This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/7GThDk8oe1anAWQ0rTPx6LRtQ6c.roa File: 7GThDk8oe1anAWQ0rTPx6LRtQ6c.roa (raw, json) Hash identifier: iRRbFQJG6xoe4OVbXcwivJrfxU3PumSiuiBB4p39vuI= Subject key identifier: EC:64:E1:0E:4F:28:7B:56:A7:01:64:34:AD:33:F1:E8:B4:6D:43:A7 Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88 Certificate serial: 019B7DCAC0ACBB560FFDD2599FC621659C3E Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/7GThDk8oe1anAWQ0rTPx6LRtQ6c.roa Signing time: Fri 02 Jan 2026 08:19:58 +0000 ROA not before: Fri 02 Jan 2026 08:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58104 IP address blocks: 94.184.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:c0:ac:bb:56:0f:fd:d2:59:9f:c6:21:65:9c:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88 Validity Not Before: Jan 2 08:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec64e10e4f287b56a7016434ad33f1e8b46d43a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f0:18:4c:40:2b:30:95:4e:22:e1:0c:dd:5c: 8f:6c:d5:2c:1e:5f:59:dd:f3:12:6c:10:d7:ba:16: 3e:fa:c4:c4:2e:14:1c:58:5e:75:0b:fa:4b:7d:c5: e0:e4:66:4e:3b:e9:d6:a6:28:03:0e:42:0e:79:a9: d0:31:3f:f8:da:f1:9f:95:85:b8:7a:b6:f1:75:07: 84:87:d7:15:27:97:c2:54:03:8d:2e:89:6e:10:15: ed:9b:4c:8f:61:51:b4:89:63:b1:20:29:92:d8:40: 20:38:eb:60:7d:c9:6a:08:1f:05:14:42:e2:a0:9d: 7a:ec:c7:63:3e:d2:cd:0c:23:c4:03:5d:62:3a:d0: 77:5b:30:c5:a8:d4:a2:0b:a9:5e:0a:af:1b:26:0f: 8b:fe:9b:80:15:eb:8b:01:c2:28:16:0d:5a:fb:7f: 13:b7:dc:b9:6d:fc:28:c1:6a:19:06:3f:d7:2d:31: 85:a9:c4:b6:e1:80:80:d6:0b:14:94:a6:4b:44:3e: 11:7f:d7:6b:33:f1:c3:43:70:01:be:ca:e3:92:29: cd:12:6c:ed:37:15:87:05:7f:1c:2f:fc:00:f4:b5: 6a:18:d9:a6:19:2e:62:f7:af:93:e9:55:c5:be:e0: 60:01:31:de:5c:3e:36:6f:2e:89:e3:11:39:68:d5: 40:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:64:E1:0E:4F:28:7B:56:A7:01:64:34:AD:33:F1:E8:B4:6D:43:A7 X509v3 Authority Key Identifier: keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/7GThDk8oe1anAWQ0rTPx6LRtQ6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.184.88.0/22 Signature Algorithm: sha256WithRSAEncryption 98:27:53:3a:96:69:dc:b8:f8:fe:09:a2:25:17:20:f4:a4:3a: 14:8f:40:cf:39:06:77:92:a8:aa:d8:ef:5e:99:67:88:48:19: 4a:9e:f6:62:1d:43:59:36:82:f0:5d:98:fe:d2:a8:ea:c1:04: f4:3a:d3:54:e2:bb:bd:ad:93:01:05:ff:2a:7e:9b:e5:e9:7e: e9:66:9f:95:a0:ab:e0:94:b4:36:5a:63:43:09:6c:61:c4:f9: 20:d0:c5:05:43:9c:3b:10:0b:00:eb:70:1c:11:59:80:5c:b7: 50:31:92:63:98:1f:05:ea:19:6a:c5:2c:2f:f8:37:b5:2d:8a: 3a:56:b9:8b:01:62:9f:d1:59:fa:ab:27:e3:f3:4c:b2:62:fc: 99:d0:df:59:45:dc:24:29:8a:7d:ac:34:6e:a0:85:36:a5:47: 5a:1c:29:8d:7f:e3:7b:f0:c3:8a:17:49:97:17:26:96:e6:bd: 86:d0:7e:9e:ca:ac:ab:4d:43:d5:42:a2:f3:38:d5:88:d6:f9: f2:4c:3e:4a:38:ef:c1:22:e8:32:64:0f:b7:62:d9:6c:89:ae: 42:93:88:ea:15:9e:23:c4:8d:6b:1c:f6:01:30:4b:29:89:8a: e1:69:1f:88:84:99:00:75:f1:c8:24:62:01:fa:16:8c:57:fe: c2:80:01:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ysCsu1YP/dJZn8YhZZw+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3 YjBhODgwHhcNMjYwMTAyMDgxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzY0ZTEwZTRmMjg3YjU2YTcwMTY0MzRhZDMzZjFlOGI0NmQ0M2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/AYTEArMJVOIuEM3VyPbNUsHl9Z 3fMSbBDXuhY++sTELhQcWF51C/pLfcXg5GZOO+nWpigDDkIOeanQMT/42vGflYW4 erbxdQeEh9cVJ5fCVAONLoluEBXtm0yPYVG0iWOxICmS2EAgOOtgfclqCB8FFELi oJ167MdjPtLNDCPEA11iOtB3WzDFqNSiC6leCq8bJg+L/puAFeuLAcIoFg1a+38T t9y5bfwowWoZBj/XLTGFqcS24YCA1gsUlKZLRD4Rf9drM/HDQ3ABvsrjkinNEmzt NxWHBX8cL/wA9LVqGNmmGS5i96+T6VXFvuBgATHeXD42by6J4xE5aNVA+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOxk4Q5PKHtWpwFkNK0z8ei0bUOnMB8GA1UdIwQY MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt ZGE2MTUzODg1ZjNiLzEvN0dUaERrOG9lMWFuQVdRMHJUUHg2TFJ0UTZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXrhYMA0G CSqGSIb3DQEBCwUAA4IBAQCYJ1M6lmncuPj+CaIlFyD0pDoUj0DPOQZ3kqiq2O9e mWeISBlKnvZiHUNZNoLwXZj+0qjqwQT0OtNU4ru9rZMBBf8qfpvl6X7pZp+VoKvg lLQ2WmNDCWxhxPkg0MUFQ5w7EAsA63AcEVmAXLdQMZJjmB8F6hlqxSwv+De1LYo6 VrmLAWKf0Vn6qyfj80yyYvyZ0N9ZRdwkKYp9rDRuoIU2pUdaHCmNf+N78MOKF0mX FyaW5r2G0H6eyqyrTUPVQqLzONWI1vnyTD5KOO/BIugyZA+3Ytlsia5Ck4jqFZ4j xI1rHPYBMEspiYrhaR+IhJkAdfHIJGIB+haMV/7CgAH9 -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:21 2026 by rpki-client