This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/x7kr8s7NqU4B3f01PUE6TDdXkmw.roa File: x7kr8s7NqU4B3f01PUE6TDdXkmw.roa (raw, json) Hash identifier: D0Z4Gt2OJKdDOlJ+V6cYS0q2kZL9EpP1fRqlwgKU8FE= Subject key identifier: C7:B9:2B:F2:CE:CD:A9:4E:01:DD:FD:35:3D:41:3A:4C:37:57:92:6C Certificate issuer: /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc Certificate serial: 019B78A26D893C310121723B7CCF059500B8 Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/x7kr8s7NqU4B3f01PUE6TDdXkmw.roa Signing time: Thu 01 Jan 2026 08:17:49 +0000 ROA not before: Thu 01 Jan 2026 08:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8798 IP address blocks: 212.69.64.0/21 maxlen: 21 212.69.72.0/22 maxlen: 22 212.69.76.0/24 maxlen: 24 212.69.78.0/23 maxlen: 23 212.69.80.0/23 maxlen: 23 2001:4028::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:6d:89:3c:31:01:21:72:3b:7c:cf:05:95:00:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc Validity Not Before: Jan 1 08:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7b92bf2cecda94e01ddfd353d413a4c3757926c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5b:d0:20:77:21:a0:57:40:09:8d:2c:00:90: 3e:1d:cd:d1:b5:87:ac:57:a3:7c:88:9b:67:6d:a2: 95:b4:58:4d:96:9a:b5:49:ca:c1:aa:44:70:77:cc: 2b:99:31:85:79:22:1d:7f:69:5b:d9:89:1c:5d:9a: 4a:2f:58:1b:3b:1f:81:92:84:dd:b1:46:95:81:d2: 1b:62:e9:e1:d3:be:7d:fe:b5:86:1b:4d:c7:f6:87: 4f:22:19:84:9d:aa:50:11:d4:78:2d:3f:41:08:93: 3d:c3:6f:dd:88:61:5e:05:e3:57:93:fb:3d:ca:de: e3:6a:4e:90:0b:50:de:3f:8f:ac:27:9a:a7:d0:7d: 07:b8:0a:a0:cb:66:27:c7:c7:b2:5b:00:17:86:9d: 96:83:3d:02:d1:96:67:e9:99:b9:b8:78:65:48:1c: 06:0e:9d:ff:4a:bb:34:04:f8:68:d0:0d:2d:2b:13: 25:61:3d:9c:fd:f7:83:42:f3:60:46:82:43:fb:69: 28:ad:d2:29:17:e1:9a:f7:81:87:9d:5b:a5:1d:6a: df:f3:8b:9f:89:d8:17:e0:ae:77:ff:e2:4d:e3:c8: ab:c2:56:e1:92:d1:75:ca:e8:52:71:02:6f:ba:ac: 40:cf:0a:f9:48:a9:91:49:51:ba:73:9c:a7:dd:9c: 71:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B9:2B:F2:CE:CD:A9:4E:01:DD:FD:35:3D:41:3A:4C:37:57:92:6C X509v3 Authority Key Identifier: keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/x7kr8s7NqU4B3f01PUE6TDdXkmw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.69.64.0-212.69.76.255 212.69.78.0-212.69.81.255 IPv6: 2001:4028::/29 Signature Algorithm: sha256WithRSAEncryption 2d:4a:06:af:37:73:d6:12:de:e1:d2:ac:9c:e1:26:44:c1:22: c5:9f:af:80:2f:f4:df:29:af:5d:a5:7a:c5:5a:77:7e:64:50: cf:0c:c4:32:35:f4:47:dd:15:d9:d5:bb:73:46:aa:ec:37:2b: 75:0b:d0:35:e3:5f:c2:c7:e5:d3:40:3e:3d:c1:4a:0e:0b:91: 04:2d:0c:b4:fc:9b:2f:2f:df:4e:8f:4c:f9:40:c0:c0:70:b5: 9f:3e:7a:80:f4:a5:4f:c2:a7:2f:32:2d:cf:d6:19:ca:ea:fb: 7c:75:79:6a:5a:f7:89:b4:07:aa:82:bd:47:44:a4:c5:0f:16: 3c:51:b3:97:3c:21:e8:2f:b4:e0:56:ca:1b:84:af:ae:7e:61: e5:eb:bd:1c:9a:af:e7:23:61:f0:87:a2:9c:11:7b:0c:ee:7e: 8e:ae:7b:ce:e0:22:c1:04:5f:2e:67:12:cb:75:2b:97:03:78: 08:66:01:8e:a0:ce:34:f7:15:47:08:f2:14:67:78:ac:fc:11: 8a:9e:25:cc:d1:ba:07:e0:17:49:0f:1c:53:5a:39:6f:bc:9f: d0:09:b5:af:a2:03:3f:4b:ea:d8:59:ac:b1:f5:22:ec:02:e4: ca:50:74:2b:33:c6:49:75:f4:e0:5c:45:98:69:62:25:f7:9d: 8e:88:3a:5f -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt4om2JPDEBIXI7fM8FlQC4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMWU5YjRlOGRjNDliZTNhYmE1OTc0MjVhZWZkOGIzYTUz NjJmZmMwHhcNMjYwMTAxMDgxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2I5MmJmMmNlY2RhOTRlMDFkZGZkMzUzZDQxM2E0YzM3NTc5MjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVvQIHchoFdACY0sAJA+Hc3RtYes V6N8iJtnbaKVtFhNlpq1ScrBqkRwd8wrmTGFeSIdf2lb2YkcXZpKL1gbOx+BkoTd sUaVgdIbYunh0759/rWGG03H9odPIhmEnapQEdR4LT9BCJM9w2/diGFeBeNXk/s9 yt7jak6QC1DeP4+sJ5qn0H0HuAqgy2Ynx8eyWwAXhp2Wgz0C0ZZn6Zm5uHhlSBwG Dp3/Srs0BPho0A0tKxMlYT2c/feDQvNgRoJD+2kordIpF+Ga94GHnVulHWrf84uf idgX4K53/+JN48irwlbhktF1yuhScQJvuqxAzwr5SKmRSVG6c5yn3ZxxPwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFMe5K/LOzalOAd39NT1BOkw3V5JsMB8GA1UdIwQY MBaAFPoem06NxJvjq6WXQlrv2LOlNi/8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1oNmJUbzNFbS1PcnBaZENXdV9ZczZVMkxfdy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvNDcwN2I0LTAwMzItNGFjNy1iY2M3 LTQwYzFhNzI3MDJlZi8xL3g3a3I4czdOcVU0QjNmMDFQVUU2VERkWGttdy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzUvNDcwN2I0LTAwMzItNGFjNy1iY2M3LTQwYzFhNzI3MDJl Zi8xLzEtaDZiVG8zRW0tT3JwWmRDV3VfWXM2VTJMX3cuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwRAYIKwYBBQUHAQcBAf8ENTAzMCIEAgABMBwwDAMEBtRF QAMEANRFTDAMAwQB1EVOAwQB1EVQMA0EAgACMAcDBQMgAUAoMA0GCSqGSIb3DQEB CwUAA4IBAQAtSgavN3PWEt7h0qyc4SZEwSLFn6+AL/TfKa9dpXrFWnd+ZFDPDMQy NfRH3RXZ1btzRqrsNyt1C9A141/Cx+XTQD49wUoOC5EELQy0/JsvL99Oj0z5QMDA cLWfPnqA9KVPwqcvMi3P1hnK6vt8dXlqWveJtAeqgr1HRKTFDxY8UbOXPCHoL7Tg VsobhK+ufmHl670cmq/nI2Hwh6KcEXsM7n6OrnvO4CLBBF8uZxLLdSuXA3gIZgGO oM409xVHCPIUZ3is/BGKniXM0boH4BdJDxxTWjlvvJ/QCbWvogM/S+rYWayx9SLs AuTKUHQrM8ZJdfTgXEWYaWIl952OiDpf -----END CERTIFICATE-----Generated at Mon Jan 26 12:22:18 2026 by rpki-client