This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/7q9RY1s7bkPLDFf-R4nEhz7s4U0.roa File: 7q9RY1s7bkPLDFf-R4nEhz7s4U0.roa (raw, json) Hash identifier: x5YDeNVEFuW8k3ZnPb/i30Kf2lB0qRZrnVGssw9mKpA= Subject key identifier: EE:AF:51:63:5B:3B:6E:43:CB:0C:57:FE:47:89:C4:87:3E:EC:E1:4D Certificate issuer: /CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f Certificate serial: 019B7834FD40BCE19EA9211EF7B01E77CEC8 Authority key identifier: 7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/7q9RY1s7bkPLDFf-R4nEhz7s4U0.roa Signing time: Thu 01 Jan 2026 06:18:17 +0000 ROA not before: Thu 01 Jan 2026 06:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201187 IP address blocks: 185.49.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:fd:40:bc:e1:9e:a9:21:1e:f7:b0:1e:77:ce:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f Validity Not Before: Jan 1 06:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eeaf51635b3b6e43cb0c57fe4789c4873eece14d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fd:29:04:9b:d0:4e:61:71:c4:ad:51:bb:a0: 8f:a5:5e:38:4e:b4:a4:4f:17:25:a2:51:af:ce:43: bb:65:02:94:2c:22:08:ee:49:4b:22:3c:70:6f:88: 29:f8:a8:ea:41:77:69:0c:12:60:b5:e9:46:67:af: cd:92:dd:79:61:eb:ce:05:56:8a:2d:f4:b6:ba:89: 55:9d:ea:50:66:4f:fb:19:f0:15:92:6d:b7:4c:15: 0f:72:4a:af:dc:fc:e6:a5:e5:6b:fb:80:65:f1:b7: e7:a9:46:4c:cc:d4:16:6d:08:8e:db:e0:78:03:fe: 29:09:04:1e:80:38:3f:b1:f9:bf:ff:b0:bf:b0:fa: 42:e9:59:40:d4:5f:5d:43:33:14:9f:00:22:5a:ab: 05:ce:84:cc:b8:cd:ec:3e:44:c8:82:6c:14:8d:87: 0b:94:8b:99:82:e2:d8:df:3a:da:64:41:d2:04:2d: 8a:87:e4:5c:8b:4f:0b:b2:10:9b:4a:42:2c:bb:9c: 34:bb:48:97:15:2d:06:56:c3:4b:19:b5:6c:c8:c5: 2f:18:17:de:e7:f4:a6:87:5a:22:5f:d2:26:15:1e: 2c:34:95:b0:ca:57:db:e6:3f:5e:c8:1e:af:66:7c: 0f:a1:3c:cf:77:e2:5b:88:d7:46:fb:2a:c3:a2:7a: 91:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:AF:51:63:5B:3B:6E:43:CB:0C:57:FE:47:89:C4:87:3E:EC:E1:4D X509v3 Authority Key Identifier: keyid:7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/7q9RY1s7bkPLDFf-R4nEhz7s4U0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.49.244.0/22 Signature Algorithm: sha256WithRSAEncryption 40:75:a1:b6:66:f5:b4:c0:5b:eb:b6:18:62:fa:98:7f:61:ca: 98:19:81:25:34:73:08:d5:96:42:93:59:29:de:6b:c2:28:bb: a2:7f:35:e3:c4:71:ba:7d:47:be:9a:70:0b:b3:a4:d3:38:c7: 18:4a:d2:ca:ec:d7:74:ab:07:bb:a4:cf:55:ca:04:d7:91:a3: 94:ae:42:c2:3b:46:8a:2f:22:bf:c7:1c:9d:70:36:87:03:74: 59:8d:e5:50:8b:b0:e8:93:1d:55:51:c8:bc:a4:65:98:7e:48: 88:5a:da:ab:32:53:7c:b8:61:9e:76:75:e0:78:da:cf:5e:8d: d3:67:4e:8f:3c:ed:3a:5b:ff:46:f4:fa:4b:34:09:99:ac:6d: bd:96:48:2d:86:cb:59:62:65:1e:06:bd:d7:c5:02:2d:22:25: 62:6a:0b:8e:68:36:67:7d:36:81:04:58:f6:57:54:06:32:cf: 9b:55:d4:dc:ac:e5:d4:76:cd:de:b9:d2:1f:3d:b1:b6:89:d7: 30:44:e9:1c:4f:af:6d:e7:d7:5e:39:b2:dd:57:75:13:69:f8: 7c:9a:0a:45:f2:80:52:26:3e:1e:a5:00:b9:55:9d:af:e4:63: 04:a4:2d:ac:8a:84:81:b3:d2:23:a2:16:c5:13:d0:47:b5:ce: 90:46:59:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NP1AvOGeqSEe97Aed87IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlZDUwMDE2NGYwNzM4MTM1YjlhZWMwNGUzOGZjMjRjYjkw ZTBmNWYwHhcNMjYwMTAxMDYxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWFmNTE2MzViM2I2ZTQzY2IwYzU3ZmU0Nzg5YzQ4NzNlZWNlMTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP0pBJvQTmFxxK1Ru6CPpV44TrSk TxclolGvzkO7ZQKULCII7klLIjxwb4gp+KjqQXdpDBJgtelGZ6/Nkt15YevOBVaK LfS2uolVnepQZk/7GfAVkm23TBUPckqv3PzmpeVr+4Bl8bfnqUZMzNQWbQiO2+B4 A/4pCQQegDg/sfm//7C/sPpC6VlA1F9dQzMUnwAiWqsFzoTMuM3sPkTIgmwUjYcL lIuZguLY3zraZEHSBC2Kh+Rci08LshCbSkIsu5w0u0iXFS0GVsNLGbVsyMUvGBfe 5/Smh1oiX9ImFR4sNJWwylfb5j9eyB6vZnwPoTzPd+JbiNdG+yrDonqRxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO6vUWNbO25DywxX/keJxIc+7OFNMB8GA1UdIwQY MBaAFH7VABZPBzgTW5rsBOOPwky5Dg9fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnRVQUZrOEhPQk5ibXV3RTQ0X0NUTGtPRDE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YzUzNTktMzQ1Mi00MmYzLTg4MGIt ODJkOWE5ZWI0MzBjLzEvN3E5Ulkxczdia1BMREZmLVI0bkVoejdzNFUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC85YzUzNTktMzQ1Mi00MmYzLTg4MGItODJkOWE5ZWI0MzBj LzEvZnRVQUZrOEhPQk5ibXV3RTQ0X0NUTGtPRDE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTH0MA0G CSqGSIb3DQEBCwUAA4IBAQBAdaG2ZvW0wFvrthhi+ph/YcqYGYElNHMI1ZZCk1kp 3mvCKLuifzXjxHG6fUe+mnALs6TTOMcYStLK7Nd0qwe7pM9VygTXkaOUrkLCO0aK LyK/xxydcDaHA3RZjeVQi7Dokx1VUci8pGWYfkiIWtqrMlN8uGGednXgeNrPXo3T Z06PPO06W/9G9PpLNAmZrG29lkgthstZYmUeBr3XxQItIiViaguOaDZnfTaBBFj2 V1QGMs+bVdTcrOXUds3eudIfPbG2idcwROkcT69t59deObLdV3UTafh8mgpF8oBS Jj4epQC5VZ2v5GMEpC2sioSBs9IjohbFE9BHtc6QRlmc -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:28 2026 by rpki-client