This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/7SAjGILTO59KUTiR6R25zMbi05k.roa File: 7SAjGILTO59KUTiR6R25zMbi05k.roa (raw, json) Hash identifier: xMkuiyV/sgEBkiNl+fbX7T0JEHyaPo3fhmMzgUh4oNo= Subject key identifier: ED:20:23:18:82:D3:3B:9F:4A:51:38:91:E9:1D:B9:CC:C6:E2:D3:99 Certificate issuer: /CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc Certificate serial: 019B7D5BB2A28C161344C403A294A7D9F1D0 Authority key identifier: FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/7SAjGILTO59KUTiR6R25zMbi05k.roa Signing time: Fri 02 Jan 2026 06:18:39 +0000 ROA not before: Fri 02 Jan 2026 06:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.187.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 15:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:b2:a2:8c:16:13:44:c4:03:a2:94:a7:d9:f1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc Validity Not Before: Jan 2 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed20231882d33b9f4a513891e91db9ccc6e2d399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cc:7a:76:8d:3a:50:df:8d:7c:ef:ed:28:5c: df:5c:05:99:a2:7f:73:74:9f:f7:ba:0d:8e:6f:fc: 07:56:93:74:ac:94:eb:cb:a3:ff:f2:2e:f4:bd:ce: 0c:3c:7a:b3:ca:17:cd:86:e4:a7:78:19:c6:c7:09: 04:e0:36:06:23:24:65:0b:14:67:8b:75:80:ad:56: f8:27:ed:92:19:3b:92:c4:bf:40:b0:b2:0e:62:ee: c2:d9:4b:a2:9a:56:e4:ee:27:6d:d2:2d:bc:70:12: b7:f6:4b:1e:ed:47:3c:f6:85:a3:40:bd:f1:7a:45: 4a:1f:87:da:d6:30:d0:1c:a3:b8:64:c6:62:1c:61: a8:c6:f2:f7:e5:70:c4:c0:87:c9:32:c0:84:8a:2f: 9c:54:27:73:44:dc:06:df:27:59:6a:3a:ca:70:6a: 45:43:42:ae:5f:d8:95:ec:36:9e:36:60:9f:1b:28: b1:da:18:03:4a:a2:c7:4c:e9:11:f4:d5:2a:99:e6: 95:ff:a8:9d:46:46:f9:9e:2c:ae:1f:97:d5:6d:c3: 7b:1f:5d:62:7c:2d:50:bb:2d:af:4c:0c:da:c7:66: 0e:fa:dd:09:c2:0b:6d:a3:c0:1c:b7:63:c7:50:d4: b9:89:cf:92:0a:83:d8:6d:b4:01:2f:a4:9e:0a:99: 59:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:20:23:18:82:D3:3B:9F:4A:51:38:91:E9:1D:B9:CC:C6:E2:D3:99 X509v3 Authority Key Identifier: keyid:FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/7SAjGILTO59KUTiR6R25zMbi05k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.187.116.0/22 Signature Algorithm: sha256WithRSAEncryption 28:43:32:57:e7:d5:4e:0f:df:72:84:b7:cc:77:b9:c5:5d:e3: 0a:e1:35:56:14:83:65:cb:8b:fa:eb:2d:3f:40:69:3d:25:ec: 05:57:6f:19:e6:d8:3e:c3:fa:7d:06:18:32:e8:93:f8:f3:0c: 11:06:a5:23:a8:f0:82:0e:c6:6a:c3:c9:ac:80:e6:89:4e:58: ae:7f:69:96:6e:e1:ab:96:4a:37:57:d2:65:2b:24:1e:fa:2c: c9:9c:18:a4:ad:a7:64:68:c3:df:89:3c:f9:50:97:8c:dc:ea: b4:0c:56:50:4b:2f:37:4f:72:d4:6d:ca:90:a7:9d:d4:c4:13: 77:19:1c:d2:d0:0d:76:23:2c:1c:ab:dc:86:4d:7e:e5:cb:c7: 51:80:5a:d3:9a:38:4b:06:d7:a6:5e:03:a5:91:6d:8f:11:f2: a5:84:77:f9:67:75:87:f9:c0:77:e5:51:66:5b:59:84:7f:e8: 1e:fc:be:47:21:2f:ac:ee:0f:f3:d2:91:52:f8:14:56:1e:53: 59:e0:14:d0:20:fa:a8:30:2c:0e:37:46:45:9e:d7:5b:59:fd: fe:19:ba:38:3a:2a:a3:02:c9:20:db:b5:b2:ad:84:ca:f2:c9: 66:e9:41:a2:19:f1:b9:53:82:aa:e4:3b:39:5c:26:b1:42:a8: 6e:47:33:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W7KijBYTRMQDopSn2fHQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjOTYzMTFmMjA3ZTMwZTA0ZTVlZDE4OTYwYjMxZmIzYmE2 N2Q5Y2MwHhcNMjYwMTAyMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDIwMjMxODgyZDMzYjlmNGE1MTM4OTFlOTFkYjljY2M2ZTJkMzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8x6do06UN+NfO/tKFzfXAWZon9z dJ/3ug2Ob/wHVpN0rJTry6P/8i70vc4MPHqzyhfNhuSneBnGxwkE4DYGIyRlCxRn i3WArVb4J+2SGTuSxL9AsLIOYu7C2Uuimlbk7idt0i28cBK39kse7Uc89oWjQL3x ekVKH4fa1jDQHKO4ZMZiHGGoxvL35XDEwIfJMsCEii+cVCdzRNwG3ydZajrKcGpF Q0KuX9iV7DaeNmCfGyix2hgDSqLHTOkR9NUqmeaV/6idRkb5niyuH5fVbcN7H11i fC1Quy2vTAzax2YO+t0Jwgtto8Act2PHUNS5ic+SCoPYbbQBL6SeCplZpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO0gIxiC0zufSlE4kekduczG4tOZMB8GA1UdIwQY MBaAFPyWMR8gfjDgTl7RiWCzH7O6Z9nMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0pZeEh5Qi1NT0JPWHRHSllMTWZzN3BuMmN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iYzQ4ZDItMjhlOC00MDVkLTlmOWEt MDM4OTdmNGNiMzVkLzEvN1NBakdJTFRPNTlLVVRpUjZSMjV6TWJpMDVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iYzQ4ZDItMjhlOC00MDVkLTlmOWEtMDM4OTdmNGNiMzVk LzEvX0pZeEh5Qi1NT0JPWHRHSllMTWZzN3BuMmN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubt0MA0G CSqGSIb3DQEBCwUAA4IBAQAoQzJX59VOD99yhLfMd7nFXeMK4TVWFINly4v66y0/ QGk9JewFV28Z5tg+w/p9Bhgy6JP48wwRBqUjqPCCDsZqw8msgOaJTliuf2mWbuGr lko3V9JlKyQe+izJnBikradkaMPfiTz5UJeM3Oq0DFZQSy83T3LUbcqQp53UxBN3 GRzS0A12Iywcq9yGTX7ly8dRgFrTmjhLBtemXgOlkW2PEfKlhHf5Z3WH+cB35VFm W1mEf+ge/L5HIS+s7g/z0pFS+BRWHlNZ4BTQIPqoMCwON0ZFntdbWf3+Gbo4Oiqj Askg27WyrYTK8slm6UGiGfG5U4Kq5Ds5XCaxQqhuRzMS -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:57 2026 by rpki-client