This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/7ozQf2Lgf43OlxMxJfVXI46HKEE.roa File: 7ozQf2Lgf43OlxMxJfVXI46HKEE.roa (raw, json) Hash identifier: 2WRxX71MqlNLXAV8Z7Z41sZwXZzoqEFDU3UWBkUqAn8= Subject key identifier: EE:8C:D0:7F:62:E0:7F:8D:CE:97:13:31:25:F5:57:23:8E:87:28:41 Certificate issuer: /CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1 Certificate serial: 019B7910920CD16C154CA78086B0E33697A0 Authority key identifier: D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/7ozQf2Lgf43OlxMxJfVXI46HKEE.roa Signing time: Thu 01 Jan 2026 10:18:07 +0000 ROA not before: Thu 01 Jan 2026 10:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211091 IP address blocks: 185.188.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:92:0c:d1:6c:15:4c:a7:80:86:b0:e3:36:97:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1 Validity Not Before: Jan 1 10:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee8cd07f62e07f8dce97133125f557238e872841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bc:36:b5:de:60:3d:a4:ed:bb:55:d1:fd:4f: 9f:de:4e:ef:0c:c1:e3:cf:8b:cf:24:a4:f9:0a:fd: 35:f1:41:5c:da:2d:81:e6:4e:42:03:19:cc:0e:54: fe:9f:9c:c2:56:75:05:bf:5d:48:ff:4e:31:0d:c6: 83:a8:3b:c8:20:8d:29:2c:c5:60:ef:c4:e4:e9:29: cf:79:d6:14:fd:b0:a2:65:6c:8d:af:71:a4:e3:35: 0f:10:3f:92:26:3e:86:cd:61:66:ab:94:45:28:4e: af:1f:70:05:70:15:20:6a:74:4d:0e:09:52:c1:71: 35:f7:77:20:74:6f:e5:32:05:b9:d4:cc:a5:e1:bc: 94:7d:25:19:a0:b0:28:78:0d:13:58:93:fc:bb:25: ec:4c:73:2e:3e:5f:3d:84:7d:8c:0b:12:8e:5e:f7: 7a:5d:b6:f6:d7:66:13:ba:44:e0:a1:24:0f:7f:c5: 7e:b0:09:91:38:78:11:45:80:04:2f:18:66:b3:18: d8:29:64:de:dc:f4:8b:0c:fb:e6:00:2f:de:29:41: 1a:42:f8:af:1a:63:86:4e:17:1f:e2:be:0e:43:ed: 00:7e:53:a7:3f:d5:01:d3:b4:7d:c0:1c:09:c5:8e: 99:02:55:f1:9d:d4:70:5e:e3:13:9d:12:df:70:de: bf:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8C:D0:7F:62:E0:7F:8D:CE:97:13:31:25:F5:57:23:8E:87:28:41 X509v3 Authority Key Identifier: keyid:D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/7ozQf2Lgf43OlxMxJfVXI46HKEE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.188.42.0/24 Signature Algorithm: sha256WithRSAEncryption 49:b9:72:2f:a6:54:ed:2b:2e:03:96:61:a6:b4:34:49:eb:1c: 7e:03:50:9d:e5:05:ff:a2:33:b6:d0:fe:33:59:48:08:d5:23: f3:87:2a:b5:18:71:8a:df:e5:bb:f6:b6:a2:5a:03:b3:d7:9f: 4a:d5:2f:d5:c5:32:06:b7:f3:49:8c:26:c9:c6:e1:c6:f7:9a: 67:62:fc:f4:19:be:49:74:cb:79:a4:82:05:f9:68:2d:ae:8e: 0a:b1:54:ac:db:b5:47:39:89:77:4a:54:f8:1a:c2:54:19:ea: 3d:88:c4:f4:60:4b:f2:b7:3d:be:9f:ae:8f:c0:89:e2:e5:3c: af:b3:41:ba:a4:d6:b6:00:c6:9b:31:95:89:11:93:24:04:aa: 7a:e5:7d:a4:4f:ae:04:40:61:18:18:4e:ad:36:df:52:c6:69: 95:30:78:56:a4:da:f9:f7:1c:45:9e:05:84:ef:43:de:2b:5d: f3:b5:cb:82:d2:2e:13:2c:d5:68:e5:f6:87:f5:d2:60:6f:42: 72:e5:11:d2:18:63:5c:ee:a4:1d:2a:53:b9:74:d8:b5:4a:8e: 21:33:85:3f:ab:69:fa:ae:38:6c:1d:be:f7:06:2b:1d:2d:1f: cf:ad:ad:ce:9e:53:8a:0b:89:ff:12:5f:50:b3:51:87:71:ee: de:3f:27:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EJIM0WwVTKeAhrDjNpegMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NWUwNDZlN2QzOTNjMTRmY2JhZWU3ZjFjNDM5ODBlM2Rh MTFmYjEwHhcNMjYwMTAxMTAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZThjZDA3ZjYyZTA3ZjhkY2U5NzEzMzEyNWY1NTcyMzhlODcyODQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbw2td5gPaTtu1XR/U+f3k7vDMHj z4vPJKT5Cv018UFc2i2B5k5CAxnMDlT+n5zCVnUFv11I/04xDcaDqDvIII0pLMVg 78Tk6SnPedYU/bCiZWyNr3Gk4zUPED+SJj6GzWFmq5RFKE6vH3AFcBUganRNDglS wXE193cgdG/lMgW51Myl4byUfSUZoLAoeA0TWJP8uyXsTHMuPl89hH2MCxKOXvd6 Xbb212YTukTgoSQPf8V+sAmROHgRRYAELxhmsxjYKWTe3PSLDPvmAC/eKUEaQviv GmOGThcf4r4OQ+0AflOnP9UB07R9wBwJxY6ZAlXxndRwXuMTnRLfcN6/ywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO6M0H9i4H+NzpcTMSX1VyOOhyhBMB8GA1UdIwQY MBaAFNleBG59OTwU/LrufxxDmA49oR+xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlY0RWJuMDVQQlQ4dXU1X0hFT1lEajJoSDdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MWJmNmYtMWUzYy00MDRhLTgyZDAt Nzg4YzViNzU3NTRiLzEvN296UWYyTGdmNDNPbHhNeEpmVlhJNDZIS0VFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC83MWJmNmYtMWUzYy00MDRhLTgyZDAtNzg4YzViNzU3NTRi LzEvMlY0RWJuMDVQQlQ4dXU1X0hFT1lEajJoSDdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubwqMA0G CSqGSIb3DQEBCwUAA4IBAQBJuXIvplTtKy4DlmGmtDRJ6xx+A1Cd5QX/ojO20P4z WUgI1SPzhyq1GHGK3+W79raiWgOz159K1S/VxTIGt/NJjCbJxuHG95pnYvz0Gb5J dMt5pIIF+Wgtro4KsVSs27VHOYl3SlT4GsJUGeo9iMT0YEvytz2+n66PwIni5Tyv s0G6pNa2AMabMZWJEZMkBKp65X2kT64EQGEYGE6tNt9SxmmVMHhWpNr59xxFngWE 70PeK13ztcuC0i4TLNVo5faH9dJgb0Jy5RHSGGNc7qQdKlO5dNi1So4hM4U/q2n6 rjhsHb73BisdLR/Pra3OnlOKC4n/El9Qs1GHce7ePyc2 -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:11 2026 by rpki-client