This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7CkQgGEwMLhhcUCSJ6EfemwW0UQ.roa File: 7CkQgGEwMLhhcUCSJ6EfemwW0UQ.roa (raw, json) Hash identifier: vkgBI5ESk63s3fGySXmJpNs0uyl7a8/7WD3JpAjUO4c= Subject key identifier: EC:29:10:80:61:30:30:B8:61:71:40:92:27:A1:1F:7A:6C:16:D1:44 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F853F7A84EAB9820303024F3A4C3343 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7CkQgGEwMLhhcUCSJ6EfemwW0UQ.roa Signing time: Fri 02 Jan 2026 16:23:17 +0000 ROA not before: Fri 02 Jan 2026 16:23:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2118 IP address blocks: 194.87.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:3f:7a:84:ea:b9:82:03:03:02:4f:3a:4c:33:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec291080613030b86171409227a11f7a6c16d144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:12:9f:aa:d1:da:a7:36:b1:67:6e:4f:3e:29: 5d:b1:32:f1:8c:46:84:5e:d9:e9:cf:42:ab:f8:ee: 5a:3b:e0:7d:3e:9d:ff:ab:7e:35:e2:36:92:fa:cd: 84:54:a5:59:a1:47:d7:ba:09:30:ff:cb:51:09:4f: 79:e7:de:d8:7c:77:07:b6:f6:54:5e:2d:38:ed:0c: d8:5e:d7:bf:20:cf:4f:6f:4a:9b:ec:3a:3f:ab:f9: ba:f9:35:ac:a5:6f:9e:b1:f4:1c:89:4c:91:1f:24: d8:83:00:b5:76:a6:95:37:af:75:cf:d3:93:8a:0c: ca:08:06:3a:a2:a3:54:63:da:64:f3:19:e9:33:33: ab:aa:c3:dd:d0:fd:9a:c7:0e:92:79:64:f4:d8:7f: 6f:36:9f:e1:ba:b2:21:43:b8:55:ba:4f:bc:8e:53: 7e:ad:02:37:d8:fc:d6:05:7e:d1:86:9f:2b:00:4f: 41:52:9b:15:17:13:d2:83:f5:18:f9:7b:60:1b:73: c7:d2:35:4d:47:94:82:6b:99:3f:93:88:79:75:5a: 07:aa:6c:e3:24:4c:33:25:ff:5b:0c:72:6c:49:7f: 48:09:3f:14:1b:91:49:8d:1c:d3:72:79:e8:07:59: 49:6f:1b:c6:8b:39:82:de:7b:b8:27:2c:ab:55:e2: 98:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:29:10:80:61:30:30:B8:61:71:40:92:27:A1:1F:7A:6C:16:D1:44 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7CkQgGEwMLhhcUCSJ6EfemwW0UQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.87.222.0/23 Signature Algorithm: sha256WithRSAEncryption 73:87:bf:5a:c1:6c:61:82:52:0d:bb:b8:a6:2e:b7:9c:e1:d3: ff:c2:fc:bb:70:1c:6f:41:77:4f:f6:78:77:2b:a8:91:1e:2c: 68:88:27:ff:3e:f4:f8:2f:f9:9a:37:0d:59:51:6d:0e:99:f0: 96:7c:d0:2f:5f:ea:61:8b:0b:1e:4f:b0:e6:78:2c:32:99:9a: 31:af:19:76:5e:79:8a:7f:f3:81:ae:81:70:89:b6:2a:66:b2: 23:15:d4:cc:3c:33:ac:82:8e:c2:c2:3c:08:b4:ee:01:4b:53: 88:78:17:fe:4f:d1:8d:c0:2e:d2:57:77:60:1f:7b:d5:9a:2b: 5f:7c:fc:41:7e:f9:b4:ce:d8:c4:5d:e9:4d:cc:95:5a:b2:5e: 1c:7a:3c:b2:39:b3:30:35:c6:da:cc:ce:cf:6d:cd:04:a0:f0: 42:53:fb:1a:d0:82:43:b3:85:fd:9f:c9:15:1d:01:bc:fa:63: 93:ce:f2:20:2a:d3:9d:fc:ac:6c:d7:ff:76:ab:79:f6:f1:4d: 8c:a1:78:15:da:54:50:bb:6c:8c:4d:5f:b2:61:c3:a5:9b:70: f4:cf:b9:84:6f:c7:d0:bb:24:71:e8:48:53:d6:31:84:fc:4c: c4:b7:6a:14:72:1c:e4:65:37:00:44:08:a1:14:60:68:63:5d: 9f:77:4a:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hT96hOq5ggMDAk86TDNDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzI5MTA4MDYxMzAzMGI4NjE3MTQwOTIyN2ExMWY3YTZjMTZkMTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/RKfqtHapzaxZ25PPildsTLxjEaE Xtnpz0Kr+O5aO+B9Pp3/q3414jaS+s2EVKVZoUfXugkw/8tRCU95597YfHcHtvZU Xi047QzYXte/IM9Pb0qb7Do/q/m6+TWspW+esfQciUyRHyTYgwC1dqaVN691z9OT igzKCAY6oqNUY9pk8xnpMzOrqsPd0P2axw6SeWT02H9vNp/hurIhQ7hVuk+8jlN+ rQI32PzWBX7Rhp8rAE9BUpsVFxPSg/UY+XtgG3PH0jVNR5SCa5k/k4h5dVoHqmzj JEwzJf9bDHJsSX9ICT8UG5FJjRzTcnnoB1lJbxvGizmC3nu4JyyrVeKYhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOwpEIBhMDC4YXFAkiehH3psFtFEMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvN0NrUWdHRXdNTGhoY1VDU0o2RWZlbXdXMFVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwlfeMA0G CSqGSIb3DQEBCwUAA4IBAQBzh79awWxhglINu7imLrec4dP/wvy7cBxvQXdP9nh3 K6iRHixoiCf/PvT4L/maNw1ZUW0OmfCWfNAvX+phiwseT7DmeCwymZoxrxl2XnmK f/OBroFwibYqZrIjFdTMPDOsgo7CwjwItO4BS1OIeBf+T9GNwC7SV3dgH3vVmitf fPxBfvm0ztjEXelNzJVasl4cejyyObMwNcbazM7Pbc0EoPBCU/sa0IJDs4X9n8kV HQG8+mOTzvIgKtOd/Kxs1/92q3n28U2MoXgV2lRQu2yMTV+yYcOlm3D0z7mEb8fQ uyRx6EhT1jGE/EzEt2oUchzkZTcARAihFGBoY12fd0qk -----END CERTIFICATE-----Generated at Fri Jan 9 21:22:58 2026 by rpki-client