This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7G4Tq2cmdYFw1zuw4Wqq2JLxtw4.roa File: 7G4Tq2cmdYFw1zuw4Wqq2JLxtw4.roa (raw, json) Hash identifier: RpwUu7xuenz/iR9+DTR/5pHC3TFhB76W7r+mszh5j30= Subject key identifier: EC:6E:13:AB:67:26:75:81:70:D7:3B:B0:E1:6A:AA:D8:92:F1:B7:0E Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCBB55724200F6DBD77EC1FB6E9D132 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7G4Tq2cmdYFw1zuw4Wqq2JLxtw4.roa Signing time: Fri 02 Jan 2026 08:21:00 +0000 ROA not before: Fri 02 Jan 2026 08:21:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400909 IP address blocks: 37.202.214.0/23 maxlen: 23 151.242.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:b5:57:24:20:0f:6d:bd:77:ec:1f:b6:e9:d1:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:21:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec6e13ab6726758170d73bb0e16aaad892f1b70e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4a:e6:e6:82:5e:49:41:51:b0:6b:1c:27:69: 84:69:a3:dd:68:ee:82:8a:a5:dd:8c:f8:ec:30:bd: 39:52:b4:54:ab:60:e1:9f:06:17:3c:3b:93:7c:f2: b5:5d:c8:6e:c7:0f:bd:a3:51:71:5d:fa:74:00:90: 3c:e5:2d:9d:b4:5d:8a:f3:74:e8:bf:92:e8:d6:3d: 9b:88:df:ed:a3:55:03:30:21:b3:cc:ba:88:74:3b: 64:3f:48:51:e9:32:37:d1:bf:4c:01:b8:9f:1d:75: a5:b1:fc:31:aa:e3:4a:e3:c7:eb:f2:97:aa:38:47: 81:3a:9c:6b:e4:7e:4f:dd:d1:60:b0:8c:b8:02:42: d1:8f:16:c8:7f:78:dc:87:52:76:f8:a6:90:5e:e7: 56:c6:89:d1:33:42:71:a0:ff:ac:fd:64:ab:c7:77: bf:c4:69:99:bc:70:4b:3f:d5:2b:1d:e1:c5:a6:a2: e0:f4:0a:89:b2:03:cc:38:f9:e1:a3:a7:39:d3:20: b8:49:66:a0:b8:63:2b:76:18:f7:b5:48:82:7e:ae: cc:30:bb:02:ea:1c:cf:14:05:b7:20:85:4b:35:e4: 9f:94:72:dc:8b:33:f6:fe:fe:83:20:5d:b0:bf:60: 94:92:00:80:6a:a3:2b:bb:87:ed:e4:e9:1b:bc:64: cd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6E:13:AB:67:26:75:81:70:D7:3B:B0:E1:6A:AA:D8:92:F1:B7:0E X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7G4Tq2cmdYFw1zuw4Wqq2JLxtw4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.214.0/23 151.242.6.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:76:c8:28:ba:c5:cf:4e:07:e6:ab:f5:87:3f:6b:1a:91:d8: e4:18:5a:fb:18:68:5c:b0:3a:42:e3:34:9c:ef:5d:e3:06:f6: 39:74:fc:f9:b1:1b:99:17:b0:d6:ac:ff:d4:2f:a1:3d:fb:7f: dc:7b:e4:12:08:55:25:ba:7b:0a:79:96:2d:4f:25:29:32:f9: 83:f9:05:60:40:bd:da:69:76:d6:c2:4b:77:52:56:f2:4d:16: d7:cf:c9:e0:56:08:2e:76:5b:a9:1f:52:af:ae:11:42:ce:d5: b4:df:45:af:ee:94:a0:86:a8:7d:3b:73:1d:2e:91:19:a7:c3: c7:df:3b:2f:d5:21:25:20:06:aa:da:cf:58:bf:02:fc:cc:bd: bb:67:e1:c4:79:cc:70:61:54:a1:ce:21:2d:84:99:dc:bd:9f: 34:5d:a8:03:01:6f:2e:2d:39:8d:2b:0a:15:87:67:49:61:7d: 54:21:69:6b:f1:99:bc:af:05:20:6a:08:a9:28:d4:1b:ba:e1: 68:1b:d5:19:a8:f6:5b:bd:dc:5a:54:7f:e3:f1:35:10:76:5e: d3:70:52:e3:55:a1:51:44:f6:48:c3:37:e5:e3:38:e0:17:48: 8d:0e:85:1e:ea:4e:18:10:f6:1b:37:cf:14:7e:b1:f6:0d:2b: 7b:f7:e0:7b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y7VXJCAPbb137B+26dEyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzZlMTNhYjY3MjY3NTgxNzBkNzNiYjBlMTZhYWFkODkyZjFiNzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0rm5oJeSUFRsGscJ2mEaaPdaO6C iqXdjPjsML05UrRUq2DhnwYXPDuTfPK1Xchuxw+9o1FxXfp0AJA85S2dtF2K83To v5Lo1j2biN/to1UDMCGzzLqIdDtkP0hR6TI30b9MAbifHXWlsfwxquNK48fr8peq OEeBOpxr5H5P3dFgsIy4AkLRjxbIf3jch1J2+KaQXudWxonRM0JxoP+s/WSrx3e/ xGmZvHBLP9UrHeHFpqLg9AqJsgPMOPnho6c50yC4SWaguGMrdhj3tUiCfq7MMLsC 6hzPFAW3IIVLNeSflHLcizP2/v6DIF2wv2CUkgCAaqMru4ft5OkbvGTNnQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOxuE6tnJnWBcNc7sOFqqtiS8bcOMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvN0c0VHEyY21kWUZ3MXp1dzRXcXEySkx4dHc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBJcrWAwQA l/IGMA0GCSqGSIb3DQEBCwUAA4IBAQANdsgousXPTgfmq/WHP2sakdjkGFr7GGhc sDpC4zSc713jBvY5dPz5sRuZF7DWrP/UL6E9+3/ce+QSCFUlunsKeZYtTyUpMvmD +QVgQL3aaXbWwkt3UlbyTRbXz8ngVggudlupH1KvrhFCztW030Wv7pSghqh9O3Md LpEZp8PH3zsv1SElIAaq2s9YvwL8zL27Z+HEecxwYVShziEthJncvZ80XagDAW8u LTmNKwoVh2dJYX1UIWlr8Zm8rwUgagipKNQbuuFoG9UZqPZbvdxaVH/j8TUQdl7T cFLjVaFRRPZIwzfl4zjgF0iNDoUe6k4YEPYbN88UfrH2DSt79+B7 -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:33 2026 by rpki-client