This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/K7e0_WclzsRxbDgQl0m2GyC0awM.roa File: K7e0_WclzsRxbDgQl0m2GyC0awM.roa (raw, json) Hash identifier: vQbkQa9JX2Q86b4F0AezEHB0GMnTiQRSgXLPAgphUxE= Subject key identifier: 2B:B7:B4:FD:67:25:CE:C4:71:6C:38:10:97:49:B6:1B:20:B4:6B:03 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 019B7CEDA2C35332F2DB98714ED7BA44A8A6 Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/K7e0_WclzsRxbDgQl0m2GyC0awM.roa Signing time: Fri 02 Jan 2026 04:18:27 +0000 ROA not before: Fri 02 Jan 2026 04:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216130 IP address blocks: 147.234.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:a2:c3:53:32:f2:db:98:71:4e:d7:ba:44:a8:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Jan 2 04:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bb7b4fd6725cec4716c38109749b61b20b46b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:71:b2:5c:bb:af:cf:0e:d1:eb:e2:1d:3b:e4: 5a:7d:2e:f8:67:f5:69:d6:30:f8:48:ae:af:fa:db: 68:56:88:37:a7:b2:43:48:21:0b:b7:03:b4:27:04: b5:cd:96:96:b5:9a:58:fe:8e:31:0c:e8:88:cb:88: 1e:1d:e6:2c:b7:b7:98:51:6b:c5:aa:4c:8f:d6:10: 3b:a4:06:66:48:94:3e:28:ef:80:31:db:83:63:0c: b5:14:9e:6c:d1:06:43:c8:fa:e8:dc:a2:af:c8:a7: 64:f9:ac:2d:5c:bf:02:36:35:61:45:e6:e7:30:a7: d6:a5:56:89:84:b0:2b:48:f7:71:0f:de:14:ed:1f: ec:14:a9:6b:bf:df:1b:5e:89:7e:41:f7:9a:44:39: 1d:e0:d7:ad:75:10:93:78:d1:a3:59:93:8c:80:5c: ab:c1:20:ee:15:1d:c0:af:d8:b9:14:16:2b:1f:ef: 0b:da:6a:a7:45:2e:83:cc:f5:d1:a7:93:a6:dc:50: 1f:a9:f4:0c:42:82:1d:91:2c:79:11:46:6a:8b:3a: 35:cb:5e:f0:88:2b:1d:a2:51:33:c6:5e:ac:30:41: 27:8d:d1:fd:48:31:76:58:07:03:fd:bb:ed:45:12: bf:b2:ef:7a:b3:61:57:d5:e8:25:20:e2:94:df:88: da:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B7:B4:FD:67:25:CE:C4:71:6C:38:10:97:49:B6:1B:20:B4:6B:03 X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/K7e0_WclzsRxbDgQl0m2GyC0awM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.234.27.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:91:0c:bb:d5:33:db:05:69:b4:c6:94:9e:3a:33:f6:4c:f4: f3:ff:b9:5b:77:7a:af:1a:84:7f:5b:3e:a7:c1:9f:0d:d4:2e: 59:5a:e5:5f:ac:25:39:c4:83:67:73:3d:d9:89:c8:ec:53:e3: f2:e0:f8:20:cc:97:b0:01:1f:00:b0:f0:1a:ba:57:44:61:27: bf:6e:8b:0c:46:58:ba:6c:b6:d9:b6:41:46:b3:c0:eb:67:74: af:7b:97:6b:6e:36:7a:d1:c2:76:e4:df:5a:ee:12:1c:69:f3: 35:18:6b:7c:a6:77:10:a8:09:bd:c4:2f:4b:94:4c:7f:b5:1f: 4d:78:b0:b2:fd:4d:7e:35:61:da:98:f3:ea:2f:4c:9c:9e:dc: be:a5:51:ba:c1:25:62:01:37:ac:4c:6d:15:5c:99:04:8e:f1: 9d:2d:30:ca:d8:08:f4:55:02:9d:83:89:a1:2e:c7:74:12:35: ec:1e:e4:ea:02:19:d2:90:c0:bc:40:80:0c:fd:20:8f:2a:76: 28:63:0b:71:18:79:a3:5a:01:41:e4:f9:95:b2:9a:80:e6:5c: fc:54:0b:5d:a5:11:19:4c:90:8c:10:08:33:dc:bf:47:9f:96: 85:35:4f:e2:db:c0:2a:21:96:90:7f:96:de:ed:b5:4c:af:9e: 0b:42:49:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87aLDUzLy25hxTte6RKimMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjYwMTAyMDQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmI3YjRmZDY3MjVjZWM0NzE2YzM4MTA5NzQ5YjYxYjIwYjQ2YjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nGyXLuvzw7R6+IdO+RafS74Z/Vp 1jD4SK6v+ttoVog3p7JDSCELtwO0JwS1zZaWtZpY/o4xDOiIy4geHeYst7eYUWvF qkyP1hA7pAZmSJQ+KO+AMduDYwy1FJ5s0QZDyPro3KKvyKdk+awtXL8CNjVhRebn MKfWpVaJhLArSPdxD94U7R/sFKlrv98bXol+QfeaRDkd4NetdRCTeNGjWZOMgFyr wSDuFR3Ar9i5FBYrH+8L2mqnRS6DzPXRp5Om3FAfqfQMQoIdkSx5EUZqizo1y17w iCsdolEzxl6sMEEnjdH9SDF2WAcD/bvtRRK/su96s2FX1eglIOKU34ja3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCu3tP1nJc7EcWw4EJdJthsgtGsDMB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvSzdlMF9XY2x6c1J4YkRnUWwwbTJHeUMwYXdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk+obMA0G CSqGSIb3DQEBCwUAA4IBAQAdkQy71TPbBWm0xpSeOjP2TPTz/7lbd3qvGoR/Wz6n wZ8N1C5ZWuVfrCU5xINncz3ZicjsU+Py4PggzJewAR8AsPAauldEYSe/bosMRli6 bLbZtkFGs8DrZ3Sve5drbjZ60cJ25N9a7hIcafM1GGt8pncQqAm9xC9LlEx/tR9N eLCy/U1+NWHamPPqL0ycnty+pVG6wSViATesTG0VXJkEjvGdLTDK2Aj0VQKdg4mh Lsd0EjXsHuTqAhnSkMC8QIAM/SCPKnYoYwtxGHmjWgFB5PmVspqA5lz8VAtdpREZ TJCMEAgz3L9Hn5aFNU/i28AqIZaQf5be7bVMr54LQkkT -----END CERTIFICATE-----Generated at Mon Jan 26 23:45:50 2026 by rpki-client