This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/7SmXzQd-nWaNe8t8rqOA7438J_s.roa File: 7SmXzQd-nWaNe8t8rqOA7438J_s.roa (raw, json) Hash identifier: RMY9iFIYUbgR/WmLppHu9PswGGc4qk7Roiy4Bmlgw3s= Subject key identifier: ED:29:97:CD:07:7E:9D:66:8D:7B:CB:7C:AE:A3:80:EF:8D:FC:27:FB Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 019B7AC7EA27F6287B3E6AEB8B96D51E98C9 Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/7SmXzQd-nWaNe8t8rqOA7438J_s.roa Signing time: Thu 01 Jan 2026 18:18:00 +0000 ROA not before: Thu 01 Jan 2026 18:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63018 IP address blocks: 80.174.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 18:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ea:27:f6:28:7b:3e:6a:eb:8b:96:d5:1e:98:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Jan 1 18:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed2997cd077e9d668d7bcb7caea380ef8dfc27fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:42:77:85:e3:2e:ce:ad:7a:80:56:4d:09:60: 7b:2b:05:f9:e1:c5:61:fa:50:84:fd:99:55:51:69: 56:cf:cb:af:48:7e:86:06:4f:0e:4b:00:94:a5:ca: f0:78:78:1e:d8:47:06:c3:8e:d1:10:77:4e:85:fb: 0d:70:ac:de:3b:7c:04:d9:c8:e6:97:f2:4c:27:20: e5:03:0d:ea:14:8e:ee:89:de:18:54:8b:c8:8f:e1: fc:16:e5:ba:ad:6b:0e:0d:50:9c:17:4d:fd:8c:d1: 4f:55:29:23:40:d8:c2:be:30:69:a6:95:68:99:7d: 6a:c2:de:59:83:ec:2a:f1:9b:23:0f:5a:b8:ec:e9: 5f:63:67:ac:93:97:10:48:58:24:d7:23:25:b7:15: cb:f4:53:4b:ba:f4:4a:84:62:99:a2:7c:ea:5e:5d: 8f:11:91:2b:01:eb:04:26:5a:66:a8:d1:67:99:18: 90:70:39:1a:19:9f:4e:dd:b3:52:40:9e:30:5f:18: 90:20:99:ab:a7:22:60:ba:e4:41:c0:a3:f5:dc:1c: b8:c7:3a:89:cb:25:71:e3:a6:13:06:4d:43:f3:5a: 47:17:d1:b3:31:20:cc:62:4d:c1:a9:34:72:46:46: 74:13:e6:d4:59:ac:a8:b5:68:01:83:00:96:24:bd: d8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:29:97:CD:07:7E:9D:66:8D:7B:CB:7C:AE:A3:80:EF:8D:FC:27:FB X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/7SmXzQd-nWaNe8t8rqOA7438J_s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.174.251.0/24 Signature Algorithm: sha256WithRSAEncryption cc:c1:47:e8:93:b3:ff:41:3f:b2:a3:aa:56:1b:4b:e7:5d:12: 22:4e:d5:b1:d8:72:ee:10:b5:6c:83:79:6b:9a:2b:7c:d3:a0: 47:f9:20:ee:60:cb:bf:a4:31:25:8d:e9:09:15:e8:45:75:d6: c2:32:76:49:d9:39:d4:41:7f:3d:a8:53:9b:5c:3f:06:d8:52: cc:72:b0:be:44:81:9f:c3:f7:15:59:4e:64:af:9a:4c:30:da: c2:87:05:dc:55:86:27:db:20:fc:71:2c:59:02:35:c1:b4:fc: ec:35:07:23:ca:d3:6b:68:f7:95:75:28:f8:43:ae:86:d7:d0: a3:bc:50:4f:72:e7:42:f6:d8:6b:16:4a:dc:0c:1e:c5:4f:65: 9f:98:83:99:26:7f:c0:3b:d9:66:09:3f:79:24:5c:44:1c:51: 40:38:15:d6:2b:cb:f0:c1:10:66:ee:1e:d5:a5:27:16:95:26: b0:a1:26:d8:8c:f2:b3:26:2e:89:d1:d6:86:8f:81:33:db:25: 1e:8c:8e:1e:8d:4e:4c:91:67:a9:53:25:81:e9:33:2e:b7:d8: 9a:09:a3:29:22:5b:28:19:79:ab:90:c2:26:97:b0:ca:ae:f9: fb:a4:69:ab:e4:3f:34:8d:ec:a8:c2:0d:a3:93:db:4b:6e:8b: 4b:2f:ff:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x+on9ih7Pmrri5bVHpjJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjYwMTAxMTgxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDI5OTdjZDA3N2U5ZDY2OGQ3YmNiN2NhZWEzODBlZjhkZmMyN2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EJ3heMuzq16gFZNCWB7KwX54cVh +lCE/ZlVUWlWz8uvSH6GBk8OSwCUpcrweHge2EcGw47REHdOhfsNcKzeO3wE2cjm l/JMJyDlAw3qFI7uid4YVIvIj+H8FuW6rWsODVCcF039jNFPVSkjQNjCvjBpppVo mX1qwt5Zg+wq8ZsjD1q47OlfY2esk5cQSFgk1yMltxXL9FNLuvRKhGKZonzqXl2P EZErAesEJlpmqNFnmRiQcDkaGZ9O3bNSQJ4wXxiQIJmrpyJguuRBwKP13By4xzqJ yyVx46YTBk1D81pHF9GzMSDMYk3BqTRyRkZ0E+bUWayotWgBgwCWJL3Y9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO0pl80Hfp1mjXvLfK6jgO+N/Cf7MB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEvN1NtWHpRZC1uV2FOZTh0OHJxT0E3NDM4Sl9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUK77MA0G CSqGSIb3DQEBCwUAA4IBAQDMwUfok7P/QT+yo6pWG0vnXRIiTtWx2HLuELVsg3lr mit806BH+SDuYMu/pDEljekJFehFddbCMnZJ2TnUQX89qFObXD8G2FLMcrC+RIGf w/cVWU5kr5pMMNrChwXcVYYn2yD8cSxZAjXBtPzsNQcjytNraPeVdSj4Q66G19Cj vFBPcudC9thrFkrcDB7FT2WfmIOZJn/AO9lmCT95JFxEHFFAOBXWK8vwwRBm7h7V pScWlSawoSbYjPKzJi6J0daGj4Ez2yUejI4ejU5MkWepUyWB6TMut9iaCaMpIlso GXmrkMIml7DKrvn7pGmr5D80jeyowg2jk9tLbotLL/8S -----END CERTIFICATE-----Generated at Wed Jan 21 02:31:51 2026 by rpki-client