This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/7rB4dVkLekdvJu2WV1aBm26tfk4.roa File: 7rB4dVkLekdvJu2WV1aBm26tfk4.roa (raw, json) Hash identifier: dQXlWyfYcUEq4/cQMbVBV+QLb2ARWgSkORhGuX+vIpo= Subject key identifier: EE:B0:78:75:59:0B:7A:47:6F:26:ED:96:57:56:81:9B:6E:AD:7E:4E Certificate issuer: /CN=215a409d27b9a69346324004694da11beae02dbb Certificate serial: 019B7F12FD800C2737D46EF3907FC0B50AA5 Authority key identifier: 21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/7rB4dVkLekdvJu2WV1aBm26tfk4.roa Signing time: Fri 02 Jan 2026 14:18:29 +0000 ROA not before: Fri 02 Jan 2026 14:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199557 IP address blocks: 185.134.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:12:fd:80:0c:27:37:d4:6e:f3:90:7f:c0:b5:0a:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215a409d27b9a69346324004694da11beae02dbb Validity Not Before: Jan 2 14:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eeb07875590b7a476f26ed965756819b6ead7e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e6:46:c0:fa:a4:8d:1a:7b:ed:49:9e:5f:19: 47:73:ad:f9:3e:79:e1:3a:4f:e3:e5:22:91:5c:53: 9e:3b:a5:34:53:71:ed:51:f4:0f:20:1a:f0:2b:ca: c5:d6:11:de:b5:1d:fd:1a:c3:c0:03:dc:1c:28:b3: 44:cb:d1:a1:e9:88:c8:90:1e:a5:c0:38:1f:a3:5d: 45:53:8f:a4:93:98:e3:84:15:29:39:26:19:35:a7: db:cf:fe:27:58:ec:75:01:37:24:c5:a3:69:9c:d0: 3c:73:19:e3:c0:3f:ca:84:a3:2f:bb:ba:aa:61:84: 4e:cd:95:15:ae:b8:9b:f5:c2:67:28:23:b4:4f:dd: de:fc:87:de:17:70:b9:db:95:15:bf:ce:7b:c5:06: dc:37:07:7b:53:ea:86:e0:d8:36:c1:e6:0d:9a:b8: 1c:98:dd:ea:c4:37:54:0f:8d:83:9a:c9:14:1e:ef: 0e:b3:75:9d:ea:d7:4f:3d:c4:2a:f6:c5:d0:8f:44: 20:76:04:13:32:31:fa:5b:67:92:bc:32:2f:e8:ac: 88:01:89:b4:df:43:f3:b2:90:3e:28:05:cb:8d:50: 64:bc:f5:33:bb:70:8d:42:c1:ae:0d:79:23:01:d9: 94:b5:0c:90:14:a0:aa:de:0b:c3:0f:0c:5d:86:84: 41:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B0:78:75:59:0B:7A:47:6F:26:ED:96:57:56:81:9B:6E:AD:7E:4E X509v3 Authority Key Identifier: keyid:21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/7rB4dVkLekdvJu2WV1aBm26tfk4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.134.176.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:83:6d:eb:17:74:45:41:1e:ad:99:e1:0f:98:44:54:8a:0a: 4e:a2:cc:15:29:80:92:de:5a:cc:2c:a4:ca:90:1b:af:6a:ae: 03:69:9f:9d:63:32:bb:0f:69:9a:ae:0b:f8:71:e2:60:fb:32: 39:60:c7:67:69:bc:1e:c7:13:89:59:da:fa:9d:75:25:2b:76: 3a:21:90:8a:63:5b:35:28:fe:c1:84:49:3b:40:1e:89:39:96: f1:d1:92:39:c2:e3:54:fa:23:77:11:b7:3e:1a:ad:94:cd:c6: d9:04:20:96:98:cc:1c:4c:e1:66:f1:41:09:18:51:c9:a4:40: 55:90:f1:99:9e:41:77:f3:e8:45:65:81:70:c5:34:c7:e9:a9: 9c:f6:22:8e:db:11:6a:eb:5d:aa:a4:7f:64:d7:ee:70:d6:75: 5d:fd:4b:b2:24:43:5a:01:c2:ca:53:16:c7:56:fc:ef:ae:9c: 04:85:aa:9e:20:06:56:6c:33:6d:14:94:a4:2c:c2:1f:1d:a2: b0:d7:4b:f4:02:46:76:60:79:8e:3b:0e:d9:06:77:b7:ff:a2: 99:7f:9f:e3:f8:10:ed:b1:12:d1:8b:bd:0d:7a:12:1e:ec:8a: 7c:b0:de:2e:83:5e:de:e5:cf:4a:f2:7b:da:84:72:fb:a0:db: b7:a2:f0:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Ev2ADCc31G7zkH/AtQqlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNWE0MDlkMjdiOWE2OTM0NjMyNDAwNDY5NGRhMTFiZWFl MDJkYmIwHhcNMjYwMTAyMTQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWIwNzg3NTU5MGI3YTQ3NmYyNmVkOTY1NzU2ODE5YjZlYWQ3ZTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleZGwPqkjRp77UmeXxlHc635Pnnh Ok/j5SKRXFOeO6U0U3HtUfQPIBrwK8rF1hHetR39GsPAA9wcKLNEy9Gh6YjIkB6l wDgfo11FU4+kk5jjhBUpOSYZNafbz/4nWOx1ATckxaNpnNA8cxnjwD/KhKMvu7qq YYROzZUVrrib9cJnKCO0T93e/IfeF3C525UVv857xQbcNwd7U+qG4Ng2weYNmrgc mN3qxDdUD42DmskUHu8Os3Wd6tdPPcQq9sXQj0QgdgQTMjH6W2eSvDIv6KyIAYm0 30PzspA+KAXLjVBkvPUzu3CNQsGuDXkjAdmUtQyQFKCq3gvDDwxdhoRBrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO6weHVZC3pHbybtlldWgZturX5OMB8GA1UdIwQY MBaAFCFaQJ0nuaaTRjJABGlNoRvq4C27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVZwQW5TZTVwcE5HTWtBRWFVMmhHLXJnTGJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mMGM5ZTMtMWM0MC00ZjMzLTk1Y2Ut OThkMmZlZTBmODdhLzEvN3JCNGRWa0xla2R2SnUyV1YxYUJtMjZ0Zms0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9mMGM5ZTMtMWM0MC00ZjMzLTk1Y2UtOThkMmZlZTBmODdh LzEvSVZwQW5TZTVwcE5HTWtBRWFVMmhHLXJnTGJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYawMA0G CSqGSIb3DQEBCwUAA4IBAQCLg23rF3RFQR6tmeEPmERUigpOoswVKYCS3lrMLKTK kBuvaq4DaZ+dYzK7D2margv4ceJg+zI5YMdnabwexxOJWdr6nXUlK3Y6IZCKY1s1 KP7BhEk7QB6JOZbx0ZI5wuNU+iN3Ebc+Gq2UzcbZBCCWmMwcTOFm8UEJGFHJpEBV kPGZnkF38+hFZYFwxTTH6amc9iKO2xFq612qpH9k1+5w1nVd/UuyJENaAcLKUxbH VvzvrpwEhaqeIAZWbDNtFJSkLMIfHaKw10v0AkZ2YHmOOw7ZBne3/6KZf5/j+BDt sRLRi70NehIe7Ip8sN4ug17e5c9K8nvahHL7oNu3ovAW -----END CERTIFICATE-----Generated at Mon Feb 2 07:54:50 2026 by rpki-client