This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/7haT3jVvApw9FyZ6uSoSIfkRf8g.roa File: 7haT3jVvApw9FyZ6uSoSIfkRf8g.roa (raw, json) Hash identifier: EI0ydjb3oepUOGh8wjxT6lCNnyR3bTdkhLSTfWnO5Vw= Subject key identifier: EE:16:93:DE:35:6F:02:9C:3D:17:26:7A:B9:2A:12:21:F9:11:7F:C8 Certificate issuer: /CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a Certificate serial: 019B7BA4CBF51BFCC6E86DBCABA12E9CBD92 Authority key identifier: CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/7haT3jVvApw9FyZ6uSoSIfkRf8g.roa Signing time: Thu 01 Jan 2026 22:19:16 +0000 ROA not before: Thu 01 Jan 2026 22:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42065 IP address blocks: 83.243.64.0/21 maxlen: 21 83.243.64.0/22 maxlen: 24 83.243.68.0/24 maxlen: 24 83.243.70.0/23 maxlen: 24 193.218.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:cb:f5:1b:fc:c6:e8:6d:bc:ab:a1:2e:9c:bd:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a Validity Not Before: Jan 1 22:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee1693de356f029c3d17267ab92a1221f9117fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:28:7e:01:69:e0:d0:b2:d0:e4:b3:5b:b2:71: 8f:db:13:31:67:33:a9:25:0b:8c:eb:05:41:c3:bb: d6:2e:32:be:07:39:30:6f:da:bb:07:3b:d5:eb:4e: 74:46:f9:7d:26:b5:06:e9:0d:99:23:2e:96:5b:01: c1:7b:4e:08:00:70:0f:6a:03:3e:c9:11:b2:e0:89: 59:39:d9:00:7b:dc:7f:8e:1d:27:5b:7c:17:f9:62: 74:b8:8b:8c:bc:8a:ee:bf:51:57:c8:1b:03:9b:34: fc:4f:22:9c:a5:a2:a5:6a:4c:d5:b1:9c:29:81:61: 8e:08:81:69:3e:90:7a:88:b2:c5:5d:b0:93:60:a2: 3a:52:ba:d6:99:63:0b:6b:ec:2d:fb:ff:9e:48:4f: 64:66:37:f2:bd:25:be:2a:53:62:6a:90:50:fb:1d: a7:6c:a2:dd:d9:ae:73:cf:50:61:9c:17:24:52:b1: 75:90:ed:52:d5:a8:71:de:81:2f:d6:28:5e:9c:0a: 10:59:93:d0:f9:77:0e:5b:76:1d:21:b0:4e:b5:6a: 26:2d:3e:36:92:07:79:21:24:6e:5d:da:b9:01:b8: 41:d0:ac:e6:96:61:88:2f:9b:e1:26:22:18:96:74: d0:1e:51:72:53:ed:54:d8:84:31:e9:c3:03:3d:8e: 96:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:16:93:DE:35:6F:02:9C:3D:17:26:7A:B9:2A:12:21:F9:11:7F:C8 X509v3 Authority Key Identifier: keyid:CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/7haT3jVvApw9FyZ6uSoSIfkRf8g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.243.64.0/21 193.218.140.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:9c:f9:74:34:10:64:26:5d:28:29:ff:df:ac:d0:64:ff:8b: 9b:c4:25:9d:9e:52:99:9a:67:39:98:34:ea:9e:6f:13:b5:07: 56:1b:b2:aa:3d:63:71:60:78:61:c6:4d:7c:97:a1:57:34:97: 74:99:f1:c0:07:d8:2b:7c:bc:a6:9c:17:4e:36:f9:85:34:62: 08:10:97:4a:63:a8:e3:7c:13:c8:a0:6d:50:2e:ab:70:b0:dd: 47:8d:de:1b:6a:48:4a:08:98:ac:74:2f:9c:d7:f0:7c:8a:38: 13:1d:0c:76:32:18:e2:82:fd:f1:aa:dc:49:cd:34:fa:fb:a2: cc:9a:9b:c5:e2:27:c5:17:cc:15:83:5c:8e:3c:47:b8:e6:09: 75:38:f1:4c:3b:30:a6:86:b2:8f:08:27:1b:c8:dd:b3:38:40: 14:c6:4e:48:26:1c:a9:68:51:53:a9:ab:62:92:5d:38:d1:fa: ee:a0:d4:f3:66:73:3a:fe:16:10:da:88:48:88:cc:3d:fd:48: 18:e3:31:b3:68:a8:bf:14:2d:8a:f6:61:b4:38:ec:03:f6:83: ba:49:93:ae:df:a0:b3:fb:e1:99:71:de:4e:56:28:31:91:76: 14:8f:af:72:ab:16:d1:b1:ce:37:2a:f2:47:e8:36:68:90:12: b4:26:c4:50 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pMv1G/zG6G28q6EunL2SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYzk4MTRhODJjY2I2OGY1MWMzN2JmODNhZTZjZjU3ODI0 NGNhMWEwHhcNMjYwMTAxMjIxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTE2OTNkZTM1NmYwMjljM2QxNzI2N2FiOTJhMTIyMWY5MTE3ZmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Sh+AWng0LLQ5LNbsnGP2xMxZzOp JQuM6wVBw7vWLjK+Bzkwb9q7BzvV6050Rvl9JrUG6Q2ZIy6WWwHBe04IAHAPagM+ yRGy4IlZOdkAe9x/jh0nW3wX+WJ0uIuMvIruv1FXyBsDmzT8TyKcpaKlakzVsZwp gWGOCIFpPpB6iLLFXbCTYKI6UrrWmWMLa+wt+/+eSE9kZjfyvSW+KlNiapBQ+x2n bKLd2a5zz1BhnBckUrF1kO1S1ahx3oEv1ihenAoQWZPQ+XcOW3YdIbBOtWomLT42 kgd5ISRuXdq5AbhB0KzmlmGIL5vhJiIYlnTQHlFyU+1U2IQx6cMDPY6WFwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFO4Wk941bwKcPRcmerkqEiH5EX/IMB8GA1UdIwQY MBaAFM3JgUqCzLaPUcN7+Drmz1eCRMoaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemNtQlNvTE10bzlSdzN2NE91YlBWNEpFeWhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mOTA3YzgtNTNhMy00NTdhLThkMDUt OTYzYjI1ZmEzMDY4LzEvN2hhVDNqVnZBcHc5RnlaNnVTb1NJZmtSZjhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9mOTA3YzgtNTNhMy00NTdhLThkMDUtOTYzYjI1ZmEzMDY4 LzEvemNtQlNvTE10bzlSdzN2NE91YlBWNEpFeWhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDU/NAAwQC wdqMMA0GCSqGSIb3DQEBCwUAA4IBAQAfnPl0NBBkJl0oKf/frNBk/4ubxCWdnlKZ mmc5mDTqnm8TtQdWG7KqPWNxYHhhxk18l6FXNJd0mfHAB9grfLymnBdONvmFNGII EJdKY6jjfBPIoG1QLqtwsN1Hjd4bakhKCJisdC+c1/B8ijgTHQx2Mhjigv3xqtxJ zTT6+6LMmpvF4ifFF8wVg1yOPEe45gl1OPFMOzCmhrKPCCcbyN2zOEAUxk5IJhyp aFFTqatikl040fruoNTzZnM6/hYQ2ohIiMw9/UgY4zGzaKi/FC2K9mG0OOwD9oO6 SZOu36Cz++GZcd5OVigxkXYUj69yqxbRsc43KvJH6DZokBK0JsRQ -----END CERTIFICATE-----Generated at Sun Jan 25 17:33:44 2026 by rpki-client