This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/7vUDoe6s1LP2OzcZ-cGdNkQWKlY.roa File: 7vUDoe6s1LP2OzcZ-cGdNkQWKlY.roa (raw, json) Hash identifier: yx3YzOfUIHhHutb9LKGEg18WZgYY7gydXwnOXfNMz1U= Subject key identifier: EE:F5:03:A1:EE:AC:D4:B3:F6:3B:37:19:F9:C1:9D:36:44:16:2A:56 Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d Certificate serial: 019B7E383D68EAEC0A8CF41E9CE7B7870FA7 Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/7vUDoe6s1LP2OzcZ-cGdNkQWKlY.roa Signing time: Fri 02 Jan 2026 10:19:33 +0000 ROA not before: Fri 02 Jan 2026 10:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 45.148.4.0/24 maxlen: 24 193.104.211.0/24 maxlen: 24 193.104.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:3d:68:ea:ec:0a:8c:f4:1e:9c:e7:b7:87:0f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d Validity Not Before: Jan 2 10:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eef503a1eeacd4b3f63b3719f9c19d3644162a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:67:2d:63:0d:cd:a1:d2:d1:78:a0:53:4c:b6: 27:c2:71:e1:67:63:e3:dd:20:11:44:05:9a:2c:5b: 0a:9a:3f:d0:d3:01:59:43:b6:92:10:bd:ac:08:1e: ab:30:fe:95:3c:d0:a9:bc:54:40:12:be:c7:d2:6a: 88:dd:c1:6a:19:ce:bf:80:d4:dc:a5:74:54:65:e2: 55:28:42:40:18:2b:89:97:c0:f7:84:89:23:6d:17: fd:ca:01:af:fd:8b:fc:55:f4:78:c5:8e:92:55:35: f6:7d:66:e2:18:0a:e8:e6:b1:ba:f3:21:bc:7c:6f: 2a:8c:e4:89:c8:15:f7:da:cc:9c:b3:9a:4b:1f:7f: 3e:7e:ca:04:eb:c9:64:40:1d:f7:40:4c:91:5b:58: 96:1a:c3:7e:13:0f:3e:bf:43:72:74:23:36:12:a6: ad:a9:eb:d8:32:59:b2:df:f4:bf:3d:77:5a:5d:9e: b8:54:c1:5d:61:ef:b8:9a:e1:51:09:0f:39:e1:4f: d9:d0:aa:f7:f4:57:f8:04:fd:20:32:41:48:3e:68: cf:b9:1b:ab:3a:91:f3:f0:71:01:11:35:a5:8c:7c: d3:ed:91:41:d7:bb:60:a3:6c:2d:45:74:3f:6d:f5: 96:a5:9f:7d:32:f3:f1:e1:3d:27:d6:2e:23:2e:d2: 9b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F5:03:A1:EE:AC:D4:B3:F6:3B:37:19:F9:C1:9D:36:44:16:2A:56 X509v3 Authority Key Identifier: keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/7vUDoe6s1LP2OzcZ-cGdNkQWKlY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.4.0/24 193.104.211.0/24 193.104.222.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:2f:ee:81:ad:80:46:d2:0a:6b:b1:89:e5:be:39:c8:2d:29: a4:8f:93:4e:97:c5:9a:be:70:fe:90:4f:d5:ba:e9:4c:84:2f: 06:02:ca:0f:c9:4e:6e:1e:25:b0:e1:6e:8e:5d:40:41:3c:96: 38:c5:35:76:21:c5:7f:82:c7:de:a7:ac:3a:be:cd:45:e1:32: 55:d7:93:a7:70:8b:82:04:d8:80:90:60:d5:3a:22:fc:1a:3e: 8a:3e:7c:d8:85:91:a7:a9:1c:5a:93:dd:26:8c:ae:cb:c1:7f: ec:35:cd:b0:31:f4:72:be:3c:ca:70:50:81:5d:86:a8:36:28: 9c:f6:3a:bd:c4:ea:8d:3c:08:25:a6:db:aa:fc:24:2a:c1:58: 3a:27:ef:1f:35:61:be:31:c2:dd:f0:32:ab:3e:c7:29:7f:5f: 39:a5:01:20:a9:ad:fa:b2:df:87:e8:18:09:f3:04:8c:21:4a: 12:45:8b:52:41:59:91:a5:73:46:f2:4c:df:c5:3f:3d:2c:8e: ca:ff:a3:83:e4:15:dc:26:05:6e:a2:fb:a4:3b:55:3a:a6:9c: de:2f:2d:7a:cd:6d:d3:67:74:1f:be:0c:a6:66:4a:39:d7:62: c3:b5:97:1c:c6:e9:04:d0:66:a5:a0:94:b2:d7:98:6a:ce:c1: 09:fd:a8:bd -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OD1o6uwKjPQenOe3hw+nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZmJlODQyMjQzMjcyN2QzODc0YjE1NjRiYWVhYzhhODA1 NTdiMmQwHhcNMjYwMTAyMTAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWY1MDNhMWVlYWNkNGIzZjYzYjM3MTlmOWMxOWQzNjQ0MTYyYTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WctYw3NodLReKBTTLYnwnHhZ2Pj 3SARRAWaLFsKmj/Q0wFZQ7aSEL2sCB6rMP6VPNCpvFRAEr7H0mqI3cFqGc6/gNTc pXRUZeJVKEJAGCuJl8D3hIkjbRf9ygGv/Yv8VfR4xY6SVTX2fWbiGAro5rG68yG8 fG8qjOSJyBX32sycs5pLH38+fsoE68lkQB33QEyRW1iWGsN+Ew8+v0NydCM2Eqat qevYMlmy3/S/PXdaXZ64VMFdYe+4muFRCQ854U/Z0Kr39Ff4BP0gMkFIPmjPuRur OpHz8HEBETWljHzT7ZFB17tgo2wtRXQ/bfWWpZ99MvPx4T0n1i4jLtKbcQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFO71A6HurNSz9js3GfnBnTZEFipWMB8GA1UdIwQY MBaAFMT76EIkMnJ9OHSxVkuurIqAVXstMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9iZjJkOGMtZTM4Yi00NjNhLWIyNmIt ZWNmMjIxN2Y5ODY3LzEvN3ZVRG9lNnMxTFAyT3pjWi1jR2ROa1FXS2xZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9iZjJkOGMtZTM4Yi00NjNhLWIyNmItZWNmMjIxN2Y5ODY3 LzEveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZQEAwQA wWjTAwQAwWjeMA0GCSqGSIb3DQEBCwUAA4IBAQAbL+6BrYBG0gprsYnlvjnILSmk j5NOl8WavnD+kE/VuulMhC8GAsoPyU5uHiWw4W6OXUBBPJY4xTV2IcV/gsfep6w6 vs1F4TJV15OncIuCBNiAkGDVOiL8Gj6KPnzYhZGnqRxak90mjK7LwX/sNc2wMfRy vjzKcFCBXYaoNiic9jq9xOqNPAglptuq/CQqwVg6J+8fNWG+McLd8DKrPscpf185 pQEgqa36st+H6BgJ8wSMIUoSRYtSQVmRpXNG8kzfxT89LI7K/6OD5BXcJgVuovuk O1U6ppzeLy16zW3TZ3QfvgymZko512LDtZccxukE0GaloJSy15hqzsEJ/ai9 -----END CERTIFICATE-----Generated at Wed Jan 21 07:22:14 2026 by rpki-client