This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/7rCr7Pm66FhbI0Vv0pM9TtyRODk.roa File: 7rCr7Pm66FhbI0Vv0pM9TtyRODk.roa (raw, json) Hash identifier: eF8IEGbndxilP7ZrGLA+WxaactMHRBgKAzjQED4H6TA= Subject key identifier: EE:B0:AB:EC:F9:BA:E8:58:5B:23:45:6F:D2:93:3D:4E:DC:91:38:39 Certificate issuer: /CN=3a7b03913e3a285efe51cdac65f5504c87a34460 Certificate serial: 019B7DCA844B16748B112FA9C4A00F5D934E Authority key identifier: 3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/7rCr7Pm66FhbI0Vv0pM9TtyRODk.roa Signing time: Fri 02 Jan 2026 08:19:42 +0000 ROA not before: Fri 02 Jan 2026 08:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35043 IP address blocks: 185.95.180.0/24 maxlen: 24 185.95.181.0/24 maxlen: 24 185.95.182.0/24 maxlen: 24 185.95.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:84:4b:16:74:8b:11:2f:a9:c4:a0:0f:5d:93:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a7b03913e3a285efe51cdac65f5504c87a34460 Validity Not Before: Jan 2 08:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eeb0abecf9bae8585b23456fd2933d4edc913839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:55:67:65:32:d9:88:3f:8e:cb:bb:95:da:9d: 5b:54:9b:ff:56:d2:83:db:19:ad:a0:23:ad:3a:97: 4f:f3:ae:87:a6:2c:74:56:83:30:be:c8:45:ad:3b: 9f:61:47:79:22:e1:b3:d3:1d:fc:39:88:a0:ea:0e: 05:f9:e7:c6:d8:78:65:96:f4:99:61:6f:d4:db:23: 7f:08:18:f9:e2:82:ce:4a:8a:5b:8a:47:6a:99:0c: 05:2d:b7:20:c5:2e:ec:47:d6:c2:0f:e1:06:65:64: c7:b1:2d:88:1d:f6:82:1a:f8:c1:64:ae:0f:d6:fd: 20:b7:97:a6:9d:45:ec:70:99:d5:38:d1:e7:2b:c0: 01:cf:a7:ef:5b:01:1a:10:b9:c9:d9:d0:7e:42:07: 1b:5a:a3:6c:7e:b3:f9:ea:50:6c:08:7b:f6:bc:72: 66:12:da:d5:3f:37:0d:1e:c4:bc:61:da:1a:90:80: be:00:5e:77:54:62:c5:ef:c5:c0:86:2e:81:58:83: 42:fb:3f:34:ba:63:d6:a8:4b:09:eb:3a:ba:cf:c8: 6c:92:e1:a9:8f:ca:d3:20:60:0a:2e:12:f9:53:7b: 5f:8f:f3:54:97:a4:7f:e3:6f:4c:c0:e4:8c:00:dc: c8:ba:3e:6d:56:dc:17:8c:fb:22:23:da:b8:1b:75: a4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B0:AB:EC:F9:BA:E8:58:5B:23:45:6F:D2:93:3D:4E:DC:91:38:39 X509v3 Authority Key Identifier: keyid:3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/7rCr7Pm66FhbI0Vv0pM9TtyRODk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.95.180.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:81:c5:ad:64:43:b6:87:d9:4b:5e:d6:7f:62:61:5a:a1:d2: f6:d5:a9:90:a0:82:33:dd:f9:80:d9:36:95:92:1c:eb:8b:05: ec:17:b5:e6:3b:f1:e3:a2:7f:38:8c:dc:e6:72:cd:23:d1:d6: af:d8:a9:cc:75:9c:b6:49:df:fa:35:5e:1a:fb:82:7d:30:c2: 00:be:4a:7a:76:a0:2f:e2:77:8f:01:3a:86:7c:3d:4c:93:9b: c7:56:de:03:c4:2e:37:d4:1d:63:e3:ae:64:07:ca:47:7d:26: e2:bd:e3:7b:0c:2c:f7:6b:a4:c8:ba:2d:0b:66:74:e4:cd:3d: 49:49:ab:1d:d1:0c:cc:b3:4e:ce:20:a4:51:98:be:82:f7:44: 79:c1:11:fa:6c:af:b1:ee:ef:86:02:0b:9a:a5:7c:33:94:44: f7:30:e3:c9:55:fc:96:ff:8c:f9:36:b0:58:ee:94:2b:e4:50: 30:bb:6e:e2:c0:e3:f0:ab:bf:38:79:f7:6d:2c:38:20:34:c9: ae:ed:d2:d9:29:61:f6:6a:18:21:d4:c1:4e:58:a8:6a:f0:b2: d0:4d:a5:c9:c3:87:d6:f2:1c:70:8c:2e:b0:9e:3a:f5:76:b5: 71:c0:b8:d7:cd:fa:99:61:0c:d7:52:0d:cb:ad:6e:1e:17:5d: 41:2a:c1:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yoRLFnSLES+pxKAPXZNOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhN2IwMzkxM2UzYTI4NWVmZTUxY2RhYzY1ZjU1MDRjODdh MzQ0NjAwHhcNMjYwMTAyMDgxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWIwYWJlY2Y5YmFlODU4NWIyMzQ1NmZkMjkzM2Q0ZWRjOTEzODM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilVnZTLZiD+Oy7uV2p1bVJv/VtKD 2xmtoCOtOpdP866Hpix0VoMwvshFrTufYUd5IuGz0x38OYig6g4F+efG2HhllvSZ YW/U2yN/CBj54oLOSopbikdqmQwFLbcgxS7sR9bCD+EGZWTHsS2IHfaCGvjBZK4P 1v0gt5emnUXscJnVONHnK8ABz6fvWwEaELnJ2dB+QgcbWqNsfrP56lBsCHv2vHJm EtrVPzcNHsS8YdoakIC+AF53VGLF78XAhi6BWINC+z80umPWqEsJ6zq6z8hskuGp j8rTIGAKLhL5U3tfj/NUl6R/429MwOSMANzIuj5tVtwXjPsiI9q4G3WkaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO6wq+z5uuhYWyNFb9KTPU7ckTg5MB8GA1UdIwQY MBaAFDp7A5E+Oihe/lHNrGX1UEyHo0RgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT25zRGtUNDZLRjctVWMyc1pmVlFUSWVqUkdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82MWRiNmItMWQ3My00ZWMyLThiZTAt ZjM3Y2JhZjdjZTVhLzEvN3JDcjdQbTY2RmhiSTBWdjBwTTlUdHlST0RrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC82MWRiNmItMWQ3My00ZWMyLThiZTAtZjM3Y2JhZjdjZTVh LzEvT25zRGtUNDZLRjctVWMyc1pmVlFUSWVqUkdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuV+0MA0G CSqGSIb3DQEBCwUAA4IBAQCdgcWtZEO2h9lLXtZ/YmFaodL21amQoIIz3fmA2TaV khzriwXsF7XmO/Hjon84jNzmcs0j0dav2KnMdZy2Sd/6NV4a+4J9MMIAvkp6dqAv 4nePATqGfD1Mk5vHVt4DxC431B1j465kB8pHfSbiveN7DCz3a6TIui0LZnTkzT1J Sasd0QzMs07OIKRRmL6C90R5wRH6bK+x7u+GAguapXwzlET3MOPJVfyW/4z5NrBY 7pQr5FAwu27iwOPwq784efdtLDggNMmu7dLZKWH2ahgh1MFOWKhq8LLQTaXJw4fW 8hxwjC6wnjr1drVxwLjXzfqZYQzXUg3LrW4eF11BKsEe -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:24 2026 by rpki-client