This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/p7jLTkUSRNX7xVVtIjhX0ElcSkM.roa File: p7jLTkUSRNX7xVVtIjhX0ElcSkM.roa (raw, json) Hash identifier: V5+8Cu1ZSU54lkDzthadhaeHWXQzx9+t4lsqXq/ECiM= Subject key identifier: A7:B8:CB:4E:45:12:44:D5:FB:C5:55:6D:22:38:57:D0:49:5C:4A:43 Certificate issuer: /CN=8e7dc7f298bb774a726edc433cf6b03994148b54 Certificate serial: 019B7834FBAC5EA65B50EB4D402B95FBE922 Authority key identifier: 8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/p7jLTkUSRNX7xVVtIjhX0ElcSkM.roa Signing time: Thu 01 Jan 2026 06:18:16 +0000 ROA not before: Thu 01 Jan 2026 06:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206294 IP address blocks: 145.22.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:fb:ac:5e:a6:5b:50:eb:4d:40:2b:95:fb:e9:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e7dc7f298bb774a726edc433cf6b03994148b54 Validity Not Before: Jan 1 06:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7b8cb4e451244d5fbc5556d223857d0495c4a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:21:b8:03:52:87:b0:a0:3b:b0:36:03:86:fc: 36:dd:8b:32:84:df:55:55:b8:8d:e5:69:84:16:0e: 7d:2b:08:a6:5e:d2:02:ae:71:f8:bc:a9:fb:b5:6f: 1c:61:cc:9a:5c:90:4a:1a:ac:e7:c5:41:c0:cd:e8: 05:a2:c8:9d:0c:97:99:c2:4a:2f:02:99:00:d7:e1: f9:a9:5e:e8:22:8a:b2:fb:23:08:02:ac:cf:7a:70: 27:f8:25:31:74:dc:28:bd:fb:71:58:9f:98:23:0e: bb:92:49:98:7d:4e:57:4e:db:bc:1a:f8:b6:a6:92: 6d:a7:76:99:35:20:d6:68:69:f4:62:f8:42:75:6f: fa:22:96:c7:0f:f6:69:cf:6e:17:5f:0e:5d:dc:1f: 23:8b:1d:35:f0:bd:dc:20:21:cd:2f:f7:2d:14:40: 3b:c9:6c:14:b5:ff:e8:36:74:6e:20:bc:3a:ff:86: e2:47:85:68:e3:33:b4:3b:30:34:a1:da:c3:8b:f4: b3:83:99:b9:2c:32:0f:11:f5:a2:f9:10:30:d2:95: 7a:0d:12:13:da:94:78:24:df:5d:8a:e4:2b:23:d2: be:98:20:6c:3f:b0:64:dc:3b:f0:23:7b:88:21:d7: ea:10:d1:d7:fd:9b:eb:ff:3d:b3:3b:0a:bc:f3:ee: 22:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B8:CB:4E:45:12:44:D5:FB:C5:55:6D:22:38:57:D0:49:5C:4A:43 X509v3 Authority Key Identifier: keyid:8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/p7jLTkUSRNX7xVVtIjhX0ElcSkM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.22.254.0/24 Signature Algorithm: sha256WithRSAEncryption a9:7c:8d:c3:74:33:9f:40:c2:86:5d:07:2d:6d:3d:0b:aa:65: 55:6c:ad:d5:f0:8c:80:b4:17:eb:28:6b:65:24:e1:e9:28:d7: 05:da:4e:93:e0:09:db:51:de:8a:6d:68:f3:47:57:ca:46:2e: ed:38:85:dd:0b:04:45:6a:1e:71:3a:b5:90:e9:61:d7:7b:37: 0b:51:3f:46:09:56:5d:a3:1f:89:93:13:2d:4c:a9:1a:a9:25: ef:4a:a8:4f:61:9d:02:ac:16:9f:b6:40:fc:ce:0c:2b:fb:02: b8:2c:93:ce:1a:93:e2:2e:64:40:33:a3:a6:77:ff:6a:77:0e: e4:ea:f0:5b:45:23:38:03:30:4a:48:38:f5:b7:f7:bb:9d:5f: e9:ea:bb:e8:06:50:be:c0:61:da:b5:8a:83:7e:79:39:98:f6: 59:be:0f:14:72:b1:96:12:ca:a2:0d:2c:8a:81:07:8d:20:77: fa:27:53:16:b2:a2:6f:14:23:57:cc:0f:e8:65:3f:95:d6:23: b9:9c:32:05:e3:84:ce:bb:a3:29:8b:da:27:c2:c1:9a:73:a9: 64:16:ee:a1:71:2b:2a:a5:61:55:af:92:8e:1c:f2:22:16:e6: 1a:3e:97:cc:47:99:00:c3:0f:3d:fa:c9:f8:d3:d1:18:44:e3: db:70:07:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NPusXqZbUOtNQCuV++kiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlN2RjN2YyOThiYjc3NGE3MjZlZGM0MzNjZjZiMDM5OTQx NDhiNTQwHhcNMjYwMTAxMDYxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2I4Y2I0ZTQ1MTI0NGQ1ZmJjNTU1NmQyMjM4NTdkMDQ5NWM0YTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyG4A1KHsKA7sDYDhvw23YsyhN9V VbiN5WmEFg59KwimXtICrnH4vKn7tW8cYcyaXJBKGqznxUHAzegFosidDJeZwkov ApkA1+H5qV7oIoqy+yMIAqzPenAn+CUxdNwovftxWJ+YIw67kkmYfU5XTtu8Gvi2 ppJtp3aZNSDWaGn0YvhCdW/6IpbHD/Zpz24XXw5d3B8jix018L3cICHNL/ctFEA7 yWwUtf/oNnRuILw6/4biR4Vo4zO0OzA0odrDi/Szg5m5LDIPEfWi+RAw0pV6DRIT 2pR4JN9diuQrI9K+mCBsP7Bk3DvwI3uIIdfqENHX/Zvr/z2zOwq88+4ihQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKe4y05FEkTV+8VVbSI4V9BJXEpDMB8GA1UdIwQY MBaAFI59x/KYu3dKcm7cQzz2sDmUFItUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam4zSDhwaTdkMHB5YnR4RFBQYXdPWlFVaTFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMGVlNDMtMDQ2Mi00ODIyLTg0NWYt OWM3NmE0YmRiNTIzLzEvcDdqTFRrVVNSTlg3eFZWdElqaFgwRWxjU2tNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yMGVlNDMtMDQ2Mi00ODIyLTg0NWYtOWM3NmE0YmRiNTIz LzEvam4zSDhwaTdkMHB5YnR4RFBQYXdPWlFVaTFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkRb+MA0G CSqGSIb3DQEBCwUAA4IBAQCpfI3DdDOfQMKGXQctbT0LqmVVbK3V8IyAtBfrKGtl JOHpKNcF2k6T4AnbUd6KbWjzR1fKRi7tOIXdCwRFah5xOrWQ6WHXezcLUT9GCVZd ox+JkxMtTKkaqSXvSqhPYZ0CrBaftkD8zgwr+wK4LJPOGpPiLmRAM6Omd/9qdw7k 6vBbRSM4AzBKSDj1t/e7nV/p6rvoBlC+wGHatYqDfnk5mPZZvg8UcrGWEsqiDSyK gQeNIHf6J1MWsqJvFCNXzA/oZT+V1iO5nDIF44TOu6Mpi9onwsGac6lkFu6hcSsq pWFVr5KOHPIiFuYaPpfMR5kAww89+sn409EYROPbcAd/ -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:57 2026 by rpki-client