This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7Zfhz_0Fs2iX2junzaFyq2L5oJw.roa File: 7Zfhz_0Fs2iX2junzaFyq2L5oJw.roa (raw, json) Hash identifier: TndKtOU+kMZXYhwfYUzQ1qIiVOLulFuDX92epZ3PI00= Subject key identifier: ED:97:E1:CF:FD:05:B3:68:97:DA:3B:A7:CD:A1:72:AB:62:F9:A0:9C Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F854360CFA659318B4A0385EFE14169 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7Zfhz_0Fs2iX2junzaFyq2L5oJw.roa Signing time: Fri 02 Jan 2026 16:23:18 +0000 ROA not before: Fri 02 Jan 2026 16:23:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15731 IP address blocks: 194.87.114.0/23 maxlen: 23 194.87.134.0/23 maxlen: 23 195.58.58.0/23 maxlen: 23 195.133.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:43:60:cf:a6:59:31:8b:4a:03:85:ef:e1:41:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed97e1cffd05b36897da3ba7cda172ab62f9a09c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:71:fe:36:0b:1d:0a:9b:9b:4e:8c:fc:de:83: f2:68:2d:3c:ed:40:2c:4f:7f:93:a3:46:d4:d5:98: 41:72:7d:5c:0e:17:ce:52:d7:b9:e8:3e:bb:e5:45: 5e:c4:e6:ce:fd:8f:41:f1:5b:f3:b8:1c:ea:9a:98: ee:9b:aa:90:f9:61:87:ed:73:50:e4:f0:da:5d:20: 64:6a:1b:bf:0a:ce:dc:f5:b1:de:29:78:e5:8b:b4: fe:91:5e:78:95:35:ec:bb:7a:20:c9:dc:c8:6c:19: b2:b5:47:fa:f7:f4:bb:e8:bb:50:37:63:ad:71:d6: 39:7c:93:77:f1:80:c1:27:a9:e0:0b:2b:38:c8:15: 80:0c:b7:1e:84:74:3e:71:aa:30:ce:4b:85:80:c1: e2:a3:da:fb:40:bb:aa:a1:80:6e:61:94:70:a7:16: c3:3c:e0:75:00:43:13:ca:ad:8c:45:a4:bf:19:3b: f9:d0:b6:37:14:53:8b:cd:4e:80:eb:c1:75:05:90: 65:69:29:7d:52:79:27:1d:79:e2:f1:91:3c:ff:e9: 74:cc:be:b8:9a:25:ea:16:98:ee:39:f0:40:7e:2b: c9:1a:d2:18:83:2a:13:23:d7:c5:f8:b6:7c:71:17: 6d:7f:9e:09:06:5d:e7:45:0b:b0:85:82:bb:b5:a8: d6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:97:E1:CF:FD:05:B3:68:97:DA:3B:A7:CD:A1:72:AB:62:F9:A0:9C X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7Zfhz_0Fs2iX2junzaFyq2L5oJw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.87.114.0/23 194.87.134.0/23 195.58.58.0/23 195.133.84.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:65:e3:59:6a:74:ad:2b:e5:4b:1a:27:cb:f7:ed:93:94:3e: 34:8c:ee:ca:0b:90:b9:99:51:a8:25:97:c4:bc:f7:8a:4a:96: d5:6d:b4:7c:8a:0c:03:d5:de:9f:85:6a:5d:a8:56:b0:0f:32: d7:b9:a1:d3:28:43:18:1f:25:c7:90:fe:f9:e7:04:75:e9:50: 20:b3:33:e3:82:38:c5:dc:20:d5:18:14:1c:4d:3c:1b:2f:43: a7:1c:92:8a:ed:7b:c7:8a:c3:88:4c:0c:72:b2:7f:14:69:2e: 75:e4:6b:81:89:40:9e:54:e2:ab:ba:64:15:96:22:a1:c5:19: e3:db:c6:e0:9b:5b:bd:3d:3b:f7:86:da:86:2e:28:cd:d8:c8: ef:77:01:59:24:a0:ef:e1:5f:38:0f:47:95:aa:a4:a0:16:cd: e2:5b:a2:be:cc:4a:92:a5:5f:48:9d:1e:bb:e0:81:8e:3b:42: 45:80:66:5a:1c:32:7c:24:b4:31:af:b1:f9:39:f5:99:26:bc: ed:d7:a0:9d:f5:0d:9c:4a:b0:b6:be:51:59:68:e5:a6:a0:b2: 0d:98:08:fd:2b:9d:8a:f4:cf:ec:37:37:98:56:cf:e2:f1:7d: 5c:0f:ed:93:06:ac:75:96:75:f4:da:53:5f:66:b9:ab:74:be: 09:f9:a6:d2 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/hUNgz6ZZMYtKA4Xv4UFpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDk3ZTFjZmZkMDViMzY4OTdkYTNiYTdjZGExNzJhYjYyZjlhMDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynH+NgsdCpubToz83oPyaC087UAs T3+To0bU1ZhBcn1cDhfOUte56D675UVexObO/Y9B8VvzuBzqmpjum6qQ+WGH7XNQ 5PDaXSBkahu/Cs7c9bHeKXjli7T+kV54lTXsu3ogydzIbBmytUf69/S76LtQN2Ot cdY5fJN38YDBJ6ngCys4yBWADLcehHQ+caowzkuFgMHio9r7QLuqoYBuYZRwpxbD POB1AEMTyq2MRaS/GTv50LY3FFOLzU6A68F1BZBlaSl9UnknHXni8ZE8/+l0zL64 miXqFpjuOfBAfivJGtIYgyoTI9fF+LZ8cRdtf54JBl3nRQuwhYK7tajWdwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFO2X4c/9BbNol9o7p82hcqti+aCcMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvN1pmaHpfMEZzMmlYMmp1bnphRnlxMkw1b0p3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBwldyAwQB wleGAwQBwzo6AwQBw4VUMA0GCSqGSIb3DQEBCwUAA4IBAQAsZeNZanStK+VLGifL 9+2TlD40jO7KC5C5mVGoJZfEvPeKSpbVbbR8igwD1d6fhWpdqFawDzLXuaHTKEMY HyXHkP755wR16VAgszPjgjjF3CDVGBQcTTwbL0OnHJKK7XvHisOITAxysn8UaS51 5GuBiUCeVOKrumQVliKhxRnj28bgm1u9PTv3htqGLijN2MjvdwFZJKDv4V84D0eV qqSgFs3iW6K+zEqSpV9InR674IGOO0JFgGZaHDJ8JLQxr7H5OfWZJrzt16Cd9Q2c SrC2vlFZaOWmoLINmAj9K52K9M/sNzeYVs/i8X1cD+2TBqx1lnX02lNfZrmrdL4J +abS -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:15 2026 by rpki-client