This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/7ItMpX2jLTwyH9XpO5jp7SzIWSg.roa File: 7ItMpX2jLTwyH9XpO5jp7SzIWSg.roa (raw, json) Hash identifier: J9SJjSKqLYuFsUDjJoCt3JIVxoO5phlJCjXL8OymbCw= Subject key identifier: EC:8B:4C:A5:7D:A3:2D:3C:32:1F:D5:E9:3B:98:E9:ED:2C:C8:59:28 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019BD6DCA0ED8940C725CAC9650A47C970A2 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/7ItMpX2jLTwyH9XpO5jp7SzIWSg.roa Signing time: Mon 19 Jan 2026 15:25:41 +0000 ROA not before: Mon 19 Jan 2026 15:25:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9232 IP address blocks: 14.102.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:dc:a0:ed:89:40:c7:25:ca:c9:65:0a:47:c9:70:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Jan 19 15:25:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec8b4ca57da32d3c321fd5e93b98e9ed2cc85928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ac:10:25:f2:ec:62:86:d5:09:15:80:d3:28: 03:dc:7c:7f:e9:d2:92:a6:0d:1e:c3:74:e6:3a:eb: c1:b4:45:63:bf:f3:ba:96:0a:7f:04:70:58:d2:45: cb:03:74:0f:b9:32:aa:6f:53:37:75:29:d5:f0:5b: 49:b5:93:43:6d:e1:ad:bd:2c:f1:24:c4:ac:e8:f4: 96:de:70:78:4e:ab:04:87:73:b2:1b:38:9f:a2:78: c8:13:0f:19:09:ab:ac:be:4c:86:a6:5e:29:f2:48: e0:89:4a:2f:15:da:2d:fa:c7:f3:be:43:65:16:89: cb:f5:90:21:d6:ad:c9:25:13:ff:55:ca:e1:03:e9: e5:e8:75:55:e2:8e:00:e2:e0:3b:59:97:95:f9:89: 88:ad:20:70:2c:30:45:dc:ee:3e:67:b6:45:37:7c: 9d:b0:65:84:12:96:77:7e:2d:8d:2e:7d:59:74:db: 1c:eb:b5:07:8c:72:7b:c3:22:18:e2:fd:8d:cf:1d: b9:47:ee:27:b3:ef:89:11:8f:02:a2:e7:f0:95:dd: aa:ec:59:43:9e:19:49:2c:94:22:a6:10:e0:60:58: 6a:5b:ea:36:ee:ee:85:14:b4:fd:94:56:34:d8:7a: 7c:1b:e2:82:17:0e:17:2f:41:6e:3d:98:81:65:8d: 0f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:8B:4C:A5:7D:A3:2D:3C:32:1F:D5:E9:3B:98:E9:ED:2C:C8:59:28 X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/7ItMpX2jLTwyH9XpO5jp7SzIWSg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.10.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:2d:e2:b3:9a:76:41:eb:14:29:f4:54:f0:52:95:38:58:f1: df:09:a7:0e:21:48:33:be:09:bd:22:77:9e:3c:02:c0:a9:46: f6:de:b2:6e:d8:c6:b2:e9:87:23:ae:5d:0e:1d:ce:11:b5:12: b3:c7:8e:ee:41:17:e8:96:47:71:2e:e6:88:d5:b7:55:54:f4: 2e:1e:20:76:b2:e5:18:85:b5:fe:12:11:45:3f:83:28:5e:8c: dd:1f:9f:e4:0b:2c:bc:4d:14:8c:3b:10:1e:fb:92:5b:a4:53: ab:a5:f0:3b:85:8e:fa:2c:62:ac:50:fc:f7:83:53:26:a0:da: 78:be:14:8a:f2:9f:1b:d7:87:6c:ce:a0:12:39:97:7a:3b:cd: d0:5b:0a:fe:25:15:d9:e1:f1:de:d8:77:61:d3:b1:7d:ca:87: 7b:67:f4:15:e6:f5:96:70:db:3d:16:66:b4:22:81:ad:d5:1b: b3:f6:c1:2f:a9:b3:49:73:66:1c:9e:6f:13:71:e5:d7:d6:e8: 4e:c9:e4:a9:e0:38:a4:90:f7:05:38:09:73:94:11:e6:34:22: 81:61:30:84:6d:4a:ec:27:47:ff:3b:43:d0:4c:fc:9c:53:d1: 90:40:99:37:66:1e:67:6b:d0:95:d9:b9:74:2a:bd:5c:c2:c9: 41:e6:74:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvW3KDtiUDHJcrJZQpHyXCiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYwMTE5MTUyNTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzhiNGNhNTdkYTMyZDNjMzIxZmQ1ZTkzYjk4ZTllZDJjYzg1OTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvawQJfLsYobVCRWA0ygD3Hx/6dKS pg0ew3TmOuvBtEVjv/O6lgp/BHBY0kXLA3QPuTKqb1M3dSnV8FtJtZNDbeGtvSzx JMSs6PSW3nB4TqsEh3OyGzifonjIEw8ZCausvkyGpl4p8kjgiUovFdot+sfzvkNl FonL9ZAh1q3JJRP/VcrhA+nl6HVV4o4A4uA7WZeV+YmIrSBwLDBF3O4+Z7ZFN3yd sGWEEpZ3fi2NLn1ZdNsc67UHjHJ7wyIY4v2Nzx25R+4ns++JEY8Coufwld2q7FlD nhlJLJQiphDgYFhqW+o27u6FFLT9lFY02Hp8G+KCFw4XL0FuPZiBZY0PdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOyLTKV9oy08Mh/V6TuY6e0syFkoMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvN0l0TXBYMmpMVHd5SDlYcE81anA3U3pJV1NnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADmYKMA0G CSqGSIb3DQEBCwUAA4IBAQBvLeKzmnZB6xQp9FTwUpU4WPHfCacOIUgzvgm9Inee PALAqUb23rJu2May6Ycjrl0OHc4RtRKzx47uQRfolkdxLuaI1bdVVPQuHiB2suUY hbX+EhFFP4MoXozdH5/kCyy8TRSMOxAe+5JbpFOrpfA7hY76LGKsUPz3g1MmoNp4 vhSK8p8b14dszqASOZd6O83QWwr+JRXZ4fHe2Hdh07F9yod7Z/QV5vWWcNs9Fma0 IoGt1Ruz9sEvqbNJc2Ycnm8TceXX1uhOyeSp4DikkPcFOAlzlBHmNCKBYTCEbUrs J0f/O0PQTPycU9GQQJk3Zh5na9CV2bl0Kr1cwslB5nSs -----END CERTIFICATE-----Generated at Fri Jan 23 11:39:10 2026 by rpki-client