This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7hdC0rIbTZyFtqFlcF4PtCxfejI.roa File: 7hdC0rIbTZyFtqFlcF4PtCxfejI.roa (raw, json) Hash identifier: UYKqhv6AlStuFfBzkPCRC2SzZ8ttLqtLcBs9CYpOHak= Subject key identifier: EE:17:42:D2:B2:1B:4D:9C:85:B6:A1:65:70:5E:0F:B4:2C:5F:7A:32 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2E789D5B572B402423544758B580A Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7hdC0rIbTZyFtqFlcF4PtCxfejI.roa Signing time: Thu 01 Jan 2026 08:18:20 +0000 ROA not before: Thu 01 Jan 2026 08:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23470 IP address blocks: 94.156.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e7:89:d5:b5:72:b4:02:42:35:44:75:8b:58:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee1742d2b21b4d9c85b6a165705e0fb42c5f7a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f8:44:4d:79:74:44:47:3e:3f:48:ad:b1:b5: d3:aa:80:7d:65:b2:e7:0a:27:77:8a:ec:6b:7f:6b: a2:e0:97:68:17:c0:e3:fe:32:c8:6e:80:db:3b:f3: 4b:8f:fd:d1:74:87:6d:f0:e6:53:b1:24:8f:0a:45: b4:16:05:06:b8:be:4e:0f:29:5a:3a:1d:5e:c8:a7: e2:9c:84:67:59:1c:29:c6:8a:8b:fe:16:91:bd:bf: 6c:08:44:90:19:41:5f:6b:6b:28:63:ef:ba:bf:69: fe:e9:cf:1a:f5:b5:1a:25:3d:d0:67:f5:80:51:83: e7:4b:8a:0f:07:ce:4e:dd:2e:d3:c6:0a:46:ad:ea: 78:f1:94:2a:51:21:82:91:ca:91:0c:2e:59:92:89: d4:b6:f5:d1:59:a6:ca:02:d9:c3:6d:25:b0:d7:b0: 1d:c7:57:c7:fc:ea:c9:be:9b:29:48:93:f7:a1:af: ae:1a:0e:29:e3:aa:56:cd:c8:ac:2e:87:2a:b4:6b: 0d:a3:51:b8:6a:6c:a2:34:30:14:86:5b:fd:c2:4d: c7:7e:1f:b4:6e:04:e8:c1:d3:5a:82:55:44:30:d3: 89:69:ea:b6:19:02:b7:cf:c0:55:d9:ee:bb:20:6a: 51:17:91:c7:eb:6a:5d:25:e9:0a:40:80:a6:1d:f3: 21:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:17:42:D2:B2:1B:4D:9C:85:B6:A1:65:70:5E:0F:B4:2C:5F:7A:32 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7hdC0rIbTZyFtqFlcF4PtCxfejI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.156.14.0/24 Signature Algorithm: sha256WithRSAEncryption 24:c6:7c:33:6b:fd:de:eb:ad:31:50:43:71:73:6c:ef:ff:53: 9d:e2:61:cb:71:ef:b1:2f:ca:59:0f:4d:c1:5f:07:47:3f:18: df:9f:85:3f:2f:c3:d0:1e:ee:5c:da:f2:f8:ee:b1:94:41:66: bd:cb:ff:5a:6a:87:bc:4d:20:b7:11:a7:1d:3c:b0:e4:a6:23: 73:28:cb:91:e3:cd:5f:ff:1a:a2:94:d5:75:64:f5:c9:6a:dc: 2c:bb:75:e7:a8:be:da:2d:fb:60:34:61:1e:98:d8:8d:9b:1b: 5a:7e:bd:51:dd:83:ce:90:15:97:06:7f:07:e3:3a:02:e2:9c: d4:58:0a:dc:f3:de:46:a5:6c:d5:bd:d5:1f:16:5f:22:76:b8: b2:24:80:ab:3e:a2:c4:55:d6:39:78:6f:45:6b:b5:05:b0:56: 78:1f:65:aa:ff:55:9f:1c:fa:dd:34:fc:d3:53:ec:f2:fe:c0: cb:ae:dc:64:a0:16:fd:a2:60:dd:fc:03:8c:94:06:14:51:d9: 87:1f:3a:4d:7d:2e:41:0c:4d:5b:22:06:ea:9f:9b:f0:4f:f7: b6:2e:66:38:e5:f1:d7:78:69:a6:d2:d0:82:fd:41:42:2f:a5: d0:fc:6e:3c:28:ab:af:c4:25:9c:8a:8b:b4:cc:2f:33:00:50: 82:76:53:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oueJ1bVytAJCNUR1i1gKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTE3NDJkMmIyMWI0ZDljODViNmExNjU3MDVlMGZiNDJjNWY3YTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fhETXl0REc+P0itsbXTqoB9ZbLn Cid3iuxrf2ui4JdoF8Dj/jLIboDbO/NLj/3RdIdt8OZTsSSPCkW0FgUGuL5ODyla Oh1eyKfinIRnWRwpxoqL/haRvb9sCESQGUFfa2soY++6v2n+6c8a9bUaJT3QZ/WA UYPnS4oPB85O3S7TxgpGrep48ZQqUSGCkcqRDC5ZkonUtvXRWabKAtnDbSWw17Ad x1fH/OrJvpspSJP3oa+uGg4p46pWzcisLocqtGsNo1G4amyiNDAUhlv9wk3Hfh+0 bgTowdNaglVEMNOJaeq2GQK3z8BV2e67IGpRF5HH62pdJekKQICmHfMhLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO4XQtKyG02chbahZXBeD7QsX3oyMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvN2hkQzBySWJUWnlGdHFGbGNGNFB0Q3hmZWpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpwOMA0G CSqGSIb3DQEBCwUAA4IBAQAkxnwza/3e660xUENxc2zv/1Od4mHLce+xL8pZD03B XwdHPxjfn4U/L8PQHu5c2vL47rGUQWa9y/9aaoe8TSC3EacdPLDkpiNzKMuR481f /xqilNV1ZPXJatwsu3XnqL7aLftgNGEemNiNmxtafr1R3YPOkBWXBn8H4zoC4pzU WArc895GpWzVvdUfFl8idriyJICrPqLEVdY5eG9Fa7UFsFZ4H2Wq/1WfHPrdNPzT U+zy/sDLrtxkoBb9omDd/AOMlAYUUdmHHzpNfS5BDE1bIgbqn5vwT/e2LmY45fHX eGmm0tCC/UFCL6XQ/G48KKuvxCWciou0zC8zAFCCdlOe -----END CERTIFICATE-----Generated at Fri Jan 2 12:04:42 2026 by rpki-client