This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/R7rOqqQV9FpDCZLBm9QH6KbRejI.roa File: R7rOqqQV9FpDCZLBm9QH6KbRejI.roa (raw, json) Hash identifier: mcqImNWLjpTecGkgufT+Ix02VEv/VipznJBswQOZYeo= Subject key identifier: 47:BA:CE:AA:A4:15:F4:5A:43:09:92:C1:9B:D4:07:E8:A6:D1:7A:32 Certificate issuer: /CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41 Certificate serial: 019B7E3855BBDDF8D70779F883744956896F Authority key identifier: C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/R7rOqqQV9FpDCZLBm9QH6KbRejI.roa Signing time: Fri 02 Jan 2026 10:19:39 +0000 ROA not before: Fri 02 Jan 2026 10:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197014 IP address blocks: 185.36.216.0/22 maxlen: 24 194.247.26.0/23 maxlen: 24 2001:67c:2024::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:55:bb:dd:f8:d7:07:79:f8:83:74:49:56:89:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41 Validity Not Before: Jan 2 10:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47baceaaa415f45a430992c19bd407e8a6d17a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f1:8f:87:f7:e5:54:be:54:2e:17:dc:aa:db: 84:3b:b4:1c:85:d8:49:18:aa:35:d1:63:5f:8b:6d: 30:fc:87:72:36:c8:ef:ab:70:67:3e:e1:af:da:96: 97:fa:ef:a5:07:21:b6:0a:a1:b6:d6:ad:4f:77:19: dd:04:e1:b3:94:2f:92:fb:1e:19:b4:61:1f:29:a7: 53:67:fc:f1:7a:e6:83:64:cd:3f:50:02:ac:b3:f9: 46:e7:cd:cb:e8:3a:18:14:65:44:b8:9a:cc:77:a2: be:09:ab:ec:ef:81:e9:23:ac:59:4d:7f:44:7d:f3: 81:38:56:36:d7:f8:46:fa:ab:5a:86:3a:8d:bb:fd: 77:61:3e:ad:f8:a3:1d:91:7c:bb:31:14:cb:c1:3d: 38:e6:3a:7e:5d:dc:68:0a:e5:7e:68:41:80:13:ae: 00:e3:ad:aa:e6:99:c9:b6:81:31:a8:6d:9b:1d:6e: f4:9a:24:a6:6c:b4:af:d0:87:fc:0d:7e:48:83:dd: 84:1e:a4:26:9f:83:a1:35:52:da:11:0c:33:28:4b: 35:e7:e0:33:ea:aa:5e:8a:0e:30:cf:dc:df:b6:18: 26:5f:d8:bb:8f:7d:8c:00:10:de:cb:ee:39:f7:77: f2:97:30:33:b9:8e:24:3c:88:29:a5:62:e3:69:9c: b2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BA:CE:AA:A4:15:F4:5A:43:09:92:C1:9B:D4:07:E8:A6:D1:7A:32 X509v3 Authority Key Identifier: keyid:C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/R7rOqqQV9FpDCZLBm9QH6KbRejI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.36.216.0/22 194.247.26.0/23 IPv6: 2001:67c:2024::/48 Signature Algorithm: sha256WithRSAEncryption 85:e5:0d:38:1e:1c:3b:d8:8b:26:56:80:cd:92:72:8c:fb:28: c5:1d:c8:a5:77:79:98:b3:3a:a1:64:3b:da:63:88:96:18:e8: db:34:cd:ea:bb:ad:dd:bd:bf:72:61:8b:d1:c7:37:cf:f0:ce: 65:29:cb:ee:b8:3d:5e:f4:2e:f2:13:bf:6a:57:e2:c1:6f:eb: 8f:d6:f8:4f:47:b3:96:6c:3f:ad:2a:83:2f:79:43:ec:19:59: a7:92:f2:f8:b9:00:18:ef:42:8c:87:fe:12:b1:12:0b:b6:b3: f5:b9:ed:60:ee:7f:38:3e:63:bd:01:2d:6e:a2:f1:bd:d1:0f: 81:18:e5:12:21:59:d7:49:e8:47:45:75:17:d2:eb:68:11:71: 04:6a:aa:ba:fc:c1:58:53:7d:ee:40:3b:c7:d4:26:49:39:e1: 21:41:cf:93:bc:11:c2:9a:61:54:47:61:cb:9a:ea:46:5d:32: 67:a7:3f:7b:75:90:bd:cc:90:56:c8:bc:a6:89:8e:bc:db:3a: 42:46:25:96:b6:00:18:26:4b:2f:72:62:07:74:6f:f9:82:d3: fb:9e:42:78:e3:ec:e7:e8:56:5e:af:6e:3f:ac:94:c0:9f:05: d5:f9:53:90:fa:9b:8b:70:4f:61:b2:e7:fa:c7:bf:ea:e2:d6: da:38:a7:73 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt+OFW73fjXB3n4g3RJVolvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5NDcwYWU0MThlZWRkZDZiMzlkYWU5ZTdhMTc3YTE5Yzc3 OTljNDEwHhcNMjYwMTAyMTAxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2JhY2VhYWE0MTVmNDVhNDMwOTkyYzE5YmQ0MDdlOGE2ZDE3YTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fGPh/flVL5ULhfcqtuEO7QchdhJ GKo10WNfi20w/IdyNsjvq3BnPuGv2paX+u+lByG2CqG21q1PdxndBOGzlC+S+x4Z tGEfKadTZ/zxeuaDZM0/UAKss/lG583L6DoYFGVEuJrMd6K+Cavs74HpI6xZTX9E ffOBOFY21/hG+qtahjqNu/13YT6t+KMdkXy7MRTLwT045jp+XdxoCuV+aEGAE64A 462q5pnJtoExqG2bHW70miSmbLSv0If8DX5Ig92EHqQmn4OhNVLaEQwzKEs15+Az 6qpeig4wz9zfthgmX9i7j32MABDey+4593fylzAzuY4kPIgppWLjaZyyFQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFEe6zqqkFfRaQwmSwZvUB+im0XoyMB8GA1UdIwQY MBaAFMlHCuQY7t3Ws52unnoXehnHeZxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVVjSzVCanUzZGF6bmE2ZWVoZDZHY2Q1bkVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jZTAyMmQtZDhkYi00NDU5LWJlMWMt YjA5MTIxNWQ1ZTRkLzEvUjdyT3FxUVY5RnBEQ1pMQm05UUg2S2JSZWpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9jZTAyMmQtZDhkYi00NDU5LWJlMWMtYjA5MTIxNWQ1ZTRk LzEveVVjSzVCanUzZGF6bmE2ZWVoZDZHY2Q1bkVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCuSTYAwQB wvcaMA8EAgACMAkDBwAgAQZ8ICQwDQYJKoZIhvcNAQELBQADggEBAIXlDTgeHDvY iyZWgM2Scoz7KMUdyKV3eZizOqFkO9pjiJYY6Ns0zeq7rd29v3Jhi9HHN8/wzmUp y+64PV70LvITv2pX4sFv64/W+E9Hs5ZsP60qgy95Q+wZWaeS8vi5ABjvQoyH/hKx Egu2s/W57WDufzg+Y70BLW6i8b3RD4EY5RIhWddJ6EdFdRfS62gRcQRqqrr8wVhT fe5AO8fUJkk54SFBz5O8EcKaYVRHYcua6kZdMmenP3t1kL3MkFbIvKaJjrzbOkJG JZa2ABgmSy9yYgd0b/mC0/ueQnjj7OfoVl6vbj+slMCfBdX5U5D6m4twT2Gy5/rH v+ri1to4p3M= -----END CERTIFICATE-----Generated at Sun Jan 25 16:34:20 2026 by rpki-client