This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/7ctM-nfqVD_f5N8yCIgCf9_quM4.roa File: 7ctM-nfqVD_f5N8yCIgCf9_quM4.roa (raw, json) Hash identifier: wja6n3HaPhEfG0qesMSoRitaVxtS1y7cOYduGiD52SU= Subject key identifier: ED:CB:4C:FA:77:EA:54:3F:DF:E4:DF:32:08:88:02:7F:DF:EA:B8:CE Certificate issuer: /CN=07c40d70160f308642129a1b72ae5ae52db883c4 Certificate serial: 019B7EA697A9994E817AE165A3CA0A63BF72 Authority key identifier: 07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/7ctM-nfqVD_f5N8yCIgCf9_quM4.roa Signing time: Fri 02 Jan 2026 12:20:05 +0000 ROA not before: Fri 02 Jan 2026 12:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48166 IP address blocks: 5.250.232.0/21 maxlen: 21 89.22.16.0/20 maxlen: 20 91.133.0.0/19 maxlen: 19 91.210.84.0/22 maxlen: 22 178.213.192.0/21 maxlen: 21 185.61.92.0/22 maxlen: 22 185.61.92.0/23 maxlen: 23 185.61.94.0/23 maxlen: 23 194.9.224.0/20 maxlen: 20 2a02:7760::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:97:a9:99:4e:81:7a:e1:65:a3:ca:0a:63:bf:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07c40d70160f308642129a1b72ae5ae52db883c4 Validity Not Before: Jan 2 12:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edcb4cfa77ea543fdfe4df320888027fdfeab8ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e2:49:2b:7b:ea:d7:bb:98:ce:3c:a5:ba:b3: fa:94:a3:cf:16:e0:b0:d9:95:1c:f9:19:cb:fb:82: ac:a8:15:14:94:b6:ce:0b:32:a1:9d:83:a6:20:e0: b8:e3:3f:88:c8:7a:3b:76:81:23:15:20:01:6e:42: dd:95:89:dd:fd:ca:f6:9f:0f:3b:62:c7:e5:1c:8b: ee:8c:58:bd:4c:86:7b:28:2f:dd:c1:3c:2d:ca:50: 2e:c2:b7:9d:a8:2b:25:0c:77:02:e6:6a:a0:d7:2d: b5:50:59:4a:ea:89:d0:55:ee:3c:d0:aa:65:e0:8b: b0:61:96:e2:5b:15:72:d0:d4:5c:fa:10:46:54:65: a7:20:e7:cc:46:c2:6d:5e:c3:d5:b2:e3:57:f0:cd: 08:9c:12:86:f1:fc:66:d8:51:eb:12:e7:27:bb:5d: c5:6f:22:32:f2:3b:60:d7:09:c9:e6:1e:68:d5:fa: 8f:de:d9:14:2a:e5:ac:28:ea:d8:90:74:a5:73:03: 7f:1c:0f:f6:a4:2e:13:c5:eb:36:2b:30:7c:89:03: 4d:cc:be:27:8e:c6:a5:ea:28:ec:67:6b:73:c9:e5: 5c:6e:35:a1:93:55:16:6e:91:6a:92:84:11:a4:bd: 13:01:83:93:ae:e4:de:f0:07:91:b0:1e:6a:1c:23: 00:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CB:4C:FA:77:EA:54:3F:DF:E4:DF:32:08:88:02:7F:DF:EA:B8:CE X509v3 Authority Key Identifier: keyid:07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/7ctM-nfqVD_f5N8yCIgCf9_quM4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.250.232.0/21 89.22.16.0/20 91.133.0.0/19 91.210.84.0/22 178.213.192.0/21 185.61.92.0/22 194.9.224.0/20 IPv6: 2a02:7760::/32 Signature Algorithm: sha256WithRSAEncryption 4d:98:e3:c3:b4:29:14:26:4c:7a:fd:9b:6c:db:7a:8a:0a:a9: 01:f4:33:6b:e0:02:3d:4c:96:2d:c7:3a:84:76:33:0d:b9:04: 9e:44:42:56:02:49:0b:c9:83:1b:14:29:0f:56:9b:52:99:bf: f7:63:ad:17:21:4e:ed:ef:9d:bd:69:5d:29:4d:03:70:3d:3e: 0a:cc:96:3f:e2:a9:2e:e9:ed:22:b5:3d:eb:0d:a9:44:37:29: 41:9d:5e:75:2b:69:b5:f3:53:36:30:48:1a:7f:7c:38:2a:d9: f3:b2:2d:c6:c3:1d:b9:48:c1:7f:e5:5a:89:71:3a:f7:62:0e: 25:c8:11:b2:08:e7:18:5e:a1:ef:5c:fb:21:1f:ab:e2:96:62: e3:b6:72:4e:4b:96:ad:88:e1:79:07:e4:43:64:f4:8c:c3:24: c6:06:17:c6:77:99:c0:5e:ed:50:e1:38:19:11:73:33:e4:a2: d0:84:56:4b:6a:66:65:b5:45:c8:be:38:22:84:ee:7c:03:7e: e0:17:8a:cc:4f:ad:db:83:6c:8a:46:c1:86:21:74:f4:48:f3: 17:06:09:c0:5d:94:a7:15:ad:1f:ef:f0:fa:98:62:03:a2:e4: f2:ae:c1:9f:2e:53:af:93:96:be:f7:19:77:fd:b6:6b:11:fe: f6:b5:4e:c8 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt+ppepmU6BeuFlo8oKY79yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YzQwZDcwMTYwZjMwODY0MjEyOWExYjcyYWU1YWU1MmRi ODgzYzQwHhcNMjYwMTAyMTIyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGNiNGNmYTc3ZWE1NDNmZGZlNGRmMzIwODg4MDI3ZmRmZWFiOGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+JJK3vq17uYzjylurP6lKPPFuCw 2ZUc+RnL+4KsqBUUlLbOCzKhnYOmIOC44z+IyHo7doEjFSABbkLdlYnd/cr2nw87 YsflHIvujFi9TIZ7KC/dwTwtylAuwredqCslDHcC5mqg1y21UFlK6onQVe480Kpl 4IuwYZbiWxVy0NRc+hBGVGWnIOfMRsJtXsPVsuNX8M0InBKG8fxm2FHrEucnu13F byIy8jtg1wnJ5h5o1fqP3tkUKuWsKOrYkHSlcwN/HA/2pC4Txes2KzB8iQNNzL4n jsal6ijsZ2tzyeVcbjWhk1UWbpFqkoQRpL0TAYOTruTe8AeRsB5qHCMAZwIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFO3LTPp36lQ/3+TfMgiIAn/f6rjOMB8GA1UdIwQY MBaAFAfEDXAWDzCGQhKaG3KuWuUtuIPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lMTE2YzItOGY4Mi00Y2JhLWI1YWUt OTdkY2JiMDA4NmUzLzEvN2N0TS1uZnFWRF9mNU44eUNJZ0NmOV9xdU00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9lMTE2YzItOGY4Mi00Y2JhLWI1YWUtOTdkY2JiMDA4NmUz LzEvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQDBfroAwQE WRYQAwQFW4UAAwQCW9JUAwQDstXAAwQCuT1cAwQEwgngMA0EAgACMAcDBQAqAndg MA0GCSqGSIb3DQEBCwUAA4IBAQBNmOPDtCkUJkx6/Zts23qKCqkB9DNr4AI9TJYt xzqEdjMNuQSeREJWAkkLyYMbFCkPVptSmb/3Y60XIU7t7529aV0pTQNwPT4KzJY/ 4qku6e0itT3rDalENylBnV51K2m181M2MEgaf3w4Ktnzsi3Gwx25SMF/5VqJcTr3 Yg4lyBGyCOcYXqHvXPshH6vilmLjtnJOS5atiOF5B+RDZPSMwyTGBhfGd5nAXu1Q 4TgZEXMz5KLQhFZLamZltUXIvjgihO58A37gF4rMT63bg2yKRsGGIXT0SPMXBgnA XZSnFa0f7/D6mGIDouTyrsGfLlOvk5a+9xl3/bZrEf72tU7I -----END CERTIFICATE-----Generated at Tue Feb 10 02:22:01 2026 by rpki-client