This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/7tr02EpUIgM-HOku4hUZ5kLPFzU.roa File: 7tr02EpUIgM-HOku4hUZ5kLPFzU.roa (raw, json) Hash identifier: KnxkjjUpMVBgQObR9BIU6ZkMGqLPWpaw72b9yunDWDA= Subject key identifier: EE:DA:F4:D8:4A:54:22:03:3E:1C:E9:2E:E2:15:19:E6:42:CF:17:35 Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f Certificate serial: 019B86619D19E3B93207CB1743359E68C032 Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/7tr02EpUIgM-HOku4hUZ5kLPFzU.roa Signing time: Sun 04 Jan 2026 00:21:42 +0000 ROA not before: Sun 04 Jan 2026 00:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 185.138.234.0/24 maxlen: 24 185.138.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:86:61:9d:19:e3:b9:32:07:cb:17:43:35:9e:68:c0:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f Validity Not Before: Jan 4 00:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eedaf4d84a5422033e1ce92ee21519e642cf1735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:49:84:23:06:0f:3b:14:f7:a5:70:ed:12:05: 59:05:ed:bf:be:58:cf:5f:21:46:d5:ef:3f:ec:94: ca:3d:5f:58:98:39:89:d0:e3:6d:8e:5c:2f:12:ec: 8a:1d:da:70:cc:85:81:d9:92:45:ca:17:a7:18:b9: 0a:6e:21:ed:4e:d9:3b:cf:0e:e5:9e:d2:8c:36:c3: 5f:09:65:ec:f7:e9:a6:84:86:b6:7d:e5:b6:97:2d: d9:05:09:0c:91:4b:db:88:79:bd:0b:9a:bf:1d:f8: fd:8e:28:70:6c:cb:0f:12:fa:e3:00:52:2e:5f:87: d7:6d:57:d1:c9:01:76:ed:a6:e8:ce:63:5c:31:7d: e6:d8:5f:7d:cc:55:f1:86:08:68:2a:8a:41:77:e9: 23:fd:2a:f0:70:ef:ef:63:36:7b:92:00:ce:40:34: f7:43:f4:4e:02:b7:5b:f9:29:2a:84:67:fe:d9:f1: b6:47:22:27:8f:10:b9:19:37:b2:51:87:3d:02:51: b3:b4:e6:63:76:3b:df:fa:44:92:42:be:0a:f0:f2: 84:c4:70:cb:85:27:e5:c8:ea:7e:59:f7:dd:a9:e9: a7:c9:88:bd:11:eb:79:2c:b7:de:7d:30:60:d4:69: 9a:72:6a:d1:26:0a:30:c6:5c:8b:58:63:32:2d:d6: 03:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:DA:F4:D8:4A:54:22:03:3E:1C:E9:2E:E2:15:19:E6:42:CF:17:35 X509v3 Authority Key Identifier: keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/7tr02EpUIgM-HOku4hUZ5kLPFzU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.138.234.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:c8:73:c6:b6:fe:c3:c0:24:4c:5a:2a:81:ca:58:d7:c9:f2: 95:0d:17:60:56:79:4e:fa:35:a7:9b:d4:28:16:97:cc:65:97: f2:6e:2f:bc:58:80:2d:52:5b:cb:be:5b:da:e3:7d:2c:f9:b3: 9b:f3:4f:a2:ce:fb:a6:97:23:7a:fd:0d:17:dd:19:93:39:c7: e7:b4:49:13:4a:03:43:d0:5b:0f:b9:98:f0:92:b4:c5:f4:93: 69:51:ab:bf:ca:7c:81:8c:77:11:a0:98:03:ff:42:96:bd:a8: 7f:9f:d4:4a:2a:90:d6:32:26:5a:d3:82:c4:43:e2:7c:50:46: 2b:db:8f:31:63:1e:3e:46:2e:1d:b4:c9:fc:7b:39:4a:b9:02: f3:2d:e5:3f:63:e0:88:c6:fc:9b:61:23:3c:95:10:65:50:53: 7c:9b:ee:6e:0b:81:63:43:02:86:b2:02:69:20:ee:a4:89:20: 27:4a:13:1a:c0:59:ac:a0:37:91:fc:22:12:d5:7e:b7:09:3c: 80:90:57:ae:ca:41:72:ae:cd:09:d4:37:1d:d8:f1:22:78:31: d9:ad:52:f5:71:69:56:b2:9c:20:9e:f2:04:40:49:85:6d:4c: 4e:94:d9:76:8e:ba:0f:78:ed:b7:f7:08:c7:78:ae:8c:b5:72: ff:69:14:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuGYZ0Z47kyB8sXQzWeaMAyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMDZhODJiYjExNWQ3MzkzZTM5ZmQ1OGI3M2JiZjIwZjZj ZDBiMWYwHhcNMjYwMTA0MDAyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWRhZjRkODRhNTQyMjAzM2UxY2U5MmVlMjE1MTllNjQyY2YxNzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkmEIwYPOxT3pXDtEgVZBe2/vljP XyFG1e8/7JTKPV9YmDmJ0ONtjlwvEuyKHdpwzIWB2ZJFyhenGLkKbiHtTtk7zw7l ntKMNsNfCWXs9+mmhIa2feW2ly3ZBQkMkUvbiHm9C5q/Hfj9jihwbMsPEvrjAFIu X4fXbVfRyQF27abozmNcMX3m2F99zFXxhghoKopBd+kj/SrwcO/vYzZ7kgDOQDT3 Q/ROArdb+SkqhGf+2fG2RyInjxC5GTeyUYc9AlGztOZjdjvf+kSSQr4K8PKExHDL hSflyOp+WffdqemnyYi9Eet5LLfefTBg1GmacmrRJgowxlyLWGMyLdYDmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO7a9NhKVCIDPhzpLuIVGeZCzxc1MB8GA1UdIwQY MBaAFBwGqCuxFdc5Pjn9WLc7vyD2zQsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUt NzI2MDU3YTFmMmE0LzEvN3RyMDJFcFVJZ00tSE9rdTRoVVo1a0xQRnpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUtNzI2MDU3YTFmMmE0 LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuYrqMA0G CSqGSIb3DQEBCwUAA4IBAQBuyHPGtv7DwCRMWiqByljXyfKVDRdgVnlO+jWnm9Qo FpfMZZfybi+8WIAtUlvLvlva430s+bOb80+izvumlyN6/Q0X3RmTOcfntEkTSgND 0FsPuZjwkrTF9JNpUau/ynyBjHcRoJgD/0KWvah/n9RKKpDWMiZa04LEQ+J8UEYr 248xYx4+Ri4dtMn8ezlKuQLzLeU/Y+CIxvybYSM8lRBlUFN8m+5uC4FjQwKGsgJp IO6kiSAnShMawFmsoDeR/CIS1X63CTyAkFeuykFyrs0J1Dcd2PEieDHZrVL1cWlW spwgnvIEQEmFbUxOlNl2jroPeO239wjHeK6MtXL/aRQk -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:07 2026 by rpki-client