This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/7jEzRpfkM_lhZ7uAKRZvwSRQGNU.roa File: 7jEzRpfkM_lhZ7uAKRZvwSRQGNU.roa (raw, json) Hash identifier: pz42e1Hyvu2YQLi28FAYwohQh8FXz6tczqllHjBA0EQ= Subject key identifier: EE:31:33:46:97:E4:33:F9:61:67:BB:80:29:16:6F:C1:24:50:18:D5 Certificate issuer: /CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e Certificate serial: 019B7AC933E36EC67E944D8B8FC8C12042A9 Authority key identifier: AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/7jEzRpfkM_lhZ7uAKRZvwSRQGNU.roa Signing time: Thu 01 Jan 2026 18:19:24 +0000 ROA not before: Thu 01 Jan 2026 18:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.11.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:33:e3:6e:c6:7e:94:4d:8b:8f:c8:c1:20:42:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e Validity Not Before: Jan 1 18:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee31334697e433f96167bb8029166fc1245018d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:45:a4:e9:f0:af:0e:86:e0:10:1b:ce:86:cf: 0c:84:a2:06:4a:99:9a:70:3c:65:58:8a:7b:1d:a9: 3f:22:02:4d:34:01:de:5e:0d:6c:d9:2b:e6:20:b4: 02:8d:d3:a6:e2:ba:5d:45:65:b7:34:09:83:3b:16: b5:90:4c:bb:db:da:d1:88:5a:ec:da:ff:22:ab:f4: 36:16:8b:02:50:6e:d0:9e:b9:c4:5d:e4:d6:56:89: 76:77:78:ed:bd:f1:f4:75:de:7f:f0:57:6c:9a:ff: 0d:78:3e:31:54:1e:6b:cd:e0:8a:e0:0a:62:e0:51: 91:5c:cb:62:e8:f1:e2:8c:21:17:0f:e3:17:dd:d3: 92:03:b4:0a:25:8d:93:d4:48:72:2e:a4:ce:89:ef: be:cf:cf:86:c2:4d:7e:e6:c0:b8:cb:70:e8:9f:6a: f0:7c:bf:ff:d4:94:31:0e:63:b6:31:b1:ee:bb:2a: a9:42:8b:9f:73:69:14:08:b7:88:c6:4b:55:d5:59: bc:29:30:8d:12:f3:9e:42:07:88:fb:4a:27:6f:99: b9:53:b0:eb:80:52:41:e1:2f:c0:8f:54:35:81:73: 21:6a:15:8c:14:88:12:12:f3:44:6c:84:cb:58:a1: b4:e8:8e:c6:f6:24:e5:d5:8d:b8:7e:bd:38:4e:5b: 20:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:31:33:46:97:E4:33:F9:61:67:BB:80:29:16:6F:C1:24:50:18:D5 X509v3 Authority Key Identifier: keyid:AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/7jEzRpfkM_lhZ7uAKRZvwSRQGNU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.11.104.0/24 Signature Algorithm: sha256WithRSAEncryption 04:fb:49:14:a5:5a:c1:db:51:54:e4:08:1d:88:c8:ae:05:10: b3:11:99:13:94:cd:25:c7:df:02:02:4b:6d:40:08:99:ec:53: ea:94:d8:68:a0:5b:f9:55:80:63:42:44:d8:2d:eb:89:60:40: a4:0d:19:45:d5:30:28:cf:fd:b2:f7:48:1e:6a:48:11:fe:b7: 3c:94:03:b3:98:eb:f5:21:f8:7a:28:6a:eb:34:92:b6:81:95: ac:62:c1:71:69:45:f3:c1:52:58:c5:3f:81:80:f5:38:83:f1: 5c:81:88:24:e1:f0:62:4a:f0:8f:ab:7b:48:ea:13:b4:19:bc: ab:b2:20:22:ae:c7:8e:23:e1:a5:2a:99:70:e2:08:d2:60:06: c4:30:9e:79:58:00:6c:75:18:a3:50:67:ed:bc:c8:4b:dc:6b: 41:09:a0:d1:96:61:f3:58:2c:6f:14:17:a8:68:40:1f:b8:d4: 7f:7e:98:43:48:a6:b5:57:73:02:c8:23:9f:ad:49:3a:88:05: 60:a4:ce:ac:c6:1a:2d:d7:d2:8f:b3:24:87:e7:95:d7:fb:8e: 15:1a:2b:a0:8f:4b:15:d7:b4:d5:bf:ce:e7:fb:e2:e8:14:85: a2:c8:fa:6b:c0:f5:78:59:1b:ba:79:6d:da:92:9b:1d:ad:c3: 7a:d7:56:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yTPjbsZ+lE2Lj8jBIEKpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNmFmMGQ1ZjM4Mjg5ZDM0YzIxYmE2N2M0YzM5Nzg3YTQy YTY2OWUwHhcNMjYwMTAxMTgxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTMxMzM0Njk3ZTQzM2Y5NjE2N2JiODAyOTE2NmZjMTI0NTAxOGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0Wk6fCvDobgEBvOhs8MhKIGSpma cDxlWIp7Hak/IgJNNAHeXg1s2SvmILQCjdOm4rpdRWW3NAmDOxa1kEy729rRiFrs 2v8iq/Q2FosCUG7QnrnEXeTWVol2d3jtvfH0dd5/8Fdsmv8NeD4xVB5rzeCK4Api 4FGRXMti6PHijCEXD+MX3dOSA7QKJY2T1EhyLqTOie++z8+Gwk1+5sC4y3Don2rw fL//1JQxDmO2MbHuuyqpQoufc2kUCLeIxktV1Vm8KTCNEvOeQgeI+0onb5m5U7Dr gFJB4S/Aj1Q1gXMhahWMFIgSEvNEbITLWKG06I7G9iTl1Y24fr04TlsgzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO4xM0aX5DP5YWe7gCkWb8EkUBjVMB8GA1UdIwQY MBaAFK5q8NXzgonTTCG6Z8TDl4ekKmaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm1ydzFmT0NpZE5NSWJwbnhNT1hoNlFxWnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9kZWY1NTUtOTY1MS00ZTgxLTgyOGMt N2E5NGRhN2Q5ZWUyLzEvN2pFelJwZmtNX2xoWjd1QUtSWnZ3U1JRR05VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9kZWY1NTUtOTY1MS00ZTgxLTgyOGMtN2E5NGRhN2Q5ZWUy LzEvcm1ydzFmT0NpZE5NSWJwbnhNT1hoNlFxWnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQtoMA0G CSqGSIb3DQEBCwUAA4IBAQAE+0kUpVrB21FU5AgdiMiuBRCzEZkTlM0lx98CAktt QAiZ7FPqlNhooFv5VYBjQkTYLeuJYECkDRlF1TAoz/2y90geakgR/rc8lAOzmOv1 Ifh6KGrrNJK2gZWsYsFxaUXzwVJYxT+BgPU4g/FcgYgk4fBiSvCPq3tI6hO0Gbyr siAirseOI+GlKplw4gjSYAbEMJ55WABsdRijUGftvMhL3GtBCaDRlmHzWCxvFBeo aEAfuNR/fphDSKa1V3MCyCOfrUk6iAVgpM6sxhot19KPsySH55XX+44VGiugj0sV 17TVv87n++LoFIWiyPprwPV4WRu6eW3akpsdrcN611bg -----END CERTIFICATE-----Generated at Fri Jan 2 11:03:55 2026 by rpki-client