This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/7GrmvQQ-S1h02knSpYsk40B3pWM.roa File: 7GrmvQQ-S1h02knSpYsk40B3pWM.roa (raw, json) Hash identifier: w4yZJvXh/Y1tTd4zz3VfX2KscyL/TTELj8T0DWK32qw= Subject key identifier: EC:6A:E6:BD:04:3E:4B:58:74:DA:49:D2:A5:8B:24:E3:40:77:A5:63 Certificate issuer: /CN=523881993cf0db674e89db5815e6f189a6c60d1f Certificate serial: 019B77592E57B28E4FFA21FD76DC45074A53 Authority key identifier: 52:38:81:99:3C:F0:DB:67:4E:89:DB:58:15:E6:F1:89:A6:C6:0D:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjiBmTzw22dOidtYFebxiabGDR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/7GrmvQQ-S1h02knSpYsk40B3pWM.roa Signing time: Thu 01 Jan 2026 02:18:11 +0000 ROA not before: Thu 01 Jan 2026 02:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206234 IP address blocks: 185.192.120.0/24 maxlen: 24 185.192.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.mft rsync://rpki.ripe.net/repository/DEFAULT/UjiBmTzw22dOidtYFebxiabGDR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2e:57:b2:8e:4f:fa:21:fd:76:dc:45:07:4a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=523881993cf0db674e89db5815e6f189a6c60d1f Validity Not Before: Jan 1 02:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec6ae6bd043e4b5874da49d2a58b24e34077a563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:eb:37:eb:10:05:56:5f:ee:af:cd:1d:8b:20: bb:28:8d:2a:64:3f:a3:af:45:f0:7a:ed:fd:85:85: 0e:25:1d:46:5d:dc:3f:c9:99:9f:e1:da:71:b6:a8: 9c:2a:60:f3:49:69:1f:88:3d:34:f7:c9:83:09:3e: 3e:b5:6a:ef:14:36:fa:8e:71:f5:ca:3e:03:9d:b9: 46:04:9e:56:49:00:6b:77:2b:e3:06:d2:8d:d2:7b: 87:0f:7b:6f:77:52:77:7b:5e:17:ac:0c:1f:dc:00: 48:b7:53:bc:f7:ee:86:b7:9c:ba:3b:90:f8:87:3c: 4b:c5:7f:7d:b1:28:f5:c8:d3:d6:2d:fa:ef:17:3d: e5:61:84:66:5d:38:6e:6c:9f:7a:77:29:ce:b9:7a: 05:dd:c0:c2:82:77:9c:07:e3:11:9a:46:28:a8:63: 7f:db:7a:1a:43:80:7d:4d:61:23:e6:e0:5b:0b:f4: 82:f8:80:70:f1:b0:9e:f7:a8:5b:d5:06:4a:ed:61: cb:03:f2:05:8d:08:c9:d3:17:b1:97:04:d7:22:c2: 39:bf:97:ec:28:3a:01:af:fe:ff:76:42:9a:bb:18: cb:83:e3:a7:a5:25:d6:f2:87:f9:43:e4:3f:24:81: 30:af:d3:a2:ce:03:97:e7:c7:64:17:ce:e3:6a:5d: a1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6A:E6:BD:04:3E:4B:58:74:DA:49:D2:A5:8B:24:E3:40:77:A5:63 X509v3 Authority Key Identifier: keyid:52:38:81:99:3C:F0:DB:67:4E:89:DB:58:15:E6:F1:89:A6:C6:0D:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjiBmTzw22dOidtYFebxiabGDR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/7GrmvQQ-S1h02knSpYsk40B3pWM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.192.120.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:fc:43:c8:b5:4d:94:d0:e4:78:a4:8b:34:49:17:b5:06:b9: c6:be:8d:ac:35:ab:8b:2c:1d:fd:23:b8:f3:9c:1d:e0:71:f2: 97:28:aa:ec:82:2d:b1:51:33:28:89:14:42:64:e6:db:1d:3d: 8a:98:b8:75:96:49:85:78:e3:b5:ec:60:b9:0d:4a:8b:3c:61: 35:16:73:d2:cc:b5:17:ec:57:87:34:30:00:50:f1:af:a6:68: 91:f3:ee:2d:b6:2b:67:02:5d:5a:f1:4d:13:b5:02:69:fd:80: bb:ad:c1:58:87:3e:41:37:92:43:03:23:6e:1b:22:13:39:7f: ff:0b:c3:88:c5:6d:01:70:23:49:a7:a4:59:78:60:ef:85:60: 35:20:d4:d0:31:12:c2:b0:b1:a1:74:dc:18:43:39:82:e9:23: 58:47:16:17:e8:bc:9a:0b:5d:8e:bd:b6:8d:50:98:30:c1:60: 02:25:9c:7d:4f:94:78:72:0f:9d:af:f1:29:2a:a2:5f:1b:68: 7b:72:5e:1a:82:0e:28:23:c7:89:26:3d:bb:c5:30:94:d3:d2: 39:fc:fb:2e:73:c9:df:f9:f2:b5:59:07:f4:d1:78:ee:10:cd: 2a:4c:72:04:69:4b:39:6c:4c:86:db:c3:b8:e3:5d:14:22:21: ce:fa:10:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WS5Xso5P+iH9dtxFB0pTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMzg4MTk5M2NmMGRiNjc0ZTg5ZGI1ODE1ZTZmMTg5YTZj NjBkMWYwHhcNMjYwMTAxMDIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzZhZTZiZDA0M2U0YjU4NzRkYTQ5ZDJhNThiMjRlMzQwNzdhNTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+s36xAFVl/ur80diyC7KI0qZD+j r0Xweu39hYUOJR1GXdw/yZmf4dpxtqicKmDzSWkfiD0098mDCT4+tWrvFDb6jnH1 yj4DnblGBJ5WSQBrdyvjBtKN0nuHD3tvd1J3e14XrAwf3ABIt1O89+6Gt5y6O5D4 hzxLxX99sSj1yNPWLfrvFz3lYYRmXThubJ96dynOuXoF3cDCgnecB+MRmkYoqGN/ 23oaQ4B9TWEj5uBbC/SC+IBw8bCe96hb1QZK7WHLA/IFjQjJ0xexlwTXIsI5v5fs KDoBr/7/dkKauxjLg+OnpSXW8of5Q+Q/JIEwr9OizgOX58dkF87jal2hwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOxq5r0EPktYdNpJ0qWLJONAd6VjMB8GA1UdIwQY MBaAFFI4gZk88NtnTonbWBXm8Ymmxg0fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWppQm1UencyMmRPaWR0WUZlYnhpYWJHRFI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83ZDAzNTMtM2E2Mi00YzM5LWJkM2Et YzNhMzUyMWU4ZjcwLzEvN0dybXZRUS1TMWgwMmtuU3BZc2s0MEIzcFdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83ZDAzNTMtM2E2Mi00YzM5LWJkM2EtYzNhMzUyMWU4Zjcw LzEvVWppQm1UencyMmRPaWR0WUZlYnhpYWJHRFI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBucB4MA0G CSqGSIb3DQEBCwUAA4IBAQCK/EPItU2U0OR4pIs0SRe1BrnGvo2sNauLLB39I7jz nB3gcfKXKKrsgi2xUTMoiRRCZObbHT2KmLh1lkmFeOO17GC5DUqLPGE1FnPSzLUX 7FeHNDAAUPGvpmiR8+4ttitnAl1a8U0TtQJp/YC7rcFYhz5BN5JDAyNuGyITOX// C8OIxW0BcCNJp6RZeGDvhWA1INTQMRLCsLGhdNwYQzmC6SNYRxYX6LyaC12OvbaN UJgwwWACJZx9T5R4cg+dr/EpKqJfG2h7cl4agg4oI8eJJj27xTCU09I5/Psuc8nf +fK1WQf00XjuEM0qTHIEaUs5bEyG28O4410UIiHO+hBp -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:17 2026 by rpki-client