This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/7EPxlfzuNdNfziGNw3Hj7EoZj1Q.roa File: 7EPxlfzuNdNfziGNw3Hj7EoZj1Q.roa (raw, json) Hash identifier: fYUfx118C/cw672kHDWSH3DD1Ik9WuMEeaQ/qAV9tYE= Subject key identifier: EC:43:F1:95:FC:EE:35:D3:5F:CE:21:8D:C3:71:E3:EC:4A:19:8F:54 Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Certificate serial: 019B7B35C749F27362C69CD58B0C92BDCB60 Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/7EPxlfzuNdNfziGNw3Hj7EoZj1Q.roa Signing time: Thu 01 Jan 2026 20:18:00 +0000 ROA not before: Thu 01 Jan 2026 20:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11426 IP address blocks: 5.182.120.0/22 maxlen: 22 45.147.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c7:49:f2:73:62:c6:9c:d5:8b:0c:92:bd:cb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Validity Not Before: Jan 1 20:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec43f195fcee35d35fce218dc371e3ec4a198f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:94:bb:42:de:a5:a2:eb:d2:6d:46:2b:d8:d4: c7:93:6e:43:20:1e:78:ed:a5:12:11:74:b1:26:35: 32:89:14:52:8d:c2:4b:bb:d9:f6:fe:0e:51:c5:0e: 53:0e:65:3a:8f:88:93:6b:d5:2f:06:10:c5:47:c5: d6:8d:9b:02:c3:61:a7:6d:f3:38:07:d8:d7:a4:92: 55:ad:86:c9:ae:a1:95:96:4c:6b:02:b7:cb:49:aa: 1f:81:9b:2c:eb:02:3a:1e:b5:ef:f9:be:83:f4:61: 67:d9:5d:f9:30:88:8c:05:74:35:0a:5c:2b:d7:22: d5:1f:87:24:4d:be:11:d5:af:59:b3:b3:72:a9:9b: a3:81:14:b7:03:21:93:3b:75:e4:ed:d6:46:f8:5c: 5e:66:29:17:94:13:eb:de:67:6c:c4:89:94:4d:0d: f4:ec:ef:a7:47:1d:e4:5f:d5:4b:3a:05:83:48:38: 8e:bc:3d:bb:5e:9f:1d:03:1c:76:ee:04:f2:18:f2: 1d:fb:17:c2:ff:3e:09:3b:60:87:41:bb:78:13:b6: a6:49:43:35:a0:32:12:ef:63:d4:17:95:dc:58:f0: 88:a0:d6:1a:79:89:67:61:02:87:d5:6c:04:64:80: 63:67:71:f8:80:65:a2:c5:d3:bd:00:cd:ac:a0:ec: eb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:43:F1:95:FC:EE:35:D3:5F:CE:21:8D:C3:71:E3:EC:4A:19:8F:54 X509v3 Authority Key Identifier: keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/7EPxlfzuNdNfziGNw3Hj7EoZj1Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.120.0/22 45.147.68.0/22 Signature Algorithm: sha256WithRSAEncryption 28:45:ed:8b:8d:5a:b6:45:3e:f5:61:4f:b4:5f:c3:13:9c:82: 71:04:25:39:b5:d3:9d:eb:e4:7d:0a:05:ba:2a:1d:e3:0a:9f: 5a:09:fe:df:a0:0b:1c:26:21:44:20:ce:71:30:48:2c:e8:95: 94:c8:7d:4f:2e:39:0e:1a:6f:2f:f4:40:6a:c2:49:ce:e3:c4: 08:f1:4b:84:78:3f:98:aa:01:77:fc:6e:77:85:e8:4f:64:61: 42:bd:87:de:f8:41:e0:d5:76:4e:a7:e4:db:e3:26:8b:78:f3: fd:50:bf:7e:11:e6:3a:5a:9d:39:bc:76:23:f5:64:e8:de:bf: 7d:ab:3a:d3:0c:87:77:e2:a1:f5:80:bf:28:3c:c8:6d:7a:89: 47:73:45:57:8f:b4:69:a9:70:9f:68:15:60:a2:65:b4:81:ab: 11:ed:d3:ec:a4:b8:cd:4e:66:62:d9:26:55:b8:f9:d6:1b:60: 5b:ed:61:52:f2:95:ab:75:29:78:89:c3:da:3d:b7:fe:63:e6: b1:ea:a4:29:8f:f3:60:d6:9e:e2:74:d1:5d:86:9e:bf:25:0c: 46:ac:7c:00:02:f6:86:d0:76:a4:32:b0:16:c8:0e:9b:3a:9a: 12:04:d2:59:22:a0:e7:ab:e9:6a:dd:1f:4b:3b:ad:50:d7:21: d2:91:ac:22 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NcdJ8nNixpzViwySvctgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NmQwZGFiMzQ3YTM4ZTJiODdiNWEyMmEyZjdjOWUyMWMx OGM5YmMwHhcNMjYwMTAxMjAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzQzZjE5NWZjZWUzNWQzNWZjZTIxOGRjMzcxZTNlYzRhMTk4ZjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZS7Qt6louvSbUYr2NTHk25DIB54 7aUSEXSxJjUyiRRSjcJLu9n2/g5RxQ5TDmU6j4iTa9UvBhDFR8XWjZsCw2GnbfM4 B9jXpJJVrYbJrqGVlkxrArfLSaofgZss6wI6HrXv+b6D9GFn2V35MIiMBXQ1Clwr 1yLVH4ckTb4R1a9Zs7NyqZujgRS3AyGTO3Xk7dZG+FxeZikXlBPr3mdsxImUTQ30 7O+nRx3kX9VLOgWDSDiOvD27Xp8dAxx27gTyGPId+xfC/z4JO2CHQbt4E7amSUM1 oDIS72PUF5XcWPCIoNYaeYlnYQKH1WwEZIBjZ3H4gGWixdO9AM2soOzrAwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOxD8ZX87jXTX84hjcNx4+xKGY9UMB8GA1UdIwQY MBaAFOdtDas0ejjiuHtaIqL3yeIcGMm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDkt YmQzYmZjOTliZGE5LzEvN0VQeGxmenVOZE5memlHTnczSGo3RW9aajFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDktYmQzYmZjOTliZGE5 LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCBbZ4AwQC LZNEMA0GCSqGSIb3DQEBCwUAA4IBAQAoRe2LjVq2RT71YU+0X8MTnIJxBCU5tdOd 6+R9CgW6Kh3jCp9aCf7foAscJiFEIM5xMEgs6JWUyH1PLjkOGm8v9EBqwknO48QI 8UuEeD+YqgF3/G53hehPZGFCvYfe+EHg1XZOp+Tb4yaLePP9UL9+EeY6Wp05vHYj 9WTo3r99qzrTDId34qH1gL8oPMhteolHc0VXj7RpqXCfaBVgomW0gasR7dPspLjN TmZi2SZVuPnWG2Bb7WFS8pWrdSl4icPaPbf+Y+ax6qQpj/Ng1p7idNFdhp6/JQxG rHwAAvaG0HakMrAWyA6bOpoSBNJZIqDnq+lq3R9LO61Q1yHSkawi -----END CERTIFICATE-----Generated at Wed Jan 21 01:08:54 2026 by rpki-client