This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/c7fzVBb-lhiimXTXZXx1tqRIfS8.roa File: c7fzVBb-lhiimXTXZXx1tqRIfS8.roa (raw, json) Hash identifier: 0//dvacC34b3cw6vLjL8Dna60wWjlTHIkLNFldSete8= Subject key identifier: 73:B7:F3:54:16:FE:96:18:A2:99:74:D7:65:7C:75:B6:A4:48:7D:2F Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E3910ADA06800F90784FFE40D53E2BB Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/c7fzVBb-lhiimXTXZXx1tqRIfS8.roa Signing time: Fri 02 Jan 2026 10:20:27 +0000 ROA not before: Fri 02 Jan 2026 10:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200686 IP address blocks: 85.143.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:10:ad:a0:68:00:f9:07:84:ff:e4:0d:53:e2:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73b7f35416fe9618a29974d7657c75b6a4487d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:25:ac:73:3b:5a:24:93:4c:63:dc:3a:f5:0a: b0:82:04:28:b0:9d:0d:ca:ad:1f:68:f7:b4:ae:fa: ad:1e:46:05:22:71:5b:f5:e8:7c:1c:a2:ff:e6:fc: 09:26:8f:c6:0e:db:ae:70:45:78:2c:6c:70:18:33: 9f:a6:be:26:00:71:c0:9b:15:84:80:47:57:95:a1: e0:d3:b0:e7:95:39:5b:ac:d9:19:df:7e:ce:1d:0b: 70:fe:cd:20:39:d1:08:b3:61:69:e8:dc:09:a6:1a: 45:e0:e8:42:d2:3f:48:b1:24:28:0f:02:bc:5b:b7: 10:b9:d9:20:7f:94:3d:af:50:03:1d:75:5b:d6:40: 2b:97:82:40:e1:f1:28:fe:7d:0c:02:16:29:b8:ba: 5a:a4:b8:65:43:37:ed:bb:eb:c3:92:0a:f4:ab:19: 54:0a:02:a7:1d:1f:8e:9d:ee:34:2a:45:f2:b9:1e: 06:c0:3f:d0:e8:70:6f:ee:6e:e3:d0:d7:22:8d:f3: a2:c3:9e:f2:81:bc:58:aa:62:97:d7:64:09:b7:9e: 12:95:12:4e:5e:52:44:d6:37:91:77:0f:4a:09:2d: f8:b8:63:ff:11:bc:e4:6c:1d:89:5a:3b:4d:e6:e4: 8d:e5:9c:ec:3c:0d:5f:8f:f9:0d:86:1f:4c:01:60: 88:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B7:F3:54:16:FE:96:18:A2:99:74:D7:65:7C:75:B6:A4:48:7D:2F X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/c7fzVBb-lhiimXTXZXx1tqRIfS8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.143.100.0/24 Signature Algorithm: sha256WithRSAEncryption 57:ae:7e:fa:7b:92:eb:ac:05:42:5b:fd:d0:ec:51:6d:f3:da: 4b:78:a3:dc:ec:f1:fa:f9:91:89:f4:60:f6:af:5e:65:09:5e: 51:a6:9d:dc:f2:66:79:45:10:e3:64:30:c5:3d:74:20:1b:5a: a4:ec:6b:de:0f:b7:f5:85:c7:ed:cc:7e:3d:ae:8b:2a:9a:72: 0e:1b:e1:a0:92:c2:2e:8a:f6:dd:2a:5b:f3:7a:e8:e7:11:d9: c4:a8:c8:d7:83:22:ed:90:d3:d7:d7:ca:5f:de:1f:be:e5:cd: e4:ab:5b:23:30:f7:dd:03:24:36:04:e1:f0:43:b6:ab:2c:a0: e6:e5:9e:47:78:72:1c:7a:d3:bd:5c:80:67:b7:39:39:f3:e6: 44:6c:1d:43:e6:61:d3:d5:21:12:d1:f0:56:7d:86:69:9e:b9: 29:e1:2e:6d:e4:60:b7:45:a7:39:11:15:be:d4:ea:de:05:31: e1:37:2e:34:e3:b1:11:b8:4b:90:cf:c7:60:30:78:63:ab:be: f1:52:14:69:46:19:f4:9d:0e:c4:0e:43:54:05:88:fd:82:21: 51:0a:0e:f8:93:61:f1:d3:34:c7:0e:ec:1b:17:64:e6:31:37: a0:ed:79:c5:75:6c:5a:f1:c6:a3:c1:34:5c:b6:52:93:aa:20: ed:be:89:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORCtoGgA+QeE/+QNU+K7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2I3ZjM1NDE2ZmU5NjE4YTI5OTc0ZDc2NTdjNzViNmE0NDg3ZDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiWscztaJJNMY9w69QqwggQosJ0N yq0faPe0rvqtHkYFInFb9eh8HKL/5vwJJo/GDtuucEV4LGxwGDOfpr4mAHHAmxWE gEdXlaHg07DnlTlbrNkZ337OHQtw/s0gOdEIs2Fp6NwJphpF4OhC0j9IsSQoDwK8 W7cQudkgf5Q9r1ADHXVb1kArl4JA4fEo/n0MAhYpuLpapLhlQzftu+vDkgr0qxlU CgKnHR+One40KkXyuR4GwD/Q6HBv7m7j0NcijfOiw57ygbxYqmKX12QJt54SlRJO XlJE1jeRdw9KCS34uGP/EbzkbB2JWjtN5uSN5ZzsPA1fj/kNhh9MAWCI5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHO381QW/pYYopl012V8dbakSH0vMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvYzdmelZCYi1saGlpbVhUWFpYeDF0cVJJZlM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVY9kMA0G CSqGSIb3DQEBCwUAA4IBAQBXrn76e5LrrAVCW/3Q7FFt89pLeKPc7PH6+ZGJ9GD2 r15lCV5Rpp3c8mZ5RRDjZDDFPXQgG1qk7GveD7f1hcftzH49rosqmnIOG+GgksIu ivbdKlvzeujnEdnEqMjXgyLtkNPX18pf3h++5c3kq1sjMPfdAyQ2BOHwQ7arLKDm 5Z5HeHIcetO9XIBntzk58+ZEbB1D5mHT1SES0fBWfYZpnrkp4S5t5GC3Rac5ERW+ 1OreBTHhNy4047ERuEuQz8dgMHhjq77xUhRpRhn0nQ7EDkNUBYj9giFRCg74k2Hx 0zTHDuwbF2TmMTeg7XnFdWxa8cajwTRctlKTqiDtvomc -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:27 2026 by rpki-client