This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/7VJHWleGjQ3MA6xdUVWDIgaYvkU.roa File: 7VJHWleGjQ3MA6xdUVWDIgaYvkU.roa (raw, json) Hash identifier: +MmvrOl97e3DA2vv+SK8o06jDjKb06tuUhtauO+J0DA= Subject key identifier: ED:52:47:5A:57:86:8D:0D:CC:03:AC:5D:51:55:83:22:06:98:BE:45 Certificate issuer: /CN=208de3ad18dd0ae14362d0e84dec043d379cc242 Certificate serial: 019B7F15336CE6FB3FAA205FEE2C5C83A514 Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/7VJHWleGjQ3MA6xdUVWDIgaYvkU.roa Signing time: Fri 02 Jan 2026 14:20:54 +0000 ROA not before: Fri 02 Jan 2026 14:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 212.127.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:33:6c:e6:fb:3f:aa:20:5f:ee:2c:5c:83:a5:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242 Validity Not Before: Jan 2 14:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed52475a57868d0dcc03ac5d515583220698be45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5d:d8:4c:02:45:90:df:7a:e6:a8:19:f9:86: d9:85:7d:29:1e:d8:f3:f2:f6:76:a5:2a:bf:ed:25: 03:13:e5:8d:ac:01:cd:e3:b0:4e:db:38:aa:3f:16: 65:cd:f4:b3:0c:57:aa:62:99:9a:bc:03:13:62:04: 22:70:98:df:4b:cc:ec:d9:59:cd:e8:d0:b9:61:a6: a4:42:3f:90:ff:92:20:b5:de:68:d6:b3:84:96:f7: 67:c6:2b:76:73:e2:0e:36:7a:9d:4b:df:ea:51:da: d7:e8:25:2f:b8:2d:45:a2:8f:d1:2c:81:4e:35:1c: 88:7d:6b:72:8f:d0:7d:63:b6:84:ec:9f:b6:6c:c9: ec:33:00:c9:b9:cc:be:96:ab:c0:a1:17:9e:76:33: 59:3b:b0:6e:3c:fc:6d:b3:d9:ea:8c:a3:8a:75:44: 03:00:69:42:37:9e:0e:76:1a:07:8a:0d:e2:d9:a0: b3:08:2e:6e:1b:64:9b:2c:4b:4c:a8:03:7b:b4:9c: f5:bd:d8:63:ba:e4:6c:5a:ba:da:86:c4:e6:bd:61: 21:79:9d:46:0b:cd:fe:8b:d5:9e:80:f6:d2:88:7e: 72:82:00:a1:e0:a2:97:52:87:e7:93:47:33:6f:8d: 9c:33:4d:09:c2:a4:b6:2a:c9:f6:9c:5c:b1:7c:44: a1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:52:47:5A:57:86:8D:0D:CC:03:AC:5D:51:55:83:22:06:98:BE:45 X509v3 Authority Key Identifier: keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/7VJHWleGjQ3MA6xdUVWDIgaYvkU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.127.96.0/19 Signature Algorithm: sha256WithRSAEncryption 3c:71:a7:6c:36:6d:11:30:fa:4e:63:24:4a:8a:2c:9f:da:4a: 9a:3c:aa:81:cc:4c:b8:75:84:28:5c:d3:3a:28:6e:80:4e:fa: 6b:ad:a8:e7:42:9b:e5:65:96:c4:64:27:e4:2a:25:eb:f7:c1: b1:54:f6:78:2a:18:21:9b:04:c1:00:65:ce:e8:f7:74:79:bb: 31:fd:0d:62:48:7d:d2:54:01:a4:f7:d7:dd:6a:78:77:9a:4e: b3:de:56:dc:3b:00:f0:70:44:6c:ff:84:f2:e2:f2:60:ce:9f: f8:85:7a:25:d7:41:f4:b9:47:5b:52:f4:b1:10:0c:ef:c1:e6: 64:99:4d:0d:9e:90:23:df:ae:83:9f:92:17:f2:bd:a0:3b:00: 32:06:54:43:60:86:e4:e8:81:6e:56:da:99:7c:15:9b:a0:42: 47:14:ae:4c:fd:6b:3b:77:31:12:99:c6:58:48:f9:56:e6:83: 6b:02:7a:07:fd:b1:ab:99:f5:8f:1a:1a:7d:3f:6b:59:b3:9b: 14:cc:8e:8c:c2:a8:36:46:b0:18:41:73:80:6f:15:9a:74:05: 30:77:88:84:62:36:d3:d1:eb:9b:3f:5b:c5:c0:8f:92:9e:92: 0c:df:8f:84:81:7d:eb:e9:98:28:74:bf:a0:bd:59:4b:14:9c: 5d:de:92:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FTNs5vs/qiBf7ixcg6UUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOGRlM2FkMThkZDBhZTE0MzYyZDBlODRkZWMwNDNkMzc5 Y2MyNDIwHhcNMjYwMTAyMTQyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDUyNDc1YTU3ODY4ZDBkY2MwM2FjNWQ1MTU1ODMyMjA2OThiZTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl3YTAJFkN965qgZ+YbZhX0pHtjz 8vZ2pSq/7SUDE+WNrAHN47BO2ziqPxZlzfSzDFeqYpmavAMTYgQicJjfS8zs2VnN 6NC5YaakQj+Q/5Igtd5o1rOElvdnxit2c+IONnqdS9/qUdrX6CUvuC1Foo/RLIFO NRyIfWtyj9B9Y7aE7J+2bMnsMwDJucy+lqvAoReedjNZO7BuPPxts9nqjKOKdUQD AGlCN54OdhoHig3i2aCzCC5uG2SbLEtMqAN7tJz1vdhjuuRsWrrahsTmvWEheZ1G C83+i9WegPbSiH5yggCh4KKXUofnk0czb42cM00JwqS2Ksn2nFyxfEShoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO1SR1pXho0NzAOsXVFVgyIGmL5FMB8GA1UdIwQY MBaAFCCN460Y3QrhQ2LQ6E3sBD03nMJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82MTA5NGEtOTQ2OS00Mjk5LTg5ZjIt YmRmNmU0Mjk0YzJlLzEvN1ZKSFdsZUdqUTNNQTZ4ZFVWV0RJZ2FZdmtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS82MTA5NGEtOTQ2OS00Mjk5LTg5ZjItYmRmNmU0Mjk0YzJl LzEvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1H9gMA0G CSqGSIb3DQEBCwUAA4IBAQA8cadsNm0RMPpOYyRKiiyf2kqaPKqBzEy4dYQoXNM6 KG6ATvprrajnQpvlZZbEZCfkKiXr98GxVPZ4KhghmwTBAGXO6Pd0ebsx/Q1iSH3S VAGk99fdanh3mk6z3lbcOwDwcERs/4Ty4vJgzp/4hXol10H0uUdbUvSxEAzvweZk mU0NnpAj366Dn5IX8r2gOwAyBlRDYIbk6IFuVtqZfBWboEJHFK5M/Ws7dzESmcZY SPlW5oNrAnoH/bGrmfWPGhp9P2tZs5sUzI6Mwqg2RrAYQXOAbxWadAUwd4iEYjbT 0eubP1vFwI+SnpIM34+EgX3r6ZgodL+gvVlLFJxd3pL7 -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:59 2026 by rpki-client