This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/7ZoxkxG_xy-nsB6Jlds9cahi91Y.roa File: 7ZoxkxG_xy-nsB6Jlds9cahi91Y.roa (raw, json) Hash identifier: kKZZTt0K1VWp1lTS49LMaifr54LOAUhPDZWygbEsnV4= Subject key identifier: ED:9A:31:93:11:BF:C7:2F:A7:B0:1E:89:95:DB:3D:71:A8:62:F7:56 Certificate issuer: /CN=7d5695786f8450d1041dc88ad892cbb570d5972b Certificate serial: 019BA25EB4812A4B103868BBF43E68DDBD72 Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/7ZoxkxG_xy-nsB6Jlds9cahi91Y.roa Signing time: Fri 09 Jan 2026 10:47:54 +0000 ROA not before: Fri 09 Jan 2026 10:47:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 45.11.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:5e:b4:81:2a:4b:10:38:68:bb:f4:3e:68:dd:bd:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b Validity Not Before: Jan 9 10:47:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed9a319311bfc72fa7b01e8995db3d71a862f756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ff:8a:9d:61:4f:80:4d:21:47:e8:a6:bc:c3: b6:94:e0:e7:2b:62:21:1e:46:fa:4f:41:31:49:81: ba:dd:f8:a9:89:fa:2b:95:57:02:c8:30:c4:7d:a8: f3:bd:14:28:57:eb:2b:35:be:83:da:04:17:d6:62: da:79:f2:55:50:2b:4b:c0:dd:9b:2c:f2:90:8d:61: f5:48:0c:b8:ce:66:58:ae:1e:5d:df:52:53:59:38: df:09:8e:92:60:04:87:f8:d6:bb:ee:a2:9c:8f:d5: 54:26:15:74:4b:da:28:08:b2:32:70:18:5e:dd:cf: e8:f7:8c:f0:9b:95:ef:17:ab:b6:b4:e8:e5:d6:87: 25:60:82:6a:57:3c:b7:dd:ce:df:e2:84:4a:4e:f3: 56:8b:05:6f:84:78:d4:f1:85:07:e2:2a:38:0b:e2: 68:ce:0e:77:cf:3c:a5:f7:e0:01:1f:d6:4a:58:be: a5:5f:36:e3:2c:96:18:fa:5c:d9:08:da:90:43:af: fb:7a:d0:3c:04:4f:77:e0:36:38:ea:32:5a:0d:a1: fd:6a:2b:34:c9:1f:df:61:a5:86:51:39:89:5b:97: 9a:3a:02:fc:3d:11:b7:6f:12:5d:8b:57:b6:67:91: 9b:16:86:7d:50:5a:df:2a:c8:83:d3:2d:79:4c:d9: 11:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9A:31:93:11:BF:C7:2F:A7:B0:1E:89:95:DB:3D:71:A8:62:F7:56 X509v3 Authority Key Identifier: keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/7ZoxkxG_xy-nsB6Jlds9cahi91Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.173.0/24 Signature Algorithm: sha256WithRSAEncryption 45:03:a1:ff:a6:31:ff:33:ca:3b:b5:cf:e0:94:a2:b6:f2:36: b2:5c:8f:2e:35:17:2f:2a:bb:2a:b4:37:2d:21:92:e9:54:81: 8d:ee:16:08:d3:49:c8:55:e9:2e:0a:8b:7b:22:db:9b:5c:2b: eb:70:05:cb:1c:78:9c:d4:76:75:ac:fd:c7:92:5d:de:09:c8: 82:07:7c:20:aa:1f:24:1b:22:85:cf:be:40:40:81:39:05:1a: 73:e4:9a:3d:18:90:d6:78:ac:20:0e:14:48:c4:77:1b:5d:1c: af:7d:d3:2a:2a:27:41:a8:7a:57:48:dc:5d:96:80:6e:f5:c1: 8a:6b:84:3f:c3:e8:7e:50:a9:d4:1a:5c:01:e0:7b:ec:1c:22: 91:5c:3f:61:0a:79:c9:6f:00:ca:b0:62:ae:5d:7a:32:71:aa: 4e:2a:97:d0:a0:d1:06:60:9c:c1:82:0e:22:10:26:8a:f8:9d: 6d:78:be:d3:7e:a4:98:89:e0:8d:5c:c3:6e:8b:05:2e:50:f0: 72:6c:af:8c:7a:1d:0b:bc:28:10:08:4c:63:51:7c:10:3a:d1: fc:64:f8:cd:b3:52:fa:db:d6:a9:ae:64:85:fb:9d:08:ff:79: c5:cb:14:3e:e4:e2:ee:e8:49:60:d6:66:91:f4:27:95:4e:ae: c3:f1:4d:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuiXrSBKksQOGi79D5o3b1yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTY5NTc4NmY4NDUwZDEwNDFkYzg4YWQ4OTJjYmI1NzBk NTk3MmIwHhcNMjYwMTA5MTA0NzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDlhMzE5MzExYmZjNzJmYTdiMDFlODk5NWRiM2Q3MWE4NjJmNzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv+KnWFPgE0hR+imvMO2lODnK2Ih Hkb6T0ExSYG63fipiforlVcCyDDEfajzvRQoV+srNb6D2gQX1mLaefJVUCtLwN2b LPKQjWH1SAy4zmZYrh5d31JTWTjfCY6SYASH+Na77qKcj9VUJhV0S9ooCLIycBhe 3c/o94zwm5XvF6u2tOjl1oclYIJqVzy33c7f4oRKTvNWiwVvhHjU8YUH4io4C+Jo zg53zzyl9+ABH9ZKWL6lXzbjLJYY+lzZCNqQQ6/7etA8BE934DY46jJaDaH9ais0 yR/fYaWGUTmJW5eaOgL8PRG3bxJdi1e2Z5GbFoZ9UFrfKsiD0y15TNkRqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO2aMZMRv8cvp7AeiZXbPXGoYvdWMB8GA1UdIwQY MBaAFH1WlXhvhFDRBB3IitiSy7Vw1ZcrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZhVmVHLUVVTkVFSGNpSzJKTEx0WERWbHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zMTdhYTctZTJhZC00YTg1LWIzZDIt NjNiMzM4MDhhNmE4LzEvN1pveGt4R194eS1uc0I2SmxkczljYWhpOTFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zMTdhYTctZTJhZC00YTg1LWIzZDItNjNiMzM4MDhhNmE4 LzEvZlZhVmVHLUVVTkVFSGNpSzJKTEx0WERWbHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQutMA0G CSqGSIb3DQEBCwUAA4IBAQBFA6H/pjH/M8o7tc/glKK28jayXI8uNRcvKrsqtDct IZLpVIGN7hYI00nIVekuCot7ItubXCvrcAXLHHic1HZ1rP3Hkl3eCciCB3wgqh8k GyKFz75AQIE5BRpz5Jo9GJDWeKwgDhRIxHcbXRyvfdMqKidBqHpXSNxdloBu9cGK a4Q/w+h+UKnUGlwB4HvsHCKRXD9hCnnJbwDKsGKuXXoycapOKpfQoNEGYJzBgg4i ECaK+J1teL7TfqSYieCNXMNuiwUuUPBybK+Meh0LvCgQCExjUXwQOtH8ZPjNs1L6 29aprmSF+50I/3nFyxQ+5OLu6Elg1maR9CeVTq7D8U3c -----END CERTIFICATE-----Generated at Mon Jan 19 16:52:06 2026 by rpki-client