This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/7Qfl9Mds2YXiGHI1bUT6XiSxVL4.roa File: 7Qfl9Mds2YXiGHI1bUT6XiSxVL4.roa (raw, json) Hash identifier: q1b4P2s3t9bFP69gx0VvlkJ2k9wbhF00vIOXxyF0Vvc= Subject key identifier: ED:07:E5:F4:C7:6C:D9:85:E2:18:72:35:6D:44:FA:5E:24:B1:54:BE Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Certificate serial: 019B7F83E885573238B526EDA7EF98FEB4F4 Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/7Qfl9Mds2YXiGHI1bUT6XiSxVL4.roa Signing time: Fri 02 Jan 2026 16:21:49 +0000 ROA not before: Fri 02 Jan 2026 16:21:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204559 IP address blocks: 178.235.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:e8:85:57:32:38:b5:26:ed:a7:ef:98:fe:b4:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Validity Not Before: Jan 2 16:21:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed07e5f4c76cd985e21872356d44fa5e24b154be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:92:0d:ae:4a:cd:06:01:94:bc:f5:f7:79:45: 2c:66:cc:9e:b5:4b:c4:67:91:1d:5d:9d:79:a7:39: 6d:0d:cc:bc:ee:c2:8a:6e:e5:06:e4:c3:86:c3:4f: 63:e7:70:3c:50:f5:b4:04:ff:44:08:4c:4e:4a:80: 53:52:d2:9c:f5:84:4d:3b:57:33:58:5a:57:f6:05: 72:52:fc:13:be:2c:f4:0a:28:0b:98:ea:4e:2e:ad: d7:01:85:b2:84:99:fc:0b:db:ca:f6:d6:d4:00:c2: ed:77:de:71:45:35:21:85:c2:4e:38:a1:42:d5:18: fb:69:15:3a:44:a1:77:bf:05:84:a5:f8:1d:11:d2: 33:d2:87:7b:c0:e5:17:3f:4f:2a:f1:26:d7:40:96: e8:81:cf:89:e0:9b:1c:c8:08:46:9a:55:4d:17:4e: 60:f1:71:5e:96:6b:d6:81:82:c0:5e:28:fb:f8:33: b6:a5:94:a3:a8:0c:5f:eb:12:9f:54:d1:ef:91:97: 22:7f:c0:55:e3:36:d8:16:d0:1f:cd:dd:bc:1e:62: 57:5e:11:de:51:63:c2:88:e4:9f:2d:07:3c:69:04: 03:c4:2d:5c:7a:1c:ff:c0:0b:08:41:43:72:e3:52: 17:96:e8:9f:c4:43:7e:0e:aa:e3:bc:05:47:88:e5: 09:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:07:E5:F4:C7:6C:D9:85:E2:18:72:35:6D:44:FA:5E:24:B1:54:BE X509v3 Authority Key Identifier: keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/7Qfl9Mds2YXiGHI1bUT6XiSxVL4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.235.243.0/24 Signature Algorithm: sha256WithRSAEncryption 47:7b:10:a7:36:0a:9f:4d:44:0d:5b:a1:79:f4:8d:58:1a:a1: ea:84:a8:95:3a:90:78:ae:71:77:cc:81:bc:e1:10:17:fd:79: 2a:d5:af:d6:db:43:9a:d0:7c:cb:e2:23:c7:07:4c:60:61:07: 0d:86:74:41:ed:d6:97:f5:8a:ed:cd:4c:b8:a6:5d:ce:d8:ab: 74:83:1e:c6:22:99:29:04:59:17:d4:c5:00:71:ab:87:a1:48: 19:f2:1b:6b:d2:0b:20:99:1a:eb:5a:9b:f9:f5:12:28:d4:a1: ba:c8:da:4e:1e:2b:ca:a3:99:c7:d7:e6:cc:8a:f1:50:65:2a: c8:02:5e:28:c6:1a:e7:ea:7e:53:9d:7f:62:55:f6:f5:8f:e4: de:81:48:ad:24:8d:35:50:56:61:12:22:64:3d:03:63:70:6e: 4e:4d:ab:e6:ba:56:be:6e:70:61:cb:ad:3d:4b:21:85:9c:d0: 7e:26:9e:99:c8:8e:cb:7b:e5:5f:f5:ef:25:be:0d:07:d0:88: b7:04:a4:92:5e:d7:b1:fe:fb:28:d8:ff:c9:dc:c9:83:c8:42: a8:d0:99:8d:3b:21:7d:ca:cf:79:0a:93:e1:5b:8a:bd:00:7d: 5f:6a:d7:de:17:d5:1a:25:a0:09:bb:37:cd:5d:88:21:32:f3: b7:5a:d4:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g+iFVzI4tSbtp++Y/rT0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NTk2ZjFiMTYzY2FiMGM0NWE4NGVlYjEzMjYxYjY1ZjFh MjI5NjIwHhcNMjYwMTAyMTYyMTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDA3ZTVmNGM3NmNkOTg1ZTIxODcyMzU2ZDQ0ZmE1ZTI0YjE1NGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5INrkrNBgGUvPX3eUUsZsyetUvE Z5EdXZ15pzltDcy87sKKbuUG5MOGw09j53A8UPW0BP9ECExOSoBTUtKc9YRNO1cz WFpX9gVyUvwTviz0CigLmOpOLq3XAYWyhJn8C9vK9tbUAMLtd95xRTUhhcJOOKFC 1Rj7aRU6RKF3vwWEpfgdEdIz0od7wOUXP08q8SbXQJbogc+J4JscyAhGmlVNF05g 8XFelmvWgYLAXij7+DO2pZSjqAxf6xKfVNHvkZcif8BV4zbYFtAfzd28HmJXXhHe UWPCiOSfLQc8aQQDxC1cehz/wAsIQUNy41IXluifxEN+DqrjvAVHiOUJQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO0H5fTHbNmF4hhyNW1E+l4ksVS+MB8GA1UdIwQY MBaAFOZZbxsWPKsMRahO6xMmG2XxoiliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMt ZTA1MzRlMjM4NTliLzEvN1FmbDlNZHMyWVhpR0hJMWJVVDZYaVN4Vkw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMtZTA1MzRlMjM4NTli LzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsuvzMA0G CSqGSIb3DQEBCwUAA4IBAQBHexCnNgqfTUQNW6F59I1YGqHqhKiVOpB4rnF3zIG8 4RAX/Xkq1a/W20Oa0HzL4iPHB0xgYQcNhnRB7daX9YrtzUy4pl3O2Kt0gx7GIpkp BFkX1MUAcauHoUgZ8htr0gsgmRrrWpv59RIo1KG6yNpOHivKo5nH1+bMivFQZSrI Al4oxhrn6n5TnX9iVfb1j+TegUitJI01UFZhEiJkPQNjcG5OTavmula+bnBhy609 SyGFnNB+Jp6ZyI7Le+Vf9e8lvg0H0Ii3BKSSXtex/vso2P/J3MmDyEKo0JmNOyF9 ys95CpPhW4q9AH1fatfeF9UaJaAJuzfNXYghMvO3WtQ4 -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:45 2026 by rpki-client