This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/e7hRPF_fDKauyWMhXNHKPAk5y64.roa File: e7hRPF_fDKauyWMhXNHKPAk5y64.roa (raw, json) Hash identifier: 84m0u1nzZpYEuaNHIyFdKEGGSAI7APZSqNL9DYI2WrM= Subject key identifier: 7B:B8:51:3C:5F:DF:0C:A6:AE:C9:63:21:5C:D1:CA:3C:09:39:CB:AE Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Certificate serial: 019C353A355E3E756C4552914A1348FD6A5A Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/e7hRPF_fDKauyWMhXNHKPAk5y64.roa Signing time: Fri 06 Feb 2026 23:12:13 +0000 ROA not before: Fri 06 Feb 2026 23:12:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212494 IP address blocks: 128.127.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:35:3a:35:5e:3e:75:6c:45:52:91:4a:13:48:fd:6a:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Validity Not Before: Feb 6 23:12:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7bb8513c5fdf0ca6aec963215cd1ca3c0939cbae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5a:f8:3f:41:7d:15:45:2e:09:16:f0:bc:0b: a4:75:a0:5a:fe:e8:5e:2d:8b:62:55:72:a7:97:5c: 52:6c:78:ed:55:88:43:9c:50:0c:f4:2d:e1:c6:24: 3d:81:ec:81:4e:e2:d2:3f:f3:75:e9:4f:25:82:e6: 95:f7:70:f4:db:f4:5e:79:8d:71:92:e8:b3:fc:c6: 4a:be:e4:d6:48:0a:e8:b8:c9:0d:91:f6:a4:10:82: a0:4f:5a:0d:06:01:a6:66:2e:56:d2:bf:f1:3e:a1: 5d:47:f3:07:cd:3a:df:67:28:10:ac:f3:7b:d9:6c: f8:fe:8f:fc:f1:ba:19:4c:ca:91:9a:e2:ed:38:65: 96:fd:29:c3:66:ba:f0:d3:13:7f:a7:51:f2:19:7d: f6:1d:9e:63:16:ad:3a:20:b6:a4:b5:08:f0:7f:dd: 80:21:83:8e:7f:3b:88:4c:75:bc:0b:67:fc:87:5b: 6f:4c:27:e4:10:b0:8b:e2:40:ea:a0:69:81:de:39: 64:1a:77:11:76:5f:d8:d1:44:e5:96:ed:88:8d:c2: fe:10:d6:d1:a1:00:4e:6a:72:cf:0a:1b:98:09:64: 51:c0:ce:8e:fb:ff:12:eb:2f:4a:76:bc:34:14:b1: c9:de:84:b4:c7:0a:dc:a4:b8:b2:58:09:52:1c:e7: fe:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B8:51:3C:5F:DF:0C:A6:AE:C9:63:21:5C:D1:CA:3C:09:39:CB:AE X509v3 Authority Key Identifier: keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/e7hRPF_fDKauyWMhXNHKPAk5y64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.127.146.0/24 Signature Algorithm: sha256WithRSAEncryption 65:f1:92:34:f4:a3:2b:af:6c:b3:13:b2:01:47:96:9e:d0:43: 81:1a:e2:3e:8c:97:2d:2c:dd:5a:5c:8a:47:59:12:33:42:8e: 39:37:6d:02:ef:a0:5c:bb:ea:49:53:a2:23:94:67:37:c4:78: a3:42:e3:64:39:eb:26:dc:93:5b:51:6d:af:ca:48:56:e8:1a: b0:cf:ca:a3:aa:49:1b:8e:b3:c4:d6:42:19:27:97:26:fe:7b: 28:5c:02:80:bb:71:a6:f9:c6:b8:cb:9c:ac:3f:fd:90:19:5c: 1e:0f:04:10:51:a4:16:39:1e:e3:0c:27:92:7b:54:75:d4:a6: 6f:dd:25:74:1e:da:b6:be:c6:66:62:d5:19:a5:8f:41:84:88: 7a:d1:cc:f6:63:62:cd:23:e8:70:d3:0f:3a:d6:e6:65:9c:18: 0b:45:c2:a1:c4:d7:c8:2d:d4:5b:78:be:cc:55:1a:2d:70:aa: 4f:fa:1c:f7:5d:14:89:e0:7f:99:65:3c:da:80:17:a7:c3:61: 9a:65:af:5a:fe:78:02:f5:10:d0:5c:93:77:b1:98:63:cc:1d: e8:dd:ff:60:46:45:df:d5:f8:a9:29:b2:21:2a:90:c0:45:98: dc:1f:fe:94:1a:6c:af:60:de:0d:da:26:09:e6:9d:29:c4:6f: 48:31:62:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZw1OjVePnVsRVKRShNI/WpaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy OWZmODQwHhcNMjYwMjA2MjMxMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmI4NTEzYzVmZGYwY2E2YWVjOTYzMjE1Y2QxY2EzYzA5MzljYmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lr4P0F9FUUuCRbwvAukdaBa/uhe LYtiVXKnl1xSbHjtVYhDnFAM9C3hxiQ9geyBTuLSP/N16U8lguaV93D02/ReeY1x kuiz/MZKvuTWSArouMkNkfakEIKgT1oNBgGmZi5W0r/xPqFdR/MHzTrfZygQrPN7 2Wz4/o/88boZTMqRmuLtOGWW/SnDZrrw0xN/p1HyGX32HZ5jFq06ILaktQjwf92A IYOOfzuITHW8C2f8h1tvTCfkELCL4kDqoGmB3jlkGncRdl/Y0UTllu2IjcL+ENbR oQBOanLPChuYCWRRwM6O+/8S6y9Kdrw0FLHJ3oS0xwrcpLiyWAlSHOf+cQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHu4UTxf3wymrsljIVzRyjwJOcuuMB8GA1UdIwQY MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt MjhmYzc3OTY3NzYzLzEvZTdoUlBGX2ZES2F1eVdNaFhOSEtQQWs1eTY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgH+SMA0G CSqGSIb3DQEBCwUAA4IBAQBl8ZI09KMrr2yzE7IBR5ae0EOBGuI+jJctLN1aXIpH WRIzQo45N20C76Bcu+pJU6IjlGc3xHijQuNkOesm3JNbUW2vykhW6Bqwz8qjqkkb jrPE1kIZJ5cm/nsoXAKAu3Gm+ca4y5ysP/2QGVweDwQQUaQWOR7jDCeSe1R11KZv 3SV0Htq2vsZmYtUZpY9BhIh60cz2Y2LNI+hw0w861uZlnBgLRcKhxNfILdRbeL7M VRotcKpP+hz3XRSJ4H+ZZTzagBenw2GaZa9a/ngC9RDQXJN3sZhjzB3o3f9gRkXf 1fipKbIhKpDARZjcH/6UGmyvYN4N2iYJ5p0pxG9IMWLe -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:18 2026 by rpki-client