This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/7mNPzDQUy4TWk6yVcvwp5gn92PY.roa File: 7mNPzDQUy4TWk6yVcvwp5gn92PY.roa (raw, json) Hash identifier: wX/s845m+j+aefEHx+Ug2JNMpDWqfvvDBGuvcQGJjF8= Subject key identifier: EE:63:4F:CC:34:14:CB:84:D6:93:AC:95:72:FC:29:E6:09:FD:D8:F6 Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257 Certificate serial: 019B7F8128B340D948F23C4E41F51C4E0387 Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/7mNPzDQUy4TWk6yVcvwp5gn92PY.roa Signing time: Fri 02 Jan 2026 16:18:49 +0000 ROA not before: Fri 02 Jan 2026 16:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8149 IP address blocks: 213.152.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 22:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:28:b3:40:d9:48:f2:3c:4e:41:f5:1c:4e:03:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257 Validity Not Before: Jan 2 16:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee634fcc3414cb84d693ac9572fc29e609fdd8f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2b:cc:af:5b:d8:93:36:5b:94:a5:bd:2c:e6: 77:af:cb:8f:da:9d:57:7c:47:38:c2:e4:37:22:79: 7b:6e:d6:a8:46:46:e3:e9:a9:fe:e5:9e:b3:61:70: 76:1a:b3:b7:a1:9e:01:61:c7:98:73:77:4d:43:a5: 6b:28:e5:92:4b:11:f5:34:37:b1:01:f7:11:f5:3b: dd:25:b0:5b:d4:3a:20:a7:aa:cb:84:6a:15:72:ca: d6:c2:1c:66:65:4e:9f:f8:b2:91:11:b9:73:d8:b9: 47:28:f3:dc:cd:a3:86:89:cc:6e:11:8b:e2:05:1c: 40:cc:a6:08:bb:70:d4:8f:0e:18:eb:f9:fb:11:28: 9b:73:6c:73:05:5b:92:27:64:f5:8c:23:2d:6f:02: 49:b7:02:aa:b4:5c:7b:c7:4e:8d:07:04:74:84:8b: 50:68:6d:39:7e:d5:ec:c4:34:a1:60:ec:fc:c7:5c: 78:d3:3f:d2:64:62:9d:cf:bf:f2:17:b7:66:d4:32: 50:91:48:49:31:40:57:69:bd:7f:64:2b:48:89:9b: 12:32:67:f4:02:98:77:3f:b0:da:5b:91:f6:24:69: 9a:ba:cb:d6:4a:68:10:3b:c8:44:96:5f:d4:28:bb: 9b:97:2c:fd:26:96:f7:d8:55:18:d8:2a:58:28:d4: 6d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:63:4F:CC:34:14:CB:84:D6:93:AC:95:72:FC:29:E6:09:FD:D8:F6 X509v3 Authority Key Identifier: keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/7mNPzDQUy4TWk6yVcvwp5gn92PY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.152.243.0/24 Signature Algorithm: sha256WithRSAEncryption 68:1b:c7:7d:aa:ba:00:21:da:e3:80:67:00:29:16:5b:56:8e: 54:f0:5f:50:00:f7:eb:9c:2f:1f:fd:3c:3b:7e:d8:16:fe:67: e7:dd:c6:81:eb:e5:ee:a7:2f:b9:46:9f:55:42:8b:5c:e3:ef: 48:dc:02:40:fd:40:b3:af:48:dd:09:29:39:f7:a7:22:ef:a0: 58:49:c1:82:80:3b:69:ea:ef:c3:db:81:74:79:96:98:aa:a2: 61:bc:5b:e0:4f:cf:38:59:70:23:fa:5d:31:da:35:9f:8a:86: 12:aa:42:52:1e:ad:ec:34:93:78:80:d3:70:eb:0c:36:b2:8f: 1c:bc:20:a9:ed:80:6d:c3:83:33:a2:b7:46:98:51:08:9a:bd: 6e:95:43:c1:f7:0e:59:3e:ab:73:67:01:78:f8:c7:a4:c1:bc: 21:2a:76:b5:67:ab:88:63:8a:82:88:e4:1f:ea:56:26:f7:fb: ed:25:b1:0d:86:32:03:6a:a9:bd:8c:aa:f4:a6:c2:ec:e6:c8: 50:74:e9:81:0c:aa:bc:3d:61:02:f5:26:09:3d:81:bd:3c:35: c3:ca:76:9e:4a:6a:ab:57:98:28:4a:6c:c8:28:98:7d:d7:a0: f2:a0:df:b6:dc:02:4b:19:5c:ae:92:43:e1:bb:3d:ba:42:6e: 9c:d2:81:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gSizQNlI8jxOQfUcTgOHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMGNjOTQyOWI2MzM4MmU5YjE3MTRkMjFiM2M5NmQyZTVl YmUyNTcwHhcNMjYwMTAyMTYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTYzNGZjYzM0MTRjYjg0ZDY5M2FjOTU3MmZjMjllNjA5ZmRkOGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyvMr1vYkzZblKW9LOZ3r8uP2p1X fEc4wuQ3Inl7btaoRkbj6an+5Z6zYXB2GrO3oZ4BYceYc3dNQ6VrKOWSSxH1NDex AfcR9TvdJbBb1Dogp6rLhGoVcsrWwhxmZU6f+LKREblz2LlHKPPczaOGicxuEYvi BRxAzKYIu3DUjw4Y6/n7ESibc2xzBVuSJ2T1jCMtbwJJtwKqtFx7x06NBwR0hItQ aG05ftXsxDShYOz8x1x40z/SZGKdz7/yF7dm1DJQkUhJMUBXab1/ZCtIiZsSMmf0 Aph3P7DaW5H2JGmausvWSmgQO8hEll/UKLublyz9Jpb32FUY2CpYKNRtOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO5jT8w0FMuE1pOslXL8KeYJ/dj2MB8GA1UdIwQY MBaAFOMMyUKbYzgumxcU0hs8ltLl6+JXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUt ZGI0ZjM1MmU5YWQzLzEvN21OUHpEUVV5NFRXazZ5VmN2d3A1Z245MlBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUtZGI0ZjM1MmU5YWQz LzEvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ZjzMA0G CSqGSIb3DQEBCwUAA4IBAQBoG8d9qroAIdrjgGcAKRZbVo5U8F9QAPfrnC8f/Tw7 ftgW/mfn3caB6+Xupy+5Rp9VQotc4+9I3AJA/UCzr0jdCSk596ci76BYScGCgDtp 6u/D24F0eZaYqqJhvFvgT884WXAj+l0x2jWfioYSqkJSHq3sNJN4gNNw6ww2so8c vCCp7YBtw4MzordGmFEImr1ulUPB9w5ZPqtzZwF4+MekwbwhKna1Z6uIY4qCiOQf 6lYm9/vtJbENhjIDaqm9jKr0psLs5shQdOmBDKq8PWEC9SYJPYG9PDXDynaeSmqr V5goSmzIKJh916DyoN+23AJLGVyukkPhuz26Qm6c0oFT -----END CERTIFICATE-----Generated at Wed Jan 21 03:49:02 2026 by rpki-client