This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/7JyQ0DDZ_uriVr1_R-qqSbjcNCI.roa File: 7JyQ0DDZ_uriVr1_R-qqSbjcNCI.roa (raw, json) Hash identifier: Z91Be9fMnlCk9EcCA8UjSbIMFHHE/PnW3Mwi2btNcCM= Subject key identifier: EC:9C:90:D0:30:D9:FE:EA:E2:56:BD:7F:47:EA:AA:49:B8:DC:34:22 Certificate issuer: /CN=8eb2f81b8c47c2b588f451d4037c6837870b397f Certificate serial: 019B7C11A3F6AC11991DF5EF076683AFF6A4 Authority key identifier: 8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/7JyQ0DDZ_uriVr1_R-qqSbjcNCI.roa Signing time: Fri 02 Jan 2026 00:18:09 +0000 ROA not before: Fri 02 Jan 2026 00:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59848 IP address blocks: 146.19.242.0/24 maxlen: 24 2a0c:e880::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:a3:f6:ac:11:99:1d:f5:ef:07:66:83:af:f6:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eb2f81b8c47c2b588f451d4037c6837870b397f Validity Not Before: Jan 2 00:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec9c90d030d9feeae256bd7f47eaaa49b8dc3422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5c:23:87:77:24:5a:04:7c:2c:1f:09:2b:95: cc:99:8c:a3:c6:47:ac:be:de:74:c6:8a:88:ee:87: 3b:7b:63:43:d3:e5:ab:e3:53:bc:16:6a:a8:4d:2f: 1e:f8:f0:fa:0e:77:78:b0:da:d7:ed:f9:d2:17:d6: c0:ff:6c:6d:98:12:42:94:39:77:98:8c:0f:8a:df: 95:7b:51:8b:e9:72:1a:fa:2e:8c:f5:82:20:57:4e: fa:92:ce:a8:65:6b:fc:61:f0:3c:7d:37:9b:5a:43: 9b:9a:99:32:48:af:59:ed:c0:b8:84:5f:65:b5:81: 66:25:e7:08:e0:e6:25:e3:9a:3d:0a:70:4a:bf:45: b1:9d:f6:4f:57:14:12:82:d7:aa:3a:65:25:99:fb: e7:9e:e6:c2:13:74:ec:a9:78:50:8d:e3:29:43:4f: 4a:16:11:3c:fe:54:67:b4:05:8e:eb:29:c6:2b:5d: a8:a2:b0:78:97:29:33:1c:d6:03:3a:aa:15:68:b0: 8b:9f:98:d6:6d:76:2f:43:01:66:11:8f:11:6c:10: 17:c2:32:aa:15:4f:3c:0f:48:82:47:3b:60:d6:7c: 86:1d:0e:f2:b8:c8:24:30:db:81:aa:95:90:42:8d: 3d:02:a5:ba:29:fc:d7:36:71:34:4e:e5:72:95:d6: 82:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9C:90:D0:30:D9:FE:EA:E2:56:BD:7F:47:EA:AA:49:B8:DC:34:22 X509v3 Authority Key Identifier: keyid:8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/7JyQ0DDZ_uriVr1_R-qqSbjcNCI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.242.0/24 IPv6: 2a0c:e880::/29 Signature Algorithm: sha256WithRSAEncryption 74:a6:60:95:2f:86:c5:66:3c:3b:35:79:88:61:42:e3:19:6c: d9:be:e0:7f:4f:fc:da:40:59:b1:cf:8b:00:fd:11:83:f7:53: 7b:8e:ba:7d:fc:d1:53:31:fa:9a:b4:c5:30:16:43:c8:4d:1a: 1d:9e:23:69:32:5a:cb:25:21:58:21:70:46:ae:4f:36:54:bb: f3:ae:11:77:40:73:d5:62:28:a1:4b:8e:58:7e:2e:f5:cd:d1: c1:63:0c:fd:5d:93:b3:b5:a2:01:26:71:92:2f:02:d6:2d:ce: eb:62:17:b0:68:8d:42:1a:cb:45:5f:11:f7:b5:b1:1d:43:d0: 92:72:41:1d:94:af:c1:4f:fe:ce:d4:6b:c2:db:4b:21:c1:36: 4b:dc:79:7c:72:8d:38:9e:4d:f4:01:0b:89:db:78:7d:01:9e: be:77:56:15:1d:9c:0c:c1:57:72:c8:a9:ec:18:ef:7a:40:8d: 03:33:86:f1:2b:9f:ef:d9:37:ab:bf:54:3f:c5:23:bd:10:24: 0f:99:bc:63:32:1f:69:8a:d4:be:ff:48:c0:f8:bc:29:2d:96: 38:7b:e1:d6:b4:ff:fb:59:5b:f9:80:42:b0:29:0a:4c:e8:67: ba:02:7f:20:2b:aa:12:32:8e:50:57:24:3a:b1:12:69:af:cb: da:0f:04:c0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EaP2rBGZHfXvB2aDr/akMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYjJmODFiOGM0N2MyYjU4OGY0NTFkNDAzN2M2ODM3ODcw YjM5N2YwHhcNMjYwMTAyMDAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzljOTBkMDMwZDlmZWVhZTI1NmJkN2Y0N2VhYWE0OWI4ZGMzNDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1wjh3ckWgR8LB8JK5XMmYyjxkes vt50xoqI7oc7e2ND0+Wr41O8FmqoTS8e+PD6Dnd4sNrX7fnSF9bA/2xtmBJClDl3 mIwPit+Ve1GL6XIa+i6M9YIgV076ks6oZWv8YfA8fTebWkObmpkySK9Z7cC4hF9l tYFmJecI4OYl45o9CnBKv0WxnfZPVxQSgteqOmUlmfvnnubCE3TsqXhQjeMpQ09K FhE8/lRntAWO6ynGK12oorB4lykzHNYDOqoVaLCLn5jWbXYvQwFmEY8RbBAXwjKq FU88D0iCRztg1nyGHQ7yuMgkMNuBqpWQQo09AqW6KfzXNnE0TuVyldaCSwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOyckNAw2f7q4la9f0fqqkm43DQiMB8GA1UdIwQY MBaAFI6y+BuMR8K1iPRR1AN8aDeHCzl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanJMNEc0eEh3cldJOUZIVUEzeG9ONGNMT1g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS85ZTFmNDYtODAyYi00OWQxLTkxYjgt NDgzZmM5MDcwOGQ1LzEvN0p5UTBERFpfdXJpVnIxX1ItcXFTYmpjTkNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS85ZTFmNDYtODAyYi00OWQxLTkxYjgtNDgzZmM5MDcwOGQ1 LzEvanJMNEc0eEh3cldJOUZIVUEzeG9ONGNMT1g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAkhPyMA0E AgACMAcDBQMqDOiAMA0GCSqGSIb3DQEBCwUAA4IBAQB0pmCVL4bFZjw7NXmIYULj GWzZvuB/T/zaQFmxz4sA/RGD91N7jrp9/NFTMfqatMUwFkPITRodniNpMlrLJSFY IXBGrk82VLvzrhF3QHPVYiihS45Yfi71zdHBYwz9XZOztaIBJnGSLwLWLc7rYhew aI1CGstFXxH3tbEdQ9CSckEdlK/BT/7O1GvC20shwTZL3Hl8co04nk30AQuJ23h9 AZ6+d1YVHZwMwVdyyKnsGO96QI0DM4bxK5/v2Terv1Q/xSO9ECQPmbxjMh9pitS+ /0jA+LwpLZY4e+HWtP/7WVv5gEKwKQpM6Ge6An8gK6oSMo5QVyQ6sRJpr8vaDwTA -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:18 2026 by rpki-client