This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/7iEg611J16f4IwtY1Bg8M_Iq9WY.roa File: 7iEg611J16f4IwtY1Bg8M_Iq9WY.roa (raw, json) Hash identifier: FHpub4verjY1xRKEEG446sUVBziKt0oMgxlHwjNCz7E= Subject key identifier: EE:21:20:EB:5D:49:D7:A7:F8:23:0B:58:D4:18:3C:33:F2:2A:F5:66 Certificate issuer: /CN=02df81268829301f3d69eb96f8ac617fa25256a1 Certificate serial: 019B7A5ADA5D80F3EB8AD774C7AD034524B6 Authority key identifier: 02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/7iEg611J16f4IwtY1Bg8M_Iq9WY.roa Signing time: Thu 01 Jan 2026 16:18:53 +0000 ROA not before: Thu 01 Jan 2026 16:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47638 IP address blocks: 23.90.64.0/22 maxlen: 24 91.229.174.0/23 maxlen: 24 91.237.197.0/24 maxlen: 24 185.59.204.0/22 maxlen: 24 2001:67c:248c::/48 maxlen: 48 2a02:6da0::/29 maxlen: 32 2a02:6da0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:da:5d:80:f3:eb:8a:d7:74:c7:ad:03:45:24:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02df81268829301f3d69eb96f8ac617fa25256a1 Validity Not Before: Jan 1 16:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee2120eb5d49d7a7f8230b58d4183c33f22af566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:72:e5:a8:59:47:80:3f:f5:9d:eb:8f:f4:1b: b5:7f:17:f0:56:cc:28:c7:70:12:f5:8a:5b:b7:4c: b4:4f:b4:a4:08:1e:00:88:21:76:d3:1c:0f:ac:e9: 14:93:2a:f8:d5:89:9d:d6:c0:fc:49:53:8a:5c:b6: 92:2f:c3:e7:57:c0:6f:98:93:fe:99:b4:8d:2a:82: 75:ca:d3:46:cf:9e:a1:5e:4c:48:3d:34:2d:cb:94: 08:82:50:5c:93:37:d8:2a:75:13:07:69:0b:72:ca: cf:c7:83:01:10:31:3c:ce:42:55:cd:20:95:42:02: 09:c1:84:10:72:02:25:34:90:5c:e7:69:df:6a:47: 94:a9:72:61:99:c8:2d:c2:2d:40:23:1c:a2:b4:d9: 6f:73:61:ee:e8:9e:86:d5:00:42:df:f2:c7:13:57: 48:48:70:cc:1f:1b:a0:05:56:f0:c4:ef:0a:d9:dc: 6f:74:cf:19:fb:a0:ae:30:bc:1b:f1:42:f8:55:09: 49:a1:cf:f9:7e:80:8c:f9:36:56:05:ce:c4:e8:12: 6e:a6:af:04:22:cf:3f:d7:db:97:e3:ac:61:25:66: 2e:b2:30:eb:6b:b1:e1:43:fb:e2:d3:39:e8:9b:a4: cf:99:97:d5:f0:8a:f6:87:d0:c9:bf:5a:e7:0a:23: e7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:21:20:EB:5D:49:D7:A7:F8:23:0B:58:D4:18:3C:33:F2:2A:F5:66 X509v3 Authority Key Identifier: keyid:02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/7iEg611J16f4IwtY1Bg8M_Iq9WY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.90.64.0/22 91.229.174.0/23 91.237.197.0/24 185.59.204.0/22 IPv6: 2001:67c:248c::/48 2a02:6da0::/29 Signature Algorithm: sha256WithRSAEncryption 1d:d7:33:b7:79:21:9e:90:19:e0:01:96:7f:c4:8a:f1:53:0a: 7d:d2:ae:5d:32:f0:9e:df:0f:cd:e9:cb:5f:f8:be:bf:71:97: 70:0f:1d:b9:cb:60:11:97:cb:62:4b:86:63:72:36:c8:95:20: 0d:07:ec:20:ee:3d:b0:bc:d4:ae:bd:93:d0:e9:5a:55:59:f8: cd:48:b6:8b:e2:da:66:9a:a3:b6:80:1e:41:02:b7:21:5e:a7: a8:df:32:41:9d:4b:86:b3:50:d4:38:65:4a:a7:de:a5:fe:e8: 45:8f:63:76:4b:fd:6e:30:ca:5b:88:45:a7:9a:49:b1:ab:a4: 6d:9a:3f:48:70:2b:88:c5:1e:3e:f2:88:21:14:e2:dd:28:bf: 80:f4:b3:a9:b6:0a:2f:35:ba:71:c0:87:42:cc:2b:9b:e7:2f: 41:72:06:cb:eb:19:2d:d7:6d:9b:76:d4:3a:c7:02:a5:db:2d: b7:41:d0:6e:98:4e:1c:53:03:42:34:e3:76:e8:6c:8a:d1:ab: 9e:d1:b5:84:02:8f:41:5b:d9:d4:93:9e:56:71:8e:40:12:fb: e4:e2:46:7b:7a:77:6e:ec:46:78:05:17:1c:92:e3:f0:df:f5: dd:83:3d:64:94:ae:f4:57:b1:be:62:6f:3c:d0:b4:7e:1e:97: f0:aa:aa:27 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt6WtpdgPPritd0x60DRSS2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyZGY4MTI2ODgyOTMwMWYzZDY5ZWI5NmY4YWM2MTdmYTI1 MjU2YTEwHhcNMjYwMTAxMTYxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTIxMjBlYjVkNDlkN2E3ZjgyMzBiNThkNDE4M2MzM2YyMmFmNTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3LlqFlHgD/1neuP9Bu1fxfwVswo x3AS9Ypbt0y0T7SkCB4AiCF20xwPrOkUkyr41Ymd1sD8SVOKXLaSL8PnV8BvmJP+ mbSNKoJ1ytNGz56hXkxIPTQty5QIglBckzfYKnUTB2kLcsrPx4MBEDE8zkJVzSCV QgIJwYQQcgIlNJBc52nfakeUqXJhmcgtwi1AIxyitNlvc2Hu6J6G1QBC3/LHE1dI SHDMHxugBVbwxO8K2dxvdM8Z+6CuMLwb8UL4VQlJoc/5foCM+TZWBc7E6BJupq8E Is8/19uX46xhJWYusjDra7HhQ/vi0znom6TPmZfV8Ir2h9DJv1rnCiPndQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFO4hIOtdSden+CMLWNQYPDPyKvVmMB8GA1UdIwQY MBaAFALfgSaIKTAfPWnrlvisYX+iUlahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXQtQkpvZ3BNQjg5YWV1Vy1LeGhmNkpTVnFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wNjE3MTYtMDljNi00ODM4LWIxY2It M2U4NmQyYzI5OTY5LzEvN2lFZzYxMUoxNmY0SXd0WTFCZzhNX0lxOVdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8wNjE3MTYtMDljNi00ODM4LWIxY2ItM2U4NmQyYzI5OTY5 LzEvQXQtQkpvZ3BNQjg5YWV1Vy1LeGhmNkpTVnFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAeBAIAATAYAwQCF1pAAwQB W+WuAwQAW+3FAwQCuTvMMBYEAgACMBADBwAgAQZ8JIwDBQMqAm2gMA0GCSqGSIb3 DQEBCwUAA4IBAQAd1zO3eSGekBngAZZ/xIrxUwp90q5dMvCe3w/N6ctf+L6/cZdw Dx25y2ARl8tiS4ZjcjbIlSANB+wg7j2wvNSuvZPQ6VpVWfjNSLaL4tpmmqO2gB5B ArchXqeo3zJBnUuGs1DUOGVKp96l/uhFj2N2S/1uMMpbiEWnmkmxq6Rtmj9IcCuI xR4+8oghFOLdKL+A9LOptgovNbpxwIdCzCub5y9BcgbL6xkt122bdtQ6xwKl2y23 QdBumE4cUwNCNON26GyK0aue0bWEAo9BW9nUk55WcY5AEvvk4kZ7endu7EZ4BRcc kuPw3/Xdgz1klK70V7G+Ym880LR+Hpfwqqon -----END CERTIFICATE-----Generated at Tue Feb 10 05:47:59 2026 by rpki-client