This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/7XPR057HTONIllGtY9NijiuY-tk.roa File: 7XPR057HTONIllGtY9NijiuY-tk.roa (raw, json) Hash identifier: rKfjiDRkcr3HFT8PmmA3P0sCBQ3drFmQ5QDnLKCb/BE= Subject key identifier: ED:73:D1:D3:9E:C7:4C:E3:48:96:51:AD:63:D3:62:8E:2B:98:FA:D9 Certificate issuer: /CN=3d8a553e05f0319bf452fa206c14ccda87304654 Certificate serial: 019B77C7221FB3F67C4246B41DFB388D7583 Authority key identifier: 3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/7XPR057HTONIllGtY9NijiuY-tk.roa Signing time: Thu 01 Jan 2026 04:18:17 +0000 ROA not before: Thu 01 Jan 2026 04:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57353 IP address blocks: 176.97.202.0/24 maxlen: 24 185.81.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:22:1f:b3:f6:7c:42:46:b4:1d:fb:38:8d:75:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8a553e05f0319bf452fa206c14ccda87304654 Validity Not Before: Jan 1 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed73d1d39ec74ce3489651ad63d3628e2b98fad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e8:10:23:08:04:eb:2b:4d:3d:28:8e:4d:a4: 74:73:db:2f:6b:cd:b0:9a:b9:53:a8:00:2b:03:52: 22:5b:7b:35:ab:92:93:02:eb:ca:d3:fd:71:8d:f9: 10:d9:32:31:89:37:78:b6:2e:d8:f6:09:e4:12:1d: 68:a0:2c:a1:c1:7c:af:af:d6:e8:5c:f1:5a:ef:39: 6f:89:28:8f:27:64:11:80:f3:b3:e2:a7:e3:72:b0: 16:c1:42:0c:6a:9b:cb:c0:b5:97:7f:7d:df:e6:22: 0f:bc:9b:0c:bb:b2:37:56:7c:82:9e:19:cd:05:c3: 4d:f7:d5:98:0c:2e:9b:8c:8b:52:e0:a1:9a:c2:ce: 20:cd:ab:e6:61:89:4d:44:ba:4f:a3:3e:f4:3c:2f: ec:7e:ca:68:cf:24:5c:73:7e:a3:9b:52:5c:15:94: 04:9e:f6:f5:79:30:a2:7d:4d:f2:d1:07:6b:38:af: 3b:19:c5:9e:9a:98:64:cf:68:4f:98:e0:58:6a:cc: c2:34:79:d4:21:19:bb:13:1e:c2:5d:2c:9a:7d:8b: 3d:f2:45:30:50:4a:4e:10:af:bf:3a:67:6e:8b:e5: 54:2a:e3:e4:a3:4a:2f:b9:ca:86:8d:4a:11:f1:5d: 29:a6:d8:60:4f:31:6c:56:82:36:7c:f4:e9:c3:3e: 54:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:73:D1:D3:9E:C7:4C:E3:48:96:51:AD:63:D3:62:8E:2B:98:FA:D9 X509v3 Authority Key Identifier: keyid:3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/7XPR057HTONIllGtY9NijiuY-tk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.97.202.0/24 185.81.69.0/24 Signature Algorithm: sha256WithRSAEncryption 47:92:59:1c:e6:34:06:e1:c1:c4:03:27:20:55:c5:25:e6:d5: 12:c4:68:d1:5d:6d:68:62:45:b6:e7:e9:d6:91:36:38:0e:af: 90:fa:a3:c4:f0:cf:db:f4:5a:0e:7c:07:70:bd:c6:56:cb:fa: 6e:df:7f:5c:81:bb:55:ab:6d:dd:bd:4a:b5:f5:37:cd:8a:de: c2:ae:b4:7d:83:21:e8:50:07:a5:6a:fa:0e:cc:c9:a6:4b:eb: 45:01:08:6b:87:e7:21:02:2d:49:f0:cb:cf:36:2e:0a:04:43: 58:62:2e:87:8b:a1:fd:82:7c:d8:75:fd:84:df:e3:26:4f:14: f4:d5:31:d3:15:c8:61:38:e0:1a:98:b7:35:cc:46:04:fc:85: b2:b2:a9:69:2d:e6:30:c1:09:bb:41:65:f5:d0:56:c8:a6:a4: 90:a4:db:d3:c6:8a:7e:2e:44:1b:94:27:ab:2a:4f:f6:6b:33: ca:f1:c1:57:8b:4d:39:df:31:f3:0a:35:6b:f7:94:b4:d9:76: b7:3a:d5:7b:c4:85:9d:fd:18:43:c2:c1:a6:5c:45:cf:e2:50: 68:2f:06:9e:65:a6:ba:b5:70:21:4e:48:89:d6:31:7c:32:6c: 1b:70:13:ac:91:1e:2e:b8:88:4f:ba:b6:26:70:c4:d2:59:65: 00:96:0f:7f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xyIfs/Z8Qka0Hfs4jXWDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGE1NTNlMDVmMDMxOWJmNDUyZmEyMDZjMTRjY2RhODcz MDQ2NTQwHhcNMjYwMTAxMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDczZDFkMzllYzc0Y2UzNDg5NjUxYWQ2M2QzNjI4ZTJiOThmYWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOgQIwgE6ytNPSiOTaR0c9sva82w mrlTqAArA1IiW3s1q5KTAuvK0/1xjfkQ2TIxiTd4ti7Y9gnkEh1ooCyhwXyvr9bo XPFa7zlviSiPJ2QRgPOz4qfjcrAWwUIMapvLwLWXf33f5iIPvJsMu7I3VnyCnhnN BcNN99WYDC6bjItS4KGaws4gzavmYYlNRLpPoz70PC/sfspozyRcc36jm1JcFZQE nvb1eTCifU3y0QdrOK87GcWemphkz2hPmOBYaszCNHnUIRm7Ex7CXSyafYs98kUw UEpOEK+/Omdui+VUKuPko0ovucqGjUoR8V0ppthgTzFsVoI2fPTpwz5U4wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFO1z0dOex0zjSJZRrWPTYo4rmPrZMB8GA1UdIwQY MBaAFD2KVT4F8DGb9FL6IGwUzNqHMEZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFlwVlBnWHdNWnYwVXZvZ2JCVE0yb2N3UmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81MmNlNTQtZTQ5Yy00MTFjLTg1Mjct MGZiNDgyM2Y1Yjg3LzEvN1hQUjA1N0hUT05JbGxHdFk5TmlqaXVZLXRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy81MmNlNTQtZTQ5Yy00MTFjLTg1MjctMGZiNDgyM2Y1Yjg3 LzEvUFlwVlBnWHdNWnYwVXZvZ2JCVE0yb2N3UmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsGHKAwQA uVFFMA0GCSqGSIb3DQEBCwUAA4IBAQBHklkc5jQG4cHEAycgVcUl5tUSxGjRXW1o YkW25+nWkTY4Dq+Q+qPE8M/b9FoOfAdwvcZWy/pu339cgbtVq23dvUq19TfNit7C rrR9gyHoUAelavoOzMmmS+tFAQhrh+chAi1J8MvPNi4KBENYYi6Hi6H9gnzYdf2E 3+MmTxT01THTFchhOOAamLc1zEYE/IWysqlpLeYwwQm7QWX10FbIpqSQpNvTxop+ LkQblCerKk/2azPK8cFXi0053zHzCjVr95S02Xa3OtV7xIWd/RhDwsGmXEXP4lBo LwaeZaa6tXAhTkiJ1jF8MmwbcBOskR4uuIhPurYmcMTSWWUAlg9/ -----END CERTIFICATE-----Generated at Sun Jan 25 15:14:02 2026 by rpki-client