This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/n7q5NwtaL8-zEQXH647Qf4RaQks.roa File: n7q5NwtaL8-zEQXH647Qf4RaQks.roa (raw, json) Hash identifier: n40KhH8cPfP863DY99KhVmZjjBSxGcmy9+bxffCu9sY= Subject key identifier: 9F:BA:B9:37:0B:5A:2F:CF:B3:11:05:C7:EB:8E:D0:7F:84:5A:42:4B Certificate issuer: /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8 Certificate serial: 019B7EA507E986858CFD2308A08CB03893B8 Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/n7q5NwtaL8-zEQXH647Qf4RaQks.roa Signing time: Fri 02 Jan 2026 12:18:23 +0000 ROA not before: Fri 02 Jan 2026 12:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6848 IP address blocks: 194.62.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:07:e9:86:85:8c:fd:23:08:a0:8c:b0:38:93:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8 Validity Not Before: Jan 2 12:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fbab9370b5a2fcfb31105c7eb8ed07f845a424b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8a:7c:73:a4:f5:9f:0b:7a:eb:7c:b3:82:3e: 1a:af:c8:76:35:86:73:2a:df:7b:95:f7:1e:fb:5e: b0:9b:be:f6:b4:11:c6:74:32:86:e2:1d:4e:54:55: d7:7a:e6:54:21:d6:2c:67:2a:5c:26:33:f6:80:8a: 1c:76:9f:5b:d6:7e:e0:c3:a5:b3:84:cc:bf:02:94: 04:31:0f:65:b5:3a:f1:37:fd:90:87:19:d2:e7:ac: 10:74:1c:00:b2:26:bf:bd:d7:fa:3e:8a:0f:8d:24: 3d:96:d8:79:df:93:ee:b4:67:49:e8:ce:a1:28:12: 5f:ee:54:7b:b8:17:e9:ae:d7:b3:97:0c:da:93:81: c2:14:65:48:34:59:db:9e:10:d3:d4:2e:b2:66:23: 57:2f:30:38:41:30:c2:55:da:f7:12:39:ab:aa:3a: e0:b2:88:31:e8:b7:04:b4:20:1c:f8:68:c1:d0:54: 26:0d:69:00:fb:5a:f9:f5:8e:7e:39:1d:77:ad:a5: 55:50:0d:fb:17:47:a8:87:08:a4:f3:ad:21:04:01: c6:65:1c:9d:c7:ba:96:e0:20:a5:59:78:ef:0d:fa: 47:32:05:2b:c6:3f:7e:e3:7a:17:26:02:24:b6:8c: 72:77:1d:7e:62:65:2d:1c:b9:3d:8e:f8:e2:34:d7: e2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BA:B9:37:0B:5A:2F:CF:B3:11:05:C7:EB:8E:D0:7F:84:5A:42:4B X509v3 Authority Key Identifier: keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/n7q5NwtaL8-zEQXH647Qf4RaQks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.62.73.0/24 Signature Algorithm: sha256WithRSAEncryption 93:35:bc:79:45:1a:75:5d:4d:77:95:31:13:65:33:b7:c9:50: 5b:15:3f:bc:13:4f:9b:0a:6b:eb:80:a7:b8:b9:bc:be:4b:1a: 71:54:8a:3e:12:99:80:cf:bf:4c:44:b9:b7:81:05:0a:eb:40: cc:b0:0a:b5:2d:3c:15:88:49:78:b9:7e:eb:c6:fc:ef:d1:5d: b3:6a:87:22:cf:66:84:70:44:54:35:97:8c:3f:14:55:f7:04: 8a:f4:78:0e:39:ae:36:c1:13:28:3d:99:64:b7:8f:4d:29:f9: 7b:71:3b:28:7f:56:e8:44:e7:7d:64:ad:2f:53:d9:c8:5d:ca: 50:3d:df:65:9f:ff:fb:a0:f9:2b:69:ba:03:84:60:62:a3:3f: d4:fb:1d:4c:0a:c0:cf:a9:75:c5:1b:13:9c:66:f3:14:58:f5: 25:c8:9a:61:1a:2e:e5:93:38:c5:af:5b:36:38:f6:3c:16:ca: d7:a3:c0:90:15:63:cd:33:10:5c:41:fc:4d:2c:3a:5c:70:f7: d8:89:20:b0:8a:bc:b5:9b:db:27:98:f5:ec:db:7b:d7:23:66: a5:38:b6:fd:0a:01:a2:ea:f7:a2:55:d8:37:14:cf:12:de:33: 3f:0d:3d:49:0d:1b:7d:a1:31:61:10:1a:78:09:fb:5a:fd:2b: 09:e4:c6:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pQfphoWM/SMIoIywOJO4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNDAzYmM2MGI0YTEzYzNkYWEzNDExYWM5MjNjNjM3MmQ0 MjNlYjgwHhcNMjYwMTAyMTIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmJhYjkzNzBiNWEyZmNmYjMxMTA1YzdlYjhlZDA3Zjg0NWE0MjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4p8c6T1nwt663yzgj4ar8h2NYZz Kt97lfce+16wm772tBHGdDKG4h1OVFXXeuZUIdYsZypcJjP2gIocdp9b1n7gw6Wz hMy/ApQEMQ9ltTrxN/2QhxnS56wQdBwAsia/vdf6PooPjSQ9lth535PutGdJ6M6h KBJf7lR7uBfprtezlwzak4HCFGVINFnbnhDT1C6yZiNXLzA4QTDCVdr3Ejmrqjrg sogx6LcEtCAc+GjB0FQmDWkA+1r59Y5+OR13raVVUA37F0eohwik860hBAHGZRyd x7qW4CClWXjvDfpHMgUrxj9+43oXJgIktoxydx1+YmUtHLk9jvjiNNfiqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ+6uTcLWi/PsxEFx+uO0H+EWkJLMB8GA1UdIwQY MBaAFExAO8YLShPD2qNBGskjxjctQj64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wOGI5YzQtMGFmZC00ODc2LTllZjct MmU4NGI4ZDE4ZTRlLzEvbjdxNU53dGFMOC16RVFYSDY0N1FmNFJhUWtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8wOGI5YzQtMGFmZC00ODc2LTllZjctMmU4NGI4ZDE4ZTRl LzEvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj5JMA0G CSqGSIb3DQEBCwUAA4IBAQCTNbx5RRp1XU13lTETZTO3yVBbFT+8E0+bCmvrgKe4 uby+SxpxVIo+EpmAz79MRLm3gQUK60DMsAq1LTwViEl4uX7rxvzv0V2zaociz2aE cERUNZeMPxRV9wSK9HgOOa42wRMoPZlkt49NKfl7cTsof1boROd9ZK0vU9nIXcpQ Pd9ln//7oPkraboDhGBioz/U+x1MCsDPqXXFGxOcZvMUWPUlyJphGi7lkzjFr1s2 OPY8FsrXo8CQFWPNMxBcQfxNLDpccPfYiSCwiry1m9snmPXs23vXI2alOLb9CgGi 6veiVdg3FM8S3jM/DT1JDRt9oTFhEBp4Cfta/SsJ5MY/ -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:41 2026 by rpki-client