This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/7mW4wOHRW1H71d-sSOc_lK75qpg.roa File: 7mW4wOHRW1H71d-sSOc_lK75qpg.roa (raw, json) Hash identifier: 2C20Y1HJD9NUUe3oyFVws916YL4BTi4Ci2cXXpoCfNg= Subject key identifier: EE:65:B8:C0:E1:D1:5B:51:FB:D5:DF:AC:48:E7:3F:94:AE:F9:AA:98 Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55 Certificate serial: 019B79104ED7699744206C36A53B47E762FF Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/7mW4wOHRW1H71d-sSOc_lK75qpg.roa Signing time: Thu 01 Jan 2026 10:17:50 +0000 ROA not before: Thu 01 Jan 2026 10:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200862 IP address blocks: 217.11.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:4e:d7:69:97:44:20:6c:36:a5:3b:47:e7:62:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55 Validity Not Before: Jan 1 10:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee65b8c0e1d15b51fbd5dfac48e73f94aef9aa98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4f:9d:97:14:7a:1a:46:9e:2e:49:a2:f1:d6: 7f:2f:6d:88:19:fb:5f:ed:94:41:3b:1a:8e:8b:c6: ed:ee:bd:50:3d:d8:09:ff:fb:dd:05:dc:56:d9:35: c4:c0:8a:d2:30:d5:6b:47:76:96:ed:22:df:58:3a: 04:43:01:88:4e:6f:6b:b7:90:ef:5b:4f:44:2f:9f: 45:bb:5f:5d:7f:d7:5c:7c:e5:04:df:08:19:7d:6d: b3:e0:0c:40:a0:8b:1f:67:46:1a:07:e4:ef:59:8b: 1b:91:b6:e4:70:e6:89:d8:e0:94:20:fd:b9:18:de: d2:51:d1:8a:c1:2f:9f:3d:cc:54:d0:78:95:98:e7: 46:54:9c:b2:01:67:0d:c7:f4:a1:ef:47:a8:a4:4a: 11:57:bb:8f:83:af:09:81:24:8b:59:c8:cf:79:72: ae:15:c5:c5:77:c1:59:ba:da:d4:58:7a:eb:29:b3: 8a:66:93:9e:df:f8:f5:10:e6:a2:da:4f:d8:40:fb: 71:42:d4:e1:69:31:14:99:62:42:e2:5a:41:d4:a8: 30:ff:37:7a:33:b2:2e:45:5a:50:e1:60:4f:f0:5a: 57:56:ee:46:de:94:88:c4:f0:2f:d2:1c:27:b7:04: ff:62:48:06:17:51:c2:92:53:3b:f7:fc:19:b5:9c: f5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:65:B8:C0:E1:D1:5B:51:FB:D5:DF:AC:48:E7:3F:94:AE:F9:AA:98 X509v3 Authority Key Identifier: keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/7mW4wOHRW1H71d-sSOc_lK75qpg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.11.132.0/24 Signature Algorithm: sha256WithRSAEncryption 03:dd:c8:18:c1:88:c2:ec:14:55:9e:0b:20:cc:51:9b:56:42: 08:c7:af:0c:b7:d2:5c:3a:0d:b5:61:64:10:7e:85:08:90:ba: 7f:d4:74:f1:8a:ea:f8:9d:68:8e:bb:8a:b6:32:c1:0a:91:a7: 18:6f:94:6a:af:0b:2d:c3:f2:17:5e:c0:c0:1a:b2:a9:97:8a: 61:6a:26:a1:0a:d9:c0:59:ea:0a:c8:f3:05:3a:fc:7c:bf:0c: 71:33:36:7c:53:2e:51:57:c5:64:54:df:20:33:10:0f:c6:00: 40:c1:ce:94:4f:f9:ff:c4:98:d6:ff:00:83:a1:5c:fc:d4:f4: 38:52:ad:69:47:96:93:02:80:05:26:fc:42:49:43:d5:cd:f2: 8b:7a:18:62:11:78:49:d7:48:e1:2e:d2:e5:21:3c:8f:2f:ca: c2:91:ad:2a:5d:91:e9:80:92:c4:e9:b1:16:47:ca:c1:7e:e3: 09:39:98:24:a0:1a:a7:38:d8:36:23:bb:85:9f:8a:92:fc:e0: 40:4d:e3:1d:9d:88:37:5f:bf:62:cc:ae:93:e2:df:03:31:ab: db:4f:9f:3f:57:6a:08:bc:ad:78:47:28:14:a5:3b:db:49:4e: 64:09:94:fa:93:2b:67:91:7a:f8:da:11:da:93:c8:bd:18:3c: 27:f1:64:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EE7XaZdEIGw2pTtH52L/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMGExMjMxZDFjMjdhNzU0ZTQ2ZWYxMGU5MmE3MzBhZTE1 ZDBmNTUwHhcNMjYwMTAxMTAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTY1YjhjMGUxZDE1YjUxZmJkNWRmYWM0OGU3M2Y5NGFlZjlhYTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0+dlxR6GkaeLkmi8dZ/L22IGftf 7ZRBOxqOi8bt7r1QPdgJ//vdBdxW2TXEwIrSMNVrR3aW7SLfWDoEQwGITm9rt5Dv W09EL59Fu19df9dcfOUE3wgZfW2z4AxAoIsfZ0YaB+TvWYsbkbbkcOaJ2OCUIP25 GN7SUdGKwS+fPcxU0HiVmOdGVJyyAWcNx/Sh70eopEoRV7uPg68JgSSLWcjPeXKu FcXFd8FZutrUWHrrKbOKZpOe3/j1EOai2k/YQPtxQtThaTEUmWJC4lpB1Kgw/zd6 M7IuRVpQ4WBP8FpXVu5G3pSIxPAv0hwntwT/YkgGF1HCklM79/wZtZz1nQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO5luMDh0VtR+9XfrEjnP5Su+aqYMB8GA1UdIwQY MBaAFHAKEjHRwnp1TkbvEOkqcwrhXQ9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgt YWI3OWEzNzg5ZjhmLzEvN21XNHdPSFJXMUg3MWQtc1NPY19sSzc1cXBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgtYWI3OWEzNzg5Zjhm LzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2QuEMA0G CSqGSIb3DQEBCwUAA4IBAQAD3cgYwYjC7BRVngsgzFGbVkIIx68Mt9JcOg21YWQQ foUIkLp/1HTxiur4nWiOu4q2MsEKkacYb5Rqrwstw/IXXsDAGrKpl4phaiahCtnA WeoKyPMFOvx8vwxxMzZ8Uy5RV8VkVN8gMxAPxgBAwc6UT/n/xJjW/wCDoVz81PQ4 Uq1pR5aTAoAFJvxCSUPVzfKLehhiEXhJ10jhLtLlITyPL8rCka0qXZHpgJLE6bEW R8rBfuMJOZgkoBqnONg2I7uFn4qS/OBATeMdnYg3X79izK6T4t8DMavbT58/V2oI vK14RygUpTvbSU5kCZT6kytnkXr42hHak8i9GDwn8WRS -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:22 2026 by rpki-client