This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/7mIA3Luhg39GWRjtxd0G6cNoiNM.roa File: 7mIA3Luhg39GWRjtxd0G6cNoiNM.roa (raw, json) Hash identifier: 9RHRZDIR3eag+ugNv6r1XDMS8XWYJr2tgc2FPO+4l3Y= Subject key identifier: EE:62:00:DC:BB:A1:83:7F:46:59:18:ED:C5:DD:06:E9:C3:68:88:D3 Certificate issuer: /CN=2fca6592c0fe34fabefcc43719287b844d47ca03 Certificate serial: 019B797F06054E5C37EDBA8BEC3DC08F0A74 Authority key identifier: 2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/7mIA3Luhg39GWRjtxd0G6cNoiNM.roa Signing time: Thu 01 Jan 2026 12:18:46 +0000 ROA not before: Thu 01 Jan 2026 12:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60415 IP address blocks: 185.31.92.0/22 maxlen: 22 185.31.92.0/24 maxlen: 24 185.31.93.0/24 maxlen: 24 185.31.94.0/24 maxlen: 24 185.31.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:06:05:4e:5c:37:ed:ba:8b:ec:3d:c0:8f:0a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fca6592c0fe34fabefcc43719287b844d47ca03 Validity Not Before: Jan 1 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee6200dcbba1837f465918edc5dd06e9c36888d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:db:38:46:7f:24:bd:8c:b2:29:c6:37:58:4f: 9b:e8:9b:46:4f:55:06:51:d8:c3:58:66:cf:b5:9f: b6:ac:97:26:66:7a:63:80:70:15:4e:ef:9b:1d:71: 9d:ec:c6:c2:09:4d:ca:da:a4:f5:d0:0d:09:f2:cd: ef:12:03:61:48:fb:7e:91:4d:29:94:00:36:19:1a: 25:59:86:0f:4b:ef:0f:37:68:b3:e3:ab:2b:57:fb: 7c:36:43:44:67:f9:ce:95:b1:e1:5b:c1:48:1f:54: 37:8c:de:90:42:15:ab:ea:a8:c6:fb:ba:50:2c:92: 58:13:da:1b:4b:6f:c8:55:9c:af:c0:a0:b2:86:4c: 31:14:54:12:83:0b:33:4b:d6:a3:86:93:b5:b9:1b: 89:2b:65:1b:53:f5:db:23:86:6b:4d:e9:11:bb:36: 05:78:f1:61:e9:ec:1a:e8:27:46:1e:87:27:b3:6f: ba:0d:25:fc:60:e2:8d:aa:93:fd:67:16:60:ac:c5: 61:67:f7:78:f2:c5:fe:27:bc:ff:03:11:2b:80:c2: 47:fa:f4:22:4e:60:d6:02:4a:45:e6:2c:ea:62:6a: 43:16:cc:59:a9:bf:e8:1b:4a:96:ef:6f:1e:ef:5c: 87:2b:d3:61:94:0e:aa:bb:d3:88:d2:d4:ea:4f:e9: 61:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:62:00:DC:BB:A1:83:7F:46:59:18:ED:C5:DD:06:E9:C3:68:88:D3 X509v3 Authority Key Identifier: keyid:2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/7mIA3Luhg39GWRjtxd0G6cNoiNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.31.92.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:0e:a4:4f:39:b3:7e:1b:7d:43:00:40:4c:f3:01:99:02:e2: c0:bf:1f:39:7a:9e:68:64:1f:e2:c5:e2:cc:b8:35:3f:ca:00: f9:c2:69:26:98:c0:b1:55:58:c6:29:25:89:db:c6:23:49:2d: 2a:45:74:cc:1d:fa:8a:32:76:82:8c:2f:90:bb:b8:c4:15:ba: 38:1e:c2:da:cc:45:01:82:a3:33:ed:8f:15:3b:12:98:e5:50: 15:48:ad:08:1d:51:ed:06:5e:29:30:22:80:bc:01:c5:60:cb: a1:1a:59:69:37:9f:b6:81:aa:7a:2a:df:07:dc:70:52:0a:8b: b0:5d:0a:0e:d2:99:be:9c:17:a1:7b:b7:bf:11:ec:1b:19:68: 60:33:a6:c4:de:20:6a:d4:05:80:0e:43:b5:4c:76:58:06:80: 26:db:ae:ae:66:2c:ee:c8:38:72:d7:0c:a3:f3:67:a2:b9:bd: 45:4a:63:76:29:21:62:d9:50:74:c1:95:86:9e:45:8d:5b:1a: 22:89:ed:76:ac:97:13:91:b0:3c:84:16:ae:dd:cb:a3:d3:51: f2:95:2a:97:32:2c:65:f1:03:85:28:22:a8:12:0a:82:08:4b: 05:d3:8e:d5:9a:85:19:b8:d4:8f:b5:ce:29:3e:ff:98:97:89: a6:21:fb:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fwYFTlw37bqL7D3Ajwp0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmY2E2NTkyYzBmZTM0ZmFiZWZjYzQzNzE5Mjg3Yjg0NGQ0 N2NhMDMwHhcNMjYwMTAxMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTYyMDBkY2JiYTE4MzdmNDY1OTE4ZWRjNWRkMDZlOWMzNjg4OGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNs4Rn8kvYyyKcY3WE+b6JtGT1UG UdjDWGbPtZ+2rJcmZnpjgHAVTu+bHXGd7MbCCU3K2qT10A0J8s3vEgNhSPt+kU0p lAA2GRolWYYPS+8PN2iz46srV/t8NkNEZ/nOlbHhW8FIH1Q3jN6QQhWr6qjG+7pQ LJJYE9obS2/IVZyvwKCyhkwxFFQSgwszS9ajhpO1uRuJK2UbU/XbI4ZrTekRuzYF ePFh6ewa6CdGHocns2+6DSX8YOKNqpP9ZxZgrMVhZ/d48sX+J7z/AxErgMJH+vQi TmDWAkpF5izqYmpDFsxZqb/oG0qW728e71yHK9NhlA6qu9OI0tTqT+lhfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO5iANy7oYN/RlkY7cXdBunDaIjTMB8GA1UdIwQY MBaAFC/KZZLA/jT6vvzENxkoe4RNR8oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDhwbGtzRC1OUHEtX01RM0dTaDdoRTFIeWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83YmY2ODktODJmYy00ODE2LThlY2Ut MWVjZDk5MThiM2E2LzEvN21JQTNMdWhnMzlHV1JqdHhkMEc2Y05vaU5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi83YmY2ODktODJmYy00ODE2LThlY2UtMWVjZDk5MThiM2E2 LzEvTDhwbGtzRC1OUHEtX01RM0dTaDdoRTFIeWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuR9cMA0G CSqGSIb3DQEBCwUAA4IBAQBKDqRPObN+G31DAEBM8wGZAuLAvx85ep5oZB/ixeLM uDU/ygD5wmkmmMCxVVjGKSWJ28YjSS0qRXTMHfqKMnaCjC+Qu7jEFbo4HsLazEUB gqMz7Y8VOxKY5VAVSK0IHVHtBl4pMCKAvAHFYMuhGllpN5+2gap6Kt8H3HBSCouw XQoO0pm+nBehe7e/EewbGWhgM6bE3iBq1AWADkO1THZYBoAm266uZizuyDhy1wyj 82eiub1FSmN2KSFi2VB0wZWGnkWNWxoiie12rJcTkbA8hBau3cuj01HylSqXMixl 8QOFKCKoEgqCCEsF047VmoUZuNSPtc4pPv+Yl4mmIfsh -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:44 2026 by rpki-client