This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/7N1F1MxOnqk5tlU_7JI8Epdjv0U.roa File: 7N1F1MxOnqk5tlU_7JI8Epdjv0U.roa (raw, json) Hash identifier: ALeK5jRpFOH5FaI1bhF8PWr7NSgiBBb569HmlAbfe6k= Subject key identifier: EC:DD:45:D4:CC:4E:9E:A9:39:B6:55:3F:EC:92:3C:12:97:63:BF:45 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7BEB09023FC533CEBFB1CB78F9023 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/7N1F1MxOnqk5tlU_7JI8Epdjv0U.roa Signing time: Thu 01 Jan 2026 18:17:49 +0000 ROA not before: Thu 01 Jan 2026 18:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5065 IP address blocks: 188.64.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:be:b0:90:23:fc:53:3c:eb:fb:1c:b7:8f:90:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ecdd45d4cc4e9ea939b6553fec923c129763bf45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:67:d0:f5:f3:bc:b1:39:81:b8:27:9a:12:a2: 21:86:79:9d:de:68:25:f3:e8:73:9e:4a:32:a0:7b: 31:ab:97:d1:dc:40:56:53:ae:4d:38:95:45:32:83: 05:e6:ff:1c:cf:83:fb:3f:d6:00:09:f7:ca:71:ba: 65:0b:92:d2:79:ed:a5:31:81:9f:15:c3:76:6b:dc: 4b:1d:90:36:0a:62:57:7c:75:0b:f7:18:e6:4a:ed: 73:fc:2f:b8:c1:d0:94:da:0f:0b:7c:14:77:ce:17: c7:89:97:96:09:ee:01:f0:fe:96:70:81:6b:f0:77: 17:3f:eb:9f:13:9b:bb:ae:0b:e0:0c:d5:4e:6b:28: 9d:aa:e5:5d:a3:ac:8f:52:e0:93:17:5b:ec:23:c5: d1:69:1f:9a:17:db:14:c7:86:4d:d4:4a:66:a5:36: 11:d2:2d:f3:a9:c8:05:66:c1:53:82:9c:c4:64:d6: a9:18:35:f0:3c:2c:99:51:10:fd:ec:d4:df:aa:a4: 1a:6a:7f:8e:c5:76:25:71:d7:b5:25:82:1f:1b:77: ef:2f:20:f2:4c:bc:83:dd:08:fe:99:94:1a:a8:79: 8c:7c:ed:e4:a1:b3:f4:13:58:f1:ce:19:bc:e4:f8: cd:12:f0:c5:e4:ee:37:12:dc:a3:0c:c5:27:79:70: 99:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:DD:45:D4:CC:4E:9E:A9:39:B6:55:3F:EC:92:3C:12:97:63:BF:45 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/7N1F1MxOnqk5tlU_7JI8Epdjv0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.64.176.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:93:97:a8:ee:9e:08:aa:10:85:a8:7c:a5:a4:a8:68:ae:8f: 6f:c5:27:22:10:c8:3e:00:88:74:40:5b:ea:ae:7b:2d:bb:73: ad:cd:34:85:08:10:8e:17:33:96:0c:6b:0c:d0:f6:ac:c5:da: 3b:12:b0:a4:6b:83:e6:3c:45:c7:d7:a1:5e:45:ce:a6:fb:03: 07:71:67:82:84:9f:2e:5d:6a:0c:97:93:1e:10:6f:47:78:9c: 4d:e5:15:70:f6:03:af:c8:06:6f:cb:a7:a8:7d:35:dc:7f:cc: 60:d4:06:00:7c:8e:c5:a2:d8:34:36:a7:5d:d4:2f:9d:bb:ea: f6:c4:1e:c1:ed:39:bb:54:e1:55:68:95:af:99:46:14:46:96: 28:a8:ea:0c:96:bb:d3:31:d7:2c:40:4e:ea:dc:db:8e:a4:f1: 20:b6:e5:cf:5b:b9:36:a2:fc:cf:5d:a2:54:d3:22:44:8b:9b: 81:18:c7:bb:76:87:dc:91:3a:da:b7:6c:c2:76:e4:7d:75:3a: 0d:09:90:c5:8f:27:20:d2:ca:f5:fe:7e:23:9a:a4:f6:9d:28: d2:49:a4:a0:a4:26:b0:d5:80:8d:6b:a3:5e:29:5d:29:1a:46: 93:55:7a:6d:8b:fa:65:ae:d1:0f:21:78:a8:af:bf:e1:17:97: 1e:f0:94:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x76wkCP8Uzzr+xy3j5AjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2RkNDVkNGNjNGU5ZWE5MzliNjU1M2ZlYzkyM2MxMjk3NjNiZjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2fQ9fO8sTmBuCeaEqIhhnmd3mgl 8+hznkoyoHsxq5fR3EBWU65NOJVFMoMF5v8cz4P7P9YACffKcbplC5LSee2lMYGf FcN2a9xLHZA2CmJXfHUL9xjmSu1z/C+4wdCU2g8LfBR3zhfHiZeWCe4B8P6WcIFr 8HcXP+ufE5u7rgvgDNVOayidquVdo6yPUuCTF1vsI8XRaR+aF9sUx4ZN1EpmpTYR 0i3zqcgFZsFTgpzEZNapGDXwPCyZURD97NTfqqQaan+OxXYlcde1JYIfG3fvLyDy TLyD3Qj+mZQaqHmMfO3kobP0E1jxzhm85PjNEvDF5O43EtyjDMUneXCZ0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOzdRdTMTp6pObZVP+ySPBKXY79FMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvN04xRjFNeE9ucWs1dGxVXzdKSThFcGRqdjBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvECwMA0G CSqGSIb3DQEBCwUAA4IBAQCOk5eo7p4IqhCFqHylpKhoro9vxSciEMg+AIh0QFvq rnstu3OtzTSFCBCOFzOWDGsM0Pasxdo7ErCka4PmPEXH16FeRc6m+wMHcWeChJ8u XWoMl5MeEG9HeJxN5RVw9gOvyAZvy6eofTXcf8xg1AYAfI7Fotg0Nqdd1C+du+r2 xB7B7Tm7VOFVaJWvmUYURpYoqOoMlrvTMdcsQE7q3NuOpPEgtuXPW7k2ovzPXaJU 0yJEi5uBGMe7dofckTrat2zCduR9dToNCZDFjycg0sr1/n4jmqT2nSjSSaSgpCaw 1YCNa6NeKV0pGkaTVXpti/plrtEPIXior7/hF5ce8JRc -----END CERTIFICATE-----Generated at Mon Jan 19 11:25:47 2026 by rpki-client