This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/7Azcn7c2MweeaxuWOj7OLj6diFk.roa File: 7Azcn7c2MweeaxuWOj7OLj6diFk.roa (raw, json) Hash identifier: 9wrLyTPi+lVBHZ3aYuQBL6m3fTURk0GDh6dTwauLiZs= Subject key identifier: EC:0C:DC:9F:B7:36:33:07:9E:6B:1B:96:3A:3E:CE:2E:3E:9D:88:59 Certificate issuer: /CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea Certificate serial: 019B7A5AAC40844A952F04A28902BC8E278E Authority key identifier: 4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/7Azcn7c2MweeaxuWOj7OLj6diFk.roa Signing time: Thu 01 Jan 2026 16:18:41 +0000 ROA not before: Thu 01 Jan 2026 16:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28907 IP address blocks: 91.228.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ac:40:84:4a:95:2f:04:a2:89:02:bc:8e:27:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea Validity Not Before: Jan 1 16:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec0cdc9fb73633079e6b1b963a3ece2e3e9d8859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ab:2f:90:e6:91:e8:a8:f6:f4:e5:e0:f3:31: d9:12:13:54:c3:4f:31:2a:b0:84:e2:77:12:89:19: 53:67:b5:4b:55:17:68:90:e2:75:cc:ea:2b:ab:52: 02:e7:1d:a1:76:3d:eb:22:01:95:bb:25:46:0b:54: dc:78:e8:bf:e7:d2:2a:59:48:a2:9b:9d:9a:41:2e: 37:96:08:a6:6e:24:9e:77:a3:85:96:10:14:12:ae: af:6c:76:37:fc:91:a0:92:70:51:dd:5d:64:40:63: 6d:0b:57:e5:ba:45:b4:1d:5d:13:8e:f6:b2:5f:96: 97:bf:76:f6:85:7a:d2:64:70:e0:18:af:3d:53:2f: 6c:19:33:e3:99:1f:1a:f0:be:95:af:b7:ee:b1:3f: 23:d1:55:09:3a:96:8d:81:6f:bc:f5:03:c4:9e:83: 8b:67:94:83:55:4e:ea:f4:04:0f:c0:32:86:a8:4a: 2d:79:a2:2c:69:15:62:48:80:f7:96:8c:b4:c1:c0: 48:ef:f7:46:f8:a9:89:1a:7b:8d:4b:00:7a:7c:f4: 31:4b:99:87:df:5b:f1:8c:f3:c5:0e:26:36:5f:7e: 08:62:2e:ce:88:30:87:5b:3d:24:74:8f:4f:5f:39: 93:2b:09:1b:d9:83:e9:39:9c:4b:ee:59:e5:72:ea: cf:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0C:DC:9F:B7:36:33:07:9E:6B:1B:96:3A:3E:CE:2E:3E:9D:88:59 X509v3 Authority Key Identifier: keyid:4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/7Azcn7c2MweeaxuWOj7OLj6diFk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.228.146.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:64:92:5f:96:28:16:e4:cb:bc:64:17:7c:0f:cb:01:04:7f: 5f:1a:62:5b:b9:ce:c4:bb:68:7a:72:29:f6:0a:c0:aa:1f:74: 17:2c:f2:9e:6f:40:2c:bf:24:f8:07:00:67:c9:f5:0f:54:8f: 89:7a:04:cc:41:2c:6a:d6:dd:8a:9e:04:d8:7f:77:33:8a:59: a6:82:5e:34:96:2b:07:b4:b3:78:17:60:8d:ca:4a:80:e5:31: e9:d4:5f:b1:15:f0:07:76:65:3f:ba:14:81:8e:76:ff:ee:e6: 79:71:50:9f:0b:34:91:9f:2d:fa:23:7a:84:fb:73:4f:82:27: e9:42:7b:de:c9:94:17:d8:44:16:4f:ac:f1:47:57:6a:51:27: 0f:85:5b:1c:8d:bb:8b:90:1f:e2:03:94:50:ee:54:56:0f:5b: 9a:a8:cc:eb:09:bb:f2:ca:e0:96:99:ed:97:e5:6a:87:2f:f1: fe:4d:d7:ba:00:17:cc:24:b9:bd:4e:9d:bc:68:b8:20:63:d4: 03:1e:25:2e:49:51:0f:1d:45:1a:f3:fa:4d:38:f7:cd:b1:9e: 32:76:65:91:b7:bd:60:ad:46:e1:03:3e:e6:33:79:8a:5a:b4: 06:4d:02:7b:4e:ca:57:ba:ab:0a:9b:d9:00:8f:9f:b0:e8:f8: 19:44:ea:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WqxAhEqVLwSiiQK8jieOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZTRmOTY3NzFkOTFmODdjMjFiZTlmMDBkMTIwMzI3ZjVi YmYyZWEwHhcNMjYwMTAxMTYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzBjZGM5ZmI3MzYzMzA3OWU2YjFiOTYzYTNlY2UyZTNlOWQ4ODU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KsvkOaR6Kj29OXg8zHZEhNUw08x KrCE4ncSiRlTZ7VLVRdokOJ1zOorq1IC5x2hdj3rIgGVuyVGC1TceOi/59IqWUii m52aQS43lgimbiSed6OFlhAUEq6vbHY3/JGgknBR3V1kQGNtC1flukW0HV0Tjvay X5aXv3b2hXrSZHDgGK89Uy9sGTPjmR8a8L6Vr7fusT8j0VUJOpaNgW+89QPEnoOL Z5SDVU7q9AQPwDKGqEoteaIsaRViSID3loy0wcBI7/dG+KmJGnuNSwB6fPQxS5mH 31vxjPPFDiY2X34IYi7OiDCHWz0kdI9PXzmTKwkb2YPpOZxL7lnlcurPfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOwM3J+3NjMHnmsbljo+zi4+nYhZMB8GA1UdIwQY MBaAFE3k+Wdx2R+Hwhvp8A0SAyf1u/LqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGVUNVozSFpINGZDRy1ud0RSSURKX1c3OHVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8wMmY5YmItNmU2YS00NzhhLWJhYzgt NTkxMWZlNjNhZjc5LzEvN0F6Y243YzJNd2VlYXh1V09qN09MajZkaUZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8wMmY5YmItNmU2YS00NzhhLWJhYzgtNTkxMWZlNjNhZjc5 LzEvVGVUNVozSFpINGZDRy1ud0RSSURKX1c3OHVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+SSMA0G CSqGSIb3DQEBCwUAA4IBAQBdZJJfligW5Mu8ZBd8D8sBBH9fGmJbuc7Eu2h6cin2 CsCqH3QXLPKeb0AsvyT4BwBnyfUPVI+JegTMQSxq1t2KngTYf3czilmmgl40lisH tLN4F2CNykqA5THp1F+xFfAHdmU/uhSBjnb/7uZ5cVCfCzSRny36I3qE+3NPgifp QnveyZQX2EQWT6zxR1dqUScPhVscjbuLkB/iA5RQ7lRWD1uaqMzrCbvyyuCWme2X 5WqHL/H+Tde6ABfMJLm9Tp28aLggY9QDHiUuSVEPHUUa8/pNOPfNsZ4ydmWRt71g rUbhAz7mM3mKWrQGTQJ7TspXuqsKm9kAj5+w6PgZROqT -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:31 2026 by rpki-client