This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/1-r7_fUEpPJ7LUjRWlFNkAxAOLSs.roa File: 1-r7_fUEpPJ7LUjRWlFNkAxAOLSs.roa (raw, json) Hash identifier: QA7GMjXjaXuTwdxfPne5d0+pqwIBxuYEEIDse7vYIO0= Subject key identifier: FA:BE:FF:7D:41:29:3C:9E:CB:52:34:56:94:53:64:03:10:0E:2D:2B Certificate issuer: /CN=7a350d024af01f8eaf125717caa03aafad184e1d Certificate serial: 019B7DC9E7B5D61B4DEB3B3B7C57EF0EAA34 Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/1-r7_fUEpPJ7LUjRWlFNkAxAOLSs.roa Signing time: Fri 02 Jan 2026 08:19:02 +0000 ROA not before: Fri 02 Jan 2026 08:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197211 IP address blocks: 109.104.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:e7:b5:d6:1b:4d:eb:3b:3b:7c:57:ef:0e:aa:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d Validity Not Before: Jan 2 08:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fabeff7d41293c9ecb52345694536403100e2d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:09:5c:9b:a1:6b:f3:84:ad:83:ce:81:b6:e6: 74:7b:3a:fb:75:24:69:2b:90:d4:50:63:fd:65:19: ce:e2:97:40:12:bd:f4:ef:c4:97:6d:dd:45:52:db: 52:d6:aa:89:79:84:6a:96:6a:29:8e:a6:7d:7e:6e: 40:ef:40:2b:74:1e:99:77:2f:0c:c9:f6:95:4b:cc: ce:99:00:04:b5:43:c0:bc:16:ed:36:04:a3:fa:97: b9:47:00:6a:33:5f:51:e3:ae:78:33:5d:a5:c5:95: b6:31:ee:91:9a:47:97:f7:87:d2:d9:19:49:77:79: 12:93:43:fc:c1:63:1e:5c:f4:a4:5f:42:18:5b:c0: 0d:24:06:79:a9:94:ff:cd:ca:8e:47:00:ba:fa:a5: 01:92:a6:73:28:5e:5a:91:21:e4:1b:bb:f2:10:b7: 0f:f2:e8:2c:b1:95:08:ac:8d:9d:39:c6:35:7f:46: 7b:3a:fe:03:dc:51:f9:12:8d:d1:22:8b:a5:0a:20: 84:fc:92:a0:c8:af:9b:98:f1:ec:2c:8d:34:1a:a5: 58:31:a1:f9:de:ac:f0:78:cc:cb:9c:49:68:1d:a6: 02:8d:7a:67:79:aa:db:f4:79:b9:51:12:09:1f:dd: 0f:d2:8d:eb:1f:c9:ce:94:03:91:16:e2:cd:3f:97: 8f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BE:FF:7D:41:29:3C:9E:CB:52:34:56:94:53:64:03:10:0E:2D:2B X509v3 Authority Key Identifier: keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/1-r7_fUEpPJ7LUjRWlFNkAxAOLSs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.104.246.0/24 Signature Algorithm: sha256WithRSAEncryption a7:60:d6:6b:12:36:d8:ff:d8:7d:0a:91:f4:40:3e:4f:42:da: 43:3d:5b:8c:f8:5d:14:a9:15:68:42:9b:3c:31:ca:0c:3d:10: a2:fc:9c:6c:02:ba:64:70:31:d8:43:d0:95:f9:d5:e5:c3:90: 36:99:51:ff:30:fc:2d:b6:5b:9b:62:ae:97:17:e2:95:0e:66: 67:5b:6a:49:df:61:5a:e0:cf:1c:b7:bf:83:10:28:67:0b:28: bc:7d:14:ca:42:d5:15:f4:b1:e2:0b:58:89:b5:03:9a:5f:f7: dd:d2:29:09:e1:b2:38:62:01:5b:00:9f:cc:01:2d:ab:c6:ed: 2f:21:66:1b:09:00:52:2f:ac:b0:db:ca:4e:ec:34:9e:0f:cd: bc:5d:e2:3d:45:37:8b:7e:9f:4f:60:17:7b:74:6c:26:6b:9c: f3:2a:46:4f:6d:e5:10:55:42:6f:90:7a:95:a3:aa:1e:9a:cb: 6e:1c:7d:00:12:53:4a:4a:ba:50:1b:9d:de:3f:5d:f0:44:9e: f4:29:78:a7:46:76:51:dd:1b:d6:9e:e0:f9:8d:2e:e3:de:43: c5:59:93:0b:ad:40:e5:87:93:a2:b7:d8:6c:dc:2d:5e:a0:54: 25:3d:f4:1b:45:da:1b:9b:68:4f:75:00:21:c0:90:62:12:91: 58:9a:60:7f -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9yee11htN6zs7fFfvDqo0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMzUwZDAyNGFmMDFmOGVhZjEyNTcxN2NhYTAzYWFmYWQx ODRlMWQwHhcNMjYwMTAyMDgxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWJlZmY3ZDQxMjkzYzllY2I1MjM0NTY5NDUzNjQwMzEwMGUyZDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQlcm6Fr84Stg86BtuZ0ezr7dSRp K5DUUGP9ZRnO4pdAEr3078SXbd1FUttS1qqJeYRqlmopjqZ9fm5A70ArdB6Zdy8M yfaVS8zOmQAEtUPAvBbtNgSj+pe5RwBqM19R4654M12lxZW2Me6RmkeX94fS2RlJ d3kSk0P8wWMeXPSkX0IYW8ANJAZ5qZT/zcqORwC6+qUBkqZzKF5akSHkG7vyELcP 8ugssZUIrI2dOcY1f0Z7Ov4D3FH5Eo3RIoulCiCE/JKgyK+bmPHsLI00GqVYMaH5 3qzweMzLnEloHaYCjXpnearb9Hm5URIJH90P0o3rH8nOlAORFuLNP5ePMQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPq+/31BKTyey1I0VpRTZAMQDi0rMB8GA1UdIwQY MBaAFHo1DQJK8B+OrxJXF8qgOq+tGE4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWpVTkFrcndINDZ2RWxjWHlxQTZyNjBZVGgwLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi83OTY2YWUtOWM4OC00M2U5LWI4OTkt ZDAwM2U1NmZlNzUzLzEvMS1yN19mVUVwUEo3TFVqUldsRk5rQXhBT0xTcy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMmIvNzk2NmFlLTljODgtNDNlOS1iODk5LWQwMDNlNTZmZTc1 My8xL2VqVU5Ba3J3SDQ2dkVsY1h5cUE2cjYwWVRoMC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG1o9jAN BgkqhkiG9w0BAQsFAAOCAQEAp2DWaxI22P/YfQqR9EA+T0LaQz1bjPhdFKkVaEKb PDHKDD0QovycbAK6ZHAx2EPQlfnV5cOQNplR/zD8LbZbm2KulxfilQ5mZ1tqSd9h WuDPHLe/gxAoZwsovH0UykLVFfSx4gtYibUDml/33dIpCeGyOGIBWwCfzAEtq8bt LyFmGwkAUi+ssNvKTuw0ng/NvF3iPUU3i36fT2AXe3RsJmuc8ypGT23lEFVCb5B6 laOqHprLbhx9ABJTSkq6UBud3j9d8ESe9Cl4p0Z2Ud0b1p7g+Y0u495DxVmTC61A 5YeTorfYbNwtXqBUJT30G0XaG5toT3UAIcCQYhKRWJpgfw== -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:08 2026 by rpki-client