This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/7Kss7kA_WQlqoG4PUE9_u-LfX8A.roa File: 7Kss7kA_WQlqoG4PUE9_u-LfX8A.roa (raw, json) Hash identifier: Icn/cQ2oXawc/s6B8JYKMg6KOpa4qAUSrLTaNNEAE3A= Subject key identifier: EC:AB:2C:EE:40:3F:59:09:6A:A0:6E:0F:50:4F:7F:BB:E2:DF:5F:C0 Certificate issuer: /CN=a7bdab2580abb3bf628b5d4f89d497cd9d92a4e3 Certificate serial: 019B7CEE0B26D8A46CEDB09444AADAFA1A52 Authority key identifier: A7:BD:AB:25:80:AB:B3:BF:62:8B:5D:4F:89:D4:97:CD:9D:92:A4:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/7Kss7kA_WQlqoG4PUE9_u-LfX8A.roa Signing time: Fri 02 Jan 2026 04:18:53 +0000 ROA not before: Fri 02 Jan 2026 04:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6856 IP address blocks: 46.164.192.0/18 maxlen: 18 83.139.128.0/18 maxlen: 18 92.244.224.0/19 maxlen: 19 94.141.32.0/19 maxlen: 19 195.98.64.0/20 maxlen: 20 195.98.80.0/20 maxlen: 20 217.25.224.0/20 maxlen: 20 2a00:1af8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:0b:26:d8:a4:6c:ed:b0:94:44:aa:da:fa:1a:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7bdab2580abb3bf628b5d4f89d497cd9d92a4e3 Validity Not Before: Jan 2 04:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ecab2cee403f59096aa06e0f504f7fbbe2df5fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:64:75:f1:43:f5:dd:d8:4f:ee:db:2e:f9:68: c5:9a:28:3f:f0:77:bd:85:4b:b7:ac:67:42:99:1f: f4:7d:90:55:8f:c1:7e:3c:5f:b6:3f:3b:72:31:51: 69:18:12:58:e0:bd:d4:6d:f5:95:3b:16:63:0d:04: 1d:27:73:f8:1f:f7:d1:0b:99:4c:19:2c:2e:ae:9a: cf:05:2c:65:c6:55:de:1e:4e:4d:0b:b8:55:28:f6: fb:c5:b2:e6:96:54:44:d3:e8:42:fc:06:de:19:7d: 24:e2:f7:fa:06:f4:f5:75:08:a9:f9:b7:a5:01:ec: 8c:6f:e4:ca:fe:5f:6a:f6:82:48:61:bf:4e:d7:16: d4:f9:0c:f3:7e:4d:e5:5d:e4:2d:6b:8a:0d:af:87: 4b:ed:81:67:30:c0:30:a4:33:da:42:fe:4d:c1:47: 24:84:da:9b:af:b2:3a:5b:77:33:68:77:04:94:c3: aa:cc:c2:cd:16:e4:4b:78:56:b7:99:13:2d:6e:cd: 76:a9:e3:fe:8c:e7:63:f1:86:de:d3:ca:c1:ff:03: d5:32:fc:04:dc:1e:da:fe:7b:58:b9:cf:20:45:22: 49:83:40:ea:be:53:65:98:ac:0d:4f:ca:0d:a1:c9: 09:4c:42:62:53:1e:cb:00:8e:aa:5a:67:33:07:eb: 61:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:AB:2C:EE:40:3F:59:09:6A:A0:6E:0F:50:4F:7F:BB:E2:DF:5F:C0 X509v3 Authority Key Identifier: keyid:A7:BD:AB:25:80:AB:B3:BF:62:8B:5D:4F:89:D4:97:CD:9D:92:A4:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/7Kss7kA_WQlqoG4PUE9_u-LfX8A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.164.192.0/18 83.139.128.0/18 92.244.224.0/19 94.141.32.0/19 195.98.64.0/19 217.25.224.0/20 IPv6: 2a00:1af8::/32 Signature Algorithm: sha256WithRSAEncryption bc:1b:fc:c6:c7:73:89:af:e7:4d:63:98:cc:a7:d7:12:a3:82: 3d:8c:0f:42:75:36:29:58:a3:bc:65:a1:98:e8:69:74:38:52: 49:d7:cc:6e:5e:b0:93:14:34:9e:82:ad:95:e0:eb:79:e5:a4: e2:1a:26:ad:2f:75:6c:16:7d:85:76:34:d3:5e:6c:50:17:ce: 91:03:f8:ee:20:01:f6:99:e6:fe:9f:76:8f:44:6b:37:4c:4b: f3:75:ca:67:a0:01:6f:aa:8d:88:a4:d4:19:07:ea:50:f3:55: 14:b2:7f:95:c4:7d:d3:38:43:b1:bb:98:bc:29:c6:8f:a1:ce: e0:a5:1b:13:86:84:e1:c2:a5:45:9f:d8:e9:a1:82:6c:d0:72: 69:8e:e9:2a:25:71:2f:13:b6:3b:fb:84:b0:1f:5a:3c:ef:82: 94:7c:09:d2:e6:09:37:b8:f2:39:50:38:5d:a3:8b:ad:ab:35: a6:55:01:db:b3:12:44:24:9d:c7:ce:ff:37:38:00:2a:51:ec: d4:d9:1d:c1:da:b7:25:f3:31:c7:49:ab:8c:ea:c6:f1:bd:03: a1:b7:84:a9:ea:fd:42:1f:89:16:b1:7e:7f:6d:eb:50:b8:a4: 96:b7:99:a1:c5:d1:bb:6c:65:e4:a9:e7:86:4f:ae:cd:40:88: ea:05:b2:99 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt87gsm2KRs7bCURKra+hpSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YmRhYjI1ODBhYmIzYmY2MjhiNWQ0Zjg5ZDQ5N2NkOWQ5 MmE0ZTMwHhcNMjYwMTAyMDQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2FiMmNlZTQwM2Y1OTA5NmFhMDZlMGY1MDRmN2ZiYmUyZGY1ZmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/WR18UP13dhP7tsu+WjFmig/8He9 hUu3rGdCmR/0fZBVj8F+PF+2PztyMVFpGBJY4L3UbfWVOxZjDQQdJ3P4H/fRC5lM GSwurprPBSxlxlXeHk5NC7hVKPb7xbLmllRE0+hC/AbeGX0k4vf6BvT1dQip+bel AeyMb+TK/l9q9oJIYb9O1xbU+Qzzfk3lXeQta4oNr4dL7YFnMMAwpDPaQv5NwUck hNqbr7I6W3czaHcElMOqzMLNFuRLeFa3mRMtbs12qeP+jOdj8Ybe08rB/wPVMvwE 3B7a/ntYuc8gRSJJg0DqvlNlmKwNT8oNockJTEJiUx7LAI6qWmczB+thjQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFOyrLO5AP1kJaqBuD1BPf7vi31/AMB8GA1UdIwQY MBaAFKe9qyWAq7O/YotdT4nUl82dkqTjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDcyckpZQ3JzNzlpaTExUGlkU1h6WjJTcE9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84ZjFiNDYtYTRiMS00ZmYyLWJiZWMt MWQ3MDlhNWM2MTZiLzEvN0tzczdrQV9XUWxxb0c0UFVFOV91LUxmWDhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi84ZjFiNDYtYTRiMS00ZmYyLWJiZWMtMWQ3MDlhNWM2MTZi LzEvcDcyckpZQ3JzNzlpaTExUGlkU1h6WjJTcE9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQGLqTAAwQG U4uAAwQFXPTgAwQFXo0gAwQFw2JAAwQE2RngMA0EAgACMAcDBQAqABr4MA0GCSqG SIb3DQEBCwUAA4IBAQC8G/zGx3OJr+dNY5jMp9cSo4I9jA9CdTYpWKO8ZaGY6Gl0 OFJJ18xuXrCTFDSegq2V4Ot55aTiGiatL3VsFn2FdjTTXmxQF86RA/juIAH2meb+ n3aPRGs3TEvzdcpnoAFvqo2IpNQZB+pQ81UUsn+VxH3TOEOxu5i8KcaPoc7gpRsT hoThwqVFn9jpoYJs0HJpjukqJXEvE7Y7+4SwH1o874KUfAnS5gk3uPI5UDhdo4ut qzWmVQHbsxJEJJ3Hzv83OAAqUezU2R3B2rcl8zHHSauM6sbxvQOht4Sp6v1CH4kW sX5/betQuKSWt5mhxdG7bGXkqeeGT67NQIjqBbKZ -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:50 2026 by rpki-client