This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/7cKCDlZbeTX28BBwTA5QO4eJ2xc.roa File: 7cKCDlZbeTX28BBwTA5QO4eJ2xc.roa (raw, json) Hash identifier: sIuMQVrFFVonk4niSkh2ILAH9kBI8WfPxCPrqjWAlqs= Subject key identifier: ED:C2:82:0E:56:5B:79:35:F6:F0:10:70:4C:0E:50:3B:87:89:DB:17 Certificate issuer: /CN=c463c34603a946952ff276e0a25fd361fcacf251 Certificate serial: 019B7C7F00F9270BDECA7EDB47406C9938D2 Authority key identifier: C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/7cKCDlZbeTX28BBwTA5QO4eJ2xc.roa Signing time: Fri 02 Jan 2026 02:17:36 +0000 ROA not before: Fri 02 Jan 2026 02:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198363 IP address blocks: 176.103.248.0/21 maxlen: 21 176.103.248.0/24 maxlen: 24 176.103.249.0/24 maxlen: 24 176.103.250.0/24 maxlen: 24 176.103.251.0/24 maxlen: 24 176.103.252.0/24 maxlen: 24 176.103.253.0/24 maxlen: 24 176.103.254.0/24 maxlen: 24 176.103.255.0/24 maxlen: 24 2001:67c:e30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:00:f9:27:0b:de:ca:7e:db:47:40:6c:99:38:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c463c34603a946952ff276e0a25fd361fcacf251 Validity Not Before: Jan 2 02:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edc2820e565b7935f6f010704c0e503b8789db17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d2:c3:5b:7f:0e:d0:a7:40:82:8a:93:80:5d: d7:aa:54:ed:b7:1b:5f:75:6b:c9:b6:4e:a3:66:60: 9b:8b:2a:84:4c:59:35:89:d0:07:7e:a4:71:c9:53: e8:f8:c8:2e:c3:5c:9e:e9:cd:96:20:05:b2:99:f1: e5:71:c8:55:db:e0:13:0e:34:7c:df:d5:8d:d5:d9: b8:31:5c:8a:55:70:9f:28:1e:dc:2e:68:ef:e5:0b: 4c:eb:51:60:0e:42:ed:c3:89:f2:82:5a:11:03:6e: c6:1c:44:f1:23:d6:22:32:8e:a2:c6:e8:c8:30:a2: 18:df:3a:17:25:d8:f1:ad:a8:61:1b:ef:c9:62:60: 77:bf:49:e2:7b:18:3e:2c:67:d5:72:95:5d:90:14: bc:02:f3:37:b7:1a:1f:3f:19:14:12:e8:f7:0e:13: 31:34:da:14:68:5e:ad:55:27:31:30:58:d9:b2:b8: b0:bb:c9:91:44:65:1a:2f:b7:c4:bf:15:4e:2a:33: f1:43:5a:41:05:e5:76:65:87:25:70:04:8a:19:7f: b3:2b:26:03:2d:b6:54:9e:38:89:eb:f6:02:d4:2e: df:3c:58:08:32:2d:f0:3b:32:3f:be:54:73:46:8b: 65:f1:b1:10:7d:96:a6:b5:52:27:c4:16:e8:33:37: 31:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C2:82:0E:56:5B:79:35:F6:F0:10:70:4C:0E:50:3B:87:89:DB:17 X509v3 Authority Key Identifier: keyid:C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/7cKCDlZbeTX28BBwTA5QO4eJ2xc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.103.248.0/21 IPv6: 2001:67c:e30::/48 Signature Algorithm: sha256WithRSAEncryption 45:e7:bd:55:46:ce:49:31:71:96:7f:2d:84:87:e6:29:1a:cc: a1:20:e5:50:8f:f4:38:09:ba:b2:c0:8f:fc:84:cf:3f:d1:9f: 95:2d:5d:b9:38:27:00:aa:a3:90:c1:0e:16:00:b0:5e:ef:c6: bf:0c:55:64:a7:5e:b1:4c:e6:2b:3a:5a:95:42:0c:13:f8:bb: 8a:5d:b4:a1:e2:9a:81:79:e7:67:41:9a:2a:b5:6b:d0:14:82: 30:36:2a:dc:85:36:bc:6d:ad:81:d7:f2:f8:ac:48:fa:36:c5: 57:70:02:36:95:85:8f:bf:fb:22:c8:50:14:4e:40:d0:a1:32: fe:4d:04:66:37:b6:d5:03:fd:60:1e:79:a8:a8:77:c7:4a:81: 41:5e:4b:f8:7c:69:80:14:64:c7:e5:da:2d:78:7d:36:5f:32: 05:21:e1:d8:ff:a3:70:b4:1d:73:42:bb:5d:7a:c8:c0:e0:cd: b2:4e:8a:98:e6:7f:c3:54:f0:46:51:7e:29:ff:64:67:9c:a0: b1:ff:ea:14:e7:fb:d0:2a:79:b9:a1:a0:60:cd:6c:24:01:8f: d3:a2:59:ae:f3:84:35:a7:9a:38:51:5f:2d:52:03:d4:0b:22: 61:26:34:67:69:77:7c:1e:46:ad:c6:33:12:d8:0b:82:c4:1c: 1b:75:85:4c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8fwD5Jwveyn7bR0BsmTjSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NjNjMzQ2MDNhOTQ2OTUyZmYyNzZlMGEyNWZkMzYxZmNh Y2YyNTEwHhcNMjYwMTAyMDIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGMyODIwZTU2NWI3OTM1ZjZmMDEwNzA0YzBlNTAzYjg3ODlkYjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdLDW38O0KdAgoqTgF3XqlTttxtf dWvJtk6jZmCbiyqETFk1idAHfqRxyVPo+Mguw1ye6c2WIAWymfHlcchV2+ATDjR8 39WN1dm4MVyKVXCfKB7cLmjv5QtM61FgDkLtw4nygloRA27GHETxI9YiMo6ixujI MKIY3zoXJdjxrahhG+/JYmB3v0niexg+LGfVcpVdkBS8AvM3txofPxkUEuj3DhMx NNoUaF6tVScxMFjZsriwu8mRRGUaL7fEvxVOKjPxQ1pBBeV2ZYclcASKGX+zKyYD LbZUnjiJ6/YC1C7fPFgIMi3wOzI/vlRzRotl8bEQfZamtVInxBboMzcxSQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFO3Cgg5WW3k19vAQcEwOUDuHidsXMB8GA1UdIwQY MBaAFMRjw0YDqUaVL/J24KJf02H8rPJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEdQRFJnT3BScFV2OG5iZ29sX1RZZnlzOGxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8yNGZhZTktZWQ4Ny00NGY2LWE3OTUt MDA2NDIwZTQzNDRkLzEvN2NLQ0RsWmJlVFgyOEJCd1RBNVFPNGVKMnhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8yNGZhZTktZWQ4Ny00NGY2LWE3OTUtMDA2NDIwZTQzNDRk LzEveEdQRFJnT3BScFV2OG5iZ29sX1RZZnlzOGxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDsGf4MA8E AgACMAkDBwAgAQZ8DjAwDQYJKoZIhvcNAQELBQADggEBAEXnvVVGzkkxcZZ/LYSH 5ikazKEg5VCP9DgJurLAj/yEzz/Rn5UtXbk4JwCqo5DBDhYAsF7vxr8MVWSnXrFM 5is6WpVCDBP4u4pdtKHimoF552dBmiq1a9AUgjA2KtyFNrxtrYHX8visSPo2xVdw AjaVhY+/+yLIUBROQNChMv5NBGY3ttUD/WAeeaiod8dKgUFeS/h8aYAUZMfl2i14 fTZfMgUh4dj/o3C0HXNCu116yMDgzbJOipjmf8NU8EZRfin/ZGecoLH/6hTn+9Aq ebmhoGDNbCQBj9OiWa7zhDWnmjhRXy1SA9QLImEmNGdpd3weRq3GMxLYC4LEHBt1 hUw= -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:31 2026 by rpki-client