This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/T7i_p7iHry9KxUTj7Bl6jCpCEl8.roa File: T7i_p7iHry9KxUTj7Bl6jCpCEl8.roa (raw, json) Hash identifier: S3HFZOHNhrK5JfLIS/zCxpsr98ctYvNI/SQplbg/Stw= Subject key identifier: 4F:B8:BF:A7:B8:87:AF:2F:4A:C5:44:E3:EC:19:7A:8C:2A:42:12:5F Certificate issuer: /CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f Certificate serial: 019B7F1579BEEFCBF03046A533CA19F740ED Authority key identifier: 8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/T7i_p7iHry9KxUTj7Bl6jCpCEl8.roa Signing time: Fri 02 Jan 2026 14:21:12 +0000 ROA not before: Fri 02 Jan 2026 14:21:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213362 IP address blocks: 185.163.49.0/24 maxlen: 24 2a10:5100::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:79:be:ef:cb:f0:30:46:a5:33:ca:19:f7:40:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f Validity Not Before: Jan 2 14:21:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fb8bfa7b887af2f4ac544e3ec197a8c2a42125f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:45:73:7a:a5:ec:f6:5e:b4:ef:a0:ef:7e:94: ec:14:60:a8:69:26:98:06:82:ce:37:5f:86:8f:66: e4:23:aa:30:56:57:0f:7b:37:ac:ff:ae:d4:d9:b1: 41:2e:ab:32:b3:ff:0a:54:b3:e8:a5:a4:b2:b3:ae: 7d:b3:ab:18:09:f5:69:e5:9d:34:09:0b:98:d0:50: b3:2e:57:f3:2c:8e:e6:0b:5a:e0:d7:20:6b:40:da: 61:80:7c:fd:0b:a9:c6:6b:3e:3f:c6:f1:bb:4e:a3: 86:62:5d:31:40:7d:d9:6b:14:81:19:e7:ae:e2:98: 26:ab:0e:54:7d:f2:08:02:57:cd:86:02:fb:f4:e1: ce:d2:59:de:de:33:91:b9:46:e4:7f:1a:aa:2a:a5: cb:a7:d8:d9:31:79:be:b6:8b:84:5a:49:96:bf:61: 37:d4:89:c4:10:42:51:7d:ef:d2:0c:88:90:c8:88: e8:03:93:89:72:10:00:52:69:a9:bd:f8:3d:98:09: 7d:ba:d9:95:a5:fc:95:81:0f:6c:b8:38:71:8e:1e: 03:e0:ef:6c:9c:e6:65:05:44:88:a1:af:15:ee:5d: f8:f3:b0:c2:3b:f1:24:bf:45:8e:71:9c:63:19:20: 7b:e9:26:06:b8:92:68:99:50:df:ca:21:35:4d:fd: b2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B8:BF:A7:B8:87:AF:2F:4A:C5:44:E3:EC:19:7A:8C:2A:42:12:5F X509v3 Authority Key Identifier: keyid:8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/T7i_p7iHry9KxUTj7Bl6jCpCEl8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.163.49.0/24 IPv6: 2a10:5100::/29 Signature Algorithm: sha256WithRSAEncryption 82:36:65:36:16:ce:e6:f3:c9:fc:dd:cd:38:17:c0:35:7e:3d: 00:6a:ee:3c:b4:8b:e5:fe:29:fb:a3:fd:7c:2a:31:c6:6a:94: b7:b5:3d:de:b8:c4:b5:57:e8:3b:9c:f6:83:a6:b2:a9:bd:23: 47:d7:78:f9:91:5a:2b:67:af:e0:13:f3:64:05:ed:d2:10:0d: 0a:74:43:19:cf:0a:5f:37:69:17:ce:64:5b:81:2e:fc:2a:d2: dc:2a:5f:38:2c:50:33:49:73:90:87:ae:7f:b9:fb:74:01:c5: 72:a3:03:54:f2:9a:e2:ca:db:4a:01:73:b7:9c:2d:57:e5:8c: b9:00:3a:59:53:fa:68:29:fe:2a:a1:d2:b7:be:71:bf:71:22: f2:ee:22:11:46:28:c0:e3:2e:76:9d:2a:cb:db:0b:66:d6:fc: 1b:4f:cf:b5:95:48:0f:8d:2d:58:13:50:6c:44:f6:82:7d:d3: fd:f2:4f:2e:28:b0:9d:fc:17:87:b3:4d:ee:36:2b:3a:16:31: 54:51:4b:57:fa:e5:7a:69:7f:d5:cd:39:d5:87:d5:94:e8:a5: 0c:7e:fe:f1:61:8c:c4:c2:0e:36:c2:89:90:91:ba:da:43:d2: be:ae:b1:bd:99:6a:2e:f8:ec:99:df:b5:77:ab:4d:b7:96:69: e5:52:70:24 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FXm+78vwMEalM8oZ90DtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzY0MDE3MzM0MmZhZThiM2QyYzhjYzFmOWI1ZGRkMTQ5 NDg5M2YwHhcNMjYwMTAyMTQyMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmI4YmZhN2I4ODdhZjJmNGFjNTQ0ZTNlYzE5N2E4YzJhNDIxMjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EVzeqXs9l6076DvfpTsFGCoaSaY BoLON1+Gj2bkI6owVlcPezes/67U2bFBLqsys/8KVLPopaSys659s6sYCfVp5Z00 CQuY0FCzLlfzLI7mC1rg1yBrQNphgHz9C6nGaz4/xvG7TqOGYl0xQH3ZaxSBGeeu 4pgmqw5UffIIAlfNhgL79OHO0lne3jORuUbkfxqqKqXLp9jZMXm+touEWkmWv2E3 1InEEEJRfe/SDIiQyIjoA5OJchAAUmmpvfg9mAl9utmVpfyVgQ9suDhxjh4D4O9s nOZlBUSIoa8V7l3487DCO/Ekv0WOcZxjGSB76SYGuJJomVDfyiE1Tf2ySQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFE+4v6e4h68vSsVE4+wZeowqQhJfMB8GA1UdIwQY MBaAFI82QBczQvros9LIzB+bXd0UlIk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpaQUZ6TkMtdWl6MHNqTUg1dGQzUlNVaVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lZGMxN2EtNDI3Zi00MGJmLTlmZjQt YmUyYjNlYWI0ZDc0LzEvVDdpX3A3aUhyeTlLeFVUajdCbDZqQ3BDRWw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9lZGMxN2EtNDI3Zi00MGJmLTlmZjQtYmUyYjNlYWI0ZDc0 LzEvanpaQUZ6TkMtdWl6MHNqTUg1dGQzUlNVaVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuaMxMA0E AgACMAcDBQMqEFEAMA0GCSqGSIb3DQEBCwUAA4IBAQCCNmU2Fs7m88n83c04F8A1 fj0Aau48tIvl/in7o/18KjHGapS3tT3euMS1V+g7nPaDprKpvSNH13j5kVorZ6/g E/NkBe3SEA0KdEMZzwpfN2kXzmRbgS78KtLcKl84LFAzSXOQh65/uft0AcVyowNU 8priyttKAXO3nC1X5Yy5ADpZU/poKf4qodK3vnG/cSLy7iIRRijA4y52nSrL2wtm 1vwbT8+1lUgPjS1YE1BsRPaCfdP98k8uKLCd/BeHs03uNis6FjFUUUtX+uV6aX/V zTnVh9WU6KUMfv7xYYzEwg42womQkbraQ9K+rrG9mWou+OyZ37V3q023lmnlUnAk -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:03 2026 by rpki-client