This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/7GoUojZZ6diF9qsUn9IS925PZ7o.roa File: 7GoUojZZ6diF9qsUn9IS925PZ7o.roa (raw, json) Hash identifier: Sz9PIg50qPliDwsm2Y9z/qtxdUkq5QME6EMfyNzUMrk= Subject key identifier: EC:6A:14:A2:36:59:E9:D8:85:F6:AB:14:9F:D2:12:F7:6E:4F:67:BA Certificate issuer: /CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d Certificate serial: 019B797F0195959886C132A536F1B454E4F2 Authority key identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/7GoUojZZ6diF9qsUn9IS925PZ7o.roa Signing time: Thu 01 Jan 2026 12:18:45 +0000 ROA not before: Thu 01 Jan 2026 12:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61357 IP address blocks: 141.93.0.0/16 maxlen: 24 141.93.10.0/23 maxlen: 24 141.93.10.0/24 maxlen: 24 141.93.11.0/24 maxlen: 24 2a0d:f0c0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:01:95:95:98:86:c1:32:a5:36:f1:b4:54:e4:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d Validity Not Before: Jan 1 12:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec6a14a23659e9d885f6ab149fd212f76e4f67ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1e:3f:a4:ac:16:ab:8d:82:0a:11:39:16:ae: 2d:20:c6:3a:7c:43:21:50:21:32:f8:20:29:32:e0: c5:0b:ca:e0:0a:1c:0a:9f:c4:ab:47:6e:2d:e2:bb: 81:39:d5:4f:01:84:17:f0:1a:43:c7:3c:ca:45:6f: 31:b9:41:55:e0:24:64:46:e8:51:92:84:78:f2:d7: 47:37:99:1d:a1:8b:77:19:ff:9d:09:0f:bc:2a:f0: fe:4a:9a:5f:d2:aa:25:94:b8:68:af:07:a5:a4:38: 89:cb:19:3a:99:2c:08:39:83:4a:42:ed:33:bf:3f: 4d:e9:b4:ad:45:2e:d1:ca:8d:7a:5c:92:c7:c2:6f: 75:c1:12:81:d4:76:fb:e0:45:2c:6f:94:83:e0:78: 57:94:d6:c1:be:1f:1b:ea:85:d9:6d:a9:e6:cd:b0: f7:e6:ce:e3:17:5a:a8:ff:11:e9:04:01:63:ae:8e: f3:da:0e:36:f0:82:26:22:2e:f2:73:c3:22:14:55: 29:23:ce:d2:ca:49:d1:03:74:36:83:8c:29:8f:e8: b7:58:db:43:c3:aa:f2:d4:2b:12:ac:5b:3f:2f:e5: c3:e6:5d:01:6e:87:24:4d:40:6b:21:d9:82:10:58: e7:f9:4f:eb:fb:28:a4:54:69:32:a1:15:f0:08:e4: 92:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6A:14:A2:36:59:E9:D8:85:F6:AB:14:9F:D2:12:F7:6E:4F:67:BA X509v3 Authority Key Identifier: keyid:2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/7GoUojZZ6diF9qsUn9IS925PZ7o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.93.0.0/16 IPv6: 2a0d:f0c0::/29 Signature Algorithm: sha256WithRSAEncryption 16:d7:4d:9c:09:7c:48:b1:0b:e6:51:e5:55:e2:1d:ec:50:ac: c0:5c:7e:3f:10:7f:f9:9e:a0:a3:bc:1c:84:22:2c:11:c2:eb: a4:aa:84:0a:bb:ad:42:25:c0:4e:24:54:c9:1b:e5:c4:56:fa: b9:2e:d2:15:b1:4b:b4:b6:cd:ea:98:9d:3c:6f:40:a5:31:fd: 53:f0:b4:ab:f6:cd:81:f4:06:43:2b:6d:e4:47:9e:90:d6:73: 3d:92:06:b3:50:85:32:92:bf:d6:61:c2:89:14:9a:0d:be:0b: a7:02:00:cf:8c:fa:90:2d:de:b2:78:44:bc:c8:92:39:01:db: 05:f7:0c:84:87:61:0b:7b:7f:ab:9c:69:f2:1e:70:1a:44:80: d5:4b:b7:84:8c:fd:ad:de:15:2d:64:80:e5:8f:cd:9d:10:b1: 25:07:8c:7f:d2:1e:67:1a:df:89:2b:9f:b6:c3:bb:77:d8:41: 8f:a6:9c:82:96:33:29:bd:6c:55:23:23:60:86:e9:3f:43:61: 2d:c6:0c:2a:75:df:17:4b:5e:76:d0:a4:4d:40:22:0b:e6:d8: cc:79:e9:8a:d7:9d:17:e1:1f:42:91:32:01:9b:74:b7:ec:db: 25:a9:56:95:e1:2a:60:b9:a0:e4:d8:59:4c:66:0b:56:00:ed: c1:a3:04:49 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt5fwGVlZiGwTKlNvG0VOTyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMTE3YWRhM2NiOTUxNWE2ZDhhNmRjYzE1ZjJiMGIxYTdk OWJlMWQwHhcNMjYwMTAxMTIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzZhMTRhMjM2NTllOWQ4ODVmNmFiMTQ5ZmQyMTJmNzZlNGY2N2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB4/pKwWq42CChE5Fq4tIMY6fEMh UCEy+CApMuDFC8rgChwKn8SrR24t4ruBOdVPAYQX8BpDxzzKRW8xuUFV4CRkRuhR koR48tdHN5kdoYt3Gf+dCQ+8KvD+Sppf0qollLhorwelpDiJyxk6mSwIOYNKQu0z vz9N6bStRS7Ryo16XJLHwm91wRKB1Hb74EUsb5SD4HhXlNbBvh8b6oXZbanmzbD3 5s7jF1qo/xHpBAFjro7z2g428IImIi7yc8MiFFUpI87SyknRA3Q2g4wpj+i3WNtD w6ry1CsSrFs/L+XD5l0BbockTUBrIdmCEFjn+U/r+yikVGkyoRXwCOSSSQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFOxqFKI2WenYhfarFJ/SEvduT2e6MB8GA1UdIwQY MBaAFC8Reto8uVFabYptzBXysLGn2b4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhGNjJqeTVVVnB0aW0zTUZmS3dzYWZadmgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lZmY0NGQtMjRmZC00Mzg0LTk1MDct N2EwMzRkMTcwYjg1LzEvN0dvVW9qWlo2ZGlGOXFzVW45SVM5MjVQWjdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9lZmY0NGQtMjRmZC00Mzg0LTk1MDctN2EwMzRkMTcwYjg1 LzEvTHhGNjJqeTVVVnB0aW0zTUZmS3dzYWZadmgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDALBAIAATAFAwMAjV0wDQQC AAIwBwMFAyoN8MAwDQYJKoZIhvcNAQELBQADggEBABbXTZwJfEixC+ZR5VXiHexQ rMBcfj8Qf/meoKO8HIQiLBHC66SqhAq7rUIlwE4kVMkb5cRW+rku0hWxS7S2zeqY nTxvQKUx/VPwtKv2zYH0BkMrbeRHnpDWcz2SBrNQhTKSv9ZhwokUmg2+C6cCAM+M +pAt3rJ4RLzIkjkB2wX3DISHYQt7f6ucafIecBpEgNVLt4SM/a3eFS1kgOWPzZ0Q sSUHjH/SHmca34krn7bDu3fYQY+mnIKWMym9bFUjI2CG6T9DYS3GDCp13xdLXnbQ pE1AIgvm2Mx56YrXnRfhH0KRMgGbdLfs2yWpVpXhKmC5oOTYWUxmC1YA7cGjBEk= -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:56 2026 by rpki-client