This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/7ZDTLwuc17GtsZsMN1ExkVk2x9U.roa File: 7ZDTLwuc17GtsZsMN1ExkVk2x9U.roa (raw, json) Hash identifier: bN7rx+fuzGGRqgrRx4HiLqHFyL7jp2FUiYn5hgrI+gI= Subject key identifier: ED:90:D3:2F:0B:9C:D7:B1:AD:B1:9B:0C:37:51:31:91:59:36:C7:D5 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019BE602A259EF9743A8B3DE94EBA031A840 Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/7ZDTLwuc17GtsZsMN1ExkVk2x9U.roa Signing time: Thu 22 Jan 2026 14:01:30 +0000 ROA not before: Thu 22 Jan 2026 14:01:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215305 IP address blocks: 192.145.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e6:02:a2:59:ef:97:43:a8:b3:de:94:eb:a0:31:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Jan 22 14:01:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed90d32f0b9cd7b1adb19b0c375131915936c7d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f5:e7:2a:28:86:d3:3b:7c:79:92:44:ae:7a: 1f:14:3d:51:7b:23:1d:d5:64:c7:db:57:89:c5:a0: 65:2d:71:1f:c8:8d:d4:89:c9:a2:bd:d0:ff:16:d9: 72:b9:ad:ed:8f:c4:89:5b:db:96:92:3a:bd:5f:7f: 29:9a:3c:eb:f6:d1:8f:14:3f:16:51:b4:96:b3:d3: 4e:58:59:79:cb:ca:18:db:ad:5e:15:04:32:e9:bc: 7c:82:fe:df:fb:2e:ec:55:81:4c:90:29:70:34:f2: c1:89:e9:76:7c:f2:26:db:c8:b7:44:a7:b4:97:a8: a7:2e:fd:93:35:db:7e:95:e0:71:e9:23:ab:83:c9: 9b:5c:44:a1:42:eb:2c:aa:e7:42:9a:db:b0:b4:9f: 96:fb:f8:86:9b:1e:ee:f3:b1:f1:c1:c9:d6:c1:d1: d9:8d:78:19:99:a2:be:ab:5a:24:b4:cf:e2:4d:06: e3:a0:3c:4f:b9:34:a2:99:bd:ce:62:a1:70:f6:a6: 81:c2:29:a1:66:3a:82:2d:f3:4b:7a:f8:ab:87:23: c2:11:0b:8d:e6:00:c8:1f:cd:f9:3f:c7:56:86:db: fd:84:00:f6:ad:17:94:1c:dd:4f:7b:71:9c:45:e1: 19:86:4f:22:0c:40:dd:28:7d:64:eb:36:4b:0f:89: bc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:90:D3:2F:0B:9C:D7:B1:AD:B1:9B:0C:37:51:31:91:59:36:C7:D5 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/7ZDTLwuc17GtsZsMN1ExkVk2x9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.145.98.0/24 Signature Algorithm: sha256WithRSAEncryption ad:3c:44:db:3b:0d:79:96:d5:6d:2e:9e:a6:e7:ba:9d:a8:4c: 5d:dc:96:54:38:f0:58:6c:b4:44:8c:ce:a0:e9:68:80:28:eb: d8:6c:e9:13:43:5d:cf:26:1c:4a:f0:08:42:f4:09:93:46:a4: 52:20:b9:37:29:4d:6a:2c:93:08:dd:2f:a3:5a:ad:7d:fb:35: 7c:97:f7:2f:37:06:fb:64:53:56:41:bb:9a:a5:17:52:11:58: b2:ba:01:1d:49:3f:58:c5:64:58:2d:c7:88:dd:79:6a:69:29: f1:61:46:32:c0:85:7d:a2:60:d5:cc:2d:6c:bc:41:f5:f9:f7: 7a:b6:05:a4:1b:90:30:34:a5:9e:66:e5:14:30:25:57:69:0d: ce:17:e0:c5:26:0a:e7:51:3f:c4:13:ef:a1:9e:8e:7e:f5:44: 89:16:06:be:ee:ce:c0:31:0c:dd:60:8a:77:5b:7b:3b:bc:ff: 02:3b:b8:42:08:eb:42:db:07:e6:ef:a5:41:38:c7:c9:d6:2f: 6c:af:de:13:24:e5:5d:13:a9:24:40:23:9d:af:fb:c0:5f:b9: 63:ab:96:73:3b:10:a7:5e:e3:8a:b6:7e:f4:08:36:e9:32:6f: 1a:00:64:21:b7:20:1b:e8:6c:97:12:63:e4:e6:c2:5f:bc:19: ba:64:37:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvmAqJZ75dDqLPelOugMahAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjYwMTIyMTQwMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDkwZDMyZjBiOWNkN2IxYWRiMTliMGMzNzUxMzE5MTU5MzZjN2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifXnKiiG0zt8eZJErnofFD1ReyMd 1WTH21eJxaBlLXEfyI3UicmivdD/Ftlyua3tj8SJW9uWkjq9X38pmjzr9tGPFD8W UbSWs9NOWFl5y8oY261eFQQy6bx8gv7f+y7sVYFMkClwNPLBiel2fPIm28i3RKe0 l6inLv2TNdt+leBx6SOrg8mbXEShQussqudCmtuwtJ+W+/iGmx7u87HxwcnWwdHZ jXgZmaK+q1oktM/iTQbjoDxPuTSimb3OYqFw9qaBwimhZjqCLfNLevirhyPCEQuN 5gDIH835P8dWhtv9hAD2rReUHN1Pe3GcReEZhk8iDEDdKH1k6zZLD4m8WQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO2Q0y8LnNexrbGbDDdRMZFZNsfVMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvN1pEVEx3dWMxN0d0c1pzTU4xRXhrVmsyeDlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJFiMA0G CSqGSIb3DQEBCwUAA4IBAQCtPETbOw15ltVtLp6m57qdqExd3JZUOPBYbLREjM6g 6WiAKOvYbOkTQ13PJhxK8AhC9AmTRqRSILk3KU1qLJMI3S+jWq19+zV8l/cvNwb7 ZFNWQbuapRdSEViyugEdST9YxWRYLceI3XlqaSnxYUYywIV9omDVzC1svEH1+fd6 tgWkG5AwNKWeZuUUMCVXaQ3OF+DFJgrnUT/EE++hno5+9USJFga+7s7AMQzdYIp3 W3s7vP8CO7hCCOtC2wfm76VBOMfJ1i9sr94TJOVdE6kkQCOdr/vAX7ljq5ZzOxCn XuOKtn70CDbpMm8aAGQhtyAb6GyXEmPk5sJfvBm6ZDe1 -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:38 2026 by rpki-client