This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/7qaly961hNLp7fqOiTPOfFfT9No.roa File: 7qaly961hNLp7fqOiTPOfFfT9No.roa (raw, json) Hash identifier: gSP0iijIBtswVcuDDi0cvrGO0GedCLbFTxtRv98oDEE= Subject key identifier: EE:A6:A5:CB:DE:B5:84:D2:E9:ED:FA:8E:89:33:CE:7C:57:D3:F4:DA Certificate issuer: /CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378 Certificate serial: 019B7F84B870C6E83216B7950D2F9BBB74C5 Authority key identifier: 7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/7qaly961hNLp7fqOiTPOfFfT9No.roa Signing time: Fri 02 Jan 2026 16:22:43 +0000 ROA not before: Fri 02 Jan 2026 16:22:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45035 IP address blocks: 85.204.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b8:70:c6:e8:32:16:b7:95:0d:2f:9b:bb:74:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378 Validity Not Before: Jan 2 16:22:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eea6a5cbdeb584d2e9edfa8e8933ce7c57d3f4da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c4:2d:45:fa:66:1f:da:3a:85:89:4b:ab:6a: 3b:41:39:86:3f:aa:ec:2d:d2:58:6c:70:a6:c4:f5: a5:22:ee:56:02:e5:80:e8:cc:1b:02:c1:fb:3a:5c: 6f:22:60:d6:a6:2e:cd:58:2c:34:4c:6d:4b:fa:cb: ff:0a:48:bd:2a:4a:4c:9c:5e:61:47:ac:c4:3e:54: 34:88:97:f3:b9:48:69:d1:fa:4f:87:c2:41:5b:0a: 15:9e:e9:44:29:9d:04:e5:26:16:17:bf:19:9b:a6: 9a:d0:5d:25:e6:90:d4:7f:22:44:9f:4f:13:b6:5b: a2:88:ef:25:c4:90:46:bd:ea:f4:7a:2a:c1:07:3b: 7c:86:b8:fe:e3:e0:92:b5:8b:45:d3:1c:5b:8f:c6: 76:b3:f1:e6:1e:ba:b5:b1:75:31:94:c5:35:3a:9e: db:f6:46:21:9a:73:32:2d:83:d9:14:05:25:5b:4b: 7c:52:5e:b6:61:1e:80:71:82:14:c1:bd:07:96:81: 0d:c3:25:47:8f:35:68:13:69:f9:66:cf:57:e7:4a: 3d:a7:d1:94:a7:34:da:f7:ea:9a:9c:7b:d2:55:03: 80:38:14:10:29:14:e6:f3:aa:1a:3e:1e:d8:3a:60: 6c:d8:13:af:8e:c4:63:ba:d1:97:11:c4:6a:0c:77: 05:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A6:A5:CB:DE:B5:84:D2:E9:ED:FA:8E:89:33:CE:7C:57:D3:F4:DA X509v3 Authority Key Identifier: keyid:7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/7qaly961hNLp7fqOiTPOfFfT9No.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.204.45.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:52:88:7f:ae:fd:d7:6b:b7:d6:f7:68:66:88:58:ed:b2:e7: 29:a9:44:aa:6a:28:16:fd:13:b1:51:17:08:22:c9:4a:d3:9a: e0:4e:b4:8e:19:1d:a3:da:79:82:46:00:f9:5f:00:8f:51:93: 97:fe:ba:aa:ff:1c:b8:98:78:cf:85:40:bb:3d:07:4c:07:1b: 99:4a:23:ec:ef:bd:ee:cc:15:d3:bb:b8:ff:95:97:5a:84:f0: 07:6b:ea:14:2e:d4:eb:65:6d:79:17:dd:c9:6e:a4:47:df:d5: 82:fd:1c:27:83:59:6f:fb:16:6b:62:20:8a:4a:c3:58:f6:25: 3b:8f:ef:89:22:fe:8f:d3:7b:6b:90:74:d8:74:d5:af:f0:5a: 1d:5f:78:5d:e8:8b:f9:d0:48:29:d7:f5:3b:c7:58:dd:58:4c: bc:fc:c8:ad:bc:67:06:de:55:12:bc:72:1d:5d:8b:98:24:dc: 6a:22:53:69:68:09:06:d3:13:55:87:1d:dc:56:4d:50:c6:5a: a9:19:d6:22:53:b6:82:92:49:37:46:01:54:81:58:eb:1e:9e: 60:ac:c4:7e:e0:f7:b2:36:84:5b:28:7e:21:29:dd:12:55:20: 14:e8:dd:f9:f2:a9:e8:0f:17:0d:53:12:3b:dc:d8:33:6d:3f: b6:d3:ed:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hLhwxugyFreVDS+bu3TFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZWYwNjllN2UzZWQ1YmY3MGY2ODJjZTQwYzU4MTBmZjNl NWUzNzgwHhcNMjYwMTAyMTYyMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWE2YTVjYmRlYjU4NGQyZTllZGZhOGU4OTMzY2U3YzU3ZDNmNGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMQtRfpmH9o6hYlLq2o7QTmGP6rs LdJYbHCmxPWlIu5WAuWA6MwbAsH7OlxvImDWpi7NWCw0TG1L+sv/Cki9KkpMnF5h R6zEPlQ0iJfzuUhp0fpPh8JBWwoVnulEKZ0E5SYWF78Zm6aa0F0l5pDUfyJEn08T tluiiO8lxJBGver0eirBBzt8hrj+4+CStYtF0xxbj8Z2s/HmHrq1sXUxlMU1Op7b 9kYhmnMyLYPZFAUlW0t8Ul62YR6AcYIUwb0HloENwyVHjzVoE2n5Zs9X50o9p9GU pzTa9+qanHvSVQOAOBQQKRTm86oaPh7YOmBs2BOvjsRjutGXEcRqDHcFTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO6mpcvetYTS6e36jokzznxX0/TaMB8GA1UdIwQY MBaAFHrvBp5+PtW/cPaCzkDFgQ/z5eN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXU4R25uNC0xYjl3OW9MT1FNV0JEX1BsNDNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9jMGJiNTItNzBkZS00YWYwLWE5ZmIt OTAwMDM0ZjAwZDllLzEvN3FhbHk5NjFoTkxwN2ZxT2lUUE9mRmZUOU5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9jMGJiNTItNzBkZS00YWYwLWE5ZmItOTAwMDM0ZjAwZDll LzEvZXU4R25uNC0xYjl3OW9MT1FNV0JEX1BsNDNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcwtMA0G CSqGSIb3DQEBCwUAA4IBAQAqUoh/rv3Xa7fW92hmiFjtsucpqUSqaigW/ROxURcI IslK05rgTrSOGR2j2nmCRgD5XwCPUZOX/rqq/xy4mHjPhUC7PQdMBxuZSiPs773u zBXTu7j/lZdahPAHa+oULtTrZW15F93JbqRH39WC/Rwng1lv+xZrYiCKSsNY9iU7 j++JIv6P03trkHTYdNWv8FodX3hd6Iv50Egp1/U7x1jdWEy8/MitvGcG3lUSvHId XYuYJNxqIlNpaAkG0xNVhx3cVk1QxlqpGdYiU7aCkkk3RgFUgVjrHp5grMR+4Pey NoRbKH4hKd0SVSAU6N358qnoDxcNUxI73NgzbT+20+0G -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:30 2026 by rpki-client