This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/7qKY5-kl-qaVMoRIB3RG5oNUdf0.roa File: 7qKY5-kl-qaVMoRIB3RG5oNUdf0.roa (raw, json) Hash identifier: L6u//TWO0oG/8Tdr3Tg8lfsVqZiNaM1y0Ryf8hK01sg= Subject key identifier: EE:A2:98:E7:E9:25:FA:A6:95:32:84:48:07:74:46:E6:83:54:75:FD Certificate issuer: /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05 Certificate serial: 019B797E747FFDFE3D963E37985920AD3A09 Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/7qKY5-kl-qaVMoRIB3RG5oNUdf0.roa Signing time: Thu 01 Jan 2026 12:18:09 +0000 ROA not before: Thu 01 Jan 2026 12:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211335 IP address blocks: 45.11.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:74:7f:fd:fe:3d:96:3e:37:98:59:20:ad:3a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05 Validity Not Before: Jan 1 12:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eea298e7e925faa695328448077446e6835475fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:87:22:76:dc:a2:31:2b:3d:1a:e1:4f:d4:53: 1a:c7:a3:22:31:4d:d8:08:b6:ca:d7:f7:9f:85:9a: 92:eb:4f:2a:fa:9c:f9:59:6f:d4:27:68:5a:f2:b6: 95:2a:31:59:1d:0c:02:cf:d9:8e:f5:3a:b4:c0:79: f1:92:d1:47:4f:db:89:4a:74:7d:71:9e:f2:2f:ed: ec:75:75:a4:f7:53:70:34:61:fd:1c:0b:ca:78:b6: de:7e:cd:7b:e4:60:06:b0:f6:4a:ef:2f:02:b0:ef: 96:ca:1c:95:2d:6f:8e:38:2e:5d:09:7d:89:3d:f5: 63:c2:ac:ef:ca:83:81:ab:99:b5:26:c5:0c:6c:b8: 4a:3a:1a:36:a5:9d:36:27:1d:ce:28:1a:2e:38:e6: 0e:19:62:e6:ec:87:ae:59:3b:a9:a2:26:e2:99:5b: 29:e6:92:00:92:9d:3a:89:2f:d6:8f:03:ca:ae:02: 79:31:1e:ce:2f:03:6a:9c:fc:7b:df:0d:92:9b:62: e7:65:ee:d4:e1:81:57:15:b9:c4:ba:74:4c:b8:f9: 53:70:3a:24:7f:39:ee:3c:7c:9a:c0:6d:7d:66:8f: 41:9f:45:ca:d0:ed:bb:dc:ab:94:5a:5b:7d:b0:2e: 46:9a:df:73:a8:ab:cc:1b:f3:17:0f:ba:88:2b:05: c1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A2:98:E7:E9:25:FA:A6:95:32:84:48:07:74:46:E6:83:54:75:FD X509v3 Authority Key Identifier: keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/7qKY5-kl-qaVMoRIB3RG5oNUdf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.41.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:55:28:f9:5e:27:29:fa:ed:e5:24:82:8d:0b:f0:54:b9:58: 39:63:dc:14:93:23:a0:4a:75:aa:1f:64:90:e5:90:e9:a7:3f: fc:d3:7d:1f:d4:4a:d1:a1:10:22:6e:13:fb:93:6c:47:d9:d0: c1:98:0c:d2:72:91:21:a4:52:6a:cd:05:22:c4:a0:1b:ef:b3: f8:bb:a7:ad:c2:7b:4a:73:2e:ab:5d:dd:47:b2:ab:91:33:0d: 91:b5:bd:ff:8a:bc:74:d3:34:e6:10:ba:f1:e3:03:af:ff:b8: e6:a9:2a:09:0e:f5:0e:76:9f:a3:fb:d0:2e:c1:26:df:e5:f2: be:c3:8f:1d:c2:8d:98:f1:78:74:c5:0d:84:47:6c:fe:02:a7: 38:cc:01:44:88:e1:7a:fa:08:63:30:d9:18:01:bc:6c:1b:83: e6:02:57:4c:63:56:cd:fb:95:89:e5:1f:aa:f9:25:f8:8b:85: e1:94:bd:f2:46:19:e6:7a:cf:02:ed:63:0b:4f:32:f0:91:1d: 4b:d1:51:23:23:b4:6f:80:3c:0e:64:75:f0:63:cb:69:d8:31: 2b:f3:18:13:51:bc:6f:28:25:9f:e2:0d:ec:73:db:ec:fc:9a: d0:f7:a6:fa:9f:47:5b:f0:7e:e3:c6:60:ed:a7:0b:f4:ed:2c: ed:45:da:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fnR//f49lj43mFkgrToJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YjIxYzg5YmM3ZTJiMjE0MDY3ZjMwNzA3YTRhMDNkYzM0 NmVlMDUwHhcNMjYwMTAxMTIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWEyOThlN2U5MjVmYWE2OTUzMjg0NDgwNzc0NDZlNjgzNTQ3NWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYcidtyiMSs9GuFP1FMax6MiMU3Y CLbK1/efhZqS608q+pz5WW/UJ2ha8raVKjFZHQwCz9mO9Tq0wHnxktFHT9uJSnR9 cZ7yL+3sdXWk91NwNGH9HAvKeLbefs175GAGsPZK7y8CsO+WyhyVLW+OOC5dCX2J PfVjwqzvyoOBq5m1JsUMbLhKOho2pZ02Jx3OKBouOOYOGWLm7IeuWTupoibimVsp 5pIAkp06iS/WjwPKrgJ5MR7OLwNqnPx73w2Sm2LnZe7U4YFXFbnEunRMuPlTcDok fznuPHyawG19Zo9Bn0XK0O273KuUWlt9sC5Gmt9zqKvMG/MXD7qIKwXBbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO6imOfpJfqmlTKESAd0RuaDVHX9MB8GA1UdIwQY MBaAFMSyHIm8fishQGfzBwekoD3DRu4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODkt MDYzYjQwMTc0NTk3LzEvN3FLWTUta2wtcWFWTW9SSUIzUkc1b05VZGYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODktMDYzYjQwMTc0NTk3 LzEveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQspMA0G CSqGSIb3DQEBCwUAA4IBAQBsVSj5Xicp+u3lJIKNC/BUuVg5Y9wUkyOgSnWqH2SQ 5ZDppz/8030f1ErRoRAibhP7k2xH2dDBmAzScpEhpFJqzQUixKAb77P4u6etwntK cy6rXd1HsquRMw2Rtb3/irx00zTmELrx4wOv/7jmqSoJDvUOdp+j+9AuwSbf5fK+ w48dwo2Y8Xh0xQ2ER2z+Aqc4zAFEiOF6+ghjMNkYAbxsG4PmAldMY1bN+5WJ5R+q +SX4i4XhlL3yRhnmes8C7WMLTzLwkR1L0VEjI7RvgDwOZHXwY8tp2DEr8xgTUbxv KCWf4g3sc9vs/JrQ96b6n0db8H7jxmDtpwv07SztRdpn -----END CERTIFICATE-----Generated at Tue Jan 27 04:23:24 2026 by rpki-client