This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/7kzK7-E42Pa8w63nDviF_cLjzRw.roa File: 7kzK7-E42Pa8w63nDviF_cLjzRw.roa (raw, json) Hash identifier: UZPrhRmZER1+q3579qQlJmn/mR5/oV526WWY7+wNVgw= Subject key identifier: EE:4C:CA:EF:E1:38:D8:F6:BC:C3:AD:E7:0E:F8:85:FD:C2:E3:CD:1C Certificate issuer: /CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184 Certificate serial: 019B7AC7C71967D0F4EA7F225B27EB485D31 Authority key identifier: DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/7kzK7-E42Pa8w63nDviF_cLjzRw.roa Signing time: Thu 01 Jan 2026 18:17:51 +0000 ROA not before: Thu 01 Jan 2026 18:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202193 IP address blocks: 37.200.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c7:19:67:d0:f4:ea:7f:22:5b:27:eb:48:5d:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184 Validity Not Before: Jan 1 18:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee4ccaefe138d8f6bcc3ade70ef885fdc2e3cd1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cd:32:43:6d:4d:c3:fc:99:fe:0c:86:72:ef: 37:cd:e4:9e:c9:02:27:d4:e3:c7:22:32:ea:0e:96: 71:18:c8:4d:29:91:4c:80:71:3e:d0:cd:19:41:98: 73:1f:e7:7a:af:5b:ca:75:5c:69:0f:ba:58:53:65: a5:90:71:d2:08:36:aa:11:f0:b8:ea:b7:39:c6:88: 3e:b3:75:72:a2:f0:ef:49:08:e4:18:22:ad:a3:e6: 96:36:f6:46:ef:dc:de:28:38:41:d7:6e:d5:89:c2: 7a:74:27:38:26:90:a0:cc:4d:67:56:91:50:6e:f7: f2:36:40:9c:be:63:3d:2b:84:44:d3:51:ad:7b:04: 7c:ef:29:de:a5:bd:8f:dc:d0:43:3c:4f:e8:a6:02: aa:66:17:e5:bc:01:b2:fe:90:ea:f5:74:89:b7:ef: 6a:7f:57:3d:80:19:0b:86:a7:41:42:ac:94:d9:22: d1:31:be:73:9b:a7:82:c0:86:6b:2c:e8:60:2f:87: ba:5e:62:30:3b:3b:c0:e6:ca:0c:8a:50:29:02:88: 23:db:25:10:3e:fe:67:74:b5:a5:94:3e:e4:66:58: 10:e3:44:37:d0:c2:e2:e6:a1:18:b4:be:eb:63:bd: 4d:c1:8c:36:8b:0d:48:64:22:f4:d7:3d:ce:6d:f2: 2e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4C:CA:EF:E1:38:D8:F6:BC:C3:AD:E7:0E:F8:85:FD:C2:E3:CD:1C X509v3 Authority Key Identifier: keyid:DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/7kzK7-E42Pa8w63nDviF_cLjzRw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.200.80.0/22 Signature Algorithm: sha256WithRSAEncryption 29:a9:08:7e:3c:62:33:3a:7f:5b:8a:73:d3:0b:ba:0a:62:51: 82:58:45:81:bc:b1:29:d5:7f:d2:16:15:8d:f5:e0:2b:b6:20: 0b:8f:e0:c8:c1:f5:47:f0:0f:57:c8:63:9e:40:86:53:c4:8b: cc:bf:82:ca:b5:d0:7f:4c:03:fb:af:d1:85:2d:c5:bd:93:dc: 71:fd:cb:e6:f4:eb:7e:ad:22:c4:c4:32:7c:e7:03:67:3b:8b: 21:d4:ad:2a:db:fc:b5:a5:60:c0:f6:f9:f9:a0:3f:9e:66:ef: ac:a2:08:48:39:23:80:05:2c:a2:71:71:87:97:06:d2:1d:5b: 35:9c:1b:19:1c:ad:49:90:28:1c:6b:79:02:3a:a4:fa:d5:a5: 93:e7:9b:6c:32:54:63:45:ba:d7:d4:d9:b7:0d:1e:4c:ae:2d: ab:56:09:23:45:e2:fd:92:f6:69:cb:ce:f0:e2:16:76:3c:f5: 4f:bf:3d:6b:24:e7:2f:9d:79:1c:8a:cc:20:2d:c8:85:7b:08: 2c:2c:39:6d:c0:6c:ab:1e:48:e8:5b:33:d5:ab:f2:43:bb:b6: f8:87:de:e8:b8:10:bf:b3:a6:1c:16:73:52:ac:d9:c6:36:9c: 4f:a2:24:76:92:7e:b9:0e:b3:44:2e:2b:e4:6c:e0:54:25:50: 32:f3:19:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x8cZZ9D06n8iWyfrSF0xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiNDZjY2Y1ZjhhNWZlNDRmNGJmZDliYTY2YmE1MTI0NmRh OGIxODQwHhcNMjYwMTAxMTgxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTRjY2FlZmUxMzhkOGY2YmNjM2FkZTcwZWY4ODVmZGMyZTNjZDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM0yQ21Nw/yZ/gyGcu83zeSeyQIn 1OPHIjLqDpZxGMhNKZFMgHE+0M0ZQZhzH+d6r1vKdVxpD7pYU2WlkHHSCDaqEfC4 6rc5xog+s3VyovDvSQjkGCKto+aWNvZG79zeKDhB127VicJ6dCc4JpCgzE1nVpFQ bvfyNkCcvmM9K4RE01GtewR87ynepb2P3NBDPE/opgKqZhflvAGy/pDq9XSJt+9q f1c9gBkLhqdBQqyU2SLRMb5zm6eCwIZrLOhgL4e6XmIwOzvA5soMilApAogj2yUQ Pv5ndLWllD7kZlgQ40Q30MLi5qEYtL7rY71NwYw2iw1IZCL01z3ObfIuGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO5Myu/hONj2vMOt5w74hf3C480cMB8GA1UdIwQY MBaAFNtGzPX4pf5E9L/Zuma6USRtqLGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjBiTTlmaWxfa1QwdjltNlpycFJKRzJvc1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9mNzJhMWUtNmFkYi00MzAyLWEwZTgt ZDQyYTgxYjgxZTIzLzEvN2t6SzctRTQyUGE4dzYzbkR2aUZfY0xqelJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9mNzJhMWUtNmFkYi00MzAyLWEwZTgtZDQyYTgxYjgxZTIz LzEvMjBiTTlmaWxfa1QwdjltNlpycFJKRzJvc1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJchQMA0G CSqGSIb3DQEBCwUAA4IBAQApqQh+PGIzOn9binPTC7oKYlGCWEWBvLEp1X/SFhWN 9eArtiALj+DIwfVH8A9XyGOeQIZTxIvMv4LKtdB/TAP7r9GFLcW9k9xx/cvm9Ot+ rSLExDJ85wNnO4sh1K0q2/y1pWDA9vn5oD+eZu+soghIOSOABSyicXGHlwbSHVs1 nBsZHK1JkCgca3kCOqT61aWT55tsMlRjRbrX1Nm3DR5Mri2rVgkjReL9kvZpy87w 4hZ2PPVPvz1rJOcvnXkciswgLciFewgsLDltwGyrHkjoWzPVq/JDu7b4h97ouBC/ s6YcFnNSrNnGNpxPoiR2kn65DrNELivkbOBUJVAy8xkC -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:30 2026 by rpki-client