This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/0KNfQnYQ6OcbM3T_AT3Muh7GC10.roa File: 0KNfQnYQ6OcbM3T_AT3Muh7GC10.roa (raw, json) Hash identifier: PjhLMPqDKMFvKvIdwwT6W9RFU/bl/Jjyt27qCybKXQU= Subject key identifier: D0:A3:5F:42:76:10:E8:E7:1B:33:74:FF:01:3D:CC:BA:1E:C6:0B:5D Certificate issuer: /CN=7df7cfd6c8826a67f642a373d131955308d9c1ca Certificate serial: 019B7AC788B7C615AD8DA6A88A4BC75A2AE6 Authority key identifier: 7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/0KNfQnYQ6OcbM3T_AT3Muh7GC10.roa Signing time: Thu 01 Jan 2026 18:17:35 +0000 ROA not before: Thu 01 Jan 2026 18:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205654 IP address blocks: 152.89.64.0/24 maxlen: 24 185.211.20.0/22 maxlen: 24 195.234.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:88:b7:c6:15:ad:8d:a6:a8:8a:4b:c7:5a:2a:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df7cfd6c8826a67f642a373d131955308d9c1ca Validity Not Before: Jan 1 18:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0a35f427610e8e71b3374ff013dccba1ec60b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e3:30:40:23:86:29:aa:ae:be:f0:86:93:e1: 57:10:27:d7:03:bb:7e:5a:23:83:db:e3:3d:ec:ad: ac:54:41:43:1d:42:b3:00:f3:67:6c:b4:fa:c5:88: a8:07:8f:24:80:a2:16:70:1d:16:2c:93:de:c0:48: 0a:b1:fb:25:95:19:2a:fc:d8:9e:63:94:69:33:4f: ba:8c:3a:6f:36:1e:54:24:97:33:0f:48:32:c6:7c: f7:92:42:8c:92:f2:c7:89:12:fc:13:b4:51:b5:e1: 9a:f3:8f:70:21:73:0f:2c:aa:00:cb:ec:fc:8e:c6: 74:71:62:45:d7:48:57:f7:09:10:af:da:d2:6a:c9: bb:db:b1:aa:a2:65:70:b7:69:a4:bd:d4:01:ab:7d: 8e:12:04:02:b2:8f:dc:6f:48:ad:83:ad:3d:3d:d9: 70:bc:10:4a:31:0a:d4:00:d7:38:c7:cc:6f:0e:4b: 14:db:71:aa:b9:be:0a:46:87:70:08:05:ed:80:20: 76:af:4e:45:00:14:6c:ed:17:72:f7:61:e9:06:bd: 29:d2:ec:d3:19:6a:45:76:c5:14:0f:b7:4f:ad:72: d3:7a:05:e1:ec:0d:33:55:b2:a8:fd:6f:26:d2:c9: 5f:05:50:91:11:cc:ad:dd:5f:51:89:2e:1d:25:57: 04:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A3:5F:42:76:10:E8:E7:1B:33:74:FF:01:3D:CC:BA:1E:C6:0B:5D X509v3 Authority Key Identifier: keyid:7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/0KNfQnYQ6OcbM3T_AT3Muh7GC10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.64.0/24 185.211.20.0/22 195.234.95.0/24 Signature Algorithm: sha256WithRSAEncryption ae:3b:02:20:ff:fb:56:ee:f1:5d:66:62:cc:13:fb:ce:53:52: 2d:58:c3:b5:97:de:74:11:b8:6f:f6:ef:4c:45:ea:26:1f:d0: fa:76:9a:2e:70:cf:66:21:2f:bc:70:21:98:56:cb:e0:c7:04: e0:02:24:24:73:8e:00:73:f7:7d:90:df:7c:ec:a7:3c:ff:d2: 7c:69:64:e1:ef:80:14:20:87:10:03:b1:47:37:a2:65:10:29: 2b:a7:6c:4d:db:c4:4c:12:d2:15:52:d6:27:a3:ca:08:78:98: ff:b8:09:cc:08:1d:56:b8:14:9e:b8:27:1d:df:e1:2d:e2:ec: 55:cd:7a:d7:d0:52:0f:5d:4f:6e:bd:dc:89:a6:90:38:83:90: 4f:b1:51:57:5f:c4:1b:7c:af:eb:03:b2:12:1f:a4:59:10:d6: e6:5e:ae:cd:0d:2d:9f:04:72:b4:c5:b3:3b:c7:1d:d9:7e:6a: 18:e1:46:ea:f5:f3:15:da:18:87:2b:ad:ef:1c:12:5b:21:1b: 0a:f4:d1:d1:55:fd:f6:a6:75:2c:1f:3a:72:8b:87:63:16:2e: f6:e7:17:6e:98:37:9b:00:b5:ac:ec:0b:a6:25:06:17:c3:26: 84:ab:71:b0:27:31:49:3c:a9:7c:c3:1d:64:c6:0e:17:42:c4: c5:85:c8:ab -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6x4i3xhWtjaaoikvHWirmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjdjZmQ2Yzg4MjZhNjdmNjQyYTM3M2QxMzE5NTUzMDhk OWMxY2EwHhcNMjYwMTAxMTgxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGEzNWY0Mjc2MTBlOGU3MWIzMzc0ZmYwMTNkY2NiYTFlYzYwYjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+MwQCOGKaquvvCGk+FXECfXA7t+ WiOD2+M97K2sVEFDHUKzAPNnbLT6xYioB48kgKIWcB0WLJPewEgKsfsllRkq/Nie Y5RpM0+6jDpvNh5UJJczD0gyxnz3kkKMkvLHiRL8E7RRteGa849wIXMPLKoAy+z8 jsZ0cWJF10hX9wkQr9rSasm727GqomVwt2mkvdQBq32OEgQCso/cb0itg609Pdlw vBBKMQrUANc4x8xvDksU23Gqub4KRodwCAXtgCB2r05FABRs7Rdy92HpBr0p0uzT GWpFdsUUD7dPrXLTegXh7A0zVbKo/W8m0slfBVCREcyt3V9RiS4dJVcE6wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNCjX0J2EOjnGzN0/wE9zLoexgtdMB8GA1UdIwQY MBaAFH33z9bIgmpn9kKjc9ExlVMI2cHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZmUDFzaUNhbWYyUXFOejBUR1ZVd2pad2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi83YTc4NzEtMDhmMy00NzU3LWE5ZjAt YmYxYzVjYzM2YjY2LzEvMEtOZlFuWVE2T2NiTTNUX0FUM011aDdHQzEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi83YTc4NzEtMDhmMy00NzU3LWE5ZjAtYmYxYzVjYzM2YjY2 LzEvZmZmUDFzaUNhbWYyUXFOejBUR1ZVd2pad2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAmFlAAwQC udMUAwQAw+pfMA0GCSqGSIb3DQEBCwUAA4IBAQCuOwIg//tW7vFdZmLME/vOU1It WMO1l950Ebhv9u9MReomH9D6dpoucM9mIS+8cCGYVsvgxwTgAiQkc44Ac/d9kN98 7Kc8/9J8aWTh74AUIIcQA7FHN6JlECkrp2xN28RMEtIVUtYno8oIeJj/uAnMCB1W uBSeuCcd3+Et4uxVzXrX0FIPXU9uvdyJppA4g5BPsVFXX8QbfK/rA7ISH6RZENbm Xq7NDS2fBHK0xbM7xx3ZfmoY4Ubq9fMV2hiHK63vHBJbIRsK9NHRVf32pnUsHzpy i4djFi725xdumDebALWs7AumJQYXwyaEq3GwJzFJPKl8wx1kxg4XQsTFhcir -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:47 2026 by rpki-client