This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/7kw5w-zJ_YXKIn037YAInaEUmZY.roa File: 7kw5w-zJ_YXKIn037YAInaEUmZY.roa (raw, json) Hash identifier: rVc7COjVzeYENlsZ2/JJMKf1JAN2bGVTLnuUK0NSgao= Subject key identifier: EE:4C:39:C3:EC:C9:FD:85:CA:22:7D:37:ED:80:08:9D:A1:14:99:96 Certificate issuer: /CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6 Certificate serial: 019B78353552D3F62958099F4A69A69E532F Authority key identifier: 2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/7kw5w-zJ_YXKIn037YAInaEUmZY.roa Signing time: Thu 01 Jan 2026 06:18:31 +0000 ROA not before: Thu 01 Jan 2026 06:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198657 IP address blocks: 91.237.236.0/22 maxlen: 22 2001:67c:2b7c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:35:52:d3:f6:29:58:09:9f:4a:69:a6:9e:53:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6 Validity Not Before: Jan 1 06:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee4c39c3ecc9fd85ca227d37ed80089da1149996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4a:44:e2:f8:e2:89:52:0c:2d:79:4b:b4:43: 1d:59:e3:29:30:d2:ea:cd:5c:f3:87:36:ef:32:64: 07:b2:9a:67:c3:cc:7c:e6:f4:80:f8:f3:a0:81:77: 91:ec:07:1d:69:e4:6f:cf:73:aa:f8:9f:fb:cd:b4: 71:07:41:5c:79:ae:49:b6:a6:8e:07:b7:dd:c2:1e: 3c:57:c4:41:55:9f:be:82:7f:82:ef:82:fd:a1:a1: e0:df:b5:d3:5d:1f:01:89:17:d4:b4:8e:2a:58:ac: a8:f3:87:ae:9f:5a:f9:d1:cc:5e:6b:bc:2c:c7:7c: f2:bd:98:27:c4:be:a0:2b:12:c2:64:21:09:5c:62: 70:1e:b1:32:fa:3c:a6:b0:be:9b:ad:8f:82:13:6d: 5b:d7:53:cd:0f:dc:c3:c2:97:c5:61:83:59:eb:88: 51:92:32:c6:f3:bd:27:0c:01:7b:db:41:e1:a5:04: f0:54:e1:d5:93:44:30:ee:28:16:c2:63:c6:e6:ba: f1:34:d6:43:b8:86:b0:2e:2b:ec:64:fc:bc:80:bd: 53:74:01:dd:54:7c:37:70:27:a8:98:6c:f7:b5:3f: c0:13:b5:1b:89:59:0d:37:c5:d2:6a:25:f6:3d:6c: 84:59:d1:7e:68:9d:1b:94:85:86:bb:39:c1:94:a8: 02:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4C:39:C3:EC:C9:FD:85:CA:22:7D:37:ED:80:08:9D:A1:14:99:96 X509v3 Authority Key Identifier: keyid:2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/7kw5w-zJ_YXKIn037YAInaEUmZY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.237.236.0/22 IPv6: 2001:67c:2b7c::/48 Signature Algorithm: sha256WithRSAEncryption 12:2f:49:95:23:58:7c:19:df:69:7a:34:64:4f:58:ed:72:41: f8:ac:9e:fa:20:75:11:d9:de:79:84:d0:20:45:2f:d9:ae:7a: d9:83:2f:1d:49:ce:63:2f:77:35:fd:17:68:ee:df:66:98:59: 2a:15:a8:b2:cd:fc:42:a0:07:16:92:b9:bd:53:55:bb:a4:64: 8a:9b:49:cb:55:51:21:34:49:62:34:5b:54:26:a2:74:dd:aa: 8b:a8:bf:86:7e:0e:f9:ad:3e:3c:ab:8b:4c:3e:fe:76:36:6d: 3a:bb:d5:f6:0a:85:a7:3c:ac:35:df:a9:37:15:71:1e:b6:29: 2e:2e:21:1e:b7:4c:fc:5c:0b:0f:eb:a2:02:06:18:7c:ec:47: b8:fe:52:13:6c:eb:1d:4b:eb:e7:46:61:bf:48:51:81:23:f9: 15:ab:53:7e:5a:6c:1e:5c:06:31:a0:20:3c:de:d6:87:a3:99: 83:c1:1f:85:34:11:c3:fe:1c:b4:bc:d0:b9:42:fc:7e:22:2c: 32:25:98:c0:90:b4:ee:08:88:a7:b8:59:75:a0:d9:d1:33:df: 7e:57:01:5e:94:7c:02:a3:24:a8:e5:e2:00:9e:61:db:23:24: 1b:4e:46:f1:f9:46:8f:e3:87:27:92:83:ab:5e:26:ec:2e:25: 87:4e:be:11 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NTVS0/YpWAmfSmmmnlMvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMjcwOWNiMzk5YzRlMTY4Y2NiZGExNmRiMTM2YjViYzhi OTZkZDYwHhcNMjYwMTAxMDYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTRjMzljM2VjYzlmZDg1Y2EyMjdkMzdlZDgwMDg5ZGExMTQ5OTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0pE4vjiiVIMLXlLtEMdWeMpMNLq zVzzhzbvMmQHsppnw8x85vSA+POggXeR7AcdaeRvz3Oq+J/7zbRxB0Fcea5JtqaO B7fdwh48V8RBVZ++gn+C74L9oaHg37XTXR8BiRfUtI4qWKyo84eun1r50cxea7ws x3zyvZgnxL6gKxLCZCEJXGJwHrEy+jymsL6brY+CE21b11PND9zDwpfFYYNZ64hR kjLG870nDAF720HhpQTwVOHVk0Qw7igWwmPG5rrxNNZDuIawLivsZPy8gL1TdAHd VHw3cCeomGz3tT/AE7UbiVkNN8XSaiX2PWyEWdF+aJ0blIWGuznBlKgCcQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFO5MOcPsyf2FyiJ9N+2ACJ2hFJmWMB8GA1UdIwQY MBaAFC8nCcs5nE4WjMvaFtsTa1vIuW3WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHljSnl6bWNUaGFNeTlvVzJ4TnJXOGk1YmRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9mODM3ODEtMjk0OS00OGM3LTg5MDAt MjAxNjdjZDQyYjgyLzEvN2t3NXctekpfWVhLSW4wMzdZQUluYUVVbVpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9mODM3ODEtMjk0OS00OGM3LTg5MDAtMjAxNjdjZDQyYjgy LzEvTHljSnl6bWNUaGFNeTlvVzJ4TnJXOGk1YmRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCW+3sMA8E AgACMAkDBwAgAQZ8K3wwDQYJKoZIhvcNAQELBQADggEBABIvSZUjWHwZ32l6NGRP WO1yQfisnvogdRHZ3nmE0CBFL9muetmDLx1JzmMvdzX9F2ju32aYWSoVqLLN/EKg BxaSub1TVbukZIqbSctVUSE0SWI0W1QmonTdqouov4Z+DvmtPjyri0w+/nY2bTq7 1fYKhac8rDXfqTcVcR62KS4uIR63TPxcCw/rogIGGHzsR7j+UhNs6x1L6+dGYb9I UYEj+RWrU35abB5cBjGgIDze1oejmYPBH4U0EcP+HLS80LlC/H4iLDIlmMCQtO4I iKe4WXWg2dEz335XAV6UfAKjJKjl4gCeYdsjJBtORvH5Ro/jhyeSg6teJuwuJYdO vhE= -----END CERTIFICATE-----Generated at Tue Feb 10 02:48:01 2026 by rpki-client