This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/_7Edq10OD9QbWJBY3SkRsX0q8U8.roa File: _7Edq10OD9QbWJBY3SkRsX0q8U8.roa (raw, json) Hash identifier: WtNpfxQFlDUZd5TaCCPM+uB4xhq8Bd/HVPfRbwRFTSs= Subject key identifier: FF:B1:1D:AB:5D:0E:0F:D4:1B:58:90:58:DD:29:11:B1:7D:2A:F1:4F Certificate issuer: /CN=edfe3f6f6d98714e01f08c73b2644368774e8660 Certificate serial: 019B7E38724240CEF96ACEC2446C5E85FCE5 Authority key identifier: ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/_7Edq10OD9QbWJBY3SkRsX0q8U8.roa Signing time: Fri 02 Jan 2026 10:19:47 +0000 ROA not before: Fri 02 Jan 2026 10:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 194.50.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.mft rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:72:42:40:ce:f9:6a:ce:c2:44:6c:5e:85:fc:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edfe3f6f6d98714e01f08c73b2644368774e8660 Validity Not Before: Jan 2 10:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffb11dab5d0e0fd41b589058dd2911b17d2af14f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4f:08:0c:38:85:3a:da:b1:ee:aa:38:e2:80: 76:cb:ae:c0:a9:78:44:bf:f7:47:f7:23:cd:ac:ed: 1a:e9:3d:b2:a1:69:36:b4:f6:1f:a3:91:a3:cb:43: 42:7f:e4:24:55:ae:91:49:31:7b:e3:e1:4b:d9:6c: 2c:d5:b8:58:b1:1c:42:48:f2:3d:98:7e:d0:1e:ad: 86:6e:dd:56:e6:a6:49:5e:30:42:a1:5b:86:e4:5c: 51:05:84:75:8f:d4:00:e4:e2:9d:27:60:f0:39:1d: 9e:01:71:22:81:22:48:bb:87:2b:a3:fe:b7:64:6a: 12:d2:3b:c0:c5:38:f7:a6:09:81:49:72:8d:b8:7d: b9:20:50:d9:80:09:6c:30:8e:9a:c4:09:66:14:89: a4:49:e0:5b:7d:5f:8f:92:05:4a:80:82:0f:13:70: 11:82:e3:e2:aa:1c:86:3b:e2:90:c9:60:6d:7a:6e: 28:a3:23:70:32:75:f4:74:c2:b9:4e:fb:91:d0:e9: 78:b3:b9:ea:64:9e:60:80:a1:88:89:8b:1a:40:7b: 5d:69:41:93:a9:d2:ae:ac:4f:21:ba:31:a7:06:11: 50:78:32:c4:50:c0:05:b3:7a:74:ac:1f:67:21:33: 5f:73:8f:5f:70:fb:a6:a2:ae:ce:b9:14:ff:b5:97: 27:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B1:1D:AB:5D:0E:0F:D4:1B:58:90:58:DD:29:11:B1:7D:2A:F1:4F X509v3 Authority Key Identifier: keyid:ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/_7Edq10OD9QbWJBY3SkRsX0q8U8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.144.0/22 Signature Algorithm: sha256WithRSAEncryption 94:8f:6a:34:50:17:1a:4d:c6:b2:c4:be:6e:30:e6:3b:28:ea: cf:91:55:02:4e:5b:fa:1c:32:39:b0:88:56:43:94:64:3e:fe: cd:0f:2d:18:f0:6c:65:43:35:5b:e0:e9:88:68:5e:77:8f:d2: 82:c0:96:f1:08:c6:a6:48:a1:c4:5f:5c:a7:fe:ba:bd:99:63: d8:f4:e8:de:6e:de:c4:b2:b3:e1:93:ed:66:54:6d:91:ff:79: 93:44:39:3e:51:0f:af:d9:44:31:51:d8:a7:fb:87:62:77:af: d8:9e:6e:b1:e7:d6:17:47:f4:3e:d4:94:17:9b:90:39:99:d7: ef:08:9e:87:93:5b:4f:87:b1:a1:d2:98:7e:6f:13:76:e5:60: 56:72:72:a0:23:b1:4c:8f:e0:c1:fb:26:ac:8d:22:4c:b5:12: 27:df:c9:42:a8:0d:b8:3c:44:c1:68:d3:60:9c:1d:b2:45:a9: 9d:6a:5f:e5:4f:9a:69:31:f7:b2:56:f2:17:cb:8f:77:93:48: 4f:ca:de:85:db:0a:ac:95:f5:8d:0e:fe:19:8d:25:1a:e7:09: 4a:c0:2f:e7:0e:89:5b:af:ce:35:84:68:cb:bd:ef:7c:d3:42: 85:53:37:aa:4c:79:6a:99:ce:71:27:e2:74:6c:90:d8:5f:f1: 6b:7c:af:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OHJCQM75as7CRGxehfzlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZmUzZjZmNmQ5ODcxNGUwMWYwOGM3M2IyNjQ0MzY4Nzc0 ZTg2NjAwHhcNMjYwMTAyMTAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmIxMWRhYjVkMGUwZmQ0MWI1ODkwNThkZDI5MTFiMTdkMmFmMTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3k8IDDiFOtqx7qo44oB2y67AqXhE v/dH9yPNrO0a6T2yoWk2tPYfo5Gjy0NCf+QkVa6RSTF74+FL2Wws1bhYsRxCSPI9 mH7QHq2Gbt1W5qZJXjBCoVuG5FxRBYR1j9QA5OKdJ2DwOR2eAXEigSJIu4cro/63 ZGoS0jvAxTj3pgmBSXKNuH25IFDZgAlsMI6axAlmFImkSeBbfV+PkgVKgIIPE3AR guPiqhyGO+KQyWBtem4ooyNwMnX0dMK5TvuR0Ol4s7nqZJ5ggKGIiYsaQHtdaUGT qdKurE8hujGnBhFQeDLEUMAFs3p0rB9nITNfc49fcPumoq7OuRT/tZcneQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP+xHatdDg/UG1iQWN0pEbF9KvFPMB8GA1UdIwQY MBaAFO3+P29tmHFOAfCMc7JkQ2h3ToZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2Y0X2IyMlljVTRCOEl4enNtUkRhSGRPaG1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xODUzNjItYzhkOS00NTZmLTllMmMt ZWI0YTk2YzM4YzZmLzEvXzdFZHExME9EOVFiV0pCWTNTa1JzWDBxOFU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8xODUzNjItYzhkOS00NTZmLTllMmMtZWI0YTk2YzM4YzZm LzEvN2Y0X2IyMlljVTRCOEl4enNtUkRhSGRPaG1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwjKQMA0G CSqGSIb3DQEBCwUAA4IBAQCUj2o0UBcaTcayxL5uMOY7KOrPkVUCTlv6HDI5sIhW Q5RkPv7NDy0Y8GxlQzVb4OmIaF53j9KCwJbxCMamSKHEX1yn/rq9mWPY9Ojebt7E srPhk+1mVG2R/3mTRDk+UQ+v2UQxUdin+4did6/Ynm6x59YXR/Q+1JQXm5A5mdfv CJ6Hk1tPh7Gh0ph+bxN25WBWcnKgI7FMj+DB+yasjSJMtRIn38lCqA24PETBaNNg nB2yRamdal/lT5ppMfeyVvIXy493k0hPyt6F2wqslfWNDv4ZjSUa5wlKwC/nDolb r841hGjLve9800KFUzeqTHlqmc5xJ+J0bJDYX/FrfK9C -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:10 2026 by rpki-client