This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/7JTMQURN2_pHQGeTlN5cBKnAiak.roa File: 7JTMQURN2_pHQGeTlN5cBKnAiak.roa (raw, json) Hash identifier: ArfyrR2wyEV/9BCepj0BUymEyLecGYVpjZ/467WPvZ0= Subject key identifier: EC:94:CC:41:44:4D:DB:FA:47:40:67:93:94:DE:5C:04:A9:C0:89:A9 Certificate issuer: /CN=21077355df11cdbf992f90d67eaab9109ab8ebf3 Certificate serial: 019B79ECD2CC63FA5F0BBC1423788F615BF9 Authority key identifier: 21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/7JTMQURN2_pHQGeTlN5cBKnAiak.roa Signing time: Thu 01 Jan 2026 14:18:42 +0000 ROA not before: Thu 01 Jan 2026 14:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60205 IP address blocks: 185.25.44.0/22 maxlen: 24 2a00:61a0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d2:cc:63:fa:5f:0b:bc:14:23:78:8f:61:5b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21077355df11cdbf992f90d67eaab9109ab8ebf3 Validity Not Before: Jan 1 14:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec94cc41444ddbfa4740679394de5c04a9c089a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1d:52:94:5a:51:ba:53:0a:d8:78:c9:bf:0a: d9:70:8b:a9:b0:27:60:19:f2:c9:c9:d6:23:28:0f: a4:d6:7b:34:43:73:37:d4:50:85:11:01:68:ee:b3: 71:a8:e5:ba:28:2d:b9:61:5d:3d:8c:59:e4:65:cc: 04:3c:34:52:5b:f3:07:85:17:54:dc:66:f6:5a:ae: 65:b0:2c:42:e7:ab:bb:b5:2c:75:a4:91:f8:4c:79: 06:17:e1:0c:50:72:c1:f1:20:bb:79:4d:bd:1f:93: 9b:49:2e:47:bf:21:02:67:6e:f0:b6:7f:1b:3b:27: ac:77:45:87:59:0d:0b:52:8e:b5:66:8b:3b:88:19: e1:c8:1f:68:86:87:05:2d:97:c5:34:52:1c:dd:f3: 74:16:f0:ce:51:c4:a3:d1:95:a3:29:79:2f:dd:43: ad:db:46:47:46:e2:4f:69:b9:c8:43:ae:cc:91:3b: 84:d6:eb:14:97:9b:d4:de:09:0d:e2:e4:a9:4a:a3: 26:d4:71:11:ee:f8:e6:fa:0a:b6:18:38:b2:64:b4: 94:c0:f9:f4:b4:2b:0e:b0:f8:02:13:77:0f:26:89: d7:84:93:ae:dd:9a:85:64:8f:92:9f:c3:09:d9:00: b3:43:09:33:0e:32:8a:21:77:45:4c:6f:d4:c4:76: 78:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:94:CC:41:44:4D:DB:FA:47:40:67:93:94:DE:5C:04:A9:C0:89:A9 X509v3 Authority Key Identifier: keyid:21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/7JTMQURN2_pHQGeTlN5cBKnAiak.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.25.44.0/22 IPv6: 2a00:61a0::/29 Signature Algorithm: sha256WithRSAEncryption 11:57:b4:cf:0e:96:cb:fa:da:b9:c8:5a:a4:35:c4:54:07:82: 20:1b:e1:4a:8e:22:4e:ad:a7:35:df:c3:67:c6:a1:cf:c7:e0: 74:28:6b:84:8a:e3:1e:0f:e4:06:0d:d9:a3:2e:bf:d7:39:23: 00:af:ff:13:26:44:6f:da:25:0e:d0:d8:c8:47:28:1c:47:84: eb:fb:b1:c1:c6:de:2a:63:40:fe:31:16:76:e2:5f:6c:8f:73: 1d:dc:ee:57:a3:0c:d3:51:f4:75:3c:a1:8b:99:7a:08:ee:94: cf:b1:e2:01:1d:76:49:94:46:62:c8:df:e8:4c:5b:c9:cc:e4: f4:de:77:5e:db:ba:ab:80:01:2d:97:49:59:9c:10:33:5b:dc: 73:97:5f:f1:a1:52:df:c2:c4:d6:6a:46:b4:28:d6:a4:44:05: 11:ca:e0:2e:1c:30:dc:28:17:50:c2:a9:75:64:70:56:39:ef: 70:5d:85:bb:43:ab:3d:e7:aa:67:00:f1:91:b9:21:43:7c:47: 75:02:dd:06:33:c8:16:a6:c4:1f:ac:04:df:5e:b6:94:2f:25: 0c:01:4f:c4:03:43:c0:dd:ea:26:50:40:bf:b1:82:5e:7a:19: 94:c6:35:de:47:30:62:66:54:44:3a:07:6d:f9:d0:80:54:87: b4:84:c6:fb -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57NLMY/pfC7wUI3iPYVv5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDc3MzU1ZGYxMWNkYmY5OTJmOTBkNjdlYWFiOTEwOWFi OGViZjMwHhcNMjYwMTAxMTQxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzk0Y2M0MTQ0NGRkYmZhNDc0MDY3OTM5NGRlNWMwNGE5YzA4OWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx1SlFpRulMK2HjJvwrZcIupsCdg GfLJydYjKA+k1ns0Q3M31FCFEQFo7rNxqOW6KC25YV09jFnkZcwEPDRSW/MHhRdU 3Gb2Wq5lsCxC56u7tSx1pJH4THkGF+EMUHLB8SC7eU29H5ObSS5HvyECZ27wtn8b Oyesd0WHWQ0LUo61Zos7iBnhyB9ohocFLZfFNFIc3fN0FvDOUcSj0ZWjKXkv3UOt 20ZHRuJPabnIQ67MkTuE1usUl5vU3gkN4uSpSqMm1HER7vjm+gq2GDiyZLSUwPn0 tCsOsPgCE3cPJonXhJOu3ZqFZI+Sn8MJ2QCzQwkzDjKKIXdFTG/UxHZ4CwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOyUzEFETdv6R0Bnk5TeXASpwImpMB8GA1UdIwQY MBaAFCEHc1XfEc2/mS+Q1n6quRCauOvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFkelZkOFJ6Yi1aTDVEV2ZxcTVFSnE0Nl9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9mMmRhNzgtMmQ5OC00MDgxLTlkNjct NDNiZjY1NWYzMzY1LzEvN0pUTVFVUk4yX3BIUUdlVGxONWNCS25BaWFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9mMmRhNzgtMmQ5OC00MDgxLTlkNjctNDNiZjY1NWYzMzY1 LzEvSVFkelZkOFJ6Yi1aTDVEV2ZxcTVFSnE0Nl9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuRksMA0E AgACMAcDBQMqAGGgMA0GCSqGSIb3DQEBCwUAA4IBAQARV7TPDpbL+tq5yFqkNcRU B4IgG+FKjiJOrac138NnxqHPx+B0KGuEiuMeD+QGDdmjLr/XOSMAr/8TJkRv2iUO 0NjIRygcR4Tr+7HBxt4qY0D+MRZ24l9sj3Md3O5XowzTUfR1PKGLmXoI7pTPseIB HXZJlEZiyN/oTFvJzOT03nde27qrgAEtl0lZnBAzW9xzl1/xoVLfwsTWaka0KNak RAURyuAuHDDcKBdQwql1ZHBWOe9wXYW7Q6s956pnAPGRuSFDfEd1At0GM8gWpsQf rATfXraULyUMAU/EA0PA3eomUEC/sYJeehmUxjXeRzBiZlREOgdt+dCAVIe0hMb7 -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:12 2026 by rpki-client