This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/r7-SCz1aeewC1b28_7aTBEERbc8.roa File: r7-SCz1aeewC1b28_7aTBEERbc8.roa (raw, json) Hash identifier: GlvMAyQ8rtSS7ofDdsa5bNcv30a7phC116f+dSElfio= Subject key identifier: AF:BF:92:0B:3D:5A:79:EC:02:D5:BD:BC:FF:B6:93:04:41:11:6D:CF Certificate issuer: /CN=49f035f74bf6350bc379ff2e253882d2468ef588 Certificate serial: 019B7B3678F7CB8599BAD6F5275AEC3E637C Authority key identifier: 49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/r7-SCz1aeewC1b28_7aTBEERbc8.roa Signing time: Thu 01 Jan 2026 20:18:46 +0000 ROA not before: Thu 01 Jan 2026 20:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203792 IP address blocks: 185.164.161.0/24 maxlen: 24 2a12:bac0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:78:f7:cb:85:99:ba:d6:f5:27:5a:ec:3e:63:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f035f74bf6350bc379ff2e253882d2468ef588 Validity Not Before: Jan 1 20:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afbf920b3d5a79ec02d5bdbcffb6930441116dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:36:dc:4e:4d:72:0e:52:0b:1f:0a:f2:da:d4: 7c:c3:11:17:80:16:1f:31:ff:80:62:16:82:4b:d0: 56:1b:40:43:5c:22:31:22:c6:54:31:1c:2c:5b:dc: 70:08:1e:1f:80:72:2b:3b:d7:e6:d4:c9:78:2a:87: 59:df:59:7c:fb:0d:49:5d:61:b5:bc:8b:38:48:6e: 4c:b2:a3:9f:c7:f1:b1:48:45:2c:50:16:c6:68:d4: 67:9e:cf:8c:3c:3e:6e:52:ed:db:e3:be:fd:6c:0f: 6b:86:6e:a2:9c:b6:e3:81:a9:ab:9b:4a:39:fe:e4: ae:cd:fb:18:83:a6:dd:f6:b3:30:62:25:e1:ca:2c: b9:7b:56:25:68:8e:ef:0d:66:3a:80:0b:2d:6d:a8: 8b:0f:bc:4c:8a:27:3a:74:07:5b:ca:79:67:98:5d: 47:ef:44:2f:d0:23:ab:2e:85:43:19:67:62:dd:fe: d8:e7:7a:04:c1:f5:4b:79:a4:0d:04:ef:4b:fb:f7: 04:ba:5f:be:29:9d:47:64:f4:ac:42:b4:cf:9d:f2: 15:e6:ae:ec:fd:88:90:a7:59:83:87:78:1b:e3:ee: 89:be:04:e6:ba:6f:6a:f5:db:2b:8d:2c:01:c9:1d: 9a:e7:23:84:ac:0b:1d:0c:6d:41:0e:b1:79:51:3d: 3e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:BF:92:0B:3D:5A:79:EC:02:D5:BD:BC:FF:B6:93:04:41:11:6D:CF X509v3 Authority Key Identifier: keyid:49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/r7-SCz1aeewC1b28_7aTBEERbc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.164.161.0/24 IPv6: 2a12:bac0::/29 Signature Algorithm: sha256WithRSAEncryption 1e:f5:4d:5c:ac:d6:d7:4c:33:5b:55:c9:c4:85:e6:98:7a:65: c4:d8:6c:23:2a:b1:ed:6c:ff:4d:8f:d1:1a:e1:f5:31:b9:88: 66:57:78:ed:37:7a:41:0c:e9:8e:c1:34:cc:71:35:92:78:d9: ab:85:6e:df:93:f7:eb:fc:a2:45:2a:db:21:30:42:0b:b2:4d: 98:7f:df:2a:ad:1b:6a:ca:33:2f:70:8c:85:07:0c:84:45:b6: f4:6f:a0:48:47:59:91:87:11:6e:5d:8b:17:ad:97:55:b2:54: af:56:f6:e5:73:5b:02:09:1d:1d:8c:b8:99:89:14:6d:d3:95: 04:1c:04:72:95:4d:11:c9:ab:9a:62:ca:11:56:c3:a0:50:8b: 12:cd:aa:c2:d7:de:e4:ec:25:e7:bf:92:39:d3:6b:62:92:8b: d8:6e:02:37:02:8c:1d:47:39:98:e4:d3:65:72:e0:c4:30:c3: 24:37:8a:fc:cd:c6:73:d4:c6:1d:82:52:d1:0c:4c:d8:f9:c3: c5:93:01:f7:6f:a4:0f:4f:37:1b:02:02:ea:e4:41:5b:42:64: 66:e2:18:41:a2:1e:1f:5c:73:4c:ca:f2:78:2e:a5:e1:78:8c: 0f:39:ee:89:fd:4a:b6:b1:cc:f5:71:9f:19:e6:57:ec:9d:a0: a7:65:97:28 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7Nnj3y4WZutb1J1rsPmN8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjAzNWY3NGJmNjM1MGJjMzc5ZmYyZTI1Mzg4MmQyNDY4 ZWY1ODgwHhcNMjYwMTAxMjAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmJmOTIwYjNkNWE3OWVjMDJkNWJkYmNmZmI2OTMwNDQxMTE2ZGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTbcTk1yDlILHwry2tR8wxEXgBYf Mf+AYhaCS9BWG0BDXCIxIsZUMRwsW9xwCB4fgHIrO9fm1Ml4KodZ31l8+w1JXWG1 vIs4SG5MsqOfx/GxSEUsUBbGaNRnns+MPD5uUu3b4779bA9rhm6inLbjgamrm0o5 /uSuzfsYg6bd9rMwYiXhyiy5e1YlaI7vDWY6gAstbaiLD7xMiic6dAdbynlnmF1H 70Qv0COrLoVDGWdi3f7Y53oEwfVLeaQNBO9L+/cEul++KZ1HZPSsQrTPnfIV5q7s /YiQp1mDh3gb4+6JvgTmum9q9dsrjSwByR2a5yOErAsdDG1BDrF5UT0+jQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFK+/kgs9WnnsAtW9vP+2kwRBEW3PMB8GA1UdIwQY MBaAFEnwNfdL9jULw3n/LiU4gtJGjvWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZBMTkwdjJOUXZEZWY4dUpUaUMwa2FPOVlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMmZkOGUtMmQzOC00YWIxLTg0YjUt OWVmMTI5ZWFkZTc4LzEvcjctU0N6MWFlZXdDMWIyOF83YVRCRUVSYmM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8wMmZkOGUtMmQzOC00YWIxLTg0YjUtOWVmMTI5ZWFkZTc4 LzEvU2ZBMTkwdjJOUXZEZWY4dUpUaUMwa2FPOVlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuaShMA0E AgACMAcDBQMqErrAMA0GCSqGSIb3DQEBCwUAA4IBAQAe9U1crNbXTDNbVcnEheaY emXE2GwjKrHtbP9Nj9Ea4fUxuYhmV3jtN3pBDOmOwTTMcTWSeNmrhW7fk/fr/KJF KtshMEILsk2Yf98qrRtqyjMvcIyFBwyERbb0b6BIR1mRhxFuXYsXrZdVslSvVvbl c1sCCR0djLiZiRRt05UEHARylU0RyauaYsoRVsOgUIsSzarC197k7CXnv5I502ti kovYbgI3AowdRzmY5NNlcuDEMMMkN4r8zcZz1MYdglLRDEzY+cPFkwH3b6QPTzcb AgLq5EFbQmRm4hhBoh4fXHNMyvJ4LqXheIwPOe6J/Uq2scz1cZ8Z5lfsnaCnZZco -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:37 2026 by rpki-client