This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7tvednSwcdk4Tw0fmK-exBV_O0M.roa File: 7tvednSwcdk4Tw0fmK-exBV_O0M.roa (raw, json) Hash identifier: 4tw26Rf6M/jzn0rvI2vUA5eYKV/jQb8kdMStoZuPZ74= Subject key identifier: EE:DB:DE:76:74:B0:71:D9:38:4F:0D:1F:98:AF:9E:C4:15:7F:3B:43 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12DC0BB5320C752CFA25B417A42C66 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7tvednSwcdk4Tw0fmK-exBV_O0M.roa Signing time: Fri 02 Jan 2026 00:19:29 +0000 ROA not before: Fri 02 Jan 2026 00:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59580 IP address blocks: 85.93.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:dc:0b:b5:32:0c:75:2c:fa:25:b4:17:a4:2c:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eedbde7674b071d9384f0d1f98af9ec4157f3b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ba:d0:a4:75:f0:92:ae:76:f7:bf:fa:91:b4: 09:fe:7f:d2:34:0b:25:f1:73:13:19:46:5d:f8:a5: 5d:e9:5c:2f:9b:05:cf:50:93:c8:be:06:fe:de:13: 50:5e:3a:1a:a7:f7:82:29:cd:71:89:f2:74:f8:b9: d8:c8:71:bc:4e:43:5a:0b:db:42:1d:6f:01:80:bb: f2:a3:c0:b4:60:18:fd:87:14:2c:07:96:74:69:4c: 08:ad:d1:f3:bc:5c:3e:03:4e:a0:f2:af:e0:49:b6: 7c:f5:dd:21:8e:95:c4:7d:5b:34:49:e4:74:cf:a5: 76:9b:b7:58:a0:7c:16:a1:33:45:60:01:e4:bc:1d: 5b:ac:5f:5a:dd:07:40:7f:9e:c6:7b:25:12:db:a9: 8b:11:26:f5:5b:f2:9c:48:8f:e4:a1:17:92:8c:a3: 94:b4:cb:d9:e1:34:b4:13:06:14:f7:df:ac:72:29: 02:ec:06:34:cd:32:fc:22:f8:6f:de:d7:2a:94:07: 2c:fd:b3:16:c7:c0:94:9d:7f:f5:b1:4a:d0:42:20: 84:e2:69:2b:59:d1:93:03:71:80:11:23:e7:6f:02: 62:99:3b:62:e6:2a:5f:fb:ed:37:69:69:3c:f4:e6: 75:93:b3:9f:80:63:ed:10:cf:00:b5:59:bc:cf:24: 1c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:DB:DE:76:74:B0:71:D9:38:4F:0D:1F:98:AF:9E:C4:15:7F:3B:43 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7tvednSwcdk4Tw0fmK-exBV_O0M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.93.2.0/24 Signature Algorithm: sha256WithRSAEncryption d4:f8:fb:70:73:6f:fc:0f:55:de:01:8f:d6:29:27:53:dd:44: dc:23:b2:37:20:e7:b0:c5:f9:8e:e4:a1:27:76:25:ec:61:6b: 13:cd:82:9d:2c:4f:5a:5c:56:cf:28:2a:4c:43:eb:22:44:1d: c0:62:26:cf:ad:6b:30:f3:8e:eb:01:2a:e5:54:25:58:f3:ee: 87:8d:c4:58:79:5a:94:c7:fb:51:f7:ed:b2:c6:7d:f1:5c:c2: 7c:ad:b8:3d:97:cf:3f:d9:10:7d:f6:21:9e:e2:a6:25:64:34: 69:e1:2c:7e:1e:cb:51:83:25:0a:71:de:2c:a5:48:e5:4b:af: df:fc:0e:ba:ff:87:d5:17:5b:4a:04:c7:92:8a:c4:c7:11:62: 42:66:66:e8:48:10:33:c5:51:13:cd:0a:df:11:5c:02:4b:86: 34:18:93:de:24:aa:67:b9:3b:56:76:4c:54:99:9f:4d:f4:4f: 5b:a6:c4:d8:10:41:f5:60:73:ee:8d:2f:25:47:19:b5:c5:3c: a5:f4:cf:81:40:7f:e8:cb:4b:c8:59:e4:21:05:9b:89:fa:fc: a1:86:52:b2:3c:14:01:ad:6d:e5:22:e9:15:a1:2a:6f:2e:35: 9e:42:95:32:1c:62:96:c3:ef:47:ce:95:c3:ec:95:4b:a6:05: 6e:30:b2:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EtwLtTIMdSz6JbQXpCxmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWRiZGU3Njc0YjA3MWQ5Mzg0ZjBkMWY5OGFmOWVjNDE1N2YzYjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbrQpHXwkq5297/6kbQJ/n/SNAsl 8XMTGUZd+KVd6VwvmwXPUJPIvgb+3hNQXjoap/eCKc1xifJ0+LnYyHG8TkNaC9tC HW8BgLvyo8C0YBj9hxQsB5Z0aUwIrdHzvFw+A06g8q/gSbZ89d0hjpXEfVs0SeR0 z6V2m7dYoHwWoTNFYAHkvB1brF9a3QdAf57GeyUS26mLESb1W/KcSI/koReSjKOU tMvZ4TS0EwYU99+scikC7AY0zTL8Ivhv3tcqlAcs/bMWx8CUnX/1sUrQQiCE4mkr WdGTA3GAESPnbwJimTti5ipf++03aWk89OZ1k7OfgGPtEM8AtVm8zyQcCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO7b3nZ0sHHZOE8NH5ivnsQVfztDMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvN3R2ZWRuU3djZGs0VHcwZm1LLWV4QlZfTzBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVV0CMA0G CSqGSIb3DQEBCwUAA4IBAQDU+Ptwc2/8D1XeAY/WKSdT3UTcI7I3IOewxfmO5KEn diXsYWsTzYKdLE9aXFbPKCpMQ+siRB3AYibPrWsw847rASrlVCVY8+6HjcRYeVqU x/tR9+2yxn3xXMJ8rbg9l88/2RB99iGe4qYlZDRp4Sx+HstRgyUKcd4spUjlS6/f /A66/4fVF1tKBMeSisTHEWJCZmboSBAzxVETzQrfEVwCS4Y0GJPeJKpnuTtWdkxU mZ9N9E9bpsTYEEH1YHPujS8lRxm1xTyl9M+BQH/oy0vIWeQhBZuJ+vyhhlKyPBQB rW3lIukVoSpvLjWeQpUyHGKWw+9HzpXD7JVLpgVuMLJH -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:36 2026 by rpki-client