This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/7gj3qwzFulpZ74m7sX-j6kpzvWg.roa File: 7gj3qwzFulpZ74m7sX-j6kpzvWg.roa (raw, json) Hash identifier: CZUn6B9GSjHpISyR7znrv7W2c0uiMaQCOD7zBfEJXUI= Subject key identifier: EE:08:F7:AB:0C:C5:BA:5A:59:EF:89:BB:B1:7F:A3:EA:4A:73:BD:68 Certificate issuer: /CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262 Certificate serial: 019B797E2394E86E1B511C2BE4BE77CE1FF0 Authority key identifier: D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/7gj3qwzFulpZ74m7sX-j6kpzvWg.roa Signing time: Thu 01 Jan 2026 12:17:48 +0000 ROA not before: Thu 01 Jan 2026 12:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51088 IP address blocks: 5.44.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:23:94:e8:6e:1b:51:1c:2b:e4:be:77:ce:1f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262 Validity Not Before: Jan 1 12:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee08f7ab0cc5ba5a59ef89bbb17fa3ea4a73bd68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:90:78:ec:c6:42:4f:cb:a5:55:9e:b6:1e:65: 83:5f:13:e4:14:a0:6f:22:78:e4:73:a1:6b:f2:47: 4a:29:f1:77:f0:a1:e7:9c:1d:2a:01:15:eb:07:eb: 76:71:a9:4a:bb:1a:4a:f4:20:1a:4d:83:9d:24:84: 85:95:63:a4:14:d2:b1:a0:d2:21:bf:f5:26:fc:a7: 1e:6e:f0:fe:a5:30:fc:e1:a6:76:a1:0d:45:36:e9: 06:8a:29:24:73:a8:69:c2:18:71:de:56:63:e4:32: 7e:19:40:3a:62:61:4c:63:6b:5e:fa:29:65:b3:97: f4:83:80:ed:2e:1b:67:51:5b:e9:52:b3:75:92:d5: 2d:48:3b:ca:d3:88:61:26:61:27:85:22:2e:bd:c5: a1:4b:cc:3d:bd:c4:85:12:50:95:43:ba:c5:11:84: 9d:a3:c9:41:04:78:e7:ac:9d:75:9c:e6:1c:ba:c2: bb:c7:1f:c8:13:33:51:25:11:fe:9d:a1:95:97:f5: 6a:65:9e:f3:78:cd:a7:4c:f4:89:93:d4:8c:81:e3: 22:62:00:c1:92:44:b6:c3:6b:27:ce:15:ee:a8:ca: 43:42:e6:28:98:b0:07:88:64:9b:40:14:1d:c5:df: 7c:cc:c5:30:c8:73:52:61:6c:5e:e1:5b:e6:1b:e2: e0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:08:F7:AB:0C:C5:BA:5A:59:EF:89:BB:B1:7F:A3:EA:4A:73:BD:68 X509v3 Authority Key Identifier: keyid:D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/7gj3qwzFulpZ74m7sX-j6kpzvWg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.44.72.0/21 Signature Algorithm: sha256WithRSAEncryption 1e:5f:af:f7:dd:8c:98:1f:3b:b7:66:77:87:d7:d2:57:0d:ad: df:0c:9e:49:24:ad:67:db:01:36:08:89:cc:d4:4a:02:d5:f5: ae:c4:05:e0:ea:08:1d:4b:60:6d:88:64:da:8a:b4:46:0f:64: 72:55:33:c3:5b:f5:dc:83:3c:25:d7:b1:d8:2b:e3:f5:30:9a: 8a:00:d6:ec:0b:e3:ad:50:92:b7:a2:ba:1c:70:18:80:d1:78: 20:cc:03:7a:89:23:ac:d7:21:ba:20:fc:81:7f:69:e1:2a:2b: 70:5d:59:90:dd:80:f1:c4:04:3d:25:a7:22:ff:f2:e7:25:c6: 0a:6e:16:9f:ff:66:27:49:35:98:9a:1c:45:50:76:b9:2c:f9: 68:ac:1a:4d:a7:eb:30:59:ff:93:f2:0e:6f:e8:34:a6:5b:e5: 2f:7a:c1:18:62:bc:43:eb:38:71:da:3c:a8:72:34:5f:c4:dd: d3:90:62:25:c9:2e:96:d6:bc:84:18:7f:a6:4c:ed:c2:8e:3e: a8:74:25:78:eb:9d:5b:d3:ff:f1:3e:dc:ac:c6:c4:02:7a:79: cc:6d:1e:da:93:15:fa:f1:64:a1:ad:9e:43:46:20:0a:5f:a4: c3:7e:e9:b2:37:98:af:77:8f:10:3d:f6:b4:fc:4d:76:8c:9e: db:da:a5:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fiOU6G4bURwr5L53zh/wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwN2RjMzVlYmNkODhkZDBlMmE4ZGIzYTVhMDg2NTRiYzNi ZTAyNjIwHhcNMjYwMTAxMTIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTA4ZjdhYjBjYzViYTVhNTllZjg5YmJiMTdmYTNlYTRhNzNiZDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpB47MZCT8ulVZ62HmWDXxPkFKBv Injkc6Fr8kdKKfF38KHnnB0qARXrB+t2calKuxpK9CAaTYOdJISFlWOkFNKxoNIh v/Um/KcebvD+pTD84aZ2oQ1FNukGiikkc6hpwhhx3lZj5DJ+GUA6YmFMY2te+ill s5f0g4DtLhtnUVvpUrN1ktUtSDvK04hhJmEnhSIuvcWhS8w9vcSFElCVQ7rFEYSd o8lBBHjnrJ11nOYcusK7xx/IEzNRJRH+naGVl/VqZZ7zeM2nTPSJk9SMgeMiYgDB kkS2w2snzhXuqMpDQuYomLAHiGSbQBQdxd98zMUwyHNSYWxe4VvmG+LgSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO4I96sMxbpaWe+Ju7F/o+pKc71oMB8GA1UdIwQY MBaAFNB9w1682I3Q4qjbOloIZUvDvgJiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEgzRFhyellqZERpcU5zNldnaGxTOE8tQW1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8xYzcxOGQtZTdhMC00MGFjLWExODEt Y2JhYTQyYTYyNzI3LzEvN2dqM3F3ekZ1bHBaNzRtN3NYLWo2a3B6dldnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8xYzcxOGQtZTdhMC00MGFjLWExODEtY2JhYTQyYTYyNzI3 LzEvMEgzRFhyellqZERpcU5zNldnaGxTOE8tQW1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDBSxIMA0G CSqGSIb3DQEBCwUAA4IBAQAeX6/33YyYHzu3ZneH19JXDa3fDJ5JJK1n2wE2CInM 1EoC1fWuxAXg6ggdS2BtiGTairRGD2RyVTPDW/Xcgzwl17HYK+P1MJqKANbsC+Ot UJK3oroccBiA0XggzAN6iSOs1yG6IPyBf2nhKitwXVmQ3YDxxAQ9Jaci//LnJcYK bhaf/2YnSTWYmhxFUHa5LPlorBpNp+swWf+T8g5v6DSmW+UvesEYYrxD6zhx2jyo cjRfxN3TkGIlyS6W1ryEGH+mTO3Cjj6odCV4651b0//xPtysxsQCennMbR7akxX6 8WShrZ5DRiAKX6TDfumyN5ivd48QPfa0/E12jJ7b2qVC -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:38 2026 by rpki-client