This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/7zTwSbIrIN1tbHKaAerBGKh4H_4.roa File: 7zTwSbIrIN1tbHKaAerBGKh4H_4.roa (raw, json) Hash identifier: Uj+d0N/fp4CQPw2Wdyt0B7bkrgBCMNOKaEUgThPZLo4= Subject key identifier: EF:34:F0:49:B2:2B:20:DD:6D:6C:72:9A:01:EA:C1:18:A8:78:1F:FE Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 019B775941A775E45162F7425A28B9A8618E Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/7zTwSbIrIN1tbHKaAerBGKh4H_4.roa Signing time: Thu 01 Jan 2026 02:18:16 +0000 ROA not before: Thu 01 Jan 2026 02:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209989 IP address blocks: 185.216.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:41:a7:75:e4:51:62:f7:42:5a:28:b9:a8:61:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Jan 1 02:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef34f049b22b20dd6d6c729a01eac118a8781ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ba:c4:d4:1a:2c:53:58:b7:be:d3:57:0a:71: 10:51:37:c0:98:ed:2e:4c:32:2a:44:a4:63:71:10: 99:75:aa:e8:c3:db:c0:cc:58:f2:4c:1e:61:25:de: 15:dc:46:f2:d8:dd:bb:7f:01:51:e7:df:c1:9e:0b: d9:13:01:1c:f8:8c:46:d7:27:77:07:bf:a7:27:83: b9:a1:03:eb:1a:3e:9b:9a:11:ca:d6:4f:3a:c3:de: 9e:d6:ff:5d:f3:0c:7e:6e:25:ef:77:f4:0d:b3:20: f5:fb:53:03:88:08:72:5e:2a:bd:dc:4c:9a:5f:f5: 46:89:a2:46:9c:4a:8f:44:90:6b:63:82:30:d8:14: 5c:d0:52:54:7f:9e:56:1b:d3:18:b2:25:a4:91:8e: 78:1d:b4:2e:b0:a9:41:93:c1:fe:bf:fa:09:09:9b: 24:a8:38:48:f8:02:0a:4c:53:7b:b2:fc:c3:a5:26: 95:56:4c:fc:7d:2f:e2:52:65:b6:39:c1:57:05:bc: d7:dd:de:ef:9e:fe:91:d9:42:e4:01:2c:09:ed:e4: 25:29:10:2d:1f:70:d4:a5:3f:fd:b5:37:26:cb:38: ae:70:05:bf:a1:2a:2a:9e:db:85:e4:33:2a:a2:a6: 56:b2:6a:4d:23:1b:ed:84:40:f8:cb:02:4f:82:d2: 42:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:34:F0:49:B2:2B:20:DD:6D:6C:72:9A:01:EA:C1:18:A8:78:1F:FE X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/7zTwSbIrIN1tbHKaAerBGKh4H_4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.216.211.0/24 Signature Algorithm: sha256WithRSAEncryption 92:1d:37:53:b1:ee:53:3a:8f:b6:b0:09:fc:02:9e:c7:1e:8f: e8:0f:f5:8e:01:67:88:0c:03:41:82:02:1f:75:bf:31:02:fa: a6:70:1e:54:03:dd:34:d4:25:1b:e0:6d:1c:09:d9:c0:da:5d: 00:89:f8:df:56:1d:1b:06:62:85:59:15:d8:2e:54:68:14:9d: c4:0c:0a:95:c1:56:d8:cb:46:22:ff:16:5c:0a:ff:4e:55:95: 06:87:15:54:ca:e5:df:af:f7:32:74:2e:e4:d9:fa:4a:e7:79: 0a:9b:7f:63:61:bc:05:1b:f9:eb:8d:ea:96:d9:fd:62:b7:00: f7:5f:a7:41:a0:81:2e:b7:3c:16:2b:85:dc:76:59:b6:d9:3c: 3b:d8:5b:f8:ff:57:c8:4d:b1:ab:10:64:d9:1f:30:c2:36:ff: 22:e4:90:f8:0f:e2:3f:fd:88:6a:7a:39:71:54:de:d0:79:0c: bf:69:a1:cb:c4:b2:8a:ac:28:40:f9:b6:22:69:0f:81:08:94: b1:d1:bc:14:9f:d9:3a:b0:e3:cb:fb:75:f8:30:7c:ac:f5:5b: ae:99:f9:93:54:a9:01:38:1f:6e:59:ac:68:62:c5:89:1a:65: 74:6f:b5:26:28:68:88:97:ee:e7:52:97:0a:bf:a2:fb:e3:8a: 80:f2:b9:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WUGndeRRYvdCWii5qGGOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjYwMTAxMDIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjM0ZjA0OWIyMmIyMGRkNmQ2YzcyOWEwMWVhYzExOGE4NzgxZmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLrE1BosU1i3vtNXCnEQUTfAmO0u TDIqRKRjcRCZdarow9vAzFjyTB5hJd4V3Eby2N27fwFR59/BngvZEwEc+IxG1yd3 B7+nJ4O5oQPrGj6bmhHK1k86w96e1v9d8wx+biXvd/QNsyD1+1MDiAhyXiq93Eya X/VGiaJGnEqPRJBrY4Iw2BRc0FJUf55WG9MYsiWkkY54HbQusKlBk8H+v/oJCZsk qDhI+AIKTFN7svzDpSaVVkz8fS/iUmW2OcFXBbzX3d7vnv6R2ULkASwJ7eQlKRAt H3DUpT/9tTcmyziucAW/oSoqntuF5DMqoqZWsmpNIxvthED4ywJPgtJCXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO808EmyKyDdbWxymgHqwRioeB/+MB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvN3pUd1NiSXJJTjF0YkhLYUFlckJHS2g0SF80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudjTMA0G CSqGSIb3DQEBCwUAA4IBAQCSHTdTse5TOo+2sAn8Ap7HHo/oD/WOAWeIDANBggIf db8xAvqmcB5UA9001CUb4G0cCdnA2l0AifjfVh0bBmKFWRXYLlRoFJ3EDAqVwVbY y0Yi/xZcCv9OVZUGhxVUyuXfr/cydC7k2fpK53kKm39jYbwFG/nrjeqW2f1itwD3 X6dBoIEutzwWK4Xcdlm22Tw72Fv4/1fITbGrEGTZHzDCNv8i5JD4D+I//Yhqejlx VN7QeQy/aaHLxLKKrChA+bYiaQ+BCJSx0bwUn9k6sOPL+3X4MHys9VuumfmTVKkB OB9uWaxoYsWJGmV0b7UmKGiIl+7nUpcKv6L744qA8rlK -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:27 2026 by rpki-client