This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/Atp7ou_dWLqF9yrUFBSaGu8i1NQ.roa File: Atp7ou_dWLqF9yrUFBSaGu8i1NQ.roa (raw, json) Hash identifier: iX6v9+WjPW25JV4dSQdrR9Ylqr6/LIAKembF0Rx+4SM= Subject key identifier: 02:DA:7B:A2:EF:DD:58:BA:85:F7:2A:D4:14:14:9A:1A:EF:22:D4:D4 Certificate issuer: /CN=0e43fb425bc1c352577e0a9ade5bff59c0b4c582 Certificate serial: 019C41B1BBFA20452D62045100ABAFCAFD8D Authority key identifier: 0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/Atp7ou_dWLqF9yrUFBSaGu8i1NQ.roa Signing time: Mon 09 Feb 2026 09:18:12 +0000 ROA not before: Mon 09 Feb 2026 09:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205113 IP address blocks: 80.204.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:b1:bb:fa:20:45:2d:62:04:51:00:ab:af:ca:fd:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e43fb425bc1c352577e0a9ade5bff59c0b4c582 Validity Not Before: Feb 9 09:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02da7ba2efdd58ba85f72ad414149a1aef22d4d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:70:d2:d9:6c:78:62:37:18:03:39:71:89:fc: 9c:84:b1:46:e0:b5:fd:19:36:21:a0:2d:43:05:7c: d4:50:1c:fd:a0:ac:d4:7b:5d:bb:e2:84:61:77:ab: 2b:d5:70:4a:8a:52:83:6e:8a:f0:a9:26:ed:6c:3b: b2:75:61:91:34:7d:33:2f:71:50:88:42:50:ec:15: 4b:46:61:c2:59:6d:5f:9f:c9:c7:66:ec:d1:8c:8d: 03:25:11:84:7c:0d:c0:6c:a9:9b:25:08:29:22:76: 8e:12:8a:15:dc:e2:a5:a9:7e:f3:8c:67:2c:c0:29: c1:35:82:23:3f:3c:7b:92:e0:fe:41:83:c0:05:a5: e2:8b:12:a0:90:93:2d:4c:d5:02:59:8b:3a:34:31: 27:b7:4c:f2:ef:bd:b4:c1:27:58:b5:7f:0a:47:3e: 51:15:28:bb:68:57:99:27:1d:a2:42:dd:31:df:12: 4a:4e:a8:a7:36:8f:75:f3:22:36:f4:97:80:5a:ea: b7:4c:5e:fb:a0:14:46:95:94:ce:7a:37:fb:2e:52: a1:7d:d1:18:76:1d:a5:b9:1e:eb:45:9a:3c:ab:d4: d3:75:d5:ae:4b:36:70:53:a0:f5:5c:e9:4b:a6:43: 5a:2b:61:92:8f:d0:f8:de:b6:4d:31:f5:46:02:c2: 60:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DA:7B:A2:EF:DD:58:BA:85:F7:2A:D4:14:14:9A:1A:EF:22:D4:D4 X509v3 Authority Key Identifier: keyid:0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/Atp7ou_dWLqF9yrUFBSaGu8i1NQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.204.120.0/21 Signature Algorithm: sha256WithRSAEncryption 53:56:7d:33:69:aa:06:d1:56:6b:ee:0b:ea:7a:82:16:39:38: 85:55:5e:f4:f7:88:ee:78:8f:69:09:f2:9c:6c:46:e6:e3:ea: 4a:48:6f:ce:99:02:79:b0:d1:99:eb:80:b7:be:69:cf:84:66: a8:28:09:53:ac:d0:05:b9:ef:f1:91:62:ba:e8:a5:70:4a:91: f6:7d:de:55:87:27:ca:e7:12:32:43:e1:f3:b6:36:12:ee:18: eb:e2:8f:d4:a5:5b:bb:b1:30:e9:c8:47:cc:b7:e5:2e:96:82: b2:75:fa:70:1f:08:17:35:4e:26:8d:44:7a:0f:b7:4b:39:a4: 31:b1:bf:3d:bd:91:9a:da:52:0f:db:b0:1a:5c:33:b1:9e:88: bc:e3:00:0c:ea:a1:82:24:ef:02:36:e0:2f:9c:00:5f:b3:dc: 52:59:29:ad:5f:4e:f7:81:aa:8a:94:ef:3f:37:3f:9b:6b:db: 74:7b:e6:e8:0c:1b:b4:e1:f9:17:be:57:c1:7c:0c:76:80:bb: 42:8d:5b:8e:5d:3a:2d:02:31:4a:d2:f0:65:8a:e0:34:c3:aa: ac:c7:0a:d9:96:89:03:89:eb:07:c2:23:3f:9a:92:88:ac:de: f8:3f:98:c4:dd:a8:b2:ea:6f:fc:3f:7b:ab:b3:b1:ce:4c:06: da:72:ef:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZxBsbv6IEUtYgRRAKuvyv2NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNDNmYjQyNWJjMWMzNTI1NzdlMGE5YWRlNWJmZjU5YzBi NGM1ODIwHhcNMjYwMjA5MDkxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmRhN2JhMmVmZGQ1OGJhODVmNzJhZDQxNDE0OWExYWVmMjJkNGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXDS2Wx4YjcYAzlxifychLFG4LX9 GTYhoC1DBXzUUBz9oKzUe1274oRhd6sr1XBKilKDborwqSbtbDuydWGRNH0zL3FQ iEJQ7BVLRmHCWW1fn8nHZuzRjI0DJRGEfA3AbKmbJQgpInaOEooV3OKlqX7zjGcs wCnBNYIjPzx7kuD+QYPABaXiixKgkJMtTNUCWYs6NDEnt0zy7720wSdYtX8KRz5R FSi7aFeZJx2iQt0x3xJKTqinNo918yI29JeAWuq3TF77oBRGlZTOejf7LlKhfdEY dh2luR7rRZo8q9TTddWuSzZwU6D1XOlLpkNaK2GSj9D43rZNMfVGAsJg7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFALae6Lv3Vi6hfcq1BQUmhrvItTUMB8GA1UdIwQY MBaAFA5D+0JbwcNSV34Kmt5b/1nAtMWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGtQN1FsdkJ3MUpYZmdxYTNsdl9XY0MweFlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9mZDFhNDUtMzExOC00MTFkLThlMWIt OTExZjFkZGRkNjZiLzEvQXRwN291X2RXTHFGOXlyVUZCU2FHdThpMU5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9mZDFhNDUtMzExOC00MTFkLThlMWItOTExZjFkZGRkNjZi LzEvRGtQN1FsdkJ3MUpYZmdxYTNsdl9XY0MweFlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDUMx4MA0G CSqGSIb3DQEBCwUAA4IBAQBTVn0zaaoG0VZr7gvqeoIWOTiFVV7094jueI9pCfKc bEbm4+pKSG/OmQJ5sNGZ64C3vmnPhGaoKAlTrNAFue/xkWK66KVwSpH2fd5VhyfK 5xIyQ+HztjYS7hjr4o/UpVu7sTDpyEfMt+UuloKydfpwHwgXNU4mjUR6D7dLOaQx sb89vZGa2lIP27AaXDOxnoi84wAM6qGCJO8CNuAvnABfs9xSWSmtX073gaqKlO8/ Nz+ba9t0e+boDBu04fkXvlfBfAx2gLtCjVuOXTotAjFK0vBliuA0w6qsxwrZlokD iesHwiM/mpKIrN74P5jE3aiy6m/8P3urs7HOTAbacu+h -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:03 2026 by rpki-client