This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/r7gDi7i4QmU1dOOtbCoFwIgmn3M.roa File: r7gDi7i4QmU1dOOtbCoFwIgmn3M.roa (raw, json) Hash identifier: P/aExdpHiRqSbyQI0OLhujhZZlzHxl4YsTYxSj077K0= Subject key identifier: AF:B8:03:8B:B8:B8:42:65:35:74:E3:AD:6C:2A:05:C0:88:26:9F:73 Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C76EA156078B17FC3428655654F558 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/r7gDi7i4QmU1dOOtbCoFwIgmn3M.roa Signing time: Thu 01 Jan 2026 04:18:37 +0000 ROA not before: Thu 01 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51472 IP address blocks: 81.23.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6e:a1:56:07:8b:17:fc:34:28:65:56:54:f5:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afb8038bb8b842653574e3ad6c2a05c088269f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:fb:09:6f:3c:b3:3d:e3:22:99:66:6c:a3:df: e7:7a:fc:0c:d8:89:e1:53:76:33:81:2d:33:4a:0a: 23:a4:05:59:4a:a9:98:76:5d:b1:0d:73:64:65:fa: 0f:c2:f5:92:de:e1:d8:04:28:5b:e0:ae:3d:96:cd: f9:9b:2e:a3:e9:85:7a:e9:36:45:07:cc:1a:dc:3f: 01:cf:bf:87:99:05:ae:eb:98:05:45:3f:47:10:46: 26:10:de:b2:9e:da:51:b1:19:12:4b:88:48:fa:62: a8:06:1b:65:f3:0a:b7:c8:2a:f8:a4:d7:a0:f7:40: 28:01:4a:e2:11:29:77:45:52:e4:aa:c2:db:ff:4b: d8:3d:9f:20:26:88:ef:0e:3a:58:84:ff:f8:6a:1a: 31:ef:1d:16:96:fa:01:a7:f1:dd:04:5f:f6:59:5e: ed:ee:fa:09:7d:c2:f6:2f:ab:ad:27:29:10:e2:31: 89:fb:b1:1a:cb:96:b9:53:97:07:29:1c:53:4b:b0: 9a:11:dd:61:48:60:ad:0a:fc:5a:71:45:13:c1:12: dd:a3:75:be:f1:ac:c0:e1:91:92:aa:9c:dd:e3:07: 2e:46:4a:70:58:74:4b:64:8d:2a:a3:41:ac:cb:98: c2:03:37:55:0c:5c:f8:bb:07:02:c9:70:0f:d3:06: 2d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B8:03:8B:B8:B8:42:65:35:74:E3:AD:6C:2A:05:C0:88:26:9F:73 X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/r7gDi7i4QmU1dOOtbCoFwIgmn3M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.23.15.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:d4:2b:a1:10:a2:e7:14:94:c6:33:eb:a7:74:c8:a6:8e:99: 82:26:86:d2:7f:a1:b5:82:3d:a6:7d:1f:ea:f8:13:ea:fe:8c: 83:38:42:0d:b7:10:d3:8a:af:ef:6b:e2:86:f2:36:24:b0:4c: 64:de:02:05:90:22:97:51:94:67:96:e6:40:6a:eb:79:e6:54: 2d:ed:22:0a:c6:3e:db:1a:2f:30:f6:6b:57:c2:da:78:62:0e: 1b:90:b8:2d:79:2b:7d:a5:b2:44:f3:b0:48:6c:56:33:23:0f: 0b:d3:6c:f3:15:fb:79:f4:37:0c:c8:78:2f:5d:6e:88:db:a5: 38:5d:bd:e4:d8:68:db:84:b3:3f:8c:e4:81:0b:72:0f:85:fb: 2c:58:4b:cb:63:34:a1:72:4b:74:8d:7b:05:5a:ad:25:54:04: 42:fb:d9:c3:8a:a3:1e:de:49:a4:a7:13:1a:f1:d4:08:68:e1: de:4b:21:18:ee:db:3e:9b:bb:4a:21:d0:53:e1:73:97:f4:da: b7:ec:8e:eb:1c:5c:02:6d:49:73:76:21:07:8a:34:93:36:29: 6a:35:b5:d0:e1:e7:62:8a:9d:c8:48:86:95:b6:13:7d:e9:7c: 55:3c:1a:62:9d:7f:57:92:3c:0e:f6:41:f7:1e:ad:fb:fe:1f: d2:d5:3d:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x26hVgeLF/w0KGVWVPVYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmI4MDM4YmI4Yjg0MjY1MzU3NGUzYWQ2YzJhMDVjMDg4MjY5ZjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/sJbzyzPeMimWZso9/nevwM2Inh U3YzgS0zSgojpAVZSqmYdl2xDXNkZfoPwvWS3uHYBChb4K49ls35my6j6YV66TZF B8wa3D8Bz7+HmQWu65gFRT9HEEYmEN6yntpRsRkSS4hI+mKoBhtl8wq3yCr4pNeg 90AoAUriESl3RVLkqsLb/0vYPZ8gJojvDjpYhP/4ahox7x0WlvoBp/HdBF/2WV7t 7voJfcL2L6utJykQ4jGJ+7Eay5a5U5cHKRxTS7CaEd1hSGCtCvxacUUTwRLdo3W+ 8azA4ZGSqpzd4wcuRkpwWHRLZI0qo0Gsy5jCAzdVDFz4uwcCyXAP0wYtZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK+4A4u4uEJlNXTjrWwqBcCIJp9zMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvcjdnRGk3aTRRbVUxZE9PdGJDb0Z3SWdtbjNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURcPMA0G CSqGSIb3DQEBCwUAA4IBAQAs1CuhEKLnFJTGM+undMimjpmCJobSf6G1gj2mfR/q +BPq/oyDOEINtxDTiq/va+KG8jYksExk3gIFkCKXUZRnluZAaut55lQt7SIKxj7b Gi8w9mtXwtp4Yg4bkLgteSt9pbJE87BIbFYzIw8L02zzFft59DcMyHgvXW6I26U4 Xb3k2GjbhLM/jOSBC3IPhfssWEvLYzShckt0jXsFWq0lVARC+9nDiqMe3kmkpxMa 8dQIaOHeSyEY7ts+m7tKIdBT4XOX9Nq37I7rHFwCbUlzdiEHijSTNilqNbXQ4edi ip3ISIaVthN96XxVPBpinX9XkjwO9kH3Hq37/h/S1T0a -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:51 2026 by rpki-client