This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/7DFhLxfNsNdBG7misMM2Gd6pq98.roa File: 7DFhLxfNsNdBG7misMM2Gd6pq98.roa (raw, json) Hash identifier: 91BxkeL//UY4lGamLg4LH3uIYXXl6dNvyu0iOuqwroo= Subject key identifier: EC:31:61:2F:17:CD:B0:D7:41:1B:B9:A2:B0:C3:36:19:DE:A9:AB:DF Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579 Certificate serial: 019B7834FFEC636F77FD068DE6AB9C99C6EF Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/7DFhLxfNsNdBG7misMM2Gd6pq98.roa Signing time: Thu 01 Jan 2026 06:18:17 +0000 ROA not before: Thu 01 Jan 2026 06:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8364 IP address blocks: 195.216.96.0/19 maxlen: 19 212.126.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ff:ec:63:6f:77:fd:06:8d:e6:ab:9c:99:c6:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579 Validity Not Before: Jan 1 06:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec31612f17cdb0d7411bb9a2b0c33619dea9abdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:15:b6:f4:4f:60:c9:86:43:70:47:9d:12:63: 74:af:75:27:7f:66:e4:a4:67:7b:b5:d6:99:3f:08: fb:9e:e4:43:bb:f6:01:0c:79:1f:40:33:63:27:d0: 42:9a:f0:53:a3:5d:45:03:cb:6a:30:57:a3:d2:4c: 45:a1:0a:7d:27:a8:8d:3d:77:30:d6:62:6f:89:63: 50:fd:72:57:c7:1d:ba:99:ce:c6:05:66:36:67:58: 5b:2f:63:49:ff:9c:ff:83:2d:a6:7d:70:4e:57:b6: 9d:a4:32:55:0d:b1:f0:83:49:da:e9:75:b8:27:84: 66:d0:0c:6a:1e:bf:ad:06:0a:59:3d:2d:e9:1a:44: c0:e6:99:61:ad:5e:b8:1a:46:fa:cc:43:ec:dc:cf: f0:6b:78:f0:db:81:60:b0:c6:db:4a:c6:ed:5e:be: 21:9d:f7:c3:b2:6b:fa:d8:ec:a8:8f:a7:3f:a5:ee: 51:a9:67:e5:d2:68:0f:0e:15:48:3c:d4:08:0b:c2: b7:e5:1b:de:e6:22:9e:30:30:bf:ab:97:ba:97:d4: 82:57:5e:b8:14:63:80:b5:1b:95:9f:1f:ef:8e:3e: 9d:3b:af:ab:55:29:28:62:ce:c2:47:66:ff:fa:47: 18:68:42:f2:ce:42:81:16:18:81:2e:67:2b:02:be: b9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:31:61:2F:17:CD:B0:D7:41:1B:B9:A2:B0:C3:36:19:DE:A9:AB:DF X509v3 Authority Key Identifier: keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/7DFhLxfNsNdBG7misMM2Gd6pq98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.96.0/19 212.126.0.0/19 Signature Algorithm: sha256WithRSAEncryption 9c:97:8a:ce:22:a1:4f:1d:ec:8f:f3:c7:ce:77:91:c9:fc:93: 07:18:0e:6b:ec:0b:5b:9a:af:7a:ed:14:f4:c1:36:de:d5:3b: f8:81:5d:8e:73:4d:47:78:5b:d5:13:a2:ac:ba:4a:a9:c7:5a: 93:f4:95:22:f6:5d:18:9b:3f:96:79:d8:4b:cd:0d:23:4e:8c: ae:2f:4e:de:04:ef:64:49:dc:0d:11:40:92:e6:48:a6:44:ce: a1:3c:06:8f:ce:6a:78:d4:90:c7:7f:b6:90:13:60:dd:34:f5: 14:5f:8f:91:f5:0f:cc:39:61:95:eb:82:5d:4f:b5:9a:0b:ae: 28:92:74:d3:f9:97:9a:0c:9e:e4:d3:c7:17:f6:05:4b:a3:80: 23:6b:6d:de:7e:56:99:58:38:58:49:92:b6:45:ff:dc:1a:db: 13:16:5f:c8:4f:62:46:5a:f9:99:b8:64:1b:e5:ba:e9:52:bb: df:5e:d6:cb:94:cd:06:c0:11:35:b6:b5:48:a8:cf:61:ec:61: 14:c1:31:7f:ed:9a:62:5e:aa:51:ff:9a:e7:bc:36:d6:b1:90: 96:df:1a:9a:f0:69:5b:48:0d:5a:ba:30:66:be:6d:9e:19:eb: 21:57:9c:81:fd:c3:a9:f8:58:fa:f2:69:a0:4b:89:4a:34:17: c2:22:d4:50 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NP/sY293/QaN5qucmcbvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNjUxNjY5MmM2MzgyYjNmODNkYWU5OTFmZDg5ZGQxYjBj ZWY1NzkwHhcNMjYwMTAxMDYxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzMxNjEyZjE3Y2RiMGQ3NDExYmI5YTJiMGMzMzYxOWRlYTlhYmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhW29E9gyYZDcEedEmN0r3Unf2bk pGd7tdaZPwj7nuRDu/YBDHkfQDNjJ9BCmvBTo11FA8tqMFej0kxFoQp9J6iNPXcw 1mJviWNQ/XJXxx26mc7GBWY2Z1hbL2NJ/5z/gy2mfXBOV7adpDJVDbHwg0na6XW4 J4Rm0AxqHr+tBgpZPS3pGkTA5plhrV64Gkb6zEPs3M/wa3jw24FgsMbbSsbtXr4h nffDsmv62Oyoj6c/pe5RqWfl0mgPDhVIPNQIC8K35Rve5iKeMDC/q5e6l9SCV164 FGOAtRuVnx/vjj6dO6+rVSkoYs7CR2b/+kcYaELyzkKBFhiBLmcrAr65jwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOwxYS8XzbDXQRu5orDDNhneqavfMB8GA1UdIwQY MBaAFNxlFmksY4Kz+D2umR/YndGwzvV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0dVV2FTeGpnclA0UGE2Wkg5aWQwYkRPOVhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9jZDlmZDMtYTNlZS00ZWM1LThjNTQt MmYzODNlODVlYmMwLzEvN0RGaEx4Zk5zTmRCRzdtaXNNTTJHZDZwcTk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9jZDlmZDMtYTNlZS00ZWM1LThjNTQtMmYzODNlODVlYmMw LzEvM0dVV2FTeGpnclA0UGE2Wkg5aWQwYkRPOVhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFw9hgAwQF 1H4AMA0GCSqGSIb3DQEBCwUAA4IBAQCcl4rOIqFPHeyP88fOd5HJ/JMHGA5r7Atb mq967RT0wTbe1Tv4gV2Oc01HeFvVE6Ksukqpx1qT9JUi9l0Ymz+WedhLzQ0jToyu L07eBO9kSdwNEUCS5kimRM6hPAaPzmp41JDHf7aQE2DdNPUUX4+R9Q/MOWGV64Jd T7WaC64oknTT+ZeaDJ7k08cX9gVLo4Aja23eflaZWDhYSZK2Rf/cGtsTFl/IT2JG WvmZuGQb5brpUrvfXtbLlM0GwBE1trVIqM9h7GEUwTF/7ZpiXqpR/5rnvDbWsZCW 3xqa8GlbSA1aujBmvm2eGeshV5yB/cOp+Fj68mmgS4lKNBfCItRQ -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:34 2026 by rpki-client