This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/7VcC4DMXIHbrZKPirD4v2PDxiTo.roa File: 7VcC4DMXIHbrZKPirD4v2PDxiTo.roa (raw, json) Hash identifier: 1QvS1I6O1u7fOlkBKmW3HFU8tJj8BM1PL1GfKM5aNaI= Subject key identifier: ED:57:02:E0:33:17:20:76:EB:64:A3:E2:AC:3E:2F:D8:F0:F1:89:3A Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1 Certificate serial: 019B79EBF967E12D694B2045C5B0013A249D Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/7VcC4DMXIHbrZKPirD4v2PDxiTo.roa Signing time: Thu 01 Jan 2026 14:17:46 +0000 ROA not before: Thu 01 Jan 2026 14:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60591 IP address blocks: 178.172.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:f9:67:e1:2d:69:4b:20:45:c5:b0:01:3a:24:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1 Validity Not Before: Jan 1 14:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed5702e033172076eb64a3e2ac3e2fd8f0f1893a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:6e:de:35:41:7d:a0:84:8d:0a:5a:6f:87:47: 97:bc:59:7c:98:14:48:33:11:03:94:67:5b:ae:54: 19:31:60:02:6b:41:00:21:f7:f4:f3:d5:af:73:74: e6:da:c8:8e:3c:35:3f:1b:dd:f8:13:e0:d6:e8:8a: b7:2a:fe:cc:cf:12:f4:ff:59:83:ba:b8:ea:92:a1: 05:a1:21:06:60:74:41:50:04:3f:e5:53:2b:6d:a4: 01:2f:7a:68:2a:1e:f6:0a:43:a7:d8:8c:6c:67:8b: 91:02:d7:12:b6:29:36:e4:56:09:39:69:20:c0:92: 47:66:b4:16:53:f6:82:1d:5d:a7:3f:29:f6:de:02: 61:43:2f:df:22:1d:a4:87:5b:d9:20:97:11:d9:d3: ae:1b:32:46:88:60:0b:8f:ac:e8:77:69:4f:25:82: 2e:9d:ee:6d:83:1d:52:19:b8:10:e9:f0:61:5e:c9: 6a:65:f1:d1:1f:8a:3b:41:a5:be:73:fc:e3:17:bf: 85:bd:b3:44:6b:04:e0:99:4c:10:a0:0e:2a:ab:b2: 33:aa:c1:22:2e:5a:27:2b:90:11:6b:0e:df:15:3f: c5:7e:32:7a:9a:ac:6d:81:d5:8c:52:6c:5f:4f:a6: 7a:ac:56:ef:3e:8d:2c:62:01:d2:8b:73:f4:6f:b5: e2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:57:02:E0:33:17:20:76:EB:64:A3:E2:AC:3E:2F:D8:F0:F1:89:3A X509v3 Authority Key Identifier: keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/7VcC4DMXIHbrZKPirD4v2PDxiTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.172.217.0/24 Signature Algorithm: sha256WithRSAEncryption 26:90:00:b9:7d:11:b4:19:a7:cc:e0:42:8b:2d:3f:d9:ef:3c: 49:63:2d:67:e0:09:b3:de:99:ab:0c:a5:65:e3:4a:d7:9f:2a: 91:04:21:6a:7c:50:f6:a7:54:39:16:3e:a9:21:78:0e:84:9f: f4:3c:e4:38:eb:96:86:26:7a:c1:0b:20:cd:f1:f4:44:45:bc: f7:6e:62:66:7e:31:2c:f0:28:68:13:90:77:1f:e0:ac:f9:63: 33:17:7c:24:26:13:36:b7:b9:e4:e5:03:60:3a:c1:0c:f3:e6: 99:8e:56:a1:73:b0:1f:73:f2:3c:4f:3e:ab:57:3e:83:b2:9f: bd:51:2b:af:14:44:7c:b5:72:25:22:ea:d7:c6:0b:c1:60:61: d8:8c:e9:10:b2:1b:a8:58:65:20:2d:99:08:2f:6a:80:8b:d3: 48:f0:76:03:14:4f:4b:b1:08:ce:ae:a5:64:36:58:c1:90:52: 9e:61:ec:56:aa:21:87:6a:dd:53:1b:9c:56:1f:35:99:bb:86: 4d:1d:86:89:53:70:69:d7:eb:d5:64:fa:d2:08:ad:47:f1:08: 1b:f2:88:ad:45:7e:43:5a:72:ed:39:c5:cd:13:da:c6:ba:13: 6a:0e:6f:87:bc:d0:39:35:21:cc:a4:37:2f:a7:ea:4c:1b:25: c1:4e:75:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt56/ln4S1pSyBFxbABOiSdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj ZmViYzEwHhcNMjYwMTAxMTQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDU3MDJlMDMzMTcyMDc2ZWI2NGEzZTJhYzNlMmZkOGYwZjE4OTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6G7eNUF9oISNClpvh0eXvFl8mBRI MxEDlGdbrlQZMWACa0EAIff089Wvc3Tm2siOPDU/G934E+DW6Iq3Kv7MzxL0/1mD urjqkqEFoSEGYHRBUAQ/5VMrbaQBL3poKh72CkOn2IxsZ4uRAtcStik25FYJOWkg wJJHZrQWU/aCHV2nPyn23gJhQy/fIh2kh1vZIJcR2dOuGzJGiGALj6zod2lPJYIu ne5tgx1SGbgQ6fBhXslqZfHRH4o7QaW+c/zjF7+FvbNEawTgmUwQoA4qq7IzqsEi LlonK5ARaw7fFT/FfjJ6mqxtgdWMUmxfT6Z6rFbvPo0sYgHSi3P0b7XiJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO1XAuAzFyB262Sj4qw+L9jw8Yk6MB8GA1UdIwQY MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct YWFiMGU0MTRjYzYzLzEvN1ZjQzRETVhJSGJyWktQaXJENHYyUER4aVRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTctYWFiMGU0MTRjYzYz LzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsqzZMA0G CSqGSIb3DQEBCwUAA4IBAQAmkAC5fRG0GafM4EKLLT/Z7zxJYy1n4Amz3pmrDKVl 40rXnyqRBCFqfFD2p1Q5Fj6pIXgOhJ/0POQ465aGJnrBCyDN8fRERbz3bmJmfjEs 8ChoE5B3H+Cs+WMzF3wkJhM2t7nk5QNgOsEM8+aZjlahc7Afc/I8Tz6rVz6Dsp+9 USuvFER8tXIlIurXxgvBYGHYjOkQshuoWGUgLZkIL2qAi9NI8HYDFE9LsQjOrqVk NljBkFKeYexWqiGHat1TG5xWHzWZu4ZNHYaJU3Bp1+vVZPrSCK1H8Qgb8oitRX5D WnLtOcXNE9rGuhNqDm+HvNA5NSHMpDcvp+pMGyXBTnXF -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:50 2026 by rpki-client