This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/p7RfayQGkYVg5d11LiJ1Q0zbyT4.roa File: p7RfayQGkYVg5d11LiJ1Q0zbyT4.roa (raw, json) Hash identifier: I4DW3u8qF1DUqorT+zF5KoXC1GrV1uanCFydVzAjLr8= Subject key identifier: A7:B4:5F:6B:24:06:91:85:60:E5:DD:75:2E:22:75:43:4C:DB:C9:3E Certificate issuer: /CN=9189e06c887d3fede88f717bffa43c8cc866c7a5 Certificate serial: 019B7F13515BA41F7FC512EBB3BFD6087B50 Authority key identifier: 91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/p7RfayQGkYVg5d11LiJ1Q0zbyT4.roa Signing time: Fri 02 Jan 2026 14:18:50 +0000 ROA not before: Fri 02 Jan 2026 14:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13030 IP address blocks: 198.212.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:51:5b:a4:1f:7f:c5:12:eb:b3:bf:d6:08:7b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9189e06c887d3fede88f717bffa43c8cc866c7a5 Validity Not Before: Jan 2 14:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7b45f6b2406918560e5dd752e2275434cdbc93e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:aa:fd:3d:17:8f:2d:01:7e:5b:d6:7b:c8: 8a:d7:70:ad:ce:a3:42:a7:95:ff:72:8d:40:b6:f0: ff:da:3b:4b:7d:6c:13:8b:95:87:59:ee:af:86:b4: 94:1c:b0:8a:0b:0b:c1:13:b0:b8:70:1a:07:13:68: 55:bf:ae:e3:44:bf:c2:53:cb:ab:4e:db:94:62:1a: f5:40:14:91:ce:76:d7:17:83:e8:ca:15:21:49:d1: a0:d1:b5:e9:d7:d9:56:33:06:20:36:7e:d0:e5:5e: fa:b4:01:d3:c4:99:7a:46:88:98:5a:68:2d:57:93: ee:b8:c6:aa:cf:70:91:d8:01:d4:a6:6b:d3:d3:3a: 82:d5:84:df:44:d2:e0:f9:d1:ad:75:ca:7a:71:86: 57:e4:55:72:ac:d7:25:b1:91:3e:28:e0:dc:0e:0c: 17:d4:59:6b:dc:fb:08:19:ea:19:0a:54:60:83:31: 75:a9:d9:e2:1c:a6:67:ef:a2:b3:14:2f:b4:df:02: a6:b1:92:03:3e:50:4c:ca:e5:2a:b3:66:2a:e3:52: fc:1e:ff:14:c2:51:c5:dc:e3:7d:39:14:c7:28:ff: 3c:ad:88:12:ff:eb:ff:6b:42:b2:19:88:49:88:ed: ab:b2:d3:43:92:6c:c8:5d:7e:d2:89:e6:73:e3:c9: 78:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B4:5F:6B:24:06:91:85:60:E5:DD:75:2E:22:75:43:4C:DB:C9:3E X509v3 Authority Key Identifier: keyid:91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/p7RfayQGkYVg5d11LiJ1Q0zbyT4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.212.39.0/24 Signature Algorithm: sha256WithRSAEncryption 48:3d:9e:eb:32:a6:44:94:44:9e:55:ef:41:ab:f3:69:d9:ea: d3:29:b1:05:e6:5d:67:7f:12:27:42:2d:cc:64:d0:8f:be:96: df:c1:db:08:f5:b5:44:ee:4f:27:4b:a0:f3:5a:81:26:4d:0c: 8d:43:94:c5:f8:ed:b0:83:92:d1:a9:d8:cb:27:8b:3f:5d:4d: 77:13:9d:08:1a:39:e6:f3:d3:5d:33:27:2a:a1:ac:1a:98:2e: b7:22:ff:64:10:66:8f:fe:e3:bd:f8:be:3e:ef:f1:6e:0c:6c: 4e:ce:53:ff:49:a8:d7:df:10:4f:aa:ee:a2:d2:0d:76:ec:75: 69:20:4d:98:43:0a:92:6b:49:f9:99:4d:6d:85:3c:89:1f:86: b3:1a:51:52:1f:9c:91:cf:bf:f3:bc:3b:3e:c0:33:2c:0f:2b: 88:a3:dd:1d:62:29:34:a0:e8:59:40:ad:25:fd:6b:a8:d0:6c: e5:c7:2f:3a:67:d7:90:ac:78:66:fd:1f:8b:23:3a:8c:02:fd: fc:ec:09:aa:7d:2a:42:27:18:11:fd:8a:14:d3:44:f8:8e:4e: a8:76:fc:11:13:6a:88:cb:44:24:71:91:b2:6f:ce:56:7c:96: 20:f6:13:a3:a9:f8:6a:50:36:06:3a:04:28:a4:63:07:3b:68: fb:d6:38:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E1FbpB9/xRLrs7/WCHtQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxODllMDZjODg3ZDNmZWRlODhmNzE3YmZmYTQzYzhjYzg2 NmM3YTUwHhcNMjYwMTAyMTQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2I0NWY2YjI0MDY5MTg1NjBlNWRkNzUyZTIyNzU0MzRjZGJjOTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS2q/T0Xjy0BflvWe8iK13CtzqNC p5X/co1AtvD/2jtLfWwTi5WHWe6vhrSUHLCKCwvBE7C4cBoHE2hVv67jRL/CU8ur TtuUYhr1QBSRznbXF4PoyhUhSdGg0bXp19lWMwYgNn7Q5V76tAHTxJl6RoiYWmgt V5PuuMaqz3CR2AHUpmvT0zqC1YTfRNLg+dGtdcp6cYZX5FVyrNclsZE+KODcDgwX 1Flr3PsIGeoZClRggzF1qdniHKZn76KzFC+03wKmsZIDPlBMyuUqs2Yq41L8Hv8U wlHF3ON9ORTHKP88rYgS/+v/a0KyGYhJiO2rstNDkmzIXX7SieZz48l4+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKe0X2skBpGFYOXddS4idUNM28k+MB8GA1UdIwQY MBaAFJGJ4GyIfT/t6I9xe/+kPIzIZselMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1luZ2JJaDlQLTNvajNGN182UThqTWhteDZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zZDNhMzMtNjFkOS00OTk2LTgxOWMt ZDk3YTU0Y2IzOWUxLzEvcDdSZmF5UUdrWVZnNWQxMUxpSjFRMHpieVQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8zZDNhMzMtNjFkOS00OTk2LTgxOWMtZDk3YTU0Y2IzOWUx LzEva1luZ2JJaDlQLTNvajNGN182UThqTWhteDZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtQnMA0G CSqGSIb3DQEBCwUAA4IBAQBIPZ7rMqZElESeVe9Bq/Np2erTKbEF5l1nfxInQi3M ZNCPvpbfwdsI9bVE7k8nS6DzWoEmTQyNQ5TF+O2wg5LRqdjLJ4s/XU13E50IGjnm 89NdMycqoawamC63Iv9kEGaP/uO9+L4+7/FuDGxOzlP/SajX3xBPqu6i0g127HVp IE2YQwqSa0n5mU1thTyJH4azGlFSH5yRz7/zvDs+wDMsDyuIo90dYik0oOhZQK0l /Wuo0Gzlxy86Z9eQrHhm/R+LIzqMAv387AmqfSpCJxgR/YoU00T4jk6odvwRE2qI y0QkcZGyb85WfJYg9hOjqfhqUDYGOgQopGMHO2j71jht -----END CERTIFICATE-----Generated at Mon Jan 26 01:02:07 2026 by rpki-client