This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/7AAV3mKGg9Way3lu5gGhcc5W9hw.roa File: 7AAV3mKGg9Way3lu5gGhcc5W9hw.roa (raw, json) Hash identifier: j9RrNmTKqQe3dwEgBwPH35f7bGq6O6nZwvPLbSykKgw= Subject key identifier: EC:00:15:DE:62:86:83:D5:9A:CB:79:6E:E6:01:A1:71:CE:56:F6:1C Certificate issuer: /CN=0af1238100370a2c05fb06800afde6906daaf2d8 Certificate serial: 019B7F814D45118FE6CD56AB167024F571A6 Authority key identifier: 0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/7AAV3mKGg9Way3lu5gGhcc5W9hw.roa Signing time: Fri 02 Jan 2026 16:18:58 +0000 ROA not before: Fri 02 Jan 2026 16:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51682 IP address blocks: 213.232.96.0/23 maxlen: 23 213.232.96.0/24 maxlen: 24 213.232.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:4d:45:11:8f:e6:cd:56:ab:16:70:24:f5:71:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af1238100370a2c05fb06800afde6906daaf2d8 Validity Not Before: Jan 2 16:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec0015de628683d59acb796ee601a171ce56f61c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:aa:2f:17:f4:4c:6f:5f:02:01:f3:c4:76:49: 49:2f:51:c7:9f:a5:a1:c7:e9:54:5b:b4:55:fa:cb: 66:f5:40:b0:1c:8f:90:07:09:9e:5f:ac:9f:0b:00: 3f:7b:82:99:6a:32:ec:ff:d3:c8:f4:a2:ee:63:96: 0f:48:00:d5:d3:c0:3a:d5:12:fa:c2:74:8c:45:bc: 61:3b:9c:a4:65:62:0f:06:83:c3:1f:97:7b:d2:8e: ff:61:8e:da:25:35:b5:a0:e4:5d:49:18:2d:f0:60: 2d:1e:ff:7e:e2:26:63:3f:81:e8:fd:4b:64:0f:29: 98:be:99:43:d8:3b:1d:59:c6:fc:4b:d7:01:d1:c5: 30:4b:a6:db:f9:8e:93:18:1b:8e:eb:bd:57:fd:dd: 1a:69:c4:36:83:0b:0d:88:a5:9b:54:a0:bb:07:54: 14:c6:6a:64:a8:69:3a:e4:eb:2a:ad:c7:65:e1:40: 0d:b5:7a:c8:0b:de:18:89:c5:32:69:b4:da:4d:8e: 38:47:93:ad:c9:ee:b9:55:b4:5a:5a:34:b4:8e:1f: 3a:1c:df:a6:da:ab:73:21:74:7e:55:bb:ba:20:08: 66:e0:19:d6:5b:43:f4:bf:f1:fc:60:b3:51:d1:39: 05:dd:88:ca:b6:87:3d:17:0e:fa:09:03:0b:8d:eb: 05:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:00:15:DE:62:86:83:D5:9A:CB:79:6E:E6:01:A1:71:CE:56:F6:1C X509v3 Authority Key Identifier: keyid:0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/7AAV3mKGg9Way3lu5gGhcc5W9hw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.232.96.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:2d:fc:a2:db:85:11:77:9f:7a:55:c9:66:ce:bc:82:ab:c6: 69:e9:d8:2f:3e:74:74:27:87:be:7c:a6:ab:d4:5f:ac:51:5d: 28:18:a7:0b:8b:ef:07:74:ab:ee:ea:ae:79:27:a9:db:b2:86: 57:18:11:e8:0a:0c:18:f3:62:b0:32:2f:0a:a5:ad:e1:b8:b1: a5:6a:56:46:a0:82:4c:a5:2d:80:b4:7d:df:6e:41:15:54:f7: 3a:3c:df:b1:51:fb:48:e9:07:e9:24:7d:0e:b0:95:42:d3:93: a6:c4:7d:d3:c3:f5:c9:1c:17:b7:fb:54:be:fd:8e:56:7b:8b: bf:d9:d0:af:15:64:d2:ab:1f:77:36:3c:37:17:75:01:4b:3b: 40:f7:d1:0b:15:ef:66:3e:05:71:bc:fe:6d:49:69:c2:6e:54: 81:e7:ad:c1:54:90:60:46:26:66:fe:87:83:75:e0:f4:6b:52: 5e:b2:05:a2:98:d7:94:4b:fa:33:31:af:01:f5:15:a5:1f:1c: 2f:74:87:7f:69:db:44:e3:c0:a5:84:c0:7b:d6:d0:51:6f:f9: 0d:50:79:70:6b:d5:0c:07:8d:1f:6d:fa:b4:82:2e:41:01:3a: 02:c6:ae:96:4e:75:ea:9f:31:5e:85:f7:77:04:f4:c5:f1:57: 9e:d7:22:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gU1FEY/mzVarFnAk9XGmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZjEyMzgxMDAzNzBhMmMwNWZiMDY4MDBhZmRlNjkwNmRh YWYyZDgwHhcNMjYwMTAyMTYxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzAwMTVkZTYyODY4M2Q1OWFjYjc5NmVlNjAxYTE3MWNlNTZmNjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKovF/RMb18CAfPEdklJL1HHn6Wh x+lUW7RV+stm9UCwHI+QBwmeX6yfCwA/e4KZajLs/9PI9KLuY5YPSADV08A61RL6 wnSMRbxhO5ykZWIPBoPDH5d70o7/YY7aJTW1oORdSRgt8GAtHv9+4iZjP4Ho/Utk DymYvplD2DsdWcb8S9cB0cUwS6bb+Y6TGBuO671X/d0aacQ2gwsNiKWbVKC7B1QU xmpkqGk65Osqrcdl4UANtXrIC94YicUyabTaTY44R5Otye65VbRaWjS0jh86HN+m 2qtzIXR+Vbu6IAhm4BnWW0P0v/H8YLNR0TkF3YjKtoc9Fw76CQMLjesF/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOwAFd5ihoPVmst5buYBoXHOVvYcMB8GA1UdIwQY MBaAFArxI4EANwosBfsGgAr95pBtqvLYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3ZFamdRQTNDaXdGLXdhQUN2M21rRzJxOHRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy85YzFiMDgtYjVhYy00YmJkLWI4YzMt MGUwZmQwM2IxMTA0LzEvN0FBVjNtS0dnOVdheTNsdTVnR2hjYzVXOWh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy85YzFiMDgtYjVhYy00YmJkLWI4YzMtMGUwZmQwM2IxMTA0 LzEvQ3ZFamdRQTNDaXdGLXdhQUN2M21rRzJxOHRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1ehgMA0G CSqGSIb3DQEBCwUAA4IBAQBtLfyi24URd596VclmzryCq8Zp6dgvPnR0J4e+fKar 1F+sUV0oGKcLi+8HdKvu6q55J6nbsoZXGBHoCgwY82KwMi8Kpa3huLGlalZGoIJM pS2AtH3fbkEVVPc6PN+xUftI6QfpJH0OsJVC05OmxH3Tw/XJHBe3+1S+/Y5We4u/ 2dCvFWTSqx93Njw3F3UBSztA99ELFe9mPgVxvP5tSWnCblSB563BVJBgRiZm/oeD deD0a1JesgWimNeUS/ozMa8B9RWlHxwvdId/adtE48ClhMB71tBRb/kNUHlwa9UM B40fbfq0gi5BAToCxq6WTnXqnzFehfd3BPTF8Vee1yIy -----END CERTIFICATE-----Generated at Tue Feb 10 02:33:33 2026 by rpki-client