This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/7eoO73qePtRFhoL5aoJ-lw5N7YQ.roa File: 7eoO73qePtRFhoL5aoJ-lw5N7YQ.roa (raw, json) Hash identifier: N75hWXU4tOfgUVgJErnnaShCfMougCipyHaXnV/7ZoQ= Subject key identifier: ED:EA:0E:EF:7A:9E:3E:D4:45:86:82:F9:6A:82:7E:97:0E:4D:ED:84 Certificate issuer: /CN=e8f239a70043734172d26378bf2106ae72552187 Certificate serial: 019B76EAB17F758799B45F804245ED25FABA Authority key identifier: E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/7eoO73qePtRFhoL5aoJ-lw5N7YQ.roa Signing time: Thu 01 Jan 2026 00:17:30 +0000 ROA not before: Thu 01 Jan 2026 00:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43846 IP address blocks: 37.0.64.0/21 maxlen: 24 79.140.144.0/20 maxlen: 24 79.140.151.0/24 maxlen: 24 185.12.40.0/22 maxlen: 24 185.12.43.0/24 maxlen: 24 185.80.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b1:7f:75:87:99:b4:5f:80:42:45:ed:25:fa:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8f239a70043734172d26378bf2106ae72552187 Validity Not Before: Jan 1 00:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edea0eef7a9e3ed4458682f96a827e970e4ded84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:34:77:a3:19:5a:00:9c:d6:3c:5f:59:a8:ce: b0:9b:d1:9f:9a:39:79:04:62:41:34:16:89:21:b4: 01:23:49:b8:fc:45:44:41:10:ea:17:12:a4:f1:c6: bc:0b:80:3e:89:72:b8:83:22:39:b1:a7:4e:7a:80: ba:38:25:56:8a:3f:27:b5:be:57:a6:a9:64:c0:64: 2b:f0:fd:6f:6c:ba:0e:b0:f6:f2:9b:82:a1:45:88: 60:e9:a1:df:dd:1a:80:cf:c2:3f:ec:12:49:07:23: 54:0e:a3:7d:db:7c:51:84:00:02:e3:9b:d8:cc:40: cc:1c:81:6b:67:5e:aa:e2:45:97:e4:01:e9:48:71: 9f:4c:ca:42:ad:1a:ce:26:a3:34:f5:8d:db:0a:2c: 2b:4c:57:74:d3:24:0f:d7:b9:57:86:25:ae:2c:2c: 70:c4:1d:48:b3:e0:16:91:35:c4:1c:26:8b:a4:57: dd:6b:37:bd:36:75:2f:5b:0d:8c:1a:b2:68:4c:27: 40:71:a5:96:63:44:01:b8:38:d5:fb:8b:12:a5:45: 45:2d:df:aa:bb:2d:62:43:a9:76:0d:f8:22:78:5f: f3:1f:05:b1:0e:a8:09:10:15:b8:19:13:0d:10:5c: 58:e9:1b:db:0b:e4:9a:50:4b:f5:2c:df:04:86:a6: 6a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:EA:0E:EF:7A:9E:3E:D4:45:86:82:F9:6A:82:7E:97:0E:4D:ED:84 X509v3 Authority Key Identifier: keyid:E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/7eoO73qePtRFhoL5aoJ-lw5N7YQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.0.64.0/21 79.140.144.0/20 185.12.40.0/22 185.80.96.0/22 Signature Algorithm: sha256WithRSAEncryption 07:0d:2e:27:52:f0:15:67:c7:e7:58:a0:d4:d8:3c:4b:fc:60: 08:9b:91:c8:c2:2f:43:e3:85:45:fe:bd:2a:64:11:ec:66:e2: af:5a:95:19:5f:22:c3:fa:16:dc:90:2d:15:38:dc:a0:60:5b: c5:4e:be:fb:6e:ff:d2:a0:b3:38:62:4a:71:27:13:b3:17:63: dd:5a:5f:2f:70:f6:22:82:d3:32:bd:a5:b9:89:4f:2a:14:5b: 34:42:30:88:a8:7e:53:84:86:d6:7a:6a:4d:27:92:6b:25:86: 02:8e:a1:2b:bc:8e:ab:08:d4:a4:ec:60:72:92:f4:41:36:17: 62:03:66:03:85:e4:c1:c8:cc:3d:da:8d:d4:20:3a:c8:7c:02: a5:27:0d:f7:9f:89:ba:5d:91:57:d4:ca:66:ee:51:6c:91:ab: 07:0c:74:e3:66:c4:fc:f9:a1:51:e1:d5:87:a6:79:85:2d:7c: bb:fc:b0:d6:b8:77:3e:ef:b0:5a:b4:ae:e0:f1:ae:4a:4e:33: f9:2b:54:c4:92:7d:0d:35:24:82:e6:23:9c:63:76:48:2a:5f: e4:d1:8b:8b:17:19:52:fa:d2:27:5e:74:da:c7:0c:1a:bd:77: b8:9b:db:c9:86:5d:88:9d:fc:4b:28:82:57:88:ca:b9:49:ac: 4a:e2:20:48 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt26rF/dYeZtF+AQkXtJfq6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZjIzOWE3MDA0MzczNDE3MmQyNjM3OGJmMjEwNmFlNzI1 NTIxODcwHhcNMjYwMTAxMDAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGVhMGVlZjdhOWUzZWQ0NDU4NjgyZjk2YTgyN2U5NzBlNGRlZDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDR3oxlaAJzWPF9ZqM6wm9Gfmjl5 BGJBNBaJIbQBI0m4/EVEQRDqFxKk8ca8C4A+iXK4gyI5sadOeoC6OCVWij8ntb5X pqlkwGQr8P1vbLoOsPbym4KhRYhg6aHf3RqAz8I/7BJJByNUDqN923xRhAAC45vY zEDMHIFrZ16q4kWX5AHpSHGfTMpCrRrOJqM09Y3bCiwrTFd00yQP17lXhiWuLCxw xB1Is+AWkTXEHCaLpFfdaze9NnUvWw2MGrJoTCdAcaWWY0QBuDjV+4sSpUVFLd+q uy1iQ6l2DfgieF/zHwWxDqgJEBW4GRMNEFxY6RvbC+SaUEv1LN8EhqZq3QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFO3qDu96nj7URYaC+WqCfpcOTe2EMB8GA1UdIwQY MBaAFOjyOacAQ3NBctJjeL8hBq5yVSGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlBJNXB3QkRjMEZ5MG1ONHZ5RUdybkpWSVljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy80ZTkwMmEtMjk5Zi00ZGE3LTlhNmQt NjY5YmQxMTNhMTc4LzEvN2VvTzczcWVQdFJGaG9MNWFvSi1sdzVON1lRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy80ZTkwMmEtMjk5Zi00ZGE3LTlhNmQtNjY5YmQxMTNhMTc4 LzEvNlBJNXB3QkRjMEZ5MG1ONHZ5RUdybkpWSVljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDJQBAAwQE T4yQAwQCuQwoAwQCuVBgMA0GCSqGSIb3DQEBCwUAA4IBAQAHDS4nUvAVZ8fnWKDU 2DxL/GAIm5HIwi9D44VF/r0qZBHsZuKvWpUZXyLD+hbckC0VONygYFvFTr77bv/S oLM4YkpxJxOzF2PdWl8vcPYigtMyvaW5iU8qFFs0QjCIqH5ThIbWempNJ5JrJYYC jqErvI6rCNSk7GBykvRBNhdiA2YDheTByMw92o3UIDrIfAKlJw33n4m6XZFX1Mpm 7lFskasHDHTjZsT8+aFR4dWHpnmFLXy7/LDWuHc+77BatK7g8a5KTjP5K1TEkn0N NSSC5iOcY3ZIKl/k0YuLFxlS+tInXnTaxwwavXe4m9vJhl2InfxLKIJXiMq5SaxK 4iBI -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:36 2026 by rpki-client