This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/o7cFZ2_mdT4z66zcAjhDBlj9fc0.roa File: o7cFZ2_mdT4z66zcAjhDBlj9fc0.roa (raw, json) Hash identifier: YKENZtDbouX123QC9IjXYuWhmGFmJEwt6IRC/Z5j654= Subject key identifier: A3:B7:05:67:6F:E6:75:3E:33:EB:AC:DC:02:38:43:06:58:FD:7D:CD Certificate issuer: /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa Certificate serial: 019B77C6930ACB16D6B8ACF13EBF5DEC15BF Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/o7cFZ2_mdT4z66zcAjhDBlj9fc0.roa Signing time: Thu 01 Jan 2026 04:17:40 +0000 ROA not before: Thu 01 Jan 2026 04:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215898 IP address blocks: 185.233.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:93:0a:cb:16:d6:b8:ac:f1:3e:bf:5d:ec:15:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa Validity Not Before: Jan 1 04:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3b705676fe6753e33ebacdc0238430658fd7dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:50:16:9c:ee:35:c6:84:a2:f4:b9:10:eb:7f: cb:35:3a:80:72:26:24:49:7d:a9:14:65:fc:6d:b3: 4e:91:a1:37:1c:c1:84:1b:e1:f7:ad:90:61:6e:fa: c7:c3:3c:dd:22:23:e1:7f:e4:25:6b:35:db:88:35: db:89:8e:de:1b:3f:6a:5a:a0:10:39:b0:9b:ee:de: ad:b1:d7:b3:04:9e:c6:02:7d:2b:12:8e:93:5d:25: bd:3d:8d:8a:5e:f9:57:40:dd:30:a9:f8:15:67:53: 7d:7d:35:8a:c7:d8:3e:c8:26:9f:37:76:80:d8:10: cd:62:6b:0b:ff:49:57:de:de:5b:95:10:39:8a:0c: 93:ed:a8:8d:e3:9e:07:cf:1b:2e:f9:5c:a9:52:98: 8a:18:85:bb:38:3c:dd:da:e7:e8:cf:1a:83:e1:b2: 72:37:12:dd:19:b6:88:f4:c0:bc:d5:71:ce:de:cf: 7a:af:1f:5c:11:fe:0c:a3:1d:b3:be:08:ce:93:9a: 6e:f4:22:4a:3f:25:ef:c8:9a:7a:fc:a7:4f:f1:c1: a1:03:09:36:4b:64:66:a3:c3:1f:c8:b2:01:47:43: 2e:32:c8:9f:44:ab:46:1d:e5:b6:a4:2d:62:38:9f: 3e:1b:08:58:4d:21:23:2c:fe:5e:d4:06:46:5f:28: 1f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B7:05:67:6F:E6:75:3E:33:EB:AC:DC:02:38:43:06:58:FD:7D:CD X509v3 Authority Key Identifier: keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/o7cFZ2_mdT4z66zcAjhDBlj9fc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.164.0/24 Signature Algorithm: sha256WithRSAEncryption a7:2b:6c:f6:2f:85:ef:fa:47:29:eb:30:41:1b:64:fb:5f:b4: 0d:31:a9:7f:e8:5c:b4:de:45:f1:73:48:5d:1d:86:cb:7a:72: 01:cd:1d:30:cc:a4:fd:b4:8d:ef:eb:43:c6:94:7e:b0:d9:40: cd:ff:d7:4e:38:96:3c:4f:99:95:eb:40:85:ed:1c:90:98:b6: e8:68:09:5c:42:8c:79:9e:92:88:fa:14:cc:02:4e:6e:dc:4b: 07:13:04:e5:73:4c:16:54:08:8b:4e:e6:9b:4f:46:70:5d:c3: 27:22:52:b5:c2:f3:77:f8:42:25:36:08:8b:f3:86:f2:22:2a: 2c:95:a0:13:30:99:19:64:84:25:d1:03:d6:22:5d:3e:2b:61: 4b:b7:8d:e1:b3:c0:b5:8b:80:56:0e:7f:ac:74:7c:c5:4f:2b: 51:64:4c:14:fe:2c:fd:7c:6d:5d:c1:9d:dd:78:46:0d:4d:75: 41:13:16:e8:ae:88:77:b7:d9:12:2a:3b:ad:3c:3a:0b:5f:a9: 81:f4:69:00:94:e4:17:30:23:51:32:89:ff:a1:20:a1:1b:1c: cb:e7:d6:b4:75:71:40:93:a2:b2:1a:84:12:c6:84:22:83:d3: c4:25:f8:70:21:d1:9d:d7:15:ba:07:f4:9e:e7:f2:e8:79:69: 97:98:f7:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xpMKyxbWuKzxPr9d7BW/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YjYyM2JiYzU0ZTk4NDY3NDhjZDc3YjJiOGIzNDM4Mjdl NWFlYWEwHhcNMjYwMTAxMDQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2I3MDU2NzZmZTY3NTNlMzNlYmFjZGMwMjM4NDMwNjU4ZmQ3ZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lAWnO41xoSi9LkQ63/LNTqAciYk SX2pFGX8bbNOkaE3HMGEG+H3rZBhbvrHwzzdIiPhf+QlazXbiDXbiY7eGz9qWqAQ ObCb7t6tsdezBJ7GAn0rEo6TXSW9PY2KXvlXQN0wqfgVZ1N9fTWKx9g+yCafN3aA 2BDNYmsL/0lX3t5blRA5igyT7aiN454Hzxsu+VypUpiKGIW7ODzd2ufozxqD4bJy NxLdGbaI9MC81XHO3s96rx9cEf4Mox2zvgjOk5pu9CJKPyXvyJp6/KdP8cGhAwk2 S2Rmo8MfyLIBR0MuMsifRKtGHeW2pC1iOJ8+GwhYTSEjLP5e1AZGXygfBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKO3BWdv5nU+M+us3AI4QwZY/X3NMB8GA1UdIwQY MBaAFMe2I7vFTphGdIzXeyuLNDgn5a6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMt MzRlNGUwNjc5MzMzLzEvbzdjRloyX21kVDR6NjZ6Y0FqaERCbGo5ZmMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMtMzRlNGUwNjc5MzMz LzEveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuemkMA0G CSqGSIb3DQEBCwUAA4IBAQCnK2z2L4Xv+kcp6zBBG2T7X7QNMal/6Fy03kXxc0hd HYbLenIBzR0wzKT9tI3v60PGlH6w2UDN/9dOOJY8T5mV60CF7RyQmLboaAlcQox5 npKI+hTMAk5u3EsHEwTlc0wWVAiLTuabT0ZwXcMnIlK1wvN3+EIlNgiL84byIios laATMJkZZIQl0QPWIl0+K2FLt43hs8C1i4BWDn+sdHzFTytRZEwU/iz9fG1dwZ3d eEYNTXVBExboroh3t9kSKjutPDoLX6mB9GkAlOQXMCNRMon/oSChGxzL59a0dXFA k6KyGoQSxoQig9PEJfhwIdGd1xW6B/Se5/LoeWmXmPc6 -----END CERTIFICATE-----Generated at Tue Jan 20 22:01:22 2026 by rpki-client