This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/7FZJTSyZd-nU__CcRlBlCG3_Pn0.roa File: 7FZJTSyZd-nU__CcRlBlCG3_Pn0.roa (raw, json) Hash identifier: noUOCFFTHGmwRjfnOiZSbY4dF3Bfkgx9GSd4XfEBnhk= Subject key identifier: EC:56:49:4D:2C:99:77:E9:D4:FF:F0:9C:46:50:65:08:6D:FF:3E:7D Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d Certificate serial: 019B7C80618A73BE80A4C599FEBA6D066DC2 Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/7FZJTSyZd-nU__CcRlBlCG3_Pn0.roa Signing time: Fri 02 Jan 2026 02:19:06 +0000 ROA not before: Fri 02 Jan 2026 02:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216234 IP address blocks: 94.159.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:61:8a:73:be:80:a4:c5:99:fe:ba:6d:06:6d:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d Validity Not Before: Jan 2 02:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec56494d2c9977e9d4fff09c465065086dff3e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:1b:5a:a1:23:81:bd:3e:6e:34:5d:7a:e0:cc: 18:8c:11:2b:99:63:7d:c9:05:de:48:bb:a3:28:d6: 56:6b:28:ad:cb:51:97:8a:0d:88:92:52:79:67:fe: b1:d8:88:51:88:52:09:ed:b1:c7:93:8d:b4:c6:e4: ab:39:3e:3f:fd:56:d0:e6:8e:cc:0b:cc:c4:f5:dc: 49:eb:27:8e:cd:0d:86:85:ce:c6:6a:2a:f4:44:3b: 29:ca:b5:ab:5f:8e:d3:a3:9a:81:30:a9:28:31:eb: bf:c8:93:11:09:aa:08:01:ca:20:59:4a:4b:e8:7d: 72:4b:d7:10:5c:c7:2c:20:52:56:8c:61:97:d9:5d: 0c:e1:00:16:e8:43:99:f1:2c:da:fa:e8:5b:5e:7d: 80:5f:af:32:c7:3a:e0:5b:b0:07:ca:a0:a7:c8:77: ed:41:f7:56:34:d3:ac:5b:fd:3e:33:ec:e2:90:46: 33:82:39:63:0c:cd:eb:04:32:79:d7:d4:e7:70:55: 85:aa:d1:6e:e6:c2:99:4f:41:f1:2b:07:2f:ed:2b: 2a:a9:20:30:62:49:7e:24:70:85:e8:e3:cf:91:93: 85:32:8d:7d:a0:75:f8:39:ec:65:f4:bd:ab:f2:72: 1b:a1:6d:0c:db:8a:7a:65:6f:68:66:b3:2c:ae:ee: 29:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:56:49:4D:2C:99:77:E9:D4:FF:F0:9C:46:50:65:08:6D:FF:3E:7D X509v3 Authority Key Identifier: keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/7FZJTSyZd-nU__CcRlBlCG3_Pn0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.159.113.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:4e:02:88:92:cf:a4:62:05:a6:f8:30:84:77:43:eb:7c:57: 4b:0e:74:f4:43:b5:ba:3a:df:56:0c:5d:a6:f6:7d:5a:ac:90: c2:65:63:46:10:66:6a:1b:56:6b:69:ef:3a:68:b7:7b:65:ee: ff:40:ec:98:02:76:f5:e7:d8:64:1f:bc:a0:ec:b3:13:0b:e2: ab:55:c3:59:0d:ee:90:57:d8:ec:9b:d9:95:3c:3f:5b:5d:ed: 5f:62:21:24:2f:fc:71:0f:a8:70:f7:44:df:3d:e2:ad:b4:e1: 9d:53:81:87:c8:de:af:3b:cb:1d:31:31:08:cf:78:94:41:94: de:33:34:ed:43:27:d0:36:69:9c:0d:9f:66:d5:04:17:bf:12: af:89:5b:8e:9a:55:78:d6:d3:b3:6d:09:cc:2c:ef:31:36:95: b8:7d:ac:67:b8:10:44:ee:c9:6e:d8:1f:a2:6a:9d:a5:97:ba: 0a:45:05:ae:6d:ec:d1:be:13:b1:92:f4:8b:89:d2:d9:94:67: c8:cb:d6:3b:ed:5c:91:2a:0d:e9:be:1b:16:09:ed:7a:50:32: 75:27:9f:bd:7d:ae:a2:07:bc:45:ad:e5:b5:fa:f3:76:34:e3: 03:37:ae:6a:f2:5b:37:01:d1:cf:b6:2d:fa:e3:d4:1e:a9:3a: 28:c7:39:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gGGKc76ApMWZ/rptBm3CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2FlNzU5MmNhNTI0OTFkYzE2NmEzMGZlMTQ3N2Q3MTJi ZDQ2NWQwHhcNMjYwMTAyMDIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzU2NDk0ZDJjOTk3N2U5ZDRmZmYwOWM0NjUwNjUwODZkZmYzZTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xtaoSOBvT5uNF164MwYjBErmWN9 yQXeSLujKNZWayity1GXig2IklJ5Z/6x2IhRiFIJ7bHHk420xuSrOT4//VbQ5o7M C8zE9dxJ6yeOzQ2Ghc7Gair0RDspyrWrX47To5qBMKkoMeu/yJMRCaoIAcogWUpL 6H1yS9cQXMcsIFJWjGGX2V0M4QAW6EOZ8Sza+uhbXn2AX68yxzrgW7AHyqCnyHft QfdWNNOsW/0+M+zikEYzgjljDM3rBDJ519TncFWFqtFu5sKZT0HxKwcv7SsqqSAw Ykl+JHCF6OPPkZOFMo19oHX4Oexl9L2r8nIboW0M24p6ZW9oZrMsru4powIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOxWSU0smXfp1P/wnEZQZQht/z59MB8GA1UdIwQY MBaAFCl651kspSSR3BZqMP4Ud9cSvUZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgt MzkxMGE1OWExMTIxLzEvN0ZaSlRTeVpkLW5VX19DY1JsQmxDRzNfUG4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgtMzkxMGE1OWExMTIx LzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXp9xMA0G CSqGSIb3DQEBCwUAA4IBAQBOTgKIks+kYgWm+DCEd0PrfFdLDnT0Q7W6Ot9WDF2m 9n1arJDCZWNGEGZqG1Zrae86aLd7Ze7/QOyYAnb159hkH7yg7LMTC+KrVcNZDe6Q V9jsm9mVPD9bXe1fYiEkL/xxD6hw90TfPeKttOGdU4GHyN6vO8sdMTEIz3iUQZTe MzTtQyfQNmmcDZ9m1QQXvxKviVuOmlV41tOzbQnMLO8xNpW4faxnuBBE7slu2B+i ap2ll7oKRQWubezRvhOxkvSLidLZlGfIy9Y77VyRKg3pvhsWCe16UDJ1J5+9fa6i B7xFreW1+vN2NOMDN65q8ls3AdHPti3649QeqTooxzmb -----END CERTIFICATE-----Generated at Sun Jan 25 13:46:30 2026 by rpki-client