This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/7urWinFGpaQwu4q2NACNc33Uqc0.roa File: 7urWinFGpaQwu4q2NACNc33Uqc0.roa (raw, json) Hash identifier: /0y45l7uncJz+6g4k7MjIHbXj2ToXe8FU4Al2yYxxrk= Subject key identifier: EE:EA:D6:8A:71:46:A5:A4:30:BB:8A:B6:34:00:8D:73:7D:D4:A9:CD Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Certificate serial: 019B7BA3711C317810D15BCE37F4D304558B Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/7urWinFGpaQwu4q2NACNc33Uqc0.roa Signing time: Thu 01 Jan 2026 22:17:47 +0000 ROA not before: Thu 01 Jan 2026 22:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214770 IP address blocks: 46.17.216.0/24 maxlen: 24 2a01:e900::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:71:1c:31:78:10:d1:5b:ce:37:f4:d3:04:55:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Validity Not Before: Jan 1 22:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eeead68a7146a5a430bb8ab634008d737dd4a9cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2f:81:96:70:8a:be:08:74:19:eb:a1:09:e1: ed:b6:c6:a1:88:0b:cf:bd:d1:94:2b:eb:7c:ae:64: f6:af:66:6f:ad:36:a3:9b:e5:b9:1a:a4:eb:5c:c2: 2d:66:2f:7a:c5:77:63:a7:c9:3a:11:4b:60:ff:84: 0b:eb:b8:13:5b:3c:43:29:03:9d:56:cf:9b:fc:1f: b4:91:c8:18:ce:43:de:24:36:de:b3:83:30:61:8e: 63:ba:ff:74:7d:58:83:b1:36:9c:c1:fe:ae:7e:64: 29:3a:c8:0b:56:42:ac:76:d2:03:00:43:d9:95:c2: 57:14:e3:ca:73:f7:31:5b:f4:f2:50:17:0a:ea:dc: 3c:aa:78:b6:29:2b:32:6d:75:ab:13:8d:8e:a8:1a: e7:a4:58:7a:d3:a8:cc:32:b5:fb:c5:82:24:9e:a7: 6a:61:63:c7:57:d9:6d:b4:f7:5a:84:74:ca:63:ea: d3:ef:c1:9d:6f:7b:c7:40:4b:3a:30:c4:aa:79:20: 2f:fb:d6:a2:1e:ab:b6:0c:4b:95:c1:dc:05:5f:e8: 44:10:a7:94:69:ae:c9:df:67:4b:2b:c9:1b:74:d9: 00:a1:b1:a7:05:82:96:4e:23:c9:1b:6e:05:38:5c: eb:78:68:89:2d:dd:c9:ae:be:09:be:35:d9:06:73: 35:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:EA:D6:8A:71:46:A5:A4:30:BB:8A:B6:34:00:8D:73:7D:D4:A9:CD X509v3 Authority Key Identifier: keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/7urWinFGpaQwu4q2NACNc33Uqc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.17.216.0/24 IPv6: 2a01:e900::/40 Signature Algorithm: sha256WithRSAEncryption 47:e6:43:ff:15:a5:b3:71:49:49:30:7c:19:84:3b:a8:d6:a1: 1f:d3:86:dd:a8:0f:64:bc:7d:73:52:c9:ba:ca:1f:87:36:d8: 60:71:7f:90:84:dc:c5:bf:c8:47:e7:5d:e4:26:0b:ad:97:05: c5:ca:58:85:1c:92:7a:bd:05:d2:d2:22:81:c3:2c:84:ad:25: e4:e2:67:3d:55:90:7f:56:44:e5:9e:20:20:aa:ea:7a:32:37: 36:6b:86:ee:ec:2c:bc:eb:b8:90:04:4b:21:db:24:03:47:f6: 9e:f4:ae:5b:49:85:0f:2f:c0:bf:49:da:5d:61:16:96:83:7c: c1:eb:da:3e:11:a0:80:17:8b:83:f4:6b:38:eb:9c:f9:b0:17: 79:96:66:d5:37:da:32:de:08:cb:2e:60:02:3b:68:fe:db:49: 53:ee:fe:c6:58:e8:99:47:78:84:ad:e0:76:63:7c:e6:56:b7: 88:f0:a0:e7:be:8f:81:ba:f9:42:87:71:1d:2c:bd:29:4b:ac: 87:89:21:b9:c4:28:e4:e7:56:e2:38:fa:54:e6:24:6e:1b:55: b3:5a:e9:75:43:e9:96:d9:1e:49:9c:ed:c5:52:00:f5:9a:35: 90:ad:98:31:00:a8:58:fe:2e:03:e6:ad:d1:88:ba:8f:e1:64: dc:f6:33:64 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt7o3EcMXgQ0VvON/TTBFWLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjhiNGUwZWY4MTA2ZjBlMTJhYjhlNTAxZDJhYTRlMzZi NzgzYzIwHhcNMjYwMTAxMjIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWVhZDY4YTcxNDZhNWE0MzBiYjhhYjYzNDAwOGQ3MzdkZDRhOWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy+BlnCKvgh0GeuhCeHttsahiAvP vdGUK+t8rmT2r2ZvrTajm+W5GqTrXMItZi96xXdjp8k6EUtg/4QL67gTWzxDKQOd Vs+b/B+0kcgYzkPeJDbes4MwYY5juv90fViDsTacwf6ufmQpOsgLVkKsdtIDAEPZ lcJXFOPKc/cxW/TyUBcK6tw8qni2KSsybXWrE42OqBrnpFh606jMMrX7xYIknqdq YWPHV9lttPdahHTKY+rT78Gdb3vHQEs6MMSqeSAv+9aiHqu2DEuVwdwFX+hEEKeU aa7J32dLK8kbdNkAobGnBYKWTiPJG24FOFzreGiJLd3Jrr4JvjXZBnM1aQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFO7q1opxRqWkMLuKtjQAjXN91KnNMB8GA1UdIwQY MBaAFClotODvgQbw4Sq45QHSqk42t4PCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQt NDRmOGVkNWQ2MWQ3LzEvN3VyV2luRkdwYVF3dTRxMk5BQ05jMzNVcWMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQtNDRmOGVkNWQ2MWQ3 LzEvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQALhHYMA4E AgACMAgDBgAqAekAADANBgkqhkiG9w0BAQsFAAOCAQEAR+ZD/xWls3FJSTB8GYQ7 qNahH9OG3agPZLx9c1LJusofhzbYYHF/kITcxb/IR+dd5CYLrZcFxcpYhRySer0F 0tIigcMshK0l5OJnPVWQf1ZE5Z4gIKrqejI3NmuG7uwsvOu4kARLIdskA0f2nvSu W0mFDy/Av0naXWEWloN8wevaPhGggBeLg/RrOOuc+bAXeZZm1TfaMt4Iyy5gAjto /ttJU+7+xljomUd4hK3gdmN85la3iPCg576Pgbr5QodxHSy9KUush4khucQo5OdW 4jj6VOYkbhtVs1rpdUPpltkeSZztxVIA9Zo1kK2YMQCoWP4uA+at0Yi6j+Fk3PYz ZA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:40 2026 by rpki-client