This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/r7cKixH3TdWYvxaPAQWsrvQ0hGo.roa File: r7cKixH3TdWYvxaPAQWsrvQ0hGo.roa (raw, json) Hash identifier: 32j+tbL6tHhdIao29pkYwJtz2jR2ax5EQIkmfU8MT1g= Subject key identifier: AF:B7:0A:8B:11:F7:4D:D5:98:BF:16:8F:01:05:AC:AE:F4:34:84:6A Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 019B7F159D8F4A78725EEC743724CB743325 Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/r7cKixH3TdWYvxaPAQWsrvQ0hGo.roa Signing time: Fri 02 Jan 2026 14:21:21 +0000 ROA not before: Fri 02 Jan 2026 14:21:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401838 IP address blocks: 46.182.207.0/24 maxlen: 24 85.208.46.0/24 maxlen: 24 193.149.179.0/24 maxlen: 24 194.179.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:9d:8f:4a:78:72:5e:ec:74:37:24:cb:74:33:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: Jan 2 14:21:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afb70a8b11f74dd598bf168f0105acaef434846a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8d:99:44:7c:8c:e5:bb:51:18:d2:91:63:22: 29:0d:a2:e3:1f:2a:b1:ac:ca:9d:b3:05:f8:5c:88: d3:6e:a6:de:f9:db:e2:eb:67:a8:2b:8f:23:04:72: f5:73:3a:ea:20:9e:eb:d4:7c:bc:b4:65:00:d3:aa: 31:6d:8d:a0:14:3c:c3:ef:d5:28:d8:e9:83:1c:65: 44:b0:33:72:eb:e0:29:55:1c:7d:88:fe:09:7f:9f: f1:6e:47:33:a3:99:2d:26:58:51:52:c4:f7:5e:df: 53:44:0c:42:86:13:c8:73:fb:07:6b:50:8f:7a:53: ce:a6:63:b6:73:a0:f2:58:fc:2a:fd:b6:c4:ca:67: 21:6b:86:bc:87:25:2d:ef:bd:df:66:21:b7:4e:3d: 39:6d:3d:b6:4e:63:fd:a6:13:f5:f2:ec:ac:35:b3: c8:e4:02:ba:87:74:6f:e0:d4:f0:d8:71:24:20:c1: fd:7e:70:0d:33:f2:7e:a9:f1:8d:c7:ba:88:3b:7f: 5a:27:37:53:f9:af:2c:37:cc:0b:95:34:00:0e:a2: 9f:a9:17:2d:0e:5f:74:5c:e0:f2:94:aa:8b:48:48: d3:46:43:70:8b:ae:39:22:43:39:53:10:01:37:0b: b6:24:ea:74:0e:c4:aa:e2:d6:98:00:f2:b0:69:4a: df:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B7:0A:8B:11:F7:4D:D5:98:BF:16:8F:01:05:AC:AE:F4:34:84:6A X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/r7cKixH3TdWYvxaPAQWsrvQ0hGo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.182.207.0/24 85.208.46.0/24 193.149.179.0/24 194.179.136.0/23 Signature Algorithm: sha256WithRSAEncryption 22:b8:8e:32:50:2f:77:6a:15:36:92:40:65:0e:df:b4:17:70: 9f:db:59:d9:34:26:e5:5c:93:8b:f2:a0:e1:8f:23:09:01:6d: 3e:a4:f8:88:a1:39:a5:86:8d:7e:0d:09:b3:07:49:cb:21:e4: 5e:bb:9c:67:13:4b:78:fd:b5:4d:ab:7a:54:33:8e:43:69:86: 4f:0e:ae:51:e9:9c:d9:6b:61:12:bf:43:0d:30:2f:9d:30:ea: 0c:00:d0:99:f5:e4:8c:6a:72:a6:29:27:f1:b1:37:3a:5e:9a: f3:1c:ea:49:1c:67:db:10:f4:70:2d:44:5a:26:d1:68:b6:80: 6c:bd:a4:f1:b1:e3:7e:d3:7b:d8:41:2d:f3:b3:3c:48:0f:d9: c4:0f:22:00:fc:c2:4b:5b:a0:98:82:f9:7e:ce:f8:a0:ef:1f: 10:d3:71:33:39:fb:39:94:10:63:3a:6a:2f:42:9a:12:f4:8d: 24:8d:b5:88:a4:f3:63:ef:47:f3:9a:ce:69:50:7a:f7:1a:de: 95:7c:e9:92:e5:d9:d5:06:af:51:c0:8d:6f:11:7c:fc:14:13: 07:92:a7:ae:ea:2e:93:fc:94:91:a5:16:8b:0d:0a:c1:b5:17: 67:7c:ba:8d:4a:3a:6d:3b:c0:58:9a:dc:dc:40:1e:c8:1a:45: db:14:2b:30 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/FZ2PSnhyXux0NyTLdDMlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjYwMTAyMTQyMTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmI3MGE4YjExZjc0ZGQ1OThiZjE2OGYwMTA1YWNhZWY0MzQ4NDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl42ZRHyM5btRGNKRYyIpDaLjHyqx rMqdswX4XIjTbqbe+dvi62eoK48jBHL1czrqIJ7r1Hy8tGUA06oxbY2gFDzD79Uo 2OmDHGVEsDNy6+ApVRx9iP4Jf5/xbkczo5ktJlhRUsT3Xt9TRAxChhPIc/sHa1CP elPOpmO2c6DyWPwq/bbEymcha4a8hyUt773fZiG3Tj05bT22TmP9phP18uysNbPI 5AK6h3Rv4NTw2HEkIMH9fnANM/J+qfGNx7qIO39aJzdT+a8sN8wLlTQADqKfqRct Dl90XODylKqLSEjTRkNwi645IkM5UxABNwu2JOp0DsSq4taYAPKwaUrf5wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFK+3CosR903VmL8WjwEFrK70NIRqMB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvcjdjS2l4SDNUZFdZdnhhUEFRV3NydlEwaEdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALrbPAwQA VdAuAwQAwZWzAwQBwrOIMA0GCSqGSIb3DQEBCwUAA4IBAQAiuI4yUC93ahU2kkBl Dt+0F3Cf21nZNCblXJOL8qDhjyMJAW0+pPiIoTmlho1+DQmzB0nLIeReu5xnE0t4 /bVNq3pUM45DaYZPDq5R6ZzZa2ESv0MNMC+dMOoMANCZ9eSManKmKSfxsTc6Xprz HOpJHGfbEPRwLURaJtFotoBsvaTxseN+03vYQS3zszxID9nEDyIA/MJLW6CYgvl+ zvig7x8Q03EzOfs5lBBjOmovQpoS9I0kjbWIpPNj70fzms5pUHr3Gt6VfOmS5dnV Bq9RwI1vEXz8FBMHkqeu6i6T/JSRpRaLDQrBtRdnfLqNSjptO8BYmtzcQB7IGkXb FCsw -----END CERTIFICATE-----Generated at Wed Jan 21 05:18:05 2026 by rpki-client