This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/f7TRcxcu5eFFG3edJtWO5LjNKUc.roa File: f7TRcxcu5eFFG3edJtWO5LjNKUc.roa (raw, json) Hash identifier: RBZM0y5g0NU2rB7JA5FE3fTKLxia7y0PmMp6qlYV9vo= Subject key identifier: 7F:B4:D1:73:17:2E:E5:E1:45:1B:77:9D:26:D5:8E:E4:B8:CD:29:47 Certificate issuer: /CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96 Certificate serial: 019B7EA4326E0306B13B3FACB521632F98A6 Authority key identifier: 43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/f7TRcxcu5eFFG3edJtWO5LjNKUc.roa Signing time: Fri 02 Jan 2026 12:17:28 +0000 ROA not before: Fri 02 Jan 2026 12:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39498 IP address blocks: 146.19.127.0/24 maxlen: 24 185.122.244.0/22 maxlen: 24 2a0d:6700::/29 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:32:6e:03:06:b1:3b:3f:ac:b5:21:63:2f:98:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96 Validity Not Before: Jan 2 12:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fb4d173172ee5e1451b779d26d58ee4b8cd2947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:70:87:9c:2c:31:b5:79:c0:fa:7b:ea:1f:2b: 4f:07:e1:2e:1a:7e:a5:88:44:aa:72:a9:64:fd:cc: 85:c8:0b:09:ca:9e:7e:88:c6:c8:f8:4a:61:1b:b1: fd:27:08:a4:7c:8d:34:83:c5:cf:51:5e:23:a0:90: fb:66:72:dd:cd:8c:3a:96:1e:db:f1:49:3f:95:23: fc:0a:1b:25:7a:86:f3:cc:30:90:e4:eb:a0:28:18: 54:d6:52:7e:ff:39:fc:b9:52:8a:0f:80:97:a6:6d: ac:72:05:2e:b3:c2:ac:5c:7e:b3:cb:7b:0b:5b:99: a0:36:8c:4f:e9:f6:23:7e:91:0a:e4:7a:d5:86:20: 8f:33:33:39:b5:4d:4b:72:88:1b:a6:82:d4:65:47: 41:e6:37:a5:2b:b2:ec:d9:fa:b6:c7:2f:44:b6:c8: e6:97:df:53:ac:8e:08:7b:89:6b:3d:af:07:64:bd: cc:f3:28:28:c5:68:cd:31:52:1f:d3:cc:88:36:7e: 2e:5a:79:e7:68:bd:13:30:d3:74:ae:96:ed:27:6c: 38:2e:bd:8a:8f:a0:3b:07:0e:23:84:cf:a1:05:07: 32:5a:a2:e6:bd:2c:ec:ff:e0:aa:bc:bc:82:f4:3c: 5b:31:64:03:e2:f9:c1:88:ae:04:ea:9b:40:b0:6e: c4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B4:D1:73:17:2E:E5:E1:45:1B:77:9D:26:D5:8E:E4:B8:CD:29:47 X509v3 Authority Key Identifier: keyid:43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/f7TRcxcu5eFFG3edJtWO5LjNKUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.127.0/24 185.122.244.0/22 IPv6: 2a0d:6700::/29 Signature Algorithm: sha256WithRSAEncryption 26:67:37:d6:2c:c6:c7:30:7c:07:b3:b0:72:0f:4a:1f:44:f1: 75:a6:3d:e0:38:ee:1f:64:3d:62:fe:77:83:41:ee:58:0b:04: 5e:54:fa:1e:1f:82:ef:37:d9:26:14:c4:82:78:1a:46:2f:85: 3b:72:69:e0:d2:5c:3b:26:d5:ac:75:d1:b2:76:c8:3f:c1:e8: dd:9d:9f:18:6b:57:9e:0b:81:4d:c3:2b:2e:e4:cd:dc:bd:33: 57:1b:29:d5:d8:92:4f:f6:a1:d8:43:63:5f:c3:50:fd:9f:aa: 1b:40:6f:9c:8d:a2:7d:73:28:53:c5:ce:1a:d7:c9:eb:d3:f9: d1:dd:94:32:5a:be:ab:40:a8:08:df:ff:72:6f:7d:cb:4e:fe: b2:b4:93:80:e8:b2:f3:1e:08:97:9f:3b:71:c0:37:29:72:3c: 3f:c2:12:61:a6:a0:ee:f8:44:49:0e:72:21:23:a8:38:c9:c7: 8c:4c:82:fc:92:69:83:62:2a:14:5e:02:9d:e3:84:a2:05:bc: 7d:3f:20:30:c8:3b:47:eb:39:25:cf:13:b0:74:9a:38:43:06: 28:a6:c7:40:66:3e:30:0f:8a:cf:36:72:f3:fe:76:d6:7e:cc: bc:5a:d7:2b:50:6d:38:bf:fa:c2:d4:5f:b5:0c:19:c5:82:6b: ff:a6:fe:60 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+pDJuAwaxOz+stSFjL5imMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMmVmZTE2ZWM2YzAwZmQ0NWI1ZDkxOGQ5YjE3MmFjZDBh NThkOTYwHhcNMjYwMTAyMTIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmI0ZDE3MzE3MmVlNWUxNDUxYjc3OWQyNmQ1OGVlNGI4Y2QyOTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXCHnCwxtXnA+nvqHytPB+EuGn6l iESqcqlk/cyFyAsJyp5+iMbI+EphG7H9JwikfI00g8XPUV4joJD7ZnLdzYw6lh7b 8Uk/lSP8ChsleobzzDCQ5OugKBhU1lJ+/zn8uVKKD4CXpm2scgUus8KsXH6zy3sL W5mgNoxP6fYjfpEK5HrVhiCPMzM5tU1LcogbpoLUZUdB5jelK7Ls2fq2xy9Etsjm l99TrI4Ie4lrPa8HZL3M8ygoxWjNMVIf08yINn4uWnnnaL0TMNN0rpbtJ2w4Lr2K j6A7Bw4jhM+hBQcyWqLmvSzs/+CqvLyC9DxbMWQD4vnBiK4E6ptAsG7EbQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFH+00XMXLuXhRRt3nSbVjuS4zSlHMB8GA1UdIwQY MBaAFEMu/hbsbAD9RbXZGNmxcqzQpY2WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXk3LUZ1eHNBUDFGdGRrWTJiRnlyTkNsalpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8yNWI0N2UtNDA3OS00ZjIxLTkxMWIt ZjM4OWE1MjY5ZmIyLzEvZjdUUmN4Y3U1ZUZGRzNlZEp0V081TGpOS1VjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy8yNWI0N2UtNDA3OS00ZjIxLTkxMWItZjM4OWE1MjY5ZmIy LzEvUXk3LUZ1eHNBUDFGdGRrWTJiRnlyTkNsalpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAkhN/AwQC uXr0MA0EAgACMAcDBQMqDWcAMA0GCSqGSIb3DQEBCwUAA4IBAQAmZzfWLMbHMHwH s7ByD0ofRPF1pj3gOO4fZD1i/neDQe5YCwReVPoeH4LvN9kmFMSCeBpGL4U7cmng 0lw7JtWsddGydsg/wejdnZ8Ya1eeC4FNwysu5M3cvTNXGynV2JJP9qHYQ2Nfw1D9 n6obQG+cjaJ9cyhTxc4a18nr0/nR3ZQyWr6rQKgI3/9yb33LTv6ytJOA6LLzHgiX nztxwDcpcjw/whJhpqDu+ERJDnIhI6g4yceMTIL8kmmDYioUXgKd44SiBbx9PyAw yDtH6zklzxOwdJo4QwYopsdAZj4wD4rPNnLz/nbWfsy8WtcrUG04v/rC1F+1DBnF gmv/pv5g -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:54 2026 by rpki-client