This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/7ej_XxEBg9o3-eE9Q3Lx5XmMD_c.roa File: 7ej_XxEBg9o3-eE9Q3Lx5XmMD_c.roa (raw, json) Hash identifier: sov7zsjzaMKFEnXSzmTfyoM9h1FuDfdA1nCab6IYHak= Subject key identifier: ED:E8:FF:5F:11:01:83:DA:37:F9:E1:3D:43:72:F1:E5:79:8C:0F:F7 Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Certificate serial: 019B7F15A7AEDA2E5709A3324E6FD373AEDF Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/7ej_XxEBg9o3-eE9Q3Lx5XmMD_c.roa Signing time: Fri 02 Jan 2026 14:21:24 +0000 ROA not before: Fri 02 Jan 2026 14:21:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 393560 IP address blocks: 93.191.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a7:ae:da:2e:57:09:a3:32:4e:6f:d3:73:ae:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Validity Not Before: Jan 2 14:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ede8ff5f110183da37f9e13d4372f1e5798c0ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:5b:9e:1c:70:e4:28:94:d9:d4:cf:97:14:10: 2d:c6:dc:3a:93:11:7b:78:bc:30:43:8f:cc:2e:92: 26:4f:59:c0:65:ab:97:d7:36:44:ea:74:cb:1c:62: d2:94:7a:79:1a:d8:be:39:ef:ba:16:1d:d6:60:db: 3c:18:00:9a:e5:db:ec:d6:6c:f2:3f:b0:f3:7e:c9: 15:f9:6f:dc:07:5f:00:50:52:4c:a5:f2:a4:3b:ef: c4:3e:49:49:07:ab:f3:ed:fd:cd:b7:d4:b4:37:1d: db:fb:f1:6d:12:cd:9a:a7:3f:ba:f8:ea:aa:af:ca: 4d:32:31:49:fa:84:95:85:08:42:da:13:a7:76:57: f5:fa:1c:25:4f:53:80:77:1d:7a:a0:aa:00:58:2d: 58:26:b9:3e:db:02:ce:7d:e0:d9:dd:8b:8e:b0:c9: 45:4a:2f:8e:c6:6e:3b:c9:a3:55:6f:e6:ce:05:78: 55:23:b0:11:ef:94:fb:06:91:26:22:4a:ff:b2:4e: 1e:07:f9:c6:e7:e2:b8:0b:f4:9a:75:51:1c:b1:f0: 64:f7:c6:fc:5d:58:a5:9f:76:1e:a1:e3:11:de:1e: e2:c8:ce:6f:cc:28:36:f6:9e:39:05:9d:a4:9b:29: bb:98:0c:bb:b3:0a:2f:14:6e:2b:ae:31:3a:e8:ac: a7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E8:FF:5F:11:01:83:DA:37:F9:E1:3D:43:72:F1:E5:79:8C:0F:F7 X509v3 Authority Key Identifier: keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/7ej_XxEBg9o3-eE9Q3Lx5XmMD_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.191.170.0/24 Signature Algorithm: sha256WithRSAEncryption 90:d5:1e:f7:7b:fc:ff:bc:a4:40:64:08:d6:d9:b2:71:41:b2: 2a:dd:dd:98:55:b9:9f:40:8f:fd:9a:6b:ae:43:c4:1f:7e:50: dc:f8:46:eb:1d:9f:92:92:65:a0:ec:80:63:9e:b1:1c:21:2c: 11:4a:17:ba:bf:a6:0d:f6:59:93:bd:be:c3:63:34:fd:9d:1b: f9:9c:c1:37:f8:83:39:bf:08:08:1c:c4:45:21:7a:16:f4:ac: 16:4d:f9:f7:39:e3:e2:5f:d6:eb:01:fe:f7:dc:24:ed:83:f7: e0:0f:d5:6f:e4:e9:3b:06:5d:63:da:c0:26:64:ae:c4:91:d2: 9b:2f:5c:04:22:49:89:07:fb:b1:9b:af:88:62:68:11:cb:b4: 57:84:88:aa:bb:7d:54:47:0c:ff:e1:d0:f5:cd:30:36:c2:ef: ae:fe:7b:7c:be:95:d5:7b:4c:d3:80:1a:23:23:b9:f3:7d:19: 59:9d:96:61:31:7c:48:3b:90:63:94:d8:7e:a7:4e:db:e1:51: ed:c7:15:16:8f:98:9a:22:5b:3e:7c:d5:e0:5a:0e:69:a0:a7: f5:96:08:3c:0c:02:44:31:34:d4:b4:a9:8b:93:f9:2d:72:ed: 5a:dc:32:50:1e:9e:2c:0c:f9:ad:a7:78:8d:53:9d:b8:1f:76: 70:bd:a4:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Faeu2i5XCaMyTm/Tc67fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5 YmQ2YWEwHhcNMjYwMTAyMTQyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGU4ZmY1ZjExMDE4M2RhMzdmOWUxM2Q0MzcyZjFlNTc5OGMwZmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+VueHHDkKJTZ1M+XFBAtxtw6kxF7 eLwwQ4/MLpImT1nAZauX1zZE6nTLHGLSlHp5Gti+Oe+6Fh3WYNs8GACa5dvs1mzy P7DzfskV+W/cB18AUFJMpfKkO+/EPklJB6vz7f3Nt9S0Nx3b+/FtEs2apz+6+Oqq r8pNMjFJ+oSVhQhC2hOndlf1+hwlT1OAdx16oKoAWC1YJrk+2wLOfeDZ3YuOsMlF Si+Oxm47yaNVb+bOBXhVI7AR75T7BpEmIkr/sk4eB/nG5+K4C/SadVEcsfBk98b8 XViln3YeoeMR3h7iyM5vzCg29p45BZ2kmym7mAy7swovFG4rrjE66KynMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO3o/18RAYPaN/nhPUNy8eV5jA/3MB8GA1UdIwQY MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt ODhkMWNhYzllNGYxLzEvN2VqX1h4RUJnOW8zLWVFOVEzTHg1WG1NRF9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXb+qMA0G CSqGSIb3DQEBCwUAA4IBAQCQ1R73e/z/vKRAZAjW2bJxQbIq3d2YVbmfQI/9mmuu Q8QfflDc+EbrHZ+SkmWg7IBjnrEcISwRShe6v6YN9lmTvb7DYzT9nRv5nME3+IM5 vwgIHMRFIXoW9KwWTfn3OePiX9brAf733CTtg/fgD9Vv5Ok7Bl1j2sAmZK7EkdKb L1wEIkmJB/uxm6+IYmgRy7RXhIiqu31URwz/4dD1zTA2wu+u/nt8vpXVe0zTgBoj I7nzfRlZnZZhMXxIO5BjlNh+p07b4VHtxxUWj5iaIls+fNXgWg5poKf1lgg8DAJE MTTUtKmLk/ktcu1a3DJQHp4sDPmtp3iNU524H3ZwvaSu -----END CERTIFICATE-----Generated at Thu Jan 8 11:01:38 2026 by rpki-client