This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/v7NOMk3x2Uly1ZRD2JuF1N9_0qo.roa File: v7NOMk3x2Uly1ZRD2JuF1N9_0qo.roa (raw, json) Hash identifier: +/eUsv8fNjsa5iAvEDJgYJR3r1TegvUrhwXeQYQizWs= Subject key identifier: BF:B3:4E:32:4D:F1:D9:49:72:D5:94:43:D8:9B:85:D4:DF:7F:D2:AA Certificate issuer: /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8 Certificate serial: 019B7EA5083DC6187CC0DCE996CC168DD8A9 Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/v7NOMk3x2Uly1ZRD2JuF1N9_0qo.roa Signing time: Fri 02 Jan 2026 12:18:23 +0000 ROA not before: Fri 02 Jan 2026 12:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47377 IP address blocks: 194.62.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:08:3d:c6:18:7c:c0:dc:e9:96:cc:16:8d:d8:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8 Validity Not Before: Jan 2 12:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfb34e324df1d94972d59443d89b85d4df7fd2aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:66:ad:a2:ac:b0:2e:ab:96:7f:ab:6e:8d:06: 92:1c:52:3c:c3:f8:8a:a6:99:0a:fe:a4:6d:fc:af: 4d:63:b0:8e:f1:c5:d0:e7:7f:a2:06:23:30:5f:92: 7f:07:39:c3:54:68:70:12:d5:25:eb:2c:7c:23:e5: 3b:8d:8a:db:aa:8c:db:4f:40:d5:0a:e5:11:79:78: 5c:32:ba:63:f1:8c:07:03:b9:cf:3c:b0:cb:d1:5a: 00:0f:cf:08:7d:e2:75:4b:b3:60:6e:77:b0:79:8e: 0a:2e:fd:dc:78:53:d8:69:93:d1:31:5c:42:ff:5d: 6d:2c:43:33:73:9f:41:96:a8:43:18:88:6b:e7:d2: da:05:8d:09:9f:72:ac:c4:64:13:fa:b2:f2:c4:1b: 68:a3:d4:38:1f:84:71:ca:bf:8f:d9:e3:68:eb:04: 59:fd:78:d2:33:f3:3a:68:f4:83:fd:ab:57:39:40: 35:53:f2:14:af:0b:d6:d4:2d:a1:20:28:b6:fb:a0: 9c:e4:fd:e3:e0:c5:6d:68:b2:32:d5:6d:ff:33:53: c8:4f:2b:1c:6e:54:49:c4:73:e3:e2:0f:a3:94:7c: 79:9f:7a:0f:ad:e3:d1:39:23:e9:e4:be:d6:97:0f: e3:90:46:34:98:c3:7e:e5:19:d7:27:ea:bd:7b:a9: a2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B3:4E:32:4D:F1:D9:49:72:D5:94:43:D8:9B:85:D4:DF:7F:D2:AA X509v3 Authority Key Identifier: keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/v7NOMk3x2Uly1ZRD2JuF1N9_0qo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.62.72.0/24 Signature Algorithm: sha256WithRSAEncryption 98:83:a0:28:c2:27:69:9f:43:34:3d:e9:71:05:56:0a:95:29: 5b:49:1a:1b:21:11:8e:a5:35:e2:db:bb:0e:e8:39:06:17:c3: 09:19:d7:0c:da:da:1c:23:72:13:63:16:4a:25:12:5e:8e:8f: 78:74:b1:88:26:72:49:4e:cd:90:15:a9:91:68:b9:5a:17:14: 33:aa:6e:49:d2:c9:04:f6:ab:80:49:f3:e2:93:fb:6e:57:93: 6b:5e:3e:69:46:fa:9a:dd:00:5f:40:2b:1b:1f:fe:27:ff:5f: 77:9f:22:b2:19:38:5e:73:64:e8:79:09:27:db:62:d6:26:01: dc:f7:54:b1:e3:a6:2b:98:0f:42:4f:9f:49:d2:81:e3:9e:4a: 65:8b:d3:d3:63:81:1b:6c:fd:e9:cd:fa:fe:7a:6a:2a:67:b8: f9:0f:27:1a:f8:64:76:4f:85:72:9d:4e:ce:c7:23:bc:c6:a2: a6:37:8b:97:83:6e:80:e8:de:f9:54:f3:e8:8e:ef:62:91:bd: fc:f7:09:90:0f:64:0d:3c:ee:eb:4a:ee:0a:08:7c:b4:19:88: 86:dd:9b:f4:f8:06:da:b7:b3:06:71:c1:84:a9:5e:1f:85:84: 98:58:2f:76:33:3c:be:72:81:b6:90:bd:20:d4:83:44:70:64: 1c:06:c8:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pQg9xhh8wNzplswWjdipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNDAzYmM2MGI0YTEzYzNkYWEzNDExYWM5MjNjNjM3MmQ0 MjNlYjgwHhcNMjYwMTAyMTIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmIzNGUzMjRkZjFkOTQ5NzJkNTk0NDNkODliODVkNGRmN2ZkMmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2matoqywLquWf6tujQaSHFI8w/iK ppkK/qRt/K9NY7CO8cXQ53+iBiMwX5J/BznDVGhwEtUl6yx8I+U7jYrbqozbT0DV CuUReXhcMrpj8YwHA7nPPLDL0VoAD88IfeJ1S7NgbneweY4KLv3ceFPYaZPRMVxC /11tLEMzc59BlqhDGIhr59LaBY0Jn3KsxGQT+rLyxBtoo9Q4H4Rxyr+P2eNo6wRZ /XjSM/M6aPSD/atXOUA1U/IUrwvW1C2hICi2+6Cc5P3j4MVtaLIy1W3/M1PITysc blRJxHPj4g+jlHx5n3oPrePROSPp5L7Wlw/jkEY0mMN+5RnXJ+q9e6miowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL+zTjJN8dlJctWUQ9ibhdTff9KqMB8GA1UdIwQY MBaAFExAO8YLShPD2qNBGskjxjctQj64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wOGI5YzQtMGFmZC00ODc2LTllZjct MmU4NGI4ZDE4ZTRlLzEvdjdOT01rM3gyVWx5MVpSRDJKdUYxTjlfMHFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8wOGI5YzQtMGFmZC00ODc2LTllZjctMmU4NGI4ZDE4ZTRl LzEvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj5IMA0G CSqGSIb3DQEBCwUAA4IBAQCYg6Aowidpn0M0PelxBVYKlSlbSRobIRGOpTXi27sO 6DkGF8MJGdcM2tocI3ITYxZKJRJejo94dLGIJnJJTs2QFamRaLlaFxQzqm5J0skE 9quASfPik/tuV5NrXj5pRvqa3QBfQCsbH/4n/193nyKyGThec2ToeQkn22LWJgHc 91Sx46YrmA9CT59J0oHjnkpli9PTY4EbbP3pzfr+emoqZ7j5Dyca+GR2T4VynU7O xyO8xqKmN4uXg26A6N75VPPoju9ikb389wmQD2QNPO7rSu4KCHy0GYiG3Zv0+Aba t7MGccGEqV4fhYSYWC92Mzy+coG2kL0g1INEcGQcBshb -----END CERTIFICATE-----Generated at Sun Jan 25 16:09:39 2026 by rpki-client