This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/7cfTnZvgSfEil-YZBKZdLdCbAbo.roa File: 7cfTnZvgSfEil-YZBKZdLdCbAbo.roa (raw, json) Hash identifier: AKLB22yDeG7EM9+/4pHVnLAsK2pplpeZJDCWxL6pSIw= Subject key identifier: ED:C7:D3:9D:9B:E0:49:F1:22:97:E6:19:04:A6:5D:2D:D0:9B:01:BA Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Certificate serial: 019B7C807DB49342495E026834AFDE396E80 Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/7cfTnZvgSfEil-YZBKZdLdCbAbo.roa Signing time: Fri 02 Jan 2026 02:19:14 +0000 ROA not before: Fri 02 Jan 2026 02:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197476 IP address blocks: 5.157.176.0/21 maxlen: 21 5.157.184.0/21 maxlen: 21 37.35.56.0/21 maxlen: 21 178.157.106.0/23 maxlen: 23 188.74.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:7d:b4:93:42:49:5e:02:68:34:af:de:39:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Validity Not Before: Jan 2 02:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edc7d39d9be049f12297e61904a65d2dd09b01ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3c:f3:6b:8e:bf:12:e8:be:a7:66:1d:77:53: 1f:4b:1b:42:a9:93:a0:cd:0e:0a:ed:d4:76:ab:d8: 59:92:f9:a4:96:cb:61:98:10:bc:42:50:9e:bf:bb: 1c:33:b8:b4:d2:c1:08:8d:62:06:bd:e4:1e:36:8b: f3:77:fb:c5:de:ea:41:0d:aa:4c:57:93:4c:01:52: 91:09:ff:94:ca:2b:f5:c6:b5:f8:83:a8:30:7b:8f: e6:8f:6e:cd:fd:0d:6b:73:31:a1:7e:fd:c4:be:f8: 7b:b9:4f:3b:0d:5b:dd:ac:20:08:d3:00:0a:c9:c0: 31:57:9d:95:82:c4:86:50:34:44:65:02:08:a1:c1: 62:e2:65:2a:66:65:f2:d9:01:50:fd:3c:ea:e7:7b: 2a:6c:0b:bf:8e:9a:1a:80:14:22:eb:7a:0a:9f:81: 19:b9:ce:89:4f:7c:67:57:c3:db:38:b1:81:45:3a: a3:7f:a8:cf:30:3a:33:78:e2:a0:4f:64:ff:d1:94: 4b:51:a4:05:0d:c7:d2:43:24:c6:e7:87:bc:e0:cc: 7c:be:39:1e:79:7d:c1:4e:19:08:63:0e:df:ec:c6: c4:db:c7:6e:17:67:34:6f:de:20:11:cb:4b:58:c5: a2:83:33:61:e5:54:86:8f:f8:89:c7:ff:16:c1:99: b4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C7:D3:9D:9B:E0:49:F1:22:97:E6:19:04:A6:5D:2D:D0:9B:01:BA X509v3 Authority Key Identifier: keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/7cfTnZvgSfEil-YZBKZdLdCbAbo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.157.176.0/20 37.35.56.0/21 178.157.106.0/23 188.74.176.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:d2:ee:52:f0:95:69:df:fc:ae:ec:dd:a9:40:80:05:91:95: fd:0e:26:0c:4e:fb:d7:29:ed:c3:9d:52:79:3f:b3:3a:a5:ac: a5:3b:03:d4:16:ac:4f:ca:cc:7b:0a:5d:d8:3a:3b:36:ce:93: f6:f0:43:8f:e2:97:ad:fe:95:e4:fc:3e:1f:bb:08:06:39:d5: 72:16:1b:79:f9:06:f2:21:3f:2e:a8:98:29:56:fe:b3:c9:a8: 4c:cd:f7:eb:9e:3d:64:75:50:2c:77:a1:bc:65:b7:56:0b:a2: b6:f5:f7:53:a4:10:05:a4:fb:d4:a7:d5:be:a4:0a:ab:d5:a6: 0b:5a:5a:83:ab:d4:0c:79:1f:d2:ec:43:c8:7e:4a:58:a2:1e: 51:c0:a6:2e:2a:a7:70:34:cc:7f:99:14:1f:b9:6a:dd:b8:88: 45:12:97:d3:2b:00:62:99:fc:4e:a6:9f:38:f2:21:0e:9a:3d: 8c:11:88:85:8e:50:e4:0a:fd:44:48:4c:e1:09:0e:d8:89:e0: 97:80:92:c7:c5:72:57:2d:92:2e:d0:0a:9d:35:45:5c:04:14: 0c:8d:61:af:8e:f0:61:7a:2e:c5:b9:aa:2c:93:71:ec:70:20: ff:e1:c5:91:6a:2c:6b:d0:d5:37:91:9a:e6:2d:a9:2b:4b:60: df:a4:96:17 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8gH20k0JJXgJoNK/eOW6AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4 ZDFkMjYwHhcNMjYwMTAyMDIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGM3ZDM5ZDliZTA0OWYxMjI5N2U2MTkwNGE2NWQyZGQwOWIwMWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjzza46/Eui+p2Ydd1MfSxtCqZOg zQ4K7dR2q9hZkvmklsthmBC8QlCev7scM7i00sEIjWIGveQeNovzd/vF3upBDapM V5NMAVKRCf+Uyiv1xrX4g6gwe4/mj27N/Q1rczGhfv3Evvh7uU87DVvdrCAI0wAK ycAxV52VgsSGUDREZQIIocFi4mUqZmXy2QFQ/Tzq53sqbAu/jpoagBQi63oKn4EZ uc6JT3xnV8PbOLGBRTqjf6jPMDozeOKgT2T/0ZRLUaQFDcfSQyTG54e84Mx8vjke eX3BThkIYw7f7MbE28duF2c0b94gEctLWMWigzNh5VSGj/iJx/8WwZm0zQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFO3H052b4EnxIpfmGQSmXS3QmwG6MB8GA1UdIwQY MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt ZmE5Y2I1MWNkMGYxLzEvN2NmVG5admdTZkVpbC1ZWkJLWmRMZENiQWJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQEBZ2wAwQD JSM4AwQBsp1qAwQCvEqwMA0GCSqGSIb3DQEBCwUAA4IBAQCe0u5S8JVp3/yu7N2p QIAFkZX9DiYMTvvXKe3DnVJ5P7M6paylOwPUFqxPysx7Cl3YOjs2zpP28EOP4pet /pXk/D4fuwgGOdVyFht5+QbyIT8uqJgpVv6zyahMzffrnj1kdVAsd6G8ZbdWC6K2 9fdTpBAFpPvUp9W+pAqr1aYLWlqDq9QMeR/S7EPIfkpYoh5RwKYuKqdwNMx/mRQf uWrduIhFEpfTKwBimfxOpp848iEOmj2MEYiFjlDkCv1ESEzhCQ7YieCXgJLHxXJX LZIu0AqdNUVcBBQMjWGvjvBhei7Fuaosk3HscCD/4cWRaixr0NU3kZrmLakrS2Df pJYX -----END CERTIFICATE-----Generated at Mon Jan 19 20:34:48 2026 by rpki-client