This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/7TZLT2P2zuuPjzUmClw3kX64yXM.roa File: 7TZLT2P2zuuPjzUmClw3kX64yXM.roa (raw, json) Hash identifier: fnAcb1tn2nnIoVX24Iibq3Ab9gwSJ7WX+AekjhFSNg4= Subject key identifier: ED:36:4B:4F:63:F6:CE:EB:8F:8F:35:26:0A:5C:37:91:7E:B8:C9:73 Certificate issuer: /CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452 Certificate serial: 019B7C7FB424C9F972DF8F5DEF9DDA364C37 Authority key identifier: DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/7TZLT2P2zuuPjzUmClw3kX64yXM.roa Signing time: Fri 02 Jan 2026 02:18:22 +0000 ROA not before: Fri 02 Jan 2026 02:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33843 IP address blocks: 194.11.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:b4:24:c9:f9:72:df:8f:5d:ef:9d:da:36:4c:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452 Validity Not Before: Jan 2 02:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed364b4f63f6ceeb8f8f35260a5c37917eb8c973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7c:29:38:7b:7a:fe:8a:4a:35:90:db:49:1c: 00:72:ba:d6:6d:cb:f1:78:10:0c:2c:15:bb:de:22: d5:28:b8:59:5d:b4:f9:1b:ca:ed:ef:25:46:70:5c: 64:8b:99:18:48:af:d2:4a:a5:10:65:87:9a:0f:f7: eb:d3:8f:18:1a:fa:71:56:dd:46:a3:97:87:24:bb: e1:6b:22:5c:6f:7a:ae:0a:89:af:46:6f:5b:60:8a: 00:fb:ed:a2:42:ff:58:95:32:1f:90:e3:0c:d4:c4: b7:53:f2:ef:e7:b5:48:51:66:05:93:02:52:19:3d: b5:84:08:19:ee:8a:be:6e:46:e8:bf:71:73:fa:7a: e2:90:39:4c:76:9d:eb:db:b3:50:22:8c:aa:58:4c: 06:18:11:87:84:9b:5a:db:27:05:76:c2:38:54:bf: c9:d8:8d:71:5c:0f:52:47:4f:eb:9c:ce:e7:c3:c2: 83:a0:11:67:de:d3:0e:20:7e:e1:e9:ad:d8:50:8e: 22:40:61:7f:91:4f:c9:9c:6d:6d:d4:27:01:d0:7f: 18:e9:7d:bf:98:f0:07:4a:79:7c:70:d4:46:e7:88: 19:f6:f6:1c:c7:55:89:c7:66:fb:25:74:2c:0d:6d: 0c:17:9a:37:db:08:15:7c:c0:c9:70:b4:05:30:12: ec:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:36:4B:4F:63:F6:CE:EB:8F:8F:35:26:0A:5C:37:91:7E:B8:C9:73 X509v3 Authority Key Identifier: keyid:DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/7TZLT2P2zuuPjzUmClw3kX64yXM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.11.170.0/24 Signature Algorithm: sha256WithRSAEncryption 03:4f:52:a2:85:aa:e1:e7:cf:01:4c:72:2f:9e:04:ea:0f:97: 7d:0b:de:90:85:ea:3b:83:3f:6e:6d:33:c1:99:c6:ae:13:2e: ce:b8:ea:b0:ac:39:a1:f0:5b:2f:c3:38:e3:f3:65:10:bf:c4: 48:e4:09:bc:c5:8f:1d:2f:c0:d1:ef:fb:85:bf:99:23:58:47: bb:11:f8:4e:6f:73:f2:94:73:dd:82:31:dd:a7:18:88:00:ca: e2:b3:40:03:54:d6:4e:68:61:5e:42:e1:43:f1:26:4d:fe:e8: 46:a4:ac:a9:51:64:22:1a:bc:64:c6:a7:80:2d:26:cc:c3:6c: 6c:dc:25:ca:fb:17:ef:6b:15:be:d0:a8:96:2c:66:fd:d3:4a: 8c:0d:d0:b4:57:1d:24:30:ea:bf:bc:fa:a8:24:77:c4:6d:45: 52:e1:5d:25:f7:4d:12:07:ba:9c:24:5d:8a:85:d7:24:67:22: 0f:91:3e:37:bd:2a:23:74:19:bb:ba:18:05:34:6b:d0:b6:7b: 76:0f:ed:b5:3e:7e:e6:aa:7f:1c:05:03:36:29:17:0f:c4:fb: 31:cf:91:9b:90:f0:d1:45:05:25:c4:e9:19:5f:b3:c2:12:21: e2:c0:3e:24:e9:cf:45:79:2e:b8:8b:54:ed:e8:1c:fc:66:93: 41:58:96:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f7Qkyfly349d753aNkw3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMDNhYTlhNGZlOWQ2MGM1Y2Y4NTNhOTI0ODIyMjY5ZjFj Yzc0NTIwHhcNMjYwMTAyMDIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDM2NGI0ZjYzZjZjZWViOGY4ZjM1MjYwYTVjMzc5MTdlYjhjOTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3wpOHt6/opKNZDbSRwAcrrWbcvx eBAMLBW73iLVKLhZXbT5G8rt7yVGcFxki5kYSK/SSqUQZYeaD/fr048YGvpxVt1G o5eHJLvhayJcb3quComvRm9bYIoA++2iQv9YlTIfkOMM1MS3U/Lv57VIUWYFkwJS GT21hAgZ7oq+bkbov3Fz+nrikDlMdp3r27NQIoyqWEwGGBGHhJta2ycFdsI4VL/J 2I1xXA9SR0/rnM7nw8KDoBFn3tMOIH7h6a3YUI4iQGF/kU/JnG1t1CcB0H8Y6X2/ mPAHSnl8cNRG54gZ9vYcx1WJx2b7JXQsDW0MF5o32wgVfMDJcLQFMBLsXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO02S09j9s7rj481JgpcN5F+uMlzMB8GA1UdIwQY MBaAFNwDqppP6dYMXPhTqSSCImnxzHRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0FPcW1rX3AxZ3hjLUZPcEpJSWlhZkhNZEZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kODRlMWUtY2M1My00Y2MyLWFhYjkt MWNhNzY2ZmJlZWJhLzEvN1RaTFQyUDJ6dXVQanpVbUNsdzNrWDY0eVhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9kODRlMWUtY2M1My00Y2MyLWFhYjktMWNhNzY2ZmJlZWJh LzEvM0FPcW1rX3AxZ3hjLUZPcEpJSWlhZkhNZEZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwguqMA0G CSqGSIb3DQEBCwUAA4IBAQADT1Kiharh588BTHIvngTqD5d9C96Qheo7gz9ubTPB mcauEy7OuOqwrDmh8Fsvwzjj82UQv8RI5Am8xY8dL8DR7/uFv5kjWEe7EfhOb3Py lHPdgjHdpxiIAMris0ADVNZOaGFeQuFD8SZN/uhGpKypUWQiGrxkxqeALSbMw2xs 3CXK+xfvaxW+0KiWLGb900qMDdC0Vx0kMOq/vPqoJHfEbUVS4V0l900SB7qcJF2K hdckZyIPkT43vSojdBm7uhgFNGvQtnt2D+21Pn7mqn8cBQM2KRcPxPsxz5GbkPDR RQUlxOkZX7PCEiHiwD4k6c9FeS64i1Tt6Bz8ZpNBWJaG -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:39 2026 by rpki-client