This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/7EwL1mGTu0TBGPi1jaD8k2mdYVQ.roa File: 7EwL1mGTu0TBGPi1jaD8k2mdYVQ.roa (raw, json) Hash identifier: PjxOGxkijM0b0jF5UHBjyKfR1LLX9sThl/uiUwJesfo= Subject key identifier: EC:4C:0B:D6:61:93:BB:44:C1:18:F8:B5:8D:A0:FC:93:69:9D:61:54 Certificate issuer: /CN=cb20606de730456edd7335cc882cbdf4396f3460 Certificate serial: 019B7835543F31DBBBD39472D1BEA2AE897E Authority key identifier: CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/7EwL1mGTu0TBGPi1jaD8k2mdYVQ.roa Signing time: Thu 01 Jan 2026 06:18:39 +0000 ROA not before: Thu 01 Jan 2026 06:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209901 IP address blocks: 188.125.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.crl rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:54:3f:31:db:bb:d3:94:72:d1:be:a2:ae:89:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb20606de730456edd7335cc882cbdf4396f3460 Validity Not Before: Jan 1 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec4c0bd66193bb44c118f8b58da0fc93699d6154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e8:8b:5f:7a:7d:f7:76:88:be:12:35:e6:ab: 75:fa:2e:28:ff:b8:b8:50:55:a5:29:c5:87:6c:43: 9c:f0:21:1a:e4:4b:bb:1c:03:ea:cc:4a:a8:f3:37: fc:fc:3f:04:98:0a:9c:58:6d:dc:f6:1e:c3:1b:84: b9:2c:05:bb:a1:ba:7d:6c:d0:36:d1:22:b2:07:54: 9a:44:3f:76:38:01:ca:b1:92:ca:02:c3:08:db:26: 56:a5:da:91:89:21:c5:fe:47:01:21:e9:f2:fe:0d: 10:7d:d1:ce:d5:0c:cc:90:74:c0:7f:bb:b1:d3:18: 2b:7e:87:a6:32:82:ab:49:43:8c:9d:a8:2e:80:36: 47:39:9c:af:2f:07:d4:fb:ce:7b:f4:e0:1c:b7:5e: a5:e3:4b:09:1d:e3:3e:4a:cb:80:b3:15:c3:45:6f: 54:b2:db:9f:9e:c4:e5:29:6d:5b:e9:22:39:fb:be: 0c:95:41:c6:3d:72:27:f2:98:66:ec:9b:5c:4e:c8: 14:95:16:dc:8a:1c:2c:4d:24:45:db:02:c0:9a:96: dc:27:9d:de:53:64:d7:ae:ed:b9:2f:67:e0:a2:52: 86:70:fd:71:de:c9:0c:65:09:4d:c7:a3:75:40:71: e9:85:b9:c2:b6:0d:75:a7:50:ba:d7:f3:82:e1:1c: 40:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4C:0B:D6:61:93:BB:44:C1:18:F8:B5:8D:A0:FC:93:69:9D:61:54 X509v3 Authority Key Identifier: keyid:CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/7EwL1mGTu0TBGPi1jaD8k2mdYVQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.125.156.0/24 Signature Algorithm: sha256WithRSAEncryption 15:ca:47:ef:2f:2f:62:8d:cc:16:f7:4e:5d:1e:62:11:60:83: b5:62:61:73:c8:05:4f:cd:7f:73:01:66:ae:bd:97:bd:e1:26: 0e:60:ae:1e:0e:7c:90:e1:4f:de:fc:9a:f7:29:cf:21:b5:04: b6:6c:e5:a7:f3:3e:6c:8c:55:4c:92:80:47:df:4a:48:4e:c3: 98:ef:c3:72:7e:b5:5e:ee:11:ca:3e:1a:26:5a:2a:57:a3:e9: a2:a7:b6:01:40:ad:60:34:80:5b:7a:c3:62:a5:d3:cf:a3:f9: 04:67:5d:5e:e8:b3:4b:a2:37:a2:f6:26:1b:1b:fc:b8:7c:a1: 38:0c:f4:18:61:94:cf:14:f1:2a:c0:a7:e7:d9:29:8b:65:73: 8a:a3:7f:18:5b:1d:f0:f1:03:af:a0:ad:57:4b:6c:31:34:e5: d0:81:1b:0c:44:de:53:3f:ef:91:8e:60:97:e5:76:16:c7:33: a6:2f:ba:83:bb:90:67:e8:1c:89:9c:f8:4e:c1:3b:8f:98:a8: c0:c4:92:a6:7d:a6:eb:73:8f:a5:1d:20:fb:ad:cc:3f:52:0d: 2f:0a:e4:c2:49:67:2c:62:ed:df:34:51:c8:cb:c0:1c:78:00: 46:f4:1a:e1:9f:2a:19:f2:ed:20:66:f7:6c:ca:a2:7c:26:48: e3:8b:6d:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NVQ/Mdu705Ry0b6irol+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMjA2MDZkZTczMDQ1NmVkZDczMzVjYzg4MmNiZGY0Mzk2 ZjM0NjAwHhcNMjYwMTAxMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzRjMGJkNjYxOTNiYjQ0YzExOGY4YjU4ZGEwZmM5MzY5OWQ2MTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeiLX3p993aIvhI15qt1+i4o/7i4 UFWlKcWHbEOc8CEa5Eu7HAPqzEqo8zf8/D8EmAqcWG3c9h7DG4S5LAW7obp9bNA2 0SKyB1SaRD92OAHKsZLKAsMI2yZWpdqRiSHF/kcBIeny/g0QfdHO1QzMkHTAf7ux 0xgrfoemMoKrSUOMnagugDZHOZyvLwfU+8579OAct16l40sJHeM+SsuAsxXDRW9U stufnsTlKW1b6SI5+74MlUHGPXIn8phm7JtcTsgUlRbcihwsTSRF2wLAmpbcJ53e U2TXru25L2fgolKGcP1x3skMZQlNx6N1QHHphbnCtg11p1C61/OC4RxA7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOxMC9Zhk7tEwRj4tY2g/JNpnWFUMB8GA1UdIwQY MBaAFMsgYG3nMEVu3XM1zIgsvfQ5bzRgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXlCZ2JlY3dSVzdkY3pYTWlDeTk5RGx2TkdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iZjdhMjgtYmYxZS00ODM1LWJlZWQt YjNkODZhYTQzYmM1LzEvN0V3TDFtR1R1MFRCR1BpMWphRDhrMm1kWVZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9iZjdhMjgtYmYxZS00ODM1LWJlZWQtYjNkODZhYTQzYmM1 LzEveXlCZ2JlY3dSVzdkY3pYTWlDeTk5RGx2TkdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvH2cMA0G CSqGSIb3DQEBCwUAA4IBAQAVykfvLy9ijcwW905dHmIRYIO1YmFzyAVPzX9zAWau vZe94SYOYK4eDnyQ4U/e/Jr3Kc8htQS2bOWn8z5sjFVMkoBH30pITsOY78NyfrVe 7hHKPhomWipXo+mip7YBQK1gNIBbesNipdPPo/kEZ11e6LNLojei9iYbG/y4fKE4 DPQYYZTPFPEqwKfn2SmLZXOKo38YWx3w8QOvoK1XS2wxNOXQgRsMRN5TP++RjmCX 5XYWxzOmL7qDu5Bn6ByJnPhOwTuPmKjAxJKmfabrc4+lHSD7rcw/Ug0vCuTCSWcs Yu3fNFHIy8AceABG9BrhnyoZ8u0gZvdsyqJ8Jkjji21b -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:27 2026 by rpki-client