This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7ymJo6ToPK4ZRuDJzRSPCXxaPm4.roa File: 7ymJo6ToPK4ZRuDJzRSPCXxaPm4.roa (raw, json) Hash identifier: ytpfJ9vNS5JwRc89yU0uWlEyTvzj77675KecMolldFc= Subject key identifier: EF:29:89:A3:A4:E8:3C:AE:19:46:E0:C9:CD:14:8F:09:7C:5A:3E:6E Certificate issuer: /CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341 Certificate serial: 019B76EB95C1EDB6E8F49EF7E7DD00D0FA48 Authority key identifier: EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7ymJo6ToPK4ZRuDJzRSPCXxaPm4.roa Signing time: Thu 01 Jan 2026 00:18:29 +0000 ROA not before: Thu 01 Jan 2026 00:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 91.237.100.0/23 maxlen: 23 91.237.100.0/24 maxlen: 24 91.237.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 03:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:95:c1:ed:b6:e8:f4:9e:f7:e7:dd:00:d0:fa:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341 Validity Not Before: Jan 1 00:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef2989a3a4e83cae1946e0c9cd148f097c5a3e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fa:fc:a0:92:c6:d8:4f:0b:92:89:db:33:90: 97:a9:15:b0:01:fa:2e:ef:93:fb:68:04:a7:0d:ee: 37:79:01:35:d6:e0:6b:5d:1c:97:8c:6d:d9:f6:60: 1e:fe:83:63:ef:38:1b:65:7e:70:8c:e8:1c:16:bd: 38:f5:d3:d7:2d:54:6b:08:04:5f:3a:59:93:ee:46: f3:1c:82:00:ee:7a:f5:40:15:71:b2:09:bd:36:a0: cc:9a:35:38:69:c8:5c:be:56:7d:26:88:60:4a:9c: 3a:c1:22:88:e8:75:54:15:25:bd:9c:17:a2:71:13: 1a:a3:8c:53:ff:6d:85:c8:9f:09:d8:7c:54:7e:ae: 56:df:fd:1b:35:29:bf:05:55:a0:f4:bd:83:9a:1a: b7:a1:da:60:6d:ad:0e:70:15:11:ec:97:4d:14:97: 7f:85:c8:73:8c:fd:9c:98:0c:ba:46:2a:3b:92:e8: 18:00:53:99:a2:d3:31:2f:5a:9e:71:52:bf:c9:3c: b1:43:24:10:0a:0d:df:62:5a:9f:02:ce:77:8f:d3: 47:27:ff:47:97:e2:f0:e3:6f:27:fd:dd:48:b5:01: 8e:b2:69:33:9f:6f:51:6f:84:a1:f2:be:7e:65:ca: c6:c7:bf:5c:44:21:15:c7:40:8b:5a:c6:77:ca:ad: 22:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:29:89:A3:A4:E8:3C:AE:19:46:E0:C9:CD:14:8F:09:7C:5A:3E:6E X509v3 Authority Key Identifier: keyid:EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7ymJo6ToPK4ZRuDJzRSPCXxaPm4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.237.100.0/23 Signature Algorithm: sha256WithRSAEncryption 98:a2:20:87:24:b6:b8:ff:db:f3:f1:2f:f2:03:19:d6:12:78: 13:6c:25:0c:a6:10:58:20:89:49:df:ef:e0:08:25:d6:95:3b: ce:92:e6:b0:b5:28:1e:b9:99:d3:3f:56:bd:2c:27:bd:0d:7e: 86:b0:95:af:d2:e8:76:4a:59:cc:09:14:1f:9c:36:fd:b5:85: 23:f1:a0:44:bd:81:05:2b:ae:b2:0c:50:5f:96:11:7b:d5:8e: 4f:bb:e2:3f:9d:d6:56:ac:bf:65:d7:92:48:f0:8b:b7:ef:f0: fb:44:bb:3b:d4:aa:34:ae:fa:80:c5:78:bd:d4:65:ea:97:53: cc:62:7e:cb:f0:8a:ed:72:cc:da:7f:e8:38:98:f6:01:8f:31: 1a:b7:14:d6:bd:94:68:8d:77:82:23:4a:d8:e6:c9:a9:e3:16: 68:e8:c7:1f:21:71:b2:22:b8:c1:55:60:0c:fc:80:a2:d2:5b: 7c:9f:37:e5:b5:c7:15:1b:16:7a:f4:b4:2c:b8:7e:dd:ed:89: bb:2d:4b:7f:3c:60:73:a0:81:94:e6:06:3d:6c:e2:5c:56:fa: 88:21:49:7c:bb:cc:01:71:17:18:58:61:07:21:fa:83:38:05: 2f:32:03:5d:b1:89:7b:09:a3:3b:5a:60:86:64:fd:dd:5a:da: 69:42:e9:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt265XB7bbo9J73590A0PpIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNmI3MWM2N2UxY2MyODA3ODY5Nzk1MmFkM2Y0ZjM1NWY0 ZTEzNDEwHhcNMjYwMTAxMDAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjI5ODlhM2E0ZTgzY2FlMTk0NmUwYzljZDE0OGYwOTdjNWEzZTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfr8oJLG2E8LkonbM5CXqRWwAfou 75P7aASnDe43eQE11uBrXRyXjG3Z9mAe/oNj7zgbZX5wjOgcFr049dPXLVRrCARf OlmT7kbzHIIA7nr1QBVxsgm9NqDMmjU4achcvlZ9JohgSpw6wSKI6HVUFSW9nBei cRMao4xT/22FyJ8J2HxUfq5W3/0bNSm/BVWg9L2Dmhq3odpgba0OcBUR7JdNFJd/ hchzjP2cmAy6Rio7kugYAFOZotMxL1qecVK/yTyxQyQQCg3fYlqfAs53j9NHJ/9H l+Lw428n/d1ItQGOsmkzn29Rb4Sh8r5+ZcrGx79cRCEVx0CLWsZ3yq0iOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO8piaOk6DyuGUbgyc0Ujwl8Wj5uMB8GA1UdIwQY MBaAFOxrccZ+HMKAeGl5Uq0/TzVfThNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0d0eHhuNGN3b0I0YVhsU3JUOVBOVjlPRTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84N2U5NDAtZTJhMS00MzZlLWFhNzMt ZDNmNmNkOGU0NDQ0LzEvN3ltSm82VG9QSzRaUnVESnpSU1BDWHhhUG00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84N2U5NDAtZTJhMS00MzZlLWFhNzMtZDNmNmNkOGU0NDQ0 LzEvN0d0eHhuNGN3b0I0YVhsU3JUOVBOVjlPRTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+1kMA0G CSqGSIb3DQEBCwUAA4IBAQCYoiCHJLa4/9vz8S/yAxnWEngTbCUMphBYIIlJ3+/g CCXWlTvOkuawtSgeuZnTP1a9LCe9DX6GsJWv0uh2SlnMCRQfnDb9tYUj8aBEvYEF K66yDFBflhF71Y5Pu+I/ndZWrL9l15JI8Iu37/D7RLs71Ko0rvqAxXi91GXql1PM Yn7L8Irtcszaf+g4mPYBjzEatxTWvZRojXeCI0rY5smp4xZo6McfIXGyIrjBVWAM /ICi0lt8nzfltccVGxZ69LQsuH7d7Ym7LUt/PGBzoIGU5gY9bOJcVvqIIUl8u8wB cRcYWGEHIfqDOAUvMgNdsYl7CaM7WmCGZP3dWtppQunT -----END CERTIFICATE-----Generated at Thu Jan 8 12:59:41 2026 by rpki-client