This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/a26d40-07c9-4cab-a5ee-b4ab91ae5ca0/1/l7q0rvdXf4jTNzpQ__F3c9oRrwU.roa File: l7q0rvdXf4jTNzpQ__F3c9oRrwU.roa (raw, json) Hash identifier: mM9uyYpOAz1i3k2m7kXG8Yhf32ZLcUYbFolhJXOJ+Aw= Subject key identifier: 97:BA:B4:AE:F7:57:7F:88:D3:37:3A:50:FF:F1:77:73:DA:11:AF:05 Certificate issuer: /CN=7d37046ff204d06194c90b5a29006c7c486d5d31 Certificate serial: 019C2D3103A2F74E846AB53229B6AA16138F Authority key identifier: 7D:37:04:6F:F2:04:D0:61:94:C9:0B:5A:29:00:6C:7C:48:6D:5D:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTcEb_IE0GGUyQtaKQBsfEhtXTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/a26d40-07c9-4cab-a5ee-b4ab91ae5ca0/1/l7q0rvdXf4jTNzpQ__F3c9oRrwU.roa Signing time: Thu 05 Feb 2026 09:45:12 +0000 ROA not before: Thu 05 Feb 2026 09:45:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215580 IP address blocks: 185.90.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/a26d40-07c9-4cab-a5ee-b4ab91ae5ca0/1/fTcEb_IE0GGUyQtaKQBsfEhtXTE.crl rsync://rpki.ripe.net/repository/DEFAULT/02/a26d40-07c9-4cab-a5ee-b4ab91ae5ca0/1/fTcEb_IE0GGUyQtaKQBsfEhtXTE.mft rsync://rpki.ripe.net/repository/DEFAULT/fTcEb_IE0GGUyQtaKQBsfEhtXTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2d:31:03:a2:f7:4e:84:6a:b5:32:29:b6:aa:16:13:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d37046ff204d06194c90b5a29006c7c486d5d31 Validity Not Before: Feb 5 09:45:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97bab4aef7577f88d3373a50fff17773da11af05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:64:81:73:68:95:a5:eb:09:b7:ba:57:a4:8a: 0a:cd:02:91:48:08:e9:84:63:17:4f:fd:ed:4a:9d: f2:e2:bd:17:da:57:02:02:bc:80:a5:79:a4:f3:4e: 92:e2:6e:f8:f9:a4:b0:e3:e6:0c:71:57:d5:07:8d: c8:c9:9e:95:59:8e:82:cf:b6:8d:33:61:fc:b5:a4: f3:de:7f:1f:1d:b3:45:a4:96:40:dd:62:60:3c:88: bd:e2:b1:d3:eb:a7:32:a1:10:85:f9:b6:eb:e9:ad: 30:a0:db:7f:7f:e4:71:b0:3a:b3:19:6f:a3:4c:0a: 80:f0:bf:ac:e9:80:5b:87:5c:c9:cb:2a:a0:0d:a2: 86:78:17:dd:8d:8a:f0:83:3d:4a:71:71:a7:6f:e8: 6a:44:63:f0:89:12:f2:11:21:a1:8b:7c:5d:44:0b: 2e:54:0a:f7:4a:ad:d1:09:a7:3e:34:55:22:29:30: 38:cb:d9:d3:64:9a:af:8a:82:f1:47:4d:5f:49:4a: f9:e1:ff:64:96:73:82:39:e0:44:5d:d3:93:e8:c5: b1:9f:4a:56:66:1b:4f:24:37:e9:1a:2d:fc:10:ce: 1e:cf:a4:0f:20:6d:39:3f:a3:4a:dd:76:2b:a5:f1: 04:30:78:c7:10:a1:58:86:98:da:d9:4c:11:7a:81: 91:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:BA:B4:AE:F7:57:7F:88:D3:37:3A:50:FF:F1:77:73:DA:11:AF:05 X509v3 Authority Key Identifier: keyid:7D:37:04:6F:F2:04:D0:61:94:C9:0B:5A:29:00:6C:7C:48:6D:5D:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTcEb_IE0GGUyQtaKQBsfEhtXTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a26d40-07c9-4cab-a5ee-b4ab91ae5ca0/1/l7q0rvdXf4jTNzpQ__F3c9oRrwU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a26d40-07c9-4cab-a5ee-b4ab91ae5ca0/1/fTcEb_IE0GGUyQtaKQBsfEhtXTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.90.88.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:f3:32:8d:e2:3b:ff:04:89:d5:2d:63:37:c5:25:6e:79:7f: 20:ff:3a:32:3c:22:26:fb:f4:f1:57:e1:f3:f6:64:a3:06:00: bb:d9:e9:c3:eb:2e:b0:e4:31:59:5e:76:06:c5:97:a7:06:de: 01:56:25:ef:a2:97:7e:60:4d:f5:50:7e:fa:25:34:04:e1:e5: 21:d5:bc:11:84:ac:a5:ab:91:35:ad:e2:4d:8d:a4:93:6c:e6: b5:e8:45:dd:91:c0:7f:d5:0d:10:90:b4:4d:a0:0c:db:bf:90: 71:99:f7:d2:36:1f:48:ce:53:65:fd:fb:73:ad:62:ae:da:e8: 22:02:c6:48:16:76:14:22:c2:cf:6a:ed:02:87:59:1d:24:e0: c4:d3:87:28:c6:53:a4:03:5d:bf:2f:56:98:87:d6:23:dd:19: de:0f:89:80:52:1f:d3:38:3e:cc:7d:a4:6b:d1:c7:9a:ca:95: 39:c7:39:a0:c7:60:cd:6e:0c:2e:c5:fe:d0:84:c3:56:cb:08: 74:67:80:c6:d7:48:16:57:dd:f4:e7:68:70:36:50:a9:c0:f8: da:b8:d7:39:11:c5:8a:b9:00:1f:29:26:1e:04:80:a3:d7:9f: c1:1d:c5:9c:66:99:74:42:90:94:1c:6f:74:4a:32:c1:0c:8c: 54:cc:a1:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwtMQOi906EarUyKbaqFhOPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMzcwNDZmZjIwNGQwNjE5NGM5MGI1YTI5MDA2YzdjNDg2 ZDVkMzEwHhcNMjYwMjA1MDk0NTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2JhYjRhZWY3NTc3Zjg4ZDMzNzNhNTBmZmYxNzc3M2RhMTFhZjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWSBc2iVpesJt7pXpIoKzQKRSAjp hGMXT/3tSp3y4r0X2lcCAryApXmk806S4m74+aSw4+YMcVfVB43IyZ6VWY6Cz7aN M2H8taTz3n8fHbNFpJZA3WJgPIi94rHT66cyoRCF+bbr6a0woNt/f+RxsDqzGW+j TAqA8L+s6YBbh1zJyyqgDaKGeBfdjYrwgz1KcXGnb+hqRGPwiRLyESGhi3xdRAsu VAr3Sq3RCac+NFUiKTA4y9nTZJqvioLxR01fSUr54f9klnOCOeBEXdOT6MWxn0pW ZhtPJDfpGi38EM4ez6QPIG05P6NK3XYrpfEEMHjHEKFYhpja2UwReoGRHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJe6tK73V3+I0zc6UP/xd3PaEa8FMB8GA1UdIwQY MBaAFH03BG/yBNBhlMkLWikAbHxIbV0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlRjRWJfSUUwR0dVeVF0YUtRQnNmRWh0WFRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9hMjZkNDAtMDdjOS00Y2FiLWE1ZWUt YjRhYjkxYWU1Y2EwLzEvbDdxMHJ2ZFhmNGpUTnpwUV9fRjNjOW9ScndVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9hMjZkNDAtMDdjOS00Y2FiLWE1ZWUtYjRhYjkxYWU1Y2Ew LzEvZlRjRWJfSUUwR0dVeVF0YUtRQnNmRWh0WFRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVpYMA0G CSqGSIb3DQEBCwUAA4IBAQAr8zKN4jv/BInVLWM3xSVueX8g/zoyPCIm+/TxV+Hz 9mSjBgC72enD6y6w5DFZXnYGxZenBt4BViXvopd+YE31UH76JTQE4eUh1bwRhKyl q5E1reJNjaSTbOa16EXdkcB/1Q0QkLRNoAzbv5BxmffSNh9IzlNl/ftzrWKu2ugi AsZIFnYUIsLPau0Ch1kdJODE04coxlOkA12/L1aYh9Yj3RneD4mAUh/TOD7MfaRr 0ceaypU5xzmgx2DNbgwuxf7QhMNWywh0Z4DG10gWV93052hwNlCpwPjauNc5EcWK uQAfKSYeBICj15/BHcWcZpl0QpCUHG90SjLBDIxUzKFR -----END CERTIFICATE-----Generated at Mon Feb 9 20:51:26 2026 by rpki-client