This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/7CZf3UnE-jA9uTeSjBMlOjjI3fM.roa File: 7CZf3UnE-jA9uTeSjBMlOjjI3fM.roa (raw, json) Hash identifier: MQOCesarhI3HhsKusfQyk40aeM8YtqN2eB0ejbnMM/I= Subject key identifier: EC:26:5F:DD:49:C4:FA:30:3D:B9:37:92:8C:13:25:3A:38:C8:DD:F3 Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Certificate serial: 019B76EB9FDB1E6C11DC8B300EFCE2CB27A7 Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/7CZf3UnE-jA9uTeSjBMlOjjI3fM.roa Signing time: Thu 01 Jan 2026 00:18:31 +0000 ROA not before: Thu 01 Jan 2026 00:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60117 IP address blocks: 185.45.193.0/24 maxlen: 24 185.117.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9f:db:1e:6c:11:dc:8b:30:0e:fc:e2:cb:27:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Validity Not Before: Jan 1 00:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec265fdd49c4fa303db937928c13253a38c8ddf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:41:64:d9:34:7c:0e:b6:1d:fc:a5:31:4b:57: 18:50:a0:28:28:c4:ef:7b:00:78:99:2a:ad:f0:d9: 94:56:e6:fd:51:81:5b:30:b2:9f:08:6f:84:dd:cc: 54:c3:35:0b:3d:5a:a8:3f:27:e2:d6:e3:ff:13:d9: 82:32:60:d4:7f:0d:bc:6f:6e:bc:1b:55:fe:42:7f: 10:f8:25:4b:a7:f0:70:4b:ff:1a:38:f7:4e:67:4a: 58:34:91:1b:ac:75:7a:ae:63:ef:ff:80:28:48:44: 82:e8:b2:90:8f:7b:a6:84:7c:a3:c3:ea:de:92:f5: 5f:b3:0f:e2:9c:38:5d:ed:d2:8a:4a:6b:49:49:b5: 06:fa:53:f8:32:a8:5c:b0:79:ea:67:ab:f9:2e:48: 56:01:f5:62:a5:ae:12:33:18:e6:31:a3:c3:8a:7d: d2:74:07:03:da:47:0a:25:a1:e8:23:0f:5f:d8:46: 71:3b:4c:ef:74:6d:6d:7d:9f:6e:70:df:9f:02:00: 81:87:89:f1:59:76:6a:b8:06:59:92:a1:3a:99:78: 6f:2d:2c:e9:df:e1:d9:ca:e2:d9:19:4b:39:4d:ea: 28:e4:5a:74:b1:96:ab:c5:bf:9d:6f:49:e4:99:c2: 47:8a:09:73:ce:79:30:56:39:75:62:30:87:bd:c6: 45:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:26:5F:DD:49:C4:FA:30:3D:B9:37:92:8C:13:25:3A:38:C8:DD:F3 X509v3 Authority Key Identifier: keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/7CZf3UnE-jA9uTeSjBMlOjjI3fM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.45.193.0/24 185.117.74.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:9d:cb:c9:f8:ac:cf:5f:a1:a7:13:bd:95:8f:a7:10:ea:e5: 8b:8e:be:de:db:17:db:3f:f8:11:2a:16:96:27:5d:9a:56:81: 11:5c:54:a1:7a:e0:95:45:ff:98:99:33:82:8f:a6:b1:b1:a5: fb:ed:25:a7:f0:3c:fa:ff:ab:65:75:45:80:4e:39:88:fb:3a: e1:d8:75:a3:d5:33:7c:71:7c:9f:a7:99:a7:72:d4:07:6b:6c: 4d:77:f6:d2:9b:d8:b2:02:04:79:c9:e5:1f:99:8e:17:c9:c7: c3:1d:ad:5d:df:c4:c9:07:7f:ee:be:e1:95:8b:05:c8:2a:6b: 9c:dd:c5:67:b2:62:67:f6:10:7d:9a:4a:75:20:ee:3d:4a:7d: 30:bc:8e:28:a6:8e:db:af:eb:ed:90:26:cf:2c:06:be:8d:34: e3:2f:8e:c6:f2:6e:c4:f4:47:03:b8:d5:56:82:c0:be:ce:f4: aa:8d:43:7e:03:31:a1:98:00:29:c5:e3:37:34:88:0d:a0:0b: a7:7b:ae:76:b6:e2:61:17:4f:4c:5e:4c:8a:28:69:c7:c5:12: 3f:e1:aa:f9:be:b0:99:dc:ec:52:e4:86:bf:4b:e1:f0:aa:03: 4c:35:db:b7:b3:50:1d:98:20:6e:97:21:fd:32:57:5f:74:e8: 30:00:96:1a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt265/bHmwR3IswDvziyyenMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMzhlYzI0MmE0M2U5YzlkNGNlYjI1ZGM5MGU1NDUzMzcz ZDNmNDYwHhcNMjYwMTAxMDAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzI2NWZkZDQ5YzRmYTMwM2RiOTM3OTI4YzEzMjUzYTM4YzhkZGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUFk2TR8DrYd/KUxS1cYUKAoKMTv ewB4mSqt8NmUVub9UYFbMLKfCG+E3cxUwzULPVqoPyfi1uP/E9mCMmDUfw28b268 G1X+Qn8Q+CVLp/BwS/8aOPdOZ0pYNJEbrHV6rmPv/4AoSESC6LKQj3umhHyjw+re kvVfsw/inDhd7dKKSmtJSbUG+lP4MqhcsHnqZ6v5LkhWAfVipa4SMxjmMaPDin3S dAcD2kcKJaHoIw9f2EZxO0zvdG1tfZ9ucN+fAgCBh4nxWXZquAZZkqE6mXhvLSzp 3+HZyuLZGUs5Teoo5Fp0sZarxb+db0nkmcJHiglzznkwVjl1YjCHvcZFjwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOwmX91JxPowPbk3kowTJTo4yN3zMB8GA1UdIwQY MBaAFOE47CQqQ+nJ1M6yXckOVFM3PT9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgt Njc4NWNkNDU2ODcxLzEvN0NaZjNVbkUtakE5dVRlU2pCTWxPampJM2ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgtNjc4NWNkNDU2ODcx LzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuS3BAwQA uXVKMA0GCSqGSIb3DQEBCwUAA4IBAQBancvJ+KzPX6GnE72Vj6cQ6uWLjr7e2xfb P/gRKhaWJ12aVoERXFSheuCVRf+YmTOCj6axsaX77SWn8Dz6/6tldUWATjmI+zrh 2HWj1TN8cXyfp5mnctQHa2xNd/bSm9iyAgR5yeUfmY4XycfDHa1d38TJB3/uvuGV iwXIKmuc3cVnsmJn9hB9mkp1IO49Sn0wvI4opo7br+vtkCbPLAa+jTTjL47G8m7E 9EcDuNVWgsC+zvSqjUN+AzGhmAApxeM3NIgNoAune652tuJhF09MXkyKKGnHxRI/ 4ar5vrCZ3OxS5Ia/S+HwqgNMNdu3s1AdmCBulyH9MldfdOgwAJYa -----END CERTIFICATE-----Generated at Wed Jan 21 11:42:27 2026 by rpki-client