This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/7Tcz0pE1-IDNMp7AQ99DVCGrgjI.roa File: 7Tcz0pE1-IDNMp7AQ99DVCGrgjI.roa (raw, json) Hash identifier: IYa4nqDQg0w4fOWwfwmQezvrBABwOK7SbfWTarCYxSQ= Subject key identifier: ED:37:33:D2:91:35:F8:80:CD:32:9E:C0:43:DF:43:54:21:AB:82:32 Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702 Certificate serial: 019B7D5C8449BDF5D727749B22A6230E2126 Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/7Tcz0pE1-IDNMp7AQ99DVCGrgjI.roa Signing time: Fri 02 Jan 2026 06:19:33 +0000 ROA not before: Fri 02 Jan 2026 06:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34209 IP address blocks: 46.28.240.0/21 maxlen: 21 46.28.241.0/24 maxlen: 24 46.28.243.0/24 maxlen: 24 46.28.244.0/24 maxlen: 24 46.28.245.0/24 maxlen: 24 46.28.246.0/24 maxlen: 24 193.22.169.0/24 maxlen: 24 193.41.210.0/23 maxlen: 23 195.80.237.0/24 maxlen: 24 2a02:2978::/36 maxlen: 36 2a02:2978:a000::/36 maxlen: 36 2a02:2978:b000::/36 maxlen: 36 2a02:2978:c000::/36 maxlen: 36 2a02:2978:e000::/36 maxlen: 36 2a02:2978:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 09:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:84:49:bd:f5:d7:27:74:9b:22:a6:23:0e:21:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702 Validity Not Before: Jan 2 06:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed3733d29135f880cd329ec043df435421ab8232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6d:25:0b:7d:06:f2:be:f7:76:6f:0c:7a:e3: 85:27:16:17:7c:cb:a8:ba:cf:ad:bb:8c:59:2d:e7: bb:e5:a6:a3:90:92:86:66:9d:d0:3d:fb:0e:3e:8a: fd:31:62:3a:6c:30:16:27:c8:7e:66:39:62:e6:05: 21:12:a0:92:34:a9:37:f1:12:92:34:b9:04:14:83: 26:c4:35:6a:b7:a8:a4:ff:ae:79:b6:89:3c:93:d1: ca:fe:88:8b:cd:9d:5a:e5:d6:ed:64:ff:6a:e5:51: 6b:53:75:10:eb:ad:93:b2:e7:bc:b6:64:1b:f9:87: d5:ff:77:4a:d3:5a:32:b8:28:2d:df:8e:0e:5d:31: d8:d7:c6:aa:71:6d:37:0c:63:f2:ef:1b:74:95:8e: ef:e0:21:f3:13:16:13:ec:06:df:05:fe:3d:6e:2b: 6b:8e:50:21:58:d3:5e:2f:c2:77:df:a3:df:ac:80: 46:4f:66:c7:0d:9e:ae:59:f8:2b:4c:75:70:12:22: 61:41:3b:cf:97:21:f5:69:ea:45:d1:01:a6:a1:76: ba:03:b5:f9:64:24:98:e3:f4:4a:33:36:90:1f:ca: 97:49:f8:12:d4:16:a4:45:46:b4:ca:58:81:fc:7b: c3:6a:10:38:57:4b:e4:37:71:ad:7f:a0:47:70:f5: 46:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:37:33:D2:91:35:F8:80:CD:32:9E:C0:43:DF:43:54:21:AB:82:32 X509v3 Authority Key Identifier: keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/7Tcz0pE1-IDNMp7AQ99DVCGrgjI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.28.240.0/21 193.22.169.0/24 193.41.210.0/23 195.80.237.0/24 IPv6: 2a02:2978::/36 2a02:2978:a000::-2a02:2978:cfff:ffff:ffff:ffff:ffff:ffff 2a02:2978:e000::/35 Signature Algorithm: sha256WithRSAEncryption 90:5b:51:29:82:21:72:fa:6f:d8:2a:31:11:8e:4a:38:32:29: 8b:c9:8b:e6:c3:e6:3c:9b:be:2d:2b:19:b8:82:23:a8:09:27: 47:06:06:06:68:8f:f4:37:5e:1a:95:4b:9c:dc:2b:7d:85:c3: 1e:bc:3e:ff:2d:bd:da:93:b0:0d:57:94:4c:3a:fb:d8:e4:5e: 2e:52:98:49:d1:e2:f9:34:93:0e:20:55:8a:6b:31:b8:86:c3: da:82:a3:86:30:cd:9b:20:f9:60:2c:cf:0a:f8:5a:b0:2e:da: 4d:e8:98:ea:15:77:62:f7:9a:ba:36:65:dc:84:46:26:2d:a2: 34:0b:89:6b:f8:f3:cf:ee:70:19:79:47:72:d5:21:b8:cb:1b: fb:76:0d:80:58:3b:34:be:2a:c7:2e:f7:99:3a:9e:1a:be:fe: 18:a3:7c:70:91:75:ba:42:d1:75:4a:6e:27:7c:82:b2:2f:38: 65:87:4f:9a:4c:8d:fa:2f:00:2f:c0:b9:33:65:cb:b6:4a:c2: ee:c7:e1:85:af:87:9f:01:fd:c3:d9:71:65:1c:68:a6:d9:a9: fd:91:63:06:6c:7b:3e:67:e0:ab:04:75:77:e8:b9:33:84:8d: bc:56:56:95:95:91:4c:f1:47:e3:1f:77:24:24:4b:80:51:bc: af:68:d6:fb -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt9XIRJvfXXJ3SbIqYjDiEmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZmNhN2M5NmU4MDQ1MDVhNDhiOTk2MDNkOWIyMTI0ZjFk ZDM3MDIwHhcNMjYwMTAyMDYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDM3MzNkMjkxMzVmODgwY2QzMjllYzA0M2RmNDM1NDIxYWI4MjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1G0lC30G8r73dm8MeuOFJxYXfMuo us+tu4xZLee75aajkJKGZp3QPfsOPor9MWI6bDAWJ8h+Zjli5gUhEqCSNKk38RKS NLkEFIMmxDVqt6ik/655tok8k9HK/oiLzZ1a5dbtZP9q5VFrU3UQ662Tsue8tmQb +YfV/3dK01oyuCgt344OXTHY18aqcW03DGPy7xt0lY7v4CHzExYT7AbfBf49bitr jlAhWNNeL8J336PfrIBGT2bHDZ6uWfgrTHVwEiJhQTvPlyH1aepF0QGmoXa6A7X5 ZCSY4/RKMzaQH8qXSfgS1BakRUa0yliB/HvDahA4V0vkN3Gtf6BHcPVG6QIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFO03M9KRNfiAzTKewEPfQ1Qhq4IyMB8GA1UdIwQY MBaAFIv8p8lugEUFpIuZYD2bISTx3TcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAt MThiMWE5MzdhNTY3LzEvN1RjejBwRTEtSUROTXA3QVE5OURWQ0dyZ2pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAtMThiMWE5MzdhNTY3 LzEvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjAeBAIAATAYAwQDLhzwAwQA wRapAwQBwSnSAwQAw1DtMCgEAgACMCIDBgQqAil4ADAQAwYFKgIpeKADBgQqAil4 wAMGBSoCKXjgMA0GCSqGSIb3DQEBCwUAA4IBAQCQW1EpgiFy+m/YKjERjko4MimL yYvmw+Y8m74tKxm4giOoCSdHBgYGaI/0N14alUuc3Ct9hcMevD7/Lb3ak7ANV5RM OvvY5F4uUphJ0eL5NJMOIFWKazG4hsPagqOGMM2bIPlgLM8K+FqwLtpN6JjqFXdi 95q6NmXchEYmLaI0C4lr+PPP7nAZeUdy1SG4yxv7dg2AWDs0virHLveZOp4avv4Y o3xwkXW6QtF1Sm4nfIKyLzhlh0+aTI36LwAvwLkzZcu2SsLux+GFr4efAf3D2XFl HGim2an9kWMGbHs+Z+CrBHV36LkzhI28VlaVlZFM8UfjH3ckJEuAUbyvaNb7 -----END CERTIFICATE-----Generated at Sat Jan 3 18:32:42 2026 by rpki-client