This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/_v7GfhVuqUV1D7sW2SlcrySGsrA.roa File: _v7GfhVuqUV1D7sW2SlcrySGsrA.roa (raw, json) Hash identifier: KzmQ49grnGxQlCZ2CCyjpnejNzdZeWdhTo34zMYUN0I= Subject key identifier: FE:FE:C6:7E:15:6E:A9:45:75:0F:BB:16:D9:29:5C:AF:24:86:B2:B0 Certificate issuer: /CN=2ee29f7f3faa48a940ab8da212b4b1116883f273 Certificate serial: 019B7CED9F7B6EC3EF30C57C56ACEF56CEDD Authority key identifier: 2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/_v7GfhVuqUV1D7sW2SlcrySGsrA.roa Signing time: Fri 02 Jan 2026 04:18:26 +0000 ROA not before: Fri 02 Jan 2026 04:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41038 IP address blocks: 91.233.22.0/23 maxlen: 23 195.95.175.0/24 maxlen: 24 2001:678:250::/48 maxlen: 48 2001:67c:25b8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:9f:7b:6e:c3:ef:30:c5:7c:56:ac:ef:56:ce:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ee29f7f3faa48a940ab8da212b4b1116883f273 Validity Not Before: Jan 2 04:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fefec67e156ea945750fbb16d9295caf2486b2b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0f:f6:06:3a:e7:8a:c7:2d:a2:74:35:35:e0: f9:72:dc:44:f9:03:a5:d6:74:36:bd:52:b5:00:c3: 98:69:b5:4e:09:d0:7f:d9:8c:e2:84:00:cd:02:02: 95:8b:b8:a7:b0:08:df:d4:b3:88:8e:5b:22:cb:27: a0:80:ec:cb:af:53:e6:a0:36:22:68:fe:ea:4a:85: 08:4f:e0:11:60:e5:7a:e3:78:40:d2:e0:88:ba:fe: aa:07:14:3c:cd:e5:1c:3a:ee:66:af:0b:f9:22:5a: 15:f0:73:cd:81:ea:97:4e:38:a1:84:88:99:29:a4: 6b:aa:88:cf:00:95:22:a6:b4:55:7e:94:cb:fb:15: c4:fb:cf:9b:b0:68:ab:ce:3e:36:73:d4:bc:52:24: 11:38:81:d7:35:bd:13:6a:71:21:35:aa:98:93:5b: de:31:ca:a8:67:a7:54:dd:1e:5b:ef:99:4d:3b:b6: 8a:f2:3a:76:17:6f:19:0a:1a:cd:c7:f1:e7:8b:ae: 09:e8:55:03:39:38:98:5c:7d:5b:1c:b1:b6:e8:16: 9d:c7:72:98:d2:b1:36:78:73:6f:39:a4:f6:24:63: bf:97:28:05:30:be:a6:09:57:3b:a6:8b:27:43:08: 7e:e7:95:0b:28:50:11:28:71:1c:8e:4f:35:1c:45: 85:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:FE:C6:7E:15:6E:A9:45:75:0F:BB:16:D9:29:5C:AF:24:86:B2:B0 X509v3 Authority Key Identifier: keyid:2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/_v7GfhVuqUV1D7sW2SlcrySGsrA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.22.0/23 195.95.175.0/24 IPv6: 2001:678:250::/48 2001:67c:25b8::/48 Signature Algorithm: sha256WithRSAEncryption 98:5a:2a:d5:81:ff:15:57:17:17:a9:42:ae:65:ed:07:e1:02: 11:db:87:81:d9:c6:0f:86:c6:32:6c:1f:6e:8f:a6:73:64:0c: 62:7a:34:a8:2f:ae:c1:98:b5:35:f9:0f:a4:03:51:da:c1:66: ae:cf:c9:07:de:b9:2c:39:d9:58:71:2d:11:23:22:9a:38:b5: 6a:ba:e7:1e:a9:1f:51:c4:4b:11:dc:8f:e1:3e:af:50:94:fd: ea:7c:5d:8a:14:e6:e2:6a:a2:fb:ea:55:5b:6c:b6:04:b4:aa: 42:db:00:ad:73:f8:86:a7:a0:9c:90:5b:0c:dc:1b:8b:3c:24: 72:bb:b2:ec:a9:d7:d5:bd:2d:70:0c:9e:20:0e:16:13:fe:c6: 42:5f:d5:df:9f:04:11:c1:7c:98:61:c2:96:b4:35:3e:2f:95: 8f:8e:0e:3e:6d:79:92:88:e4:c8:c0:7e:93:56:83:f6:88:66: 92:4f:bc:00:e5:45:f1:86:de:a7:4d:10:78:34:d4:96:b6:df: 88:6c:e4:51:c1:d6:57:d2:87:0b:94:a7:ac:99:bf:ee:25:73: f6:48:e2:59:86:b9:8b:0d:a7:47:73:cf:f5:14:33:a3:39:fd: 28:04:3d:93:f5:85:1c:e8:df:31:6f:e3:c6:6b:c5:42:66:58: f9:e8:19:df -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt87Z97bsPvMMV8VqzvVs7dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZTI5ZjdmM2ZhYTQ4YTk0MGFiOGRhMjEyYjRiMTExNjg4 M2YyNzMwHhcNMjYwMTAyMDQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWZlYzY3ZTE1NmVhOTQ1NzUwZmJiMTZkOTI5NWNhZjI0ODZiMmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3g/2BjrnisctonQ1NeD5ctxE+QOl 1nQ2vVK1AMOYabVOCdB/2YzihADNAgKVi7insAjf1LOIjlsiyyeggOzLr1PmoDYi aP7qSoUIT+ARYOV643hA0uCIuv6qBxQ8zeUcOu5mrwv5IloV8HPNgeqXTjihhIiZ KaRrqojPAJUiprRVfpTL+xXE+8+bsGirzj42c9S8UiQROIHXNb0TanEhNaqYk1ve McqoZ6dU3R5b75lNO7aK8jp2F28ZChrNx/Hni64J6FUDOTiYXH1bHLG26Badx3KY 0rE2eHNvOaT2JGO/lygFML6mCVc7posnQwh+55ULKFARKHEcjk81HEWFrwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFP7+xn4VbqlFdQ+7FtkpXK8khrKwMB8GA1UdIwQY MBaAFC7in38/qkipQKuNohK0sRFog/JzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHVLZmZ6LXFTS2xBcTQyaUVyU3hFV2lEOG5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC81Njc4NzYtOGQxNy00NmM2LThjZGQt NGI4NDNlOWQwNGY4LzEvX3Y3R2ZoVnVxVVYxRDdzVzJTbGNyeVNHc3JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC81Njc4NzYtOGQxNy00NmM2LThjZGQtNGI4NDNlOWQwNGY4 LzEvTHVLZmZ6LXFTS2xBcTQyaUVyU3hFV2lEOG5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQBW+kWAwQA w1+vMBgEAgACMBIDBwAgAQZ4AlADBwAgAQZ8JbgwDQYJKoZIhvcNAQELBQADggEB AJhaKtWB/xVXFxepQq5l7QfhAhHbh4HZxg+GxjJsH26PpnNkDGJ6NKgvrsGYtTX5 D6QDUdrBZq7PyQfeuSw52VhxLREjIpo4tWq65x6pH1HESxHcj+E+r1CU/ep8XYoU 5uJqovvqVVtstgS0qkLbAK1z+IanoJyQWwzcG4s8JHK7suyp19W9LXAMniAOFhP+ xkJf1d+fBBHBfJhhwpa0NT4vlY+ODj5teZKI5MjAfpNWg/aIZpJPvADlRfGG3qdN EHg01Ja234hs5FHB1lfShwuUp6yZv+4lc/ZI4lmGuYsNp0dzz/UUM6M5/SgEPZP1 hRzo3zFv48ZrxUJmWPnoGd8= -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:37 2026 by rpki-client