This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/7g2RZeaRS9vdn7VTGlUUljooyjg.roa File: 7g2RZeaRS9vdn7VTGlUUljooyjg.roa (raw, json) Hash identifier: TDCPm1iHmXQo+Iw8VJeLJKTjPRB1MKrXpudcYi2nCl8= Subject key identifier: EE:0D:91:65:E6:91:4B:DB:DD:9F:B5:53:1A:55:14:96:3A:28:CA:38 Certificate issuer: /CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e Certificate serial: 019B77C6683D5FE0580191E9CECF28D3C4D0 Authority key identifier: 98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/7g2RZeaRS9vdn7VTGlUUljooyjg.roa Signing time: Thu 01 Jan 2026 04:17:30 +0000 ROA not before: Thu 01 Jan 2026 04:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208042 IP address blocks: 185.243.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:68:3d:5f:e0:58:01:91:e9:ce:cf:28:d3:c4:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e Validity Not Before: Jan 1 04:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee0d9165e6914bdbdd9fb5531a5514963a28ca38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0c:56:5a:f2:db:7c:4c:60:c8:07:35:a9:fd: c5:80:bd:44:cb:6e:04:8b:e8:77:ce:69:89:51:58: 6f:ac:30:85:0d:e7:99:c4:44:65:05:f0:1b:1c:af: d8:48:29:43:94:07:15:11:f5:41:41:e2:ac:62:28: ee:f5:1b:be:a6:48:68:30:33:13:7b:8a:26:9c:ab: 4e:d7:95:8c:01:64:2f:aa:77:65:0e:96:65:f0:71: da:79:e0:82:67:7e:44:5b:d3:3e:09:ff:ed:af:d8: 6a:5b:01:c7:7a:c8:cf:67:58:e9:ce:c3:0a:e6:7d: 60:9f:52:bc:27:49:40:f1:b3:2d:3f:e8:aa:17:97: 21:c0:fa:5a:c1:a4:77:65:6b:24:07:6c:7b:14:01: 20:63:71:2a:7a:11:0d:f7:7d:1f:7e:af:08:ee:b5: f7:c2:3e:59:2f:e8:47:df:11:84:e6:50:1c:17:77: 08:aa:6c:5c:ff:77:5c:59:07:69:ff:40:c8:0e:aa: ac:ba:5b:94:96:ca:77:38:39:05:77:7b:12:e5:ce: 99:04:7f:32:be:4e:f5:e1:2c:e8:1f:45:e3:a0:b9: bc:99:47:38:6e:44:86:90:9b:9d:b8:8c:25:ce:e5: 8a:fd:9b:8a:47:0c:d4:61:37:59:2e:d0:3e:17:81: 4a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:0D:91:65:E6:91:4B:DB:DD:9F:B5:53:1A:55:14:96:3A:28:CA:38 X509v3 Authority Key Identifier: keyid:98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/7g2RZeaRS9vdn7VTGlUUljooyjg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.219.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:d8:51:01:43:9e:f9:6e:40:3a:3f:12:fb:e8:f7:73:5e:30: b0:51:7b:0c:b8:4e:96:ae:f9:c0:73:29:01:24:e1:bb:33:7d: 93:2b:4d:07:e8:45:08:58:d5:01:58:59:ba:7d:8f:87:b0:6b: c4:79:07:d0:de:32:cf:89:67:3d:76:24:2e:6c:20:37:d2:07: 39:65:40:91:c4:c8:b9:13:ae:53:45:55:fd:9d:1d:18:b0:58: 77:74:a5:3f:a2:63:5f:6a:40:9a:0b:39:9e:a9:15:4e:dc:a0: 68:28:6e:52:6f:39:ec:33:c3:64:b0:f4:20:ae:ed:38:1b:53: 59:da:94:4c:23:b0:3a:b8:c1:98:71:71:00:4e:dc:39:ce:04: 57:05:27:4c:69:ab:9b:eb:ef:e9:03:bf:d5:6b:51:af:e5:da: bc:c5:23:08:4b:d8:07:aa:72:22:9a:92:ec:3e:93:27:8f:4c: ad:d3:ed:9d:e7:2c:2f:10:8a:4f:7f:7e:d3:38:ea:62:cd:d0: aa:4e:8a:ec:e9:bb:c6:3e:60:4d:f8:9a:ef:92:91:c9:2b:62: 21:5c:49:56:58:f4:86:ad:07:20:8c:79:49:1b:d0:7a:92:e6: 41:a9:7a:88:da:73:89:33:1f:8d:24:d2:0a:85:fd:6e:9a:e9: 70:cc:6f:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xmg9X+BYAZHpzs8o08TQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4YzFkMDNiNDk1MDRkMzQ0NjVkYzQwYTNkMGY5MDg2Y2Fj ZmRiOGUwHhcNMjYwMTAxMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTBkOTE2NWU2OTE0YmRiZGQ5ZmI1NTMxYTU1MTQ5NjNhMjhjYTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQxWWvLbfExgyAc1qf3FgL1Ey24E i+h3zmmJUVhvrDCFDeeZxERlBfAbHK/YSClDlAcVEfVBQeKsYiju9Ru+pkhoMDMT e4omnKtO15WMAWQvqndlDpZl8HHaeeCCZ35EW9M+Cf/tr9hqWwHHesjPZ1jpzsMK 5n1gn1K8J0lA8bMtP+iqF5chwPpawaR3ZWskB2x7FAEgY3EqehEN930ffq8I7rX3 wj5ZL+hH3xGE5lAcF3cIqmxc/3dcWQdp/0DIDqqsuluUlsp3ODkFd3sS5c6ZBH8y vk714SzoH0XjoLm8mUc4bkSGkJuduIwlzuWK/ZuKRwzUYTdZLtA+F4FKtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO4NkWXmkUvb3Z+1UxpVFJY6KMo4MB8GA1UdIwQY MBaAFJjB0DtJUE00Rl3ECj0PkIbKz9uOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU1IUU8wbFFUVFJHWGNRS1BRLVFoc3JQMjQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kNmMyNTctZjUwMS00Nzk2LWFhNjEt YzMxYmRlNTEwMDg1LzEvN2cyUlplYVJTOXZkbjdWVEdsVVVsam9veWpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9kNmMyNTctZjUwMS00Nzk2LWFhNjEtYzMxYmRlNTEwMDg1 LzEvbU1IUU8wbFFUVFJHWGNRS1BRLVFoc3JQMjQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufPbMA0G CSqGSIb3DQEBCwUAA4IBAQCf2FEBQ575bkA6PxL76PdzXjCwUXsMuE6WrvnAcykB JOG7M32TK00H6EUIWNUBWFm6fY+HsGvEeQfQ3jLPiWc9diQubCA30gc5ZUCRxMi5 E65TRVX9nR0YsFh3dKU/omNfakCaCzmeqRVO3KBoKG5SbznsM8NksPQgru04G1NZ 2pRMI7A6uMGYcXEATtw5zgRXBSdMaaub6+/pA7/Va1Gv5dq8xSMIS9gHqnIimpLs PpMnj0yt0+2d5ywvEIpPf37TOOpizdCqTors6bvGPmBN+JrvkpHJK2IhXElWWPSG rQcgjHlJG9B6kuZBqXqI2nOJMx+NJNIKhf1umulwzG8h -----END CERTIFICATE-----Generated at Tue Jan 20 04:00:41 2026 by rpki-client