This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/7FJVYVN98VNVQnUXzxLPoJeoiaA.roa File: 7FJVYVN98VNVQnUXzxLPoJeoiaA.roa (raw, json) Hash identifier: F4/DBsFDr9yR6nMLsl05TEcPKZ7vaecFKVkddQKtGmM= Subject key identifier: EC:52:55:61:53:7D:F1:53:55:42:75:17:CF:12:CF:A0:97:A8:89:A0 Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Certificate serial: 019B7E381B26333224F837590AD2B3D3259E Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/7FJVYVN98VNVQnUXzxLPoJeoiaA.roa Signing time: Fri 02 Jan 2026 10:19:24 +0000 ROA not before: Fri 02 Jan 2026 10:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 185.1.160.0/23 maxlen: 24 2001:7f8:10f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:1b:26:33:32:24:f8:37:59:0a:d2:b3:d3:25:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Validity Not Before: Jan 2 10:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec525561537df15355427517cf12cfa097a889a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a4:60:b7:6d:0f:96:21:d9:e6:f5:fc:85:b5: 8c:de:d3:76:be:c4:2f:8d:a1:2d:a3:0a:f6:3b:1c: cb:fa:7f:1e:14:9d:f6:77:5d:01:bb:64:4b:e2:21: 1f:42:95:09:d6:14:0c:c9:07:e7:47:f1:33:a2:19: 58:b9:73:22:ae:48:53:a6:07:82:79:b7:4e:0b:f2: d0:66:ae:b1:22:3e:72:18:d4:12:2b:8f:be:6f:21: 80:e9:58:f8:81:4c:57:b7:a3:5a:71:c3:a1:99:1a: 46:91:dd:f3:1f:10:72:a5:6d:99:80:29:b3:80:16: 6a:70:b2:d2:eb:1e:68:6c:86:2e:97:f1:33:24:12: b8:a6:41:7a:c6:54:4e:26:66:57:97:75:57:fa:b8: d8:36:21:65:d6:c3:1f:64:0c:fe:af:31:4b:c6:a4: 45:a7:7f:33:9b:dd:d2:2f:93:05:75:8f:37:26:98: 42:10:ab:eb:47:13:07:ee:46:b3:ee:fb:ae:7d:c2: 54:11:73:af:f2:f9:9c:5a:b4:34:bd:0a:81:69:16: af:7a:3e:07:6b:d5:db:a0:e8:b6:18:71:fb:98:c1: 6e:b6:31:b8:d5:05:2e:77:1d:70:4f:9c:b7:74:8e: 91:5b:f0:5c:22:7d:a0:15:53:99:d1:af:c8:94:b8: bb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:52:55:61:53:7D:F1:53:55:42:75:17:CF:12:CF:A0:97:A8:89:A0 X509v3 Authority Key Identifier: keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/7FJVYVN98VNVQnUXzxLPoJeoiaA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.160.0/23 IPv6: 2001:7f8:10f::/48 Signature Algorithm: sha256WithRSAEncryption 3d:5d:3d:cb:26:1a:3e:34:49:44:89:e6:db:7e:53:12:95:18: ae:46:0f:14:a5:b9:a5:1c:da:fb:90:8f:29:e4:d9:63:ae:98: 32:a6:9b:b4:c9:db:4b:36:71:28:1f:a4:4f:cf:6e:cf:5f:53: 81:61:03:8a:01:da:e0:cf:12:9b:0e:16:c1:71:35:63:71:a9: 21:b2:95:17:3c:ed:fd:e1:50:a3:c7:2d:56:77:ec:c9:d6:cc: 67:fe:10:a9:bd:0e:6c:05:52:46:ca:15:63:e4:66:2f:c3:3d: d5:8d:60:24:84:32:fe:71:3d:08:28:b9:da:c2:34:03:4d:cb: 49:9d:5b:56:b8:ed:70:0d:b2:a5:fb:e1:9e:cf:1e:81:a7:b4: 4e:e9:f9:ae:b5:3f:df:73:e2:53:e9:13:49:a3:1e:60:cd:cc: 57:e3:cc:76:06:63:fb:c0:72:13:f0:d1:92:bb:6c:24:84:d0: 0a:3e:e3:5f:60:fc:1b:7e:b4:dd:cf:8f:89:37:ce:55:07:e5: 49:c5:c9:6a:99:5d:d3:ae:ba:41:36:e8:d7:43:17:0c:43:3c: 69:9e:b9:3e:d8:d5:39:86:75:b7:a9:a7:d4:9f:5f:c2:48:fa: e7:e9:8d:c5:7d:77:ad:1c:93:6a:d7:1b:7e:6a:e4:1d:88:c4: 2b:28:f6:f8 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+OBsmMzIk+DdZCtKz0yWeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj YjI4MTEwHhcNMjYwMTAyMTAxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzUyNTU2MTUzN2RmMTUzNTU0Mjc1MTdjZjEyY2ZhMDk3YTg4OWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6Rgt20PliHZ5vX8hbWM3tN2vsQv jaEtowr2OxzL+n8eFJ32d10Bu2RL4iEfQpUJ1hQMyQfnR/EzohlYuXMirkhTpgeC ebdOC/LQZq6xIj5yGNQSK4++byGA6Vj4gUxXt6NaccOhmRpGkd3zHxBypW2ZgCmz gBZqcLLS6x5obIYul/EzJBK4pkF6xlROJmZXl3VX+rjYNiFl1sMfZAz+rzFLxqRF p38zm93SL5MFdY83JphCEKvrRxMH7kaz7vuufcJUEXOv8vmcWrQ0vQqBaRavej4H a9XboOi2GHH7mMFutjG41QUudx1wT5y3dI6RW/BcIn2gFVOZ0a/IlLi7gwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOxSVWFTffFTVUJ1F88Sz6CXqImgMB8GA1UdIwQY MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct YTA0M2UxYjY3Yjk0LzEvN0ZKVllWTjk4Vk5WUW5VWHp4TFBvSmVvaWFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3YzctYTA0M2UxYjY3Yjk0 LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBuQGgMA8E AgACMAkDBwAgAQf4AQ8wDQYJKoZIhvcNAQELBQADggEBAD1dPcsmGj40SUSJ5tt+ UxKVGK5GDxSluaUc2vuQjynk2WOumDKmm7TJ20s2cSgfpE/Pbs9fU4FhA4oB2uDP EpsOFsFxNWNxqSGylRc87f3hUKPHLVZ37MnWzGf+EKm9DmwFUkbKFWPkZi/DPdWN YCSEMv5xPQgoudrCNANNy0mdW1a47XANsqX74Z7PHoGntE7p+a61P99z4lPpE0mj HmDNzFfjzHYGY/vAchPw0ZK7bCSE0Ao+419g/Bt+tN3Pj4k3zlUH5UnFyWqZXdOu ukE26NdDFwxDPGmeuT7Y1TmGdbepp9SfX8JI+ufpjcV9d60ck2rXG35q5B2IxCso 9vg= -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:36 2026 by rpki-client