This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/7pQQkDgyHd9o7yqZVlBZ4xtQ0fY.roa File: 7pQQkDgyHd9o7yqZVlBZ4xtQ0fY.roa (raw, json) Hash identifier: xZK00iWUDxNKvXeXgverCH60vwnzNexd4AxkHPVf2aU= Subject key identifier: EE:94:10:90:38:32:1D:DF:68:EF:2A:99:56:50:59:E3:1B:50:D1:F6 Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 019B7910F3A9547FBCBFF2E27389002C7BDC Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/7pQQkDgyHd9o7yqZVlBZ4xtQ0fY.roa Signing time: Thu 01 Jan 2026 10:18:32 +0000 ROA not before: Thu 01 Jan 2026 10:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199959 IP address blocks: 2.58.14.0/23 maxlen: 23 45.86.162.0/24 maxlen: 24 46.30.188.0/24 maxlen: 24 46.30.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f3:a9:54:7f:bc:bf:f2:e2:73:89:00:2c:7b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Jan 1 10:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee94109038321ddf68ef2a99565059e31b50d1f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:47:1c:be:cc:eb:70:b3:bd:59:af:24:c2:78: 56:88:d9:97:50:29:35:f5:ac:6d:82:ba:68:4f:d1: d3:8a:a9:92:67:53:e2:4f:e5:e6:a2:e1:d3:1d:37: 44:52:be:43:33:0a:13:7b:2a:c1:30:a0:76:7f:57: 61:98:35:2a:7e:c7:3b:b7:83:b6:3f:2e:fe:1f:4f: 4b:ee:cc:4a:3c:59:93:f3:b4:2c:21:e0:4a:3f:44: ec:e3:d9:2b:1e:57:ea:a3:1e:b4:18:1b:b1:45:01: e4:41:55:8a:6c:80:32:1b:c3:37:c8:9a:ff:13:34: ef:28:4b:91:66:39:70:6b:4d:e2:4d:e8:aa:36:50: 39:f4:cd:10:0c:34:f4:d9:55:c4:c2:3d:37:6e:c3: fa:78:b4:a0:b8:0f:96:22:f3:7c:b2:84:3c:38:f7: 5f:e6:e0:c8:4e:a3:25:3f:92:e1:87:96:2b:23:9b: fa:18:31:cd:99:62:24:5f:85:3c:b2:97:df:bd:4a: d9:16:33:56:83:9d:34:20:68:24:19:e8:9b:aa:23: 9e:0b:91:94:44:bc:0c:38:34:72:40:38:fc:25:e6: aa:be:9b:74:a8:4f:53:17:b8:e3:cf:32:fc:2c:ef: a0:d3:6f:71:e5:98:26:53:24:e3:e5:98:c5:1b:0b: e7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:94:10:90:38:32:1D:DF:68:EF:2A:99:56:50:59:E3:1B:50:D1:F6 X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/7pQQkDgyHd9o7yqZVlBZ4xtQ0fY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.14.0/23 45.86.162.0/24 46.30.188.0/24 46.30.191.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:9f:26:af:84:19:cf:a9:13:c1:43:a2:e9:1c:06:b9:95:3a: 9e:d9:66:d6:b1:ee:53:0a:69:e2:b9:9f:a3:4b:7f:74:22:71: 6e:a3:e1:0e:02:3b:c5:4f:2c:13:79:9e:17:5a:95:db:3e:5d: fd:08:6a:be:9f:82:ef:d0:c1:83:42:1d:5f:9c:2a:18:b1:43: 99:7f:ab:83:4b:96:3b:f7:63:88:73:d8:a1:d1:93:1b:49:67: c4:db:f6:54:d6:d4:3e:26:58:52:d5:01:1d:87:ac:b9:00:2d: 58:69:55:b9:4c:95:da:4c:13:21:17:d5:a2:2a:c2:4f:74:b7: a5:c1:82:56:37:1d:08:69:92:c2:46:49:7f:43:74:41:66:e0: b1:dc:86:4e:0d:b7:77:f8:7a:48:7b:64:e5:ad:7f:03:df:25: 4e:40:c3:f3:44:51:64:bc:72:ca:a1:b3:e7:cc:16:d1:b0:26: 79:f9:8a:72:50:d3:53:88:6f:24:68:11:d0:aa:d9:2c:d3:e2: 02:30:33:4f:fd:8e:71:41:b3:24:d2:2c:97:5c:31:14:0a:11: 1e:7d:86:19:f4:1e:91:31:9d:7c:98:99:b5:c7:97:da:1b:ed: 49:0a:67:66:fc:ee:d3:ad:02:bc:6e:e4:ca:a7:d0:d1:b4:cd: 35:cf:06:c4 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5EPOpVH+8v/Lic4kALHvcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjYwMTAxMTAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTk0MTA5MDM4MzIxZGRmNjhlZjJhOTk1NjUwNTllMzFiNTBkMWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00ccvszrcLO9Wa8kwnhWiNmXUCk1 9axtgrpoT9HTiqmSZ1PiT+XmouHTHTdEUr5DMwoTeyrBMKB2f1dhmDUqfsc7t4O2 Py7+H09L7sxKPFmT87QsIeBKP0Ts49krHlfqox60GBuxRQHkQVWKbIAyG8M3yJr/ EzTvKEuRZjlwa03iTeiqNlA59M0QDDT02VXEwj03bsP6eLSguA+WIvN8soQ8OPdf 5uDITqMlP5Lhh5YrI5v6GDHNmWIkX4U8spffvUrZFjNWg500IGgkGeibqiOeC5GU RLwMODRyQDj8Jeaqvpt0qE9TF7jjzzL8LO+g029x5ZgmUyTj5ZjFGwvnzwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFO6UEJA4Mh3faO8qmVZQWeMbUNH2MB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvN3BRUWtEZ3lIZDlvN3lxWlZsQlo0eHRRMGZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBAjoOAwQA LVaiAwQALh68AwQALh6/MA0GCSqGSIb3DQEBCwUAA4IBAQA+nyavhBnPqRPBQ6Lp HAa5lTqe2WbWse5TCmniuZ+jS390InFuo+EOAjvFTywTeZ4XWpXbPl39CGq+n4Lv 0MGDQh1fnCoYsUOZf6uDS5Y792OIc9ih0ZMbSWfE2/ZU1tQ+JlhS1QEdh6y5AC1Y aVW5TJXaTBMhF9WiKsJPdLelwYJWNx0IaZLCRkl/Q3RBZuCx3IZODbd3+HpIe2Tl rX8D3yVOQMPzRFFkvHLKobPnzBbRsCZ5+YpyUNNTiG8kaBHQqtks0+ICMDNP/Y5x QbMk0iyXXDEUChEefYYZ9B6RMZ18mJm1x5faG+1JCmdm/O7TrQK8buTKp9DRtM01 zwbE -----END CERTIFICATE-----Generated at Sun Jan 25 15:00:52 2026 by rpki-client