:35:65:ef:22:6c:90:14:62: 19:e2:51:45:7b:73:29:15:f2:93:bd:e6:bf:14:97:a0:6c:dd: 8a:6d:b5:14:2c:b2:13:c3:a0:f9:3d:7a:2a:5a:3f:37:f2:5c: fc:41:49:14:0d:0a:81:3f:7e:1d:f5:54:d5:93:a2:dd:99:f5: 03:d8:79:a7:90:65:2c:16:4c:4f:5e:39:b0:e7:c8:01:05:da: 19:90:89:bd:5d:df:ba:0d:3a:2e:8b:d0:3a:ba:71:64:95:fe: dc:1a:9f:c1:f5:ed:9f:c7:08:e0:92:5e:42:0c:4c:ed:93:28: ce:37:b5:57:58:f1:09:b6:5b:0d:aa:fc:39:b8:62:b3:cb:c0: 64:5f:ff:cc:61:5c:0f:7e:2c:c5:b2:fc:f9:e5:21:29:8d:54: 13:11:57:39:8d:61:f6:98:39:b9:1f:a0:c7:d2:f5:e1:5a:dd: ed:e3:50:8a:05:16:3f:96:5d:66:dd:aa:d0:36:e9:bb:da:3b: 5a:82:41:51:28:3f:d8:70:99:b7:05:49:ee:41:ee:c0:ef:84: 89:17:8b:6d -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9XHx32NHvFoYYodEdmFxwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhN2NmMWEyYWE4M2IxMjZmZjRjZWVmNDczYTQ3Mzk3YWJm OGZmMGQwHhcNMjYwMTAyMDYxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjQ0MTM5ZTQ0OTQ0MGZiMTI3NmM4NjRmMGU5YWViM2RmNzE3OWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmTtHoUibPocEQ7cdnPqaFd5+J7w nRJIR2nm4Ixs2GwHoY+MymHYmlgavWnLmJTCHkqzVCqwnBeu4rFiPflbJfO81oUu d028hMPE+/5D3E78lLr+SXbzcVKQwEgHH/OUnyJOEjYKdwqlM5bL1IPaYyIYX/dh MPUCdZIuDobWIQD6Zxq2c6QjCIVU96iKCJhggxcmMw/4Gxyo1+YpcCOpY+sZAmdj 0gRAMAkC3Z2zhdZSVaUtotgcGuIWi/iB2gmg6Jesvkivuyta+dCNjaV93cluiOoN oJ1bpdNmjgNwYhoYCAu5UuTkhe+QGLPre73igGgUCoXLNQUUk39NVdLxNwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFHJEE55ElED7EnbIZPDprrPfcXm0MB8GA1UdIwQY MBaAFHp88aKqg7Em/0zu9HOkc5er+P8NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW56eG9xcURzU2JfVE83MGM2UnpsNnY0X3cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84YWY4ZTYtMTljMS00YmUxLWFmMjMt MTk5MTZhNGFlZWIzLzEvY2tRVG5rU1VRUHNTZHNoazhPbXVzOTl4ZWJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84YWY4ZTYtMTljMS00YmUxLWFmMjMtMTk5MTZhNGFlZWIz LzEvZW56eG9xcURzU2JfVE83MGM2UnpsNnY0X3cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLVScAwQD Lvl4MA0EAgACMAcDBQAqAExgMA0GCSqGSIb3DQEBCwUAA4IBAQAuIOskArfHyDgS wYjEEbEewYHmVRQqeAOydVVdi2rY34Vsm4Fp5nZcRDuKXBAmNWXvImyQFGIZ4lFF e3MpFfKTvea/FJegbN2KbbUULLITw6D5PXoqWj838lz8QUkUDQqBP34d9VTVk6Ld mfUD2HmnkGUsFkxPXjmw58gBBdoZkIm9Xd+6DToui9A6unFklf7cGp/B9e2fxwjg kl5CDEztkyjON7VXWPEJtlsNqvw5uGKzy8BkX//MYVwPfizFsvz55SEpjVQTEVc5 jWH2mDm5H6DH0vXhWt3t41CKBRY/ll1m3arQNum72jtagkFRKD/YcJm3BUnuQe7A 74SJF4tt -----END CERTIFICATE-----Generated at Mon Jan 26 05:54:28 2026 by rpki-client