This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/7C-S49faLBX9-oPwv0_Mlc8Thkc.roa File: 7C-S49faLBX9-oPwv0_Mlc8Thkc.roa (raw, json) Hash identifier: g69zZzbRi8j3gBgX+JoOzkBHmrTXnn7/kGE61VI99UE= Subject key identifier: EC:2F:92:E3:D7:DA:2C:15:FD:FA:83:F0:BF:4F:CC:95:CF:13:86:47 Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C745B7840FE3045AF06A02DB316D21 Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/7C-S49faLBX9-oPwv0_Mlc8Thkc.roa Signing time: Thu 01 Jan 2026 04:18:26 +0000 ROA not before: Thu 01 Jan 2026 04:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62135 IP address blocks: 194.85.254.0/24 maxlen: 24 194.85.255.0/24 maxlen: 24 2a0c:a9c7:2::/48 maxlen: 48 2a0c:a9c7:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:45:b7:84:0f:e3:04:5a:f0:6a:02:db:31:6d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec2f92e3d7da2c15fdfa83f0bf4fcc95cf138647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:02:d2:0b:9c:b9:51:52:ed:df:d0:f0:54:c1: 42:3f:87:6f:b0:75:d1:a2:22:0e:9d:e6:ce:ad:fd: 88:6f:30:bf:79:d7:18:01:7c:58:8a:2e:38:0e:d2: f5:61:c6:d0:f4:a2:bb:1f:90:bf:51:7b:e7:59:ad: e6:67:d7:a5:55:d4:83:3f:5a:ad:3c:4e:97:3f:c5: 62:f4:64:58:4c:14:f6:36:e9:77:8f:1a:54:d2:bc: b4:06:b8:78:6f:17:e5:eb:5c:b9:7c:36:7c:03:2c: 5b:13:67:53:9b:47:5e:66:5d:a7:ea:47:cb:90:43: 48:e8:fa:62:e3:e3:e2:5b:42:3c:b1:6d:1f:14:78: c8:d1:d8:03:cc:1e:69:29:b5:e7:82:2a:92:60:55: 78:ac:39:d1:a9:c0:4e:9e:ae:0e:6c:0d:84:4e:f3: b7:7b:71:20:6c:d5:5c:bc:c6:09:2e:e9:92:47:d3: 3d:ea:50:76:89:bb:0e:b1:7e:f5:6f:4d:dd:2a:ab: 76:55:70:e3:17:c6:7d:80:71:ca:83:ff:8a:0a:04: d4:3b:b8:ea:41:cd:43:2c:45:77:cd:b0:4d:86:24: 83:55:1a:ce:ba:6b:44:65:c1:51:3a:a8:dc:bb:b4: cf:e6:d9:2b:8d:6b:a6:bf:b8:f2:59:c5:4e:6a:33: eb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2F:92:E3:D7:DA:2C:15:FD:FA:83:F0:BF:4F:CC:95:CF:13:86:47 X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/7C-S49faLBX9-oPwv0_Mlc8Thkc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.85.254.0/23 IPv6: 2a0c:a9c7:2::/47 Signature Algorithm: sha256WithRSAEncryption 5e:92:df:77:aa:86:29:e2:7d:0c:d8:b5:db:96:e9:97:4b:48: 49:84:02:c3:d7:56:08:a1:e9:08:ef:5d:81:9b:fe:d5:f7:bd: 72:ea:c9:2c:1f:a7:58:36:6d:87:e8:6d:84:3a:19:5f:fc:39: b3:51:5e:2c:9f:0f:ee:60:54:52:a6:58:1a:2c:2d:6a:b1:fb: 3e:10:ac:06:47:b5:9a:c1:2e:62:f0:32:b0:a3:67:2c:53:66: d6:cd:3a:27:6f:2b:9b:5b:6a:82:a2:5c:40:98:31:52:13:55: a8:1a:00:1a:26:d8:74:62:01:7c:b7:c9:aa:7a:77:e8:7b:ed: ea:ef:bc:fc:c8:e3:53:2d:c3:65:d6:be:f1:12:5c:43:ff:26: 04:3f:61:12:3d:06:61:17:3e:92:54:68:54:ab:9c:ca:68:f5: af:51:74:b7:8b:5f:7b:fb:99:3e:e8:66:58:94:5a:ac:d2:04: 66:0c:38:b2:b2:73:1e:1e:67:89:2e:f4:46:cf:30:d5:3e:0c: 45:cb:69:d1:a5:6f:f0:e9:c9:47:e1:77:be:8d:15:d6:dd:08: ca:6c:1c:41:55:4f:56:7a:71:75:44:d5:6e:30:1c:7f:c0:8a: 47:f3:d8:ba:31:20:a6:80:56:f6:a8:fb:c1:bd:5d:e3:a2:6b: 35:15:2d:d5 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3x0W3hA/jBFrwagLbMW0hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzJmOTJlM2Q3ZGEyYzE1ZmRmYTgzZjBiZjRmY2M5NWNmMTM4NjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuALSC5y5UVLt39DwVMFCP4dvsHXR oiIOnebOrf2IbzC/edcYAXxYii44DtL1YcbQ9KK7H5C/UXvnWa3mZ9elVdSDP1qt PE6XP8Vi9GRYTBT2Nul3jxpU0ry0Brh4bxfl61y5fDZ8AyxbE2dTm0deZl2n6kfL kENI6Ppi4+PiW0I8sW0fFHjI0dgDzB5pKbXngiqSYFV4rDnRqcBOnq4ObA2ETvO3 e3EgbNVcvMYJLumSR9M96lB2ibsOsX71b03dKqt2VXDjF8Z9gHHKg/+KCgTUO7jq Qc1DLEV3zbBNhiSDVRrOumtEZcFROqjcu7TP5tkrjWumv7jyWcVOajPrsQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOwvkuPX2iwV/fqD8L9PzJXPE4ZHMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvN0MtUzQ5ZmFMQlg5LW9Qd3YwX01sYzhUaGtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwlX+MA8E AgACMAkDBwEqDKnHAAIwDQYJKoZIhvcNAQELBQADggEBAF6S33eqhinifQzYtduW 6ZdLSEmEAsPXVgih6QjvXYGb/tX3vXLqySwfp1g2bYfobYQ6GV/8ObNRXiyfD+5g VFKmWBosLWqx+z4QrAZHtZrBLmLwMrCjZyxTZtbNOidvK5tbaoKiXECYMVITVaga ABom2HRiAXy3yap6d+h77ervvPzI41Mtw2XWvvESXEP/JgQ/YRI9BmEXPpJUaFSr nMpo9a9RdLeLX3v7mT7oZliUWqzSBGYMOLKycx4eZ4ku9EbPMNU+DEXLadGlb/Dp yUfhd76NFdbdCMpsHEFVT1Z6cXVE1W4wHH/Aikfz2LoxIKaAVvao+8G9XeOiazUV LdU= -----END CERTIFICATE-----Generated at Sun Jan 25 21:16:02 2026 by rpki-client