This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/7ekKRg8g8HrfOcB9YF4-OtPsRQs.roa File: 7ekKRg8g8HrfOcB9YF4-OtPsRQs.roa (raw, json) Hash identifier: yMXJseso0YF/5O/OMhuQoK6YA8+AHyLDCsIrCokdoMw= Subject key identifier: ED:E9:0A:46:0F:20:F0:7A:DF:39:C0:7D:60:5E:3E:3A:D3:EC:45:0B Certificate issuer: /CN=6c3a63c531cee41b3bed87300e459e45fb9e8978 Certificate serial: 019B7910A774195B840FFABDA2CF59E49222 Authority key identifier: 6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/7ekKRg8g8HrfOcB9YF4-OtPsRQs.roa Signing time: Thu 01 Jan 2026 10:18:13 +0000 ROA not before: Thu 01 Jan 2026 10:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30848 IP address blocks: 185.158.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 22:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a7:74:19:5b:84:0f:fa:bd:a2:cf:59:e4:92:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c3a63c531cee41b3bed87300e459e45fb9e8978 Validity Not Before: Jan 1 10:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ede90a460f20f07adf39c07d605e3e3ad3ec450b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f1:d9:c1:85:fc:dd:8d:e3:f7:30:8c:01:ad: 8d:e5:98:21:65:8b:15:14:e2:e0:b3:a0:8c:0c:dc: dc:be:64:bb:6f:ad:46:08:04:1c:6c:3a:86:d5:c9: 6e:23:e5:12:31:b6:3e:31:01:7b:87:71:c7:55:07: ee:24:c3:19:2e:fc:36:66:3c:52:56:15:21:fa:69: 01:46:a3:75:90:9f:ba:d6:f0:48:c7:57:86:fd:ef: 25:46:2a:fa:75:e4:7c:d6:a8:fe:6f:aa:b6:44:54: ca:09:a1:33:29:ef:bd:e6:3e:4a:47:4b:51:f5:01: 70:26:09:3b:dc:f8:63:80:85:e4:80:7b:6f:ae:09: f9:56:3c:80:ae:c1:1e:6d:c9:91:3c:44:30:3b:98: 85:cb:f9:49:a7:2f:8b:94:c6:dc:cb:bf:69:fc:b3: 11:b7:41:a7:d6:4d:77:4f:67:5c:79:a0:36:40:9f: 04:d5:37:05:af:c9:e0:13:30:06:e3:df:78:6a:f6: 75:de:e9:f7:dc:ff:88:f8:7b:69:1f:71:45:9f:a7: 92:34:70:78:79:f6:2d:53:c7:9b:95:1b:1c:ae:57: 1c:21:b3:77:32:af:3f:1a:9d:51:fe:f2:d5:40:67: bd:96:ca:0a:97:fc:35:2d:7f:09:f9:d7:4c:c8:da: 83:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E9:0A:46:0F:20:F0:7A:DF:39:C0:7D:60:5E:3E:3A:D3:EC:45:0B X509v3 Authority Key Identifier: keyid:6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/7ekKRg8g8HrfOcB9YF4-OtPsRQs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.158.204.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:46:d3:15:77:09:d2:51:34:4e:b1:11:67:f7:6f:7a:2a:a1: 92:52:4a:7b:bc:e4:40:d5:dc:b6:73:43:61:3b:db:6a:9f:cf: 59:34:c4:8c:ab:f8:e7:26:d8:cb:79:39:5a:40:e4:fa:9a:64: 3a:a9:0a:57:65:d3:35:b7:ee:5b:30:c2:bd:63:32:44:da:61: b8:a7:a7:49:a4:7c:79:0d:97:75:42:48:55:6d:3e:09:08:1f: 0f:65:be:98:65:f6:34:30:dd:a2:9d:7c:32:ee:b5:c8:4d:a8: 47:cf:37:32:37:d1:ce:23:78:67:88:fa:5d:7c:2b:08:80:25: 31:3c:4a:0d:f2:5c:2c:a8:ec:1c:87:ba:d2:91:b6:f3:19:b4: 8e:80:af:61:2c:fb:9a:02:66:f8:a0:20:8e:03:6d:e3:97:ef: 5b:f2:8e:9e:ea:0c:c3:39:11:df:05:89:a9:62:36:7d:46:af: b2:eb:0e:b0:f0:a4:ea:5c:65:18:fa:b9:50:8d:67:00:e5:5b: 1d:a6:03:d8:89:01:53:ba:bd:2c:da:73:c6:27:60:04:9a:c1: 08:9e:4a:cc:90:24:a7:5a:90:60:88:3d:cf:b9:2d:58:52:b5: 96:59:cf:30:30:df:cf:6a:39:de:ea:be:4e:40:5a:b1:e5:28: e5:af:6b:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EKd0GVuED/q9os9Z5JIiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjM2E2M2M1MzFjZWU0MWIzYmVkODczMDBlNDU5ZTQ1ZmI5 ZTg5NzgwHhcNMjYwMTAxMTAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGU5MGE0NjBmMjBmMDdhZGYzOWMwN2Q2MDVlM2UzYWQzZWM0NTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvHZwYX83Y3j9zCMAa2N5ZghZYsV FOLgs6CMDNzcvmS7b61GCAQcbDqG1cluI+USMbY+MQF7h3HHVQfuJMMZLvw2ZjxS VhUh+mkBRqN1kJ+61vBIx1eG/e8lRir6deR81qj+b6q2RFTKCaEzKe+95j5KR0tR 9QFwJgk73PhjgIXkgHtvrgn5VjyArsEebcmRPEQwO5iFy/lJpy+LlMbcy79p/LMR t0Gn1k13T2dceaA2QJ8E1TcFr8ngEzAG4994avZ13un33P+I+HtpH3FFn6eSNHB4 efYtU8eblRscrlccIbN3Mq8/Gp1R/vLVQGe9lsoKl/w1LX8J+ddMyNqD+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO3pCkYPIPB63znAfWBePjrT7EULMB8GA1UdIwQY MBaAFGw6Y8UxzuQbO+2HMA5FnkX7nol4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRwanhUSE81QnM3N1ljd0RrV2VSZnVlaVhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9mNWVhMTMtODI3YS00YWNkLWEyMDct YjlmM2M2MzUxMjI1LzEvN2VrS1JnOGc4SHJmT2NCOVlGNC1PdFBzUlFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9mNWVhMTMtODI3YS00YWNkLWEyMDctYjlmM2M2MzUxMjI1 LzEvYkRwanhUSE81QnM3N1ljd0RrV2VSZnVlaVhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZ7MMA0G CSqGSIb3DQEBCwUAA4IBAQBMRtMVdwnSUTROsRFn9296KqGSUkp7vORA1dy2c0Nh O9tqn89ZNMSMq/jnJtjLeTlaQOT6mmQ6qQpXZdM1t+5bMMK9YzJE2mG4p6dJpHx5 DZd1QkhVbT4JCB8PZb6YZfY0MN2inXwy7rXITahHzzcyN9HOI3hniPpdfCsIgCUx PEoN8lwsqOwch7rSkbbzGbSOgK9hLPuaAmb4oCCOA23jl+9b8o6e6gzDORHfBYmp YjZ9Rq+y6w6w8KTqXGUY+rlQjWcA5VsdpgPYiQFTur0s2nPGJ2AEmsEInkrMkCSn WpBgiD3PuS1YUrWWWc8wMN/Pajne6r5OQFqx5Sjlr2uI -----END CERTIFICATE-----Generated at Tue Jan 27 08:30:41 2026 by rpki-client