This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/7QoLgilRXJK8u8tr2ztSeBW78BA.roa File: 7QoLgilRXJK8u8tr2ztSeBW78BA.roa (raw, json) Hash identifier: IlbEf6hBBCxrRJu7FgHg8JiriiaoInoU7Nzo2/n4j3Y= Subject key identifier: ED:0A:0B:82:29:51:5C:92:BC:BB:CB:6B:DB:3B:52:78:15:BB:F0:10 Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f Certificate serial: 019B78349EB663474EF2BDC3F2C7417BA989 Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/7QoLgilRXJK8u8tr2ztSeBW78BA.roa Signing time: Thu 01 Jan 2026 06:17:52 +0000 ROA not before: Thu 01 Jan 2026 06:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62000 IP address blocks: 93.127.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:9e:b6:63:47:4e:f2:bd:c3:f2:c7:41:7b:a9:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f Validity Not Before: Jan 1 06:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed0a0b8229515c92bcbbcb6bdb3b527815bbf010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0a:ce:20:c5:1b:cf:82:f5:25:3f:bc:f6:0e: 36:ee:aa:a5:d4:94:2c:08:44:fa:96:77:bc:53:56: b7:d3:53:55:da:9b:4b:6c:ce:ea:c1:80:59:37:8c: 49:10:3f:b3:51:ec:10:3a:6f:1d:1a:5f:40:9b:89: a6:4a:bf:8e:a5:e9:ce:f8:cd:2c:54:d8:fe:2a:1e: d3:38:90:04:dd:64:67:8d:c0:40:02:ff:ba:42:db: 12:81:d9:53:ce:af:75:3c:7d:4f:1f:86:1e:e0:5b: 9a:1a:9e:a0:85:2f:fe:3b:76:18:3b:9b:39:68:5c: 21:40:cc:13:0a:74:fc:a8:d6:df:1e:3d:84:4e:8a: 9c:67:38:8e:76:17:a4:63:c5:18:0c:0e:61:1c:26: 7a:54:5c:ac:f6:b5:f7:a9:39:a8:63:5a:4f:88:45: 8a:06:c6:ab:f8:bd:5c:4f:2e:c8:6a:08:ef:ff:1a: c6:49:cf:31:6a:a4:26:c6:6c:e3:59:11:95:e6:32: b9:42:04:b5:28:c5:cb:4c:44:93:97:9e:d7:c0:e4: b9:46:2f:3d:83:28:2a:df:d5:0b:a4:5a:1d:ec:cf: 50:43:0f:65:4f:24:a5:02:a6:c2:89:a4:4c:a4:4e: fb:6b:ed:b3:2c:ce:58:c7:78:ec:fe:45:42:36:2b: 4d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:0A:0B:82:29:51:5C:92:BC:BB:CB:6B:DB:3B:52:78:15:BB:F0:10 X509v3 Authority Key Identifier: keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/7QoLgilRXJK8u8tr2ztSeBW78BA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.127.158.0/23 Signature Algorithm: sha256WithRSAEncryption ad:b2:2b:b7:af:eb:04:e0:86:9c:32:6d:d9:08:2b:6d:5a:5d: a3:48:03:41:f8:22:35:3c:74:32:21:20:b9:db:fb:50:b5:92: ab:bc:07:31:fe:82:67:84:bf:b6:8f:ca:8a:7b:f0:85:c7:7a: d6:09:83:5d:d8:22:a4:f2:57:2c:cc:04:7e:2c:4d:46:e6:aa: e5:27:ed:17:a9:9e:f9:02:d9:ad:dd:44:a0:24:1f:88:8f:1a: 60:9a:40:83:61:7e:7b:99:7b:bf:75:3a:b3:bf:a1:1a:b0:d9: 3f:8c:e4:4b:f4:91:97:b9:98:ed:70:ff:0e:89:20:fa:e2:ca: 10:61:c4:13:5a:56:73:d9:f2:50:bc:75:d4:81:91:2f:88:15: 11:08:c6:27:4f:50:54:2d:bc:c1:0c:83:1e:53:82:e8:eb:d9: db:72:11:83:39:3c:5f:70:22:03:ef:71:8f:7c:73:cc:bc:9e: d7:ec:e0:51:24:aa:d2:e7:2e:d5:e7:cf:1b:5e:0b:c6:2e:cd: 6c:10:a3:14:65:23:3a:e0:b5:9f:a4:2c:e1:55:c3:34:73:6a: 33:13:64:9a:f9:a8:10:a9:e6:4a:a2:2d:64:e9:d0:81:36:f7: 1d:1c:a7:bf:73:76:82:28:7f:77:ff:02:7a:b7:b5:8b:fb:6d: f3:4c:7d:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NJ62Y0dO8r3D8sdBe6mJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2 ZGRlNmYwHhcNMjYwMTAxMDYxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDBhMGI4MjI5NTE1YzkyYmNiYmNiNmJkYjNiNTI3ODE1YmJmMDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswrOIMUbz4L1JT+89g427qql1JQs CET6lne8U1a301NV2ptLbM7qwYBZN4xJED+zUewQOm8dGl9Am4mmSr+OpenO+M0s VNj+Kh7TOJAE3WRnjcBAAv+6QtsSgdlTzq91PH1PH4Ye4FuaGp6ghS/+O3YYO5s5 aFwhQMwTCnT8qNbfHj2EToqcZziOdhekY8UYDA5hHCZ6VFys9rX3qTmoY1pPiEWK Bsar+L1cTy7Iagjv/xrGSc8xaqQmxmzjWRGV5jK5QgS1KMXLTESTl57XwOS5Ri89 gygq39ULpFod7M9QQw9lTySlAqbCiaRMpE77a+2zLM5Yx3js/kVCNitNFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO0KC4IpUVySvLvLa9s7UngVu/AQMB8GA1UdIwQY MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt NDQxNDU1OGZkY2JiLzEvN1FvTGdpbFJYSks4dTh0cjJ6dFNlQlc3OEJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXX+eMA0G CSqGSIb3DQEBCwUAA4IBAQCtsiu3r+sE4IacMm3ZCCttWl2jSANB+CI1PHQyISC5 2/tQtZKrvAcx/oJnhL+2j8qKe/CFx3rWCYNd2CKk8lcszAR+LE1G5qrlJ+0XqZ75 Atmt3USgJB+IjxpgmkCDYX57mXu/dTqzv6EasNk/jORL9JGXuZjtcP8OiSD64soQ YcQTWlZz2fJQvHXUgZEviBURCMYnT1BULbzBDIMeU4Lo69nbchGDOTxfcCID73GP fHPMvJ7X7OBRJKrS5y7V588bXgvGLs1sEKMUZSM64LWfpCzhVcM0c2ozE2Sa+agQ qeZKoi1k6dCBNvcdHKe/c3aCKH93/wJ6t7WL+23zTH2k -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:33 2026 by rpki-client