This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/7nfjUKMCV_0dkRD9QIxhQ1BPufY.roa File: 7nfjUKMCV_0dkRD9QIxhQ1BPufY.roa (raw, json) Hash identifier: gulW2Fam69TrlFiG88xoJ7S5EpFW5hwd8HZdAINgZRw= Subject key identifier: EE:77:E3:50:A3:02:57:FD:1D:91:10:FD:40:8C:61:43:50:4F:B9:F6 Certificate issuer: /CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6 Certificate serial: 019B7E390C350007FC83612846526BA52D03 Authority key identifier: 51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/7nfjUKMCV_0dkRD9QIxhQ1BPufY.roa Signing time: Fri 02 Jan 2026 10:20:26 +0000 ROA not before: Fri 02 Jan 2026 10:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206982 IP address blocks: 185.170.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:0c:35:00:07:fc:83:61:28:46:52:6b:a5:2d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6 Validity Not Before: Jan 2 10:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee77e350a30257fd1d9110fd408c6143504fb9f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:72:0c:dd:e2:ce:53:d7:1b:73:a6:73:eb:c2: 76:c5:1a:0e:b2:39:09:9e:9e:4c:4c:91:a1:18:67: 57:12:e7:16:c1:e8:0e:84:a4:3f:ac:42:40:da:5a: 22:3e:4f:37:f5:a7:7c:f2:c9:96:a7:38:ff:16:a2: a1:7c:1e:18:69:b5:01:ae:bc:e4:f9:74:1b:ec:1b: 13:c0:e4:96:5a:f7:f0:39:4f:60:c3:7f:6a:6b:6c: 7f:d6:0e:1b:ae:3b:5e:7d:ec:c5:56:39:a2:f6:4a: 54:2f:4a:2d:c0:dd:ab:9b:aa:6a:78:f1:31:aa:4b: 8f:6e:2e:69:28:b0:8e:e9:a9:87:ba:be:75:fe:99: 21:1b:4f:35:0d:a6:8b:de:00:cb:d7:d5:f1:8d:12: 8e:27:da:80:56:34:4c:0a:6d:d4:e4:2c:dd:ab:6f: b9:16:75:ff:d0:f8:44:d1:d3:1e:b4:c2:2f:59:c1: 99:3e:93:5f:84:bc:b9:1e:69:2d:12:0c:00:02:01: 0a:f5:0a:8c:bf:ef:52:45:6b:bb:8e:5c:09:c1:c5: 71:29:b5:e3:3f:ae:44:61:7f:e7:fe:4d:7f:cc:78: f5:66:fe:0d:56:df:7d:c7:d6:e7:fd:a2:08:6b:b9: 94:ae:5b:9c:65:4d:75:59:70:f7:8b:92:d5:c6:32: f1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:77:E3:50:A3:02:57:FD:1D:91:10:FD:40:8C:61:43:50:4F:B9:F6 X509v3 Authority Key Identifier: keyid:51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/7nfjUKMCV_0dkRD9QIxhQ1BPufY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.170.4.0/24 Signature Algorithm: sha256WithRSAEncryption a2:0c:f4:2b:b3:3d:43:56:7b:bd:0e:6b:48:a6:2e:bf:19:23: 4f:82:19:2d:96:f2:ec:03:5e:cc:aa:9d:b6:da:4e:2c:70:24: da:3c:7a:60:96:83:ed:52:45:40:b0:aa:b7:3b:51:2f:c7:e9: 69:b3:2c:2b:9e:d7:b2:25:26:99:90:cf:b9:66:9e:a1:3f:97: 5e:40:f6:9e:34:fb:5d:64:7b:0c:75:86:e4:1e:f9:ff:02:ec: 2a:bc:a0:17:e7:e4:59:b2:20:a4:53:f7:74:ef:9f:43:82:2a: 3b:11:93:90:21:49:c6:dc:71:97:0a:7b:08:d2:0e:fe:f5:bf: e5:d1:b4:8b:8f:70:f1:ca:94:d2:a0:ff:4f:44:57:6f:0b:ed: ac:f7:b1:bd:49:6c:a2:24:8c:0e:e0:10:6a:f0:38:e0:43:ca: af:2e:18:20:05:bf:92:a8:6c:52:1f:d1:08:e5:98:39:1b:36: 0e:23:99:05:ea:55:dd:57:f0:6d:87:4f:27:72:e4:02:bc:3c: 81:21:cf:75:58:80:ff:df:8c:a0:14:c3:7e:dc:95:ba:5b:38: 0b:9e:b6:02:86:a1:55:23:08:ec:3d:b8:cc:f7:5e:1a:e1:90: ec:4a:81:6d:b4:3b:bc:f8:3b:f7:f8:cb:34:07:aa:4f:58:97: 80:d2:b6:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OQw1AAf8g2EoRlJrpS0DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjJjNDAxY2U1YzllODgxY2Q5YTNiZThlZmVjNjAwMjJk YTBlYjYwHhcNMjYwMTAyMTAyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTc3ZTM1MGEzMDI1N2ZkMWQ5MTEwZmQ0MDhjNjE0MzUwNGZiOWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3IM3eLOU9cbc6Zz68J2xRoOsjkJ np5MTJGhGGdXEucWwegOhKQ/rEJA2loiPk839ad88smWpzj/FqKhfB4YabUBrrzk +XQb7BsTwOSWWvfwOU9gw39qa2x/1g4brjtefezFVjmi9kpUL0otwN2rm6pqePEx qkuPbi5pKLCO6amHur51/pkhG081DaaL3gDL19XxjRKOJ9qAVjRMCm3U5Czdq2+5 FnX/0PhE0dMetMIvWcGZPpNfhLy5HmktEgwAAgEK9QqMv+9SRWu7jlwJwcVxKbXj P65EYX/n/k1/zHj1Zv4NVt99x9bn/aIIa7mUrlucZU11WXD3i5LVxjLxSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO5341CjAlf9HZEQ/UCMYUNQT7n2MB8GA1UdIwQY MBaAFFGyxAHOXJ6IHNmjvo7+xgAi2g62MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJMRUFjNWNub2djMmFPLWp2N0dBQ0xhRHJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83OTRmMzYtOWQyYS00MWJkLTkyOGMt OTRkMWIxZDE2Yjg1LzEvN25malVLTUNWXzBka1JEOVFJeGhRMUJQdWZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS83OTRmMzYtOWQyYS00MWJkLTkyOGMtOTRkMWIxZDE2Yjg1 LzEvVWJMRUFjNWNub2djMmFPLWp2N0dBQ0xhRHJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaoEMA0G CSqGSIb3DQEBCwUAA4IBAQCiDPQrsz1DVnu9DmtIpi6/GSNPghktlvLsA17Mqp22 2k4scCTaPHpgloPtUkVAsKq3O1Evx+lpsywrnteyJSaZkM+5Zp6hP5deQPaeNPtd ZHsMdYbkHvn/AuwqvKAX5+RZsiCkU/d0759Dgio7EZOQIUnG3HGXCnsI0g7+9b/l 0bSLj3DxypTSoP9PRFdvC+2s97G9SWyiJIwO4BBq8DjgQ8qvLhggBb+SqGxSH9EI 5Zg5GzYOI5kF6lXdV/Bth08ncuQCvDyBIc91WID/34ygFMN+3JW6WzgLnrYChqFV IwjsPbjM914a4ZDsSoFttDu8+Dv3+Ms0B6pPWJeA0raA -----END CERTIFICATE-----Generated at Sat Jan 10 22:50:50 2026 by rpki-client