This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/7GKSUsC2-EZN7XkuEfWum4yKSTg.roa File: 7GKSUsC2-EZN7XkuEfWum4yKSTg.roa (raw, json) Hash identifier: 0/D0ft4/Akr9FC1mkgoFrsHQKcBzONWj8zopSzgBrVU= Subject key identifier: EC:62:92:52:C0:B6:F8:46:4D:ED:79:2E:11:F5:AE:9B:8C:8A:49:38 Certificate issuer: /CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2 Certificate serial: 019B77C75D3A524B5FC8C09DAF2ED0D98A83 Authority key identifier: 2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/7GKSUsC2-EZN7XkuEfWum4yKSTg.roa Signing time: Thu 01 Jan 2026 04:18:32 +0000 ROA not before: Thu 01 Jan 2026 04:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41405 IP address blocks: 45.146.212.0/22 maxlen: 22 91.223.159.0/24 maxlen: 24 185.123.84.0/22 maxlen: 22 195.200.217.0/24 maxlen: 24 2a06:ac00::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5d:3a:52:4b:5f:c8:c0:9d:af:2e:d0:d9:8a:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2 Validity Not Before: Jan 1 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec629252c0b6f8464ded792e11f5ae9b8c8a4938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2d:ca:b6:b8:45:c0:90:c6:ce:80:78:08:29: b4:32:ae:41:db:92:41:5b:10:dd:9a:89:f3:da:28: b3:da:1f:1f:65:69:3b:c3:6a:28:2d:09:21:37:f8: 60:da:88:d7:41:6a:b3:2c:c1:7a:b5:69:0a:1e:90: c9:c3:7d:80:02:ee:f4:46:4e:92:58:b0:5d:37:6b: 27:cd:ae:fc:81:40:72:61:dc:a0:44:95:c0:bc:2c: f4:70:88:15:90:a6:32:98:6e:2a:72:40:cc:c1:d0: 7b:d8:1d:b6:ca:81:cc:01:3c:69:5b:d7:d7:42:de: b8:df:58:04:92:c6:5c:78:31:79:32:85:31:6d:6f: 7c:58:9b:c2:26:f4:77:07:0e:30:43:5f:ee:ba:81: 8e:72:16:3a:fe:01:3e:ef:d8:a0:e6:be:6b:6f:78: 37:d3:53:0d:70:c3:80:a4:0c:79:d4:85:d3:33:7e: 36:65:54:80:99:7b:c4:3d:ea:8b:ee:28:a6:3f:84: 54:06:d0:6a:75:62:ee:3e:45:ca:ee:d0:5b:c3:a2: e2:36:3d:b4:d2:77:94:09:14:79:20:c4:0f:6f:fa: e2:78:21:35:98:3e:f9:d5:68:0b:b3:4c:68:75:72: b9:c9:e7:da:3a:97:af:c1:24:de:9d:33:5d:d6:cd: 6a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:62:92:52:C0:B6:F8:46:4D:ED:79:2E:11:F5:AE:9B:8C:8A:49:38 X509v3 Authority Key Identifier: keyid:2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/7GKSUsC2-EZN7XkuEfWum4yKSTg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.212.0/22 91.223.159.0/24 185.123.84.0/22 195.200.217.0/24 IPv6: 2a06:ac00::/29 Signature Algorithm: sha256WithRSAEncryption 3b:9b:74:7e:d1:a7:18:8d:86:7f:08:36:95:1e:f2:7b:4c:7e: b0:80:b8:c9:32:33:58:0d:96:5f:3e:33:f7:e6:e3:8e:ac:7c: f5:ba:6c:ac:de:d4:85:a2:8b:b9:fc:9d:cc:52:d9:29:55:be: 3b:39:6e:a7:ae:bf:4c:be:85:32:93:b8:d3:07:5f:8d:54:12: ae:b4:3a:bf:df:07:b0:1f:c0:b1:17:82:db:5b:71:3a:92:cb: bc:ff:45:52:58:c4:24:cc:a4:a4:18:93:38:27:38:a0:23:e4: 39:72:4f:53:a6:86:e5:ee:52:58:45:59:76:68:4a:ea:be:df: f1:ea:f2:31:7d:83:56:0c:10:66:3a:2b:e3:71:8b:7e:ca:12: 46:5f:1f:c8:5c:de:b2:66:c7:25:9e:1b:4d:36:ff:15:5f:38: 31:5f:28:48:86:16:3a:07:9b:07:4c:ad:51:db:99:a2:1e:84: 0e:6e:6c:67:1c:d2:5b:b6:8d:20:02:1c:b2:ff:20:2d:5c:95: 3f:8d:f5:33:e7:04:67:9b:94:d7:5d:bf:73:ec:19:3f:c9:83: 64:71:61:93:e9:55:42:ca:f6:83:9c:20:eb:3f:5a:6b:9a:5b: bc:14:4d:24:e7:3e:3a:f2:ed:b4:0a:2f:d9:07:e4:a9:95:33: ff:b9:55:7c -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt3x106UktfyMCdry7Q2YqDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNzQ3OWY0NTY0M2EyYjgyZTEwZGFiZjczZWZlZjc3MDNi MWUyZDIwHhcNMjYwMTAxMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzYyOTI1MmMwYjZmODQ2NGRlZDc5MmUxMWY1YWU5YjhjOGE0OTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC3KtrhFwJDGzoB4CCm0Mq5B25JB WxDdmonz2iiz2h8fZWk7w2ooLQkhN/hg2ojXQWqzLMF6tWkKHpDJw32AAu70Rk6S WLBdN2snza78gUByYdygRJXAvCz0cIgVkKYymG4qckDMwdB72B22yoHMATxpW9fX Qt6431gEksZceDF5MoUxbW98WJvCJvR3Bw4wQ1/uuoGOchY6/gE+79ig5r5rb3g3 01MNcMOApAx51IXTM342ZVSAmXvEPeqL7iimP4RUBtBqdWLuPkXK7tBbw6LiNj20 0neUCRR5IMQPb/rieCE1mD751WgLs0xodXK5yefaOpevwSTenTNd1s1qrwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFOxiklLAtvhGTe15LhH1rpuMikk4MB8GA1UdIwQY MBaAFC10efRWQ6K4LhDav3Pv73cDseLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFhSNTlGWkRvcmd1RU5xX2MtX3Zkd094NHRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85ZGZlMWUtY2Q3NC00NzFlLTkxYmYt MGZjM2ZkY2Y1OWFlLzEvN0dLU1VzQzItRVpON1hrdUVmV3VtNHlLU1RnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85ZGZlMWUtY2Q3NC00NzFlLTkxYmYtMGZjM2ZkY2Y1OWFl LzEvTFhSNTlGWkRvcmd1RU5xX2MtX3Zkd094NHRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCLZLUAwQA W9+fAwQCuXtUAwQAw8jZMA0EAgACMAcDBQMqBqwAMA0GCSqGSIb3DQEBCwUAA4IB AQA7m3R+0acYjYZ/CDaVHvJ7TH6wgLjJMjNYDZZfPjP35uOOrHz1umys3tSFoou5 /J3MUtkpVb47OW6nrr9MvoUyk7jTB1+NVBKutDq/3wewH8CxF4LbW3E6ksu8/0VS WMQkzKSkGJM4JzigI+Q5ck9Tpobl7lJYRVl2aErqvt/x6vIxfYNWDBBmOivjcYt+ yhJGXx/IXN6yZsclnhtNNv8VXzgxXyhIhhY6B5sHTK1R25miHoQObmxnHNJbto0g Ahyy/yAtXJU/jfUz5wRnm5TXXb9z7Bk/yYNkcWGT6VVCyvaDnCDrP1prmlu8FE0k 5z468u20Ci/ZB+SplTP/uVV8 -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:07 2026 by rpki-client