This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/7a3jx1e7OA1EvpScFrXmNMe5y_M.roa File: 7a3jx1e7OA1EvpScFrXmNMe5y_M.roa (raw, json) Hash identifier: tYNpUtLbZOwbXL/8gGlkXA0JhxkITkZz7z+FpesOG/s= Subject key identifier: ED:AD:E3:C7:57:BB:38:0D:44:BE:94:9C:16:B5:E6:34:C7:B9:CB:F3 Certificate issuer: /CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029 Certificate serial: 019B78A21163FA909B092315E924836FAE72 Authority key identifier: 65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/7a3jx1e7OA1EvpScFrXmNMe5y_M.roa Signing time: Thu 01 Jan 2026 08:17:25 +0000 ROA not before: Thu 01 Jan 2026 08:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30870 IP address blocks: 84.244.153.0/24 maxlen: 24 84.244.170.0/23 maxlen: 23 84.244.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:11:63:fa:90:9b:09:23:15:e9:24:83:6f:ae:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029 Validity Not Before: Jan 1 08:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edade3c757bb380d44be949c16b5e634c7b9cbf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e4:75:94:a2:fc:2c:42:36:b2:15:4b:18:7d: 72:78:6c:f5:ec:dc:a6:73:67:a4:6d:61:9e:a1:1f: c1:68:c1:6b:e3:32:a8:41:9d:37:49:7c:e4:fb:23: 7d:cb:ea:22:0d:5d:cf:67:34:47:9c:d7:4b:88:1f: 13:5c:41:51:4d:a8:72:54:b4:d5:90:98:ed:90:e2: 60:55:c6:6d:81:d3:30:cf:08:86:c2:78:45:c2:b3: 6b:5e:d1:2f:c2:64:45:03:e4:76:e0:73:df:40:df: d3:12:49:73:ce:3c:25:72:59:0c:7e:bf:da:ab:b5: 45:5c:fc:04:03:79:f3:1f:8f:ab:7a:31:c5:20:9c: 1e:b6:62:d1:23:24:8e:32:a0:25:5d:01:9a:3d:e7: e6:c5:9c:03:52:ac:1a:6f:a1:92:ff:07:e6:63:c5: b0:1b:24:74:aa:de:49:b1:3c:d9:7c:06:a8:28:0b: 4c:26:31:37:3e:60:9c:de:15:c4:af:5c:97:b7:e7: b5:da:3a:8a:54:0e:43:1f:fb:7c:74:53:31:96:8d: b7:81:31:34:bc:b5:d7:b0:0b:94:66:7a:ce:59:2c: 93:0b:1c:9a:53:e4:09:47:b4:3f:a1:b1:dc:e6:b7: 4b:7d:83:b7:15:d8:7a:45:cc:14:25:40:2a:4d:3f: 48:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:AD:E3:C7:57:BB:38:0D:44:BE:94:9C:16:B5:E6:34:C7:B9:CB:F3 X509v3 Authority Key Identifier: keyid:65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/7a3jx1e7OA1EvpScFrXmNMe5y_M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.244.153.0/24 84.244.170.0-84.244.172.255 Signature Algorithm: sha256WithRSAEncryption 5e:21:b5:8b:c1:b6:9e:fa:38:c3:84:12:bd:db:de:45:95:31: 27:7d:8d:ad:d0:2c:e2:da:62:2a:14:f3:5f:82:2c:bd:d6:41: a8:53:77:24:86:27:f2:62:95:2a:a3:52:24:5b:d2:8c:17:01: 12:d9:d8:71:ff:96:f1:21:6a:eb:a4:67:6e:bc:7f:56:9a:1f: 03:8d:6a:da:ac:8a:d3:39:b0:53:0c:79:ff:34:6d:a6:c7:a5: 12:1f:b5:4b:49:55:e9:07:0a:63:e1:dd:ba:c3:c5:ee:49:a0: 03:51:08:49:21:67:47:94:a8:5d:e7:d7:d0:df:42:72:22:3c: a5:b4:da:93:88:d0:29:0e:bb:c7:0e:33:22:ff:df:14:10:cc: 1d:c6:63:61:21:29:44:d3:8c:af:16:11:ee:4e:55:e7:2d:81: 08:cc:09:f1:e3:1a:6a:b2:67:33:dc:f9:3c:05:63:b4:50:a7: 37:dc:94:40:bb:b6:5b:e4:73:0f:b0:7b:6d:a2:97:0e:b0:3f: b1:fb:43:59:01:8b:f8:ff:db:99:2c:1b:96:54:32:62:6c:6d: e5:23:3f:1a:28:b2:97:dd:59:a2:8e:31:e6:f0:e5:56:f9:33: 61:13:75:8c:71:49:58:c0:68:00:e3:3a:43:ff:4c:7a:f2:bd: 16:24:1a:67 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt4ohFj+pCbCSMV6SSDb65yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MTFjZTVlMmY1M2I3YmI4Y2FjOGYzOWUyOTRlODlhNDVi MjAwMjkwHhcNMjYwMTAxMDgxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGFkZTNjNzU3YmIzODBkNDRiZTk0OWMxNmI1ZTYzNGM3YjljYmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouR1lKL8LEI2shVLGH1yeGz17Nym c2ekbWGeoR/BaMFr4zKoQZ03SXzk+yN9y+oiDV3PZzRHnNdLiB8TXEFRTahyVLTV kJjtkOJgVcZtgdMwzwiGwnhFwrNrXtEvwmRFA+R24HPfQN/TEklzzjwlclkMfr/a q7VFXPwEA3nzH4+rejHFIJwetmLRIySOMqAlXQGaPefmxZwDUqwab6GS/wfmY8Ww GyR0qt5JsTzZfAaoKAtMJjE3PmCc3hXEr1yXt+e12jqKVA5DH/t8dFMxlo23gTE0 vLXXsAuUZnrOWSyTCxyaU+QJR7Q/obHc5rdLfYO3Fdh6RcwUJUAqTT9IwwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFO2t48dXuzgNRL6UnBa15jTHucvzMB8GA1UdIwQY MBaAFGURzl4vU7e7jKyPOeKU6JpFsgApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlJIT1hpOVR0N3VNckk4NTRwVG9ta1d5QUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85MWIwOTMtYWNiNy00Y2I3LWJmOGYt NWNiOTM0YTU1YjBkLzEvN2EzangxZTdPQTFFdnBTY0ZyWG1OTWU1eV9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS85MWIwOTMtYWNiNy00Y2I3LWJmOGYtNWNiOTM0YTU1YjBk LzEvWlJIT1hpOVR0N3VNckk4NTRwVG9ta1d5QUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAVPSZMAwD BAFU9KoDBABU9KwwDQYJKoZIhvcNAQELBQADggEBAF4htYvBtp76OMOEEr3b3kWV MSd9ja3QLOLaYioU81+CLL3WQahTdySGJ/JilSqjUiRb0owXARLZ2HH/lvEhauuk Z268f1aaHwONatqsitM5sFMMef80babHpRIftUtJVekHCmPh3brDxe5JoANRCEkh Z0eUqF3n19DfQnIiPKW02pOI0CkOu8cOMyL/3xQQzB3GY2EhKUTTjK8WEe5OVect gQjMCfHjGmqyZzPc+TwFY7RQpzfclEC7tlvkcw+we22ilw6wP7H7Q1kBi/j/25ks G5ZUMmJsbeUjPxoospfdWaKOMebw5Vb5M2ETdYxxSVjAaADjOkP/THryvRYkGmc= -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:49 2026 by rpki-client