This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/7OIXl3o8PFHWuf-zx-Tb4PF35uo.roa File: 7OIXl3o8PFHWuf-zx-Tb4PF35uo.roa (raw, json) Hash identifier: Xbi273dcIaAFyl/nVlC2n8+CCSUGBo1kuHLcvAbwYs0= Subject key identifier: EC:E2:17:97:7A:3C:3C:51:D6:B9:FF:B3:C7:E4:DB:E0:F1:77:E6:EA Certificate issuer: /CN=e9e415ed5c0c7759981001b8db262da779a04b3d Certificate serial: 019B77C6D0BCE6A38F00D5E594CA91D010CB Authority key identifier: E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/7OIXl3o8PFHWuf-zx-Tb4PF35uo.roa Signing time: Thu 01 Jan 2026 04:17:56 +0000 ROA not before: Thu 01 Jan 2026 04:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3225 IP address blocks: 213.132.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.mft rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d0:bc:e6:a3:8f:00:d5:e5:94:ca:91:d0:10:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9e415ed5c0c7759981001b8db262da779a04b3d Validity Not Before: Jan 1 04:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ece217977a3c3c51d6b9ffb3c7e4dbe0f177e6ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:69:a5:05:02:4a:59:a4:2c:43:86:09:99:9a: 9e:36:08:1b:2b:04:e7:68:63:70:e7:41:28:08:9c: 21:63:c6:13:c3:08:06:f3:ef:33:80:68:ad:cb:ee: 4a:df:6d:7e:9a:87:9c:53:dd:bb:99:0b:94:cf:11: b4:43:ba:f9:3f:0e:8f:6e:fb:e8:d5:96:7e:63:03: e4:48:2b:cf:d7:2a:51:e5:63:af:2a:6f:01:8c:48: a3:d5:23:fa:9f:28:27:9c:56:90:7a:76:d6:f7:c6: b9:87:48:dd:6e:81:b0:40:58:ce:37:9a:56:20:4d: e6:34:fa:6d:db:e2:8c:0f:c8:55:40:ca:24:cd:17: 0b:80:58:7b:9d:77:b7:b8:a5:64:84:07:83:e9:e6: 62:f8:a3:0d:35:af:78:8a:71:9a:29:6d:47:b9:03: 63:28:04:57:9b:23:fc:4d:d9:76:2c:93:c2:60:d4: 49:f7:20:54:0d:cc:a2:d7:47:cf:23:64:5c:49:0f: 67:f1:1c:22:bf:47:d2:93:0a:03:06:f5:b2:c0:e9: f3:e6:29:a9:2d:8e:35:5d:86:c6:b6:c4:31:27:e5: 8b:40:86:37:af:15:6a:fb:1b:16:a8:ab:c2:03:d9: 27:96:c7:2c:a6:49:2f:53:11:0d:43:c6:95:3e:7d: 5f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E2:17:97:7A:3C:3C:51:D6:B9:FF:B3:C7:E4:DB:E0:F1:77:E6:EA X509v3 Authority Key Identifier: keyid:E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/7OIXl3o8PFHWuf-zx-Tb4PF35uo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.132.251.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:53:09:7c:86:6b:5e:95:a7:5b:21:73:c0:3d:79:06:c0:89: 29:d5:6a:eb:f5:de:4b:cc:bf:45:cb:f6:1b:19:bb:a1:8b:e9: 87:75:35:50:16:d3:9d:26:82:36:61:3f:ed:5d:02:e7:75:c0: ae:99:8a:05:a4:85:f1:a7:82:26:14:fd:63:46:bb:99:18:65: bd:ee:d2:8e:69:8f:13:c0:e1:01:f6:c7:ff:f1:f8:f1:0f:cf: ca:5d:11:52:1c:10:34:41:03:3c:08:32:bc:83:29:a8:84:a2: eb:93:a7:4c:fa:be:ce:d9:d4:bb:66:c8:b5:89:2c:03:38:48: 68:7e:ea:51:7b:80:4b:49:db:7a:c1:a9:30:6b:d2:80:aa:ac: 57:f6:26:ae:70:db:c3:10:94:0b:04:7a:d1:00:9b:e1:c1:ab: 54:c2:6d:62:c2:7b:f5:82:30:c4:38:24:0b:22:1f:44:dd:2f: 99:00:a2:10:41:a1:0c:37:f1:a1:29:d6:8d:4b:12:1e:a9:4b: 59:8e:24:04:88:b6:d7:9a:cc:81:8b:bf:2c:56:8a:35:a2:42: 0a:b0:e6:49:0a:59:01:d1:96:d2:ea:10:bd:3d:cc:ce:e5:97: 6a:0b:c3:fa:55:d7:37:cc:a0:0b:13:d1:63:e2:ab:68:48:ca: dc:ae:b9:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xtC85qOPANXllMqR0BDLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5ZTQxNWVkNWMwYzc3NTk5ODEwMDFiOGRiMjYyZGE3Nzlh MDRiM2QwHhcNMjYwMTAxMDQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2UyMTc5NzdhM2MzYzUxZDZiOWZmYjNjN2U0ZGJlMGYxNzdlNmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmmlBQJKWaQsQ4YJmZqeNggbKwTn aGNw50EoCJwhY8YTwwgG8+8zgGity+5K321+moecU927mQuUzxG0Q7r5Pw6Pbvvo 1ZZ+YwPkSCvP1ypR5WOvKm8BjEij1SP6nygnnFaQenbW98a5h0jdboGwQFjON5pW IE3mNPpt2+KMD8hVQMokzRcLgFh7nXe3uKVkhAeD6eZi+KMNNa94inGaKW1HuQNj KARXmyP8Tdl2LJPCYNRJ9yBUDcyi10fPI2RcSQ9n8Rwiv0fSkwoDBvWywOnz5imp LY41XYbGtsQxJ+WLQIY3rxVq+xsWqKvCA9knlscspkkvUxENQ8aVPn1fUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOziF5d6PDxR1rn/s8fk2+Dxd+bqMB8GA1UdIwQY MBaAFOnkFe1cDHdZmBABuNsmLad5oEs9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmVRVjdWd01kMW1ZRUFHNDJ5WXRwM21nU3owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS83ZWI2ODMtZTIxOC00MzgyLWJmZDkt MjhkYTZhMWJhMTI4LzEvN09JWGwzbzhQRkhXdWYtengtVGI0UEYzNXVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS83ZWI2ODMtZTIxOC00MzgyLWJmZDktMjhkYTZhMWJhMTI4 LzEvNmVRVjdWd01kMW1ZRUFHNDJ5WXRwM21nU3owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YT7MA0G CSqGSIb3DQEBCwUAA4IBAQBqUwl8hmteladbIXPAPXkGwIkp1Wrr9d5LzL9Fy/Yb Gbuhi+mHdTVQFtOdJoI2YT/tXQLndcCumYoFpIXxp4ImFP1jRruZGGW97tKOaY8T wOEB9sf/8fjxD8/KXRFSHBA0QQM8CDK8gymohKLrk6dM+r7O2dS7Zsi1iSwDOEho fupRe4BLSdt6wakwa9KAqqxX9iaucNvDEJQLBHrRAJvhwatUwm1iwnv1gjDEOCQL Ih9E3S+ZAKIQQaEMN/GhKdaNSxIeqUtZjiQEiLbXmsyBi78sVoo1okIKsOZJClkB 0ZbS6hC9PczO5ZdqC8P6Vdc3zKALE9Fj4qtoSMrcrrk8 -----END CERTIFICATE-----Generated at Tue Jan 20 09:21:47 2026 by rpki-client