This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7k__N_wOBtlDWHioi-BTbNIPor4.roa File: 7k__N_wOBtlDWHioi-BTbNIPor4.roa (raw, json) Hash identifier: vOpJ77xgOTgpfUA8qvurvzZ+Nwy32HoBDExjJ/eGP1c= Subject key identifier: EE:4F:FF:37:FC:0E:06:D9:43:58:78:A8:8B:E0:53:6C:D2:0F:A2:BE Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A300275D56FC4179C358ED638FFE6D Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7k__N_wOBtlDWHioi-BTbNIPor4.roa Signing time: Thu 01 Jan 2026 08:18:26 +0000 ROA not before: Thu 01 Jan 2026 08:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47447 IP address blocks: 185.221.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:00:27:5d:56:fc:41:79:c3:58:ed:63:8f:fe:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee4fff37fc0e06d9435878a88be0536cd20fa2be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:76:28:bd:37:20:fa:85:3d:20:08:d2:c4:0e: d7:15:cd:3a:e6:fc:aa:d9:60:8d:47:33:29:2c:9b: c7:bd:0f:ae:38:55:fe:87:8b:f4:a3:96:8a:7a:aa: 35:e5:86:ff:9f:77:64:62:76:aa:ae:63:b5:cb:4c: 19:3f:e9:bc:b0:5b:81:73:ff:1a:db:17:27:0b:52: f5:77:07:34:e3:e1:91:3a:db:f3:69:08:5e:c2:7e: 70:44:1d:ad:d2:81:26:28:e7:c5:78:b7:c9:7f:45: 68:c6:0f:e2:b0:b5:0d:28:9b:be:c9:5f:16:0b:e1: 2d:b0:62:1f:ef:bd:cb:c9:c5:8c:a9:1e:02:6b:49: c9:aa:f7:2f:94:e1:e5:94:9f:a6:88:76:df:34:e6: 0d:95:4b:91:af:4a:a8:e5:6e:1f:43:45:f8:e3:6b: 88:78:75:7e:75:7c:1d:db:ef:e3:9b:5d:c5:86:5d: 20:97:52:88:78:24:3a:a8:07:f0:ba:8e:b1:e5:7e: 4c:70:4b:02:19:80:b4:53:b4:2d:38:3f:9a:90:33: 22:13:89:cf:10:21:fc:e5:ce:59:39:a1:c7:ea:07: 93:38:4b:d0:22:2c:1c:15:14:d9:25:76:91:33:7c: d8:e1:60:73:03:2b:7f:73:bf:14:94:c0:82:f3:31: 64:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4F:FF:37:FC:0E:06:D9:43:58:78:A8:8B:E0:53:6C:D2:0F:A2:BE X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7k__N_wOBtlDWHioi-BTbNIPor4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.221.67.0/24 Signature Algorithm: sha256WithRSAEncryption 00:1e:9c:db:2e:da:31:a9:1b:d9:bf:bb:17:e5:07:6e:54:f8: 52:29:57:11:7c:34:b7:62:39:e2:13:c3:55:b4:4a:64:15:e6: 83:3e:15:eb:3b:93:6c:84:75:d7:d1:a4:eb:d8:74:1e:aa:2e: 89:ea:d5:61:3e:f6:78:8b:dc:7d:6a:9a:30:d1:72:58:18:4d: dd:9f:d1:1c:81:8c:45:d8:3a:0e:f2:64:45:bc:68:25:13:67: 91:66:99:a8:5b:03:d8:93:d1:b9:e5:f7:3f:94:1a:b4:19:7e: 5c:1f:f4:33:b3:87:fb:e6:dd:9c:33:67:bf:3b:4c:83:52:71: 59:d7:1c:d6:53:f3:4c:1b:20:aa:bd:47:e7:ae:d3:ad:1a:87: 59:7e:1f:64:19:d4:76:bb:f6:b4:18:52:8f:f6:8a:d9:b3:a6: e0:ca:ca:c2:f9:7b:f3:e3:09:10:5d:c6:4c:b5:a8:7c:83:e2: 8e:42:1b:c6:84:df:ac:6e:df:59:b1:54:99:4a:9b:d7:c9:7c: 48:51:7e:69:7e:83:ab:38:5f:c6:56:2a:fe:50:0b:23:84:c3: b6:07:fe:fa:95:62:36:2a:3e:a5:44:e8:db:57:d2:a9:e2:70: 31:db:fb:3f:56:e5:cc:c9:b2:70:56:77:53:92:b6:7d:1a:16: 42:c8:5e:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4owAnXVb8QXnDWO1jj/5tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTRmZmYzN2ZjMGUwNmQ5NDM1ODc4YTg4YmUwNTM2Y2QyMGZhMmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3YovTcg+oU9IAjSxA7XFc065vyq 2WCNRzMpLJvHvQ+uOFX+h4v0o5aKeqo15Yb/n3dkYnaqrmO1y0wZP+m8sFuBc/8a 2xcnC1L1dwc04+GROtvzaQhewn5wRB2t0oEmKOfFeLfJf0Voxg/isLUNKJu+yV8W C+EtsGIf773LycWMqR4Ca0nJqvcvlOHllJ+miHbfNOYNlUuRr0qo5W4fQ0X442uI eHV+dXwd2+/jm13Fhl0gl1KIeCQ6qAfwuo6x5X5McEsCGYC0U7QtOD+akDMiE4nP ECH85c5ZOaHH6geTOEvQIiwcFRTZJXaRM3zY4WBzAyt/c78UlMCC8zFk1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO5P/zf8DgbZQ1h4qIvgU2zSD6K+MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvN2tfX05fd09CdGxEV0hpb2ktQlRiTklQb3I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud1DMA0G CSqGSIb3DQEBCwUAA4IBAQAAHpzbLtoxqRvZv7sX5QduVPhSKVcRfDS3YjniE8NV tEpkFeaDPhXrO5NshHXX0aTr2HQeqi6J6tVhPvZ4i9x9apow0XJYGE3dn9EcgYxF 2DoO8mRFvGglE2eRZpmoWwPYk9G55fc/lBq0GX5cH/Qzs4f75t2cM2e/O0yDUnFZ 1xzWU/NMGyCqvUfnrtOtGodZfh9kGdR2u/a0GFKP9orZs6bgysrC+Xvz4wkQXcZM tah8g+KOQhvGhN+sbt9ZsVSZSpvXyXxIUX5pfoOrOF/GVir+UAsjhMO2B/76lWI2 Kj6lROjbV9Kp4nAx2/s/VuXMybJwVndTkrZ9GhZCyF5x -----END CERTIFICATE-----Generated at Fri Jan 2 12:04:43 2026 by rpki-client