This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/7eQNjnQdwqflqSKNBUSkeuNmw7g.roa File: 7eQNjnQdwqflqSKNBUSkeuNmw7g.roa (raw, json) Hash identifier: KDiDs9BVR3uSy9uhf7YQ+EiuhvYGlWjEWXwSqzhl/zA= Subject key identifier: ED:E4:0D:8E:74:1D:C2:A7:E5:A9:22:8D:05:44:A4:7A:E3:66:C3:B8 Certificate issuer: /CN=1a4dd11554247bd2bd301cea43ff5180372c38e4 Certificate serial: 019B7C7F75ADD36562D33931E2DAB6DC2B85 Authority key identifier: 1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/7eQNjnQdwqflqSKNBUSkeuNmw7g.roa Signing time: Fri 02 Jan 2026 02:18:06 +0000 ROA not before: Fri 02 Jan 2026 02:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 185.192.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 20:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:75:ad:d3:65:62:d3:39:31:e2:da:b6:dc:2b:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dd11554247bd2bd301cea43ff5180372c38e4 Validity Not Before: Jan 2 02:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ede40d8e741dc2a7e5a9228d0544a47ae366c3b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:71:51:76:5f:35:7a:8f:61:42:e8:24:66:f9: 95:e4:f5:c2:18:cc:95:63:6c:4d:11:d5:0a:95:2e: fc:d4:b5:bc:89:7e:c4:6c:4e:16:ad:f4:d2:94:85: 88:19:08:c4:b1:4d:fe:ad:01:80:46:73:37:b8:4e: 2d:6d:1e:2e:ca:09:3f:e5:fa:e2:11:4e:30:9d:eb: 54:2b:8b:75:49:20:4e:74:74:c4:f4:df:ac:ca:a4: 1b:70:18:6f:c8:68:c3:b8:e2:6b:6c:7e:fa:d8:ca: ed:9e:6c:33:3e:b2:72:c9:9e:61:5b:a9:2c:32:38: 6c:e4:00:e3:e3:ff:b3:f0:28:44:eb:e8:82:50:3f: 91:c6:f4:78:ff:2d:19:e2:fa:ce:5e:07:df:c0:da: d8:43:27:81:91:85:14:61:c7:ab:da:7c:10:f6:ff: 0e:b1:65:57:21:12:0e:bb:64:ef:84:41:31:89:a8: 6d:21:bf:ec:2c:52:30:e8:be:5d:e0:45:24:1c:b3: 4a:68:4b:02:5d:4b:7a:b2:79:95:3d:c5:d0:6b:bd: 76:55:8d:be:df:fa:07:48:51:7c:7d:e4:9e:1d:86: 52:5f:7c:16:54:ea:1f:ae:ef:f5:87:d7:a7:7b:18: dd:f1:ca:4d:41:a0:32:64:97:26:0d:b1:e6:d1:e2: 94:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E4:0D:8E:74:1D:C2:A7:E5:A9:22:8D:05:44:A4:7A:E3:66:C3:B8 X509v3 Authority Key Identifier: keyid:1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/7eQNjnQdwqflqSKNBUSkeuNmw7g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.192.58.0/23 Signature Algorithm: sha256WithRSAEncryption c5:78:7f:e9:1d:8c:a7:a4:57:6b:96:2a:6f:d8:41:18:2b:40: 2d:0d:37:9f:02:fd:9d:c1:6e:c5:9e:50:5e:f0:ce:a6:ba:31: 6d:77:c5:d3:db:fb:32:03:15:35:9c:0d:ac:5d:95:70:6d:1b: e3:02:dd:21:b1:36:c7:da:d5:c5:7e:f9:5e:45:f4:23:ec:29: 94:4c:50:51:7c:78:45:e7:6c:fa:b3:33:3d:f1:70:80:4e:51: c8:68:64:46:e8:25:07:da:fb:80:81:37:aa:2d:71:fe:73:3e: 1e:bb:b3:63:6e:a1:13:6d:8d:5f:ed:1b:b9:c6:dd:8e:ca:8e: bd:fd:a5:b9:f2:9e:0b:35:37:97:d3:2f:51:db:b5:f8:e2:b4: 6a:71:99:11:d3:7a:67:66:65:b5:ea:5a:fb:1e:ff:66:41:27: 82:35:1b:1b:f9:34:19:5d:ec:f0:06:45:0f:08:98:9a:a7:c6: d3:23:1a:52:9b:46:66:06:df:7d:d8:45:79:1d:cc:83:27:d8: 89:bc:1c:1a:ad:3a:8b:ef:c9:e8:35:74:d3:13:63:46:fb:e9: 0b:d4:1c:97:e2:a9:a7:ff:3c:49:2a:49:96:4d:50:40:cd:09: 1a:73:c0:17:1f:7d:f8:45:29:50:39:d9:76:cb:de:ea:ee:60: 68:37:1f:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f3Wt02Vi0zkx4tq23CuFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRkMTE1NTQyNDdiZDJiZDMwMWNlYTQzZmY1MTgwMzcy YzM4ZTQwHhcNMjYwMTAyMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGU0MGQ4ZTc0MWRjMmE3ZTVhOTIyOGQwNTQ0YTQ3YWUzNjZjM2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9HFRdl81eo9hQugkZvmV5PXCGMyV Y2xNEdUKlS781LW8iX7EbE4WrfTSlIWIGQjEsU3+rQGARnM3uE4tbR4uygk/5fri EU4wnetUK4t1SSBOdHTE9N+syqQbcBhvyGjDuOJrbH762MrtnmwzPrJyyZ5hW6ks Mjhs5ADj4/+z8ChE6+iCUD+RxvR4/y0Z4vrOXgffwNrYQyeBkYUUYcer2nwQ9v8O sWVXIRIOu2TvhEExiahtIb/sLFIw6L5d4EUkHLNKaEsCXUt6snmVPcXQa712VY2+ 3/oHSFF8feSeHYZSX3wWVOofru/1h9enexjd8cpNQaAyZJcmDbHm0eKUUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO3kDY50HcKn5akijQVEpHrjZsO4MB8GA1UdIwQY MBaAFBpN0RVUJHvSvTAc6kP/UYA3LDjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83YmRkZGEtMGM2Yy00YTVlLWIxYzUt M2JhNWYzMGNhYWJmLzEvN2VRTmpuUWR3cWZscVNLTkJVU2tldU5tdzdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS83YmRkZGEtMGM2Yy00YTVlLWIxYzUtM2JhNWYzMGNhYWJm LzEvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBucA6MA0G CSqGSIb3DQEBCwUAA4IBAQDFeH/pHYynpFdrlipv2EEYK0AtDTefAv2dwW7FnlBe 8M6mujFtd8XT2/syAxU1nA2sXZVwbRvjAt0hsTbH2tXFfvleRfQj7CmUTFBRfHhF 52z6szM98XCATlHIaGRG6CUH2vuAgTeqLXH+cz4eu7NjbqETbY1f7Ru5xt2Oyo69 /aW58p4LNTeX0y9R27X44rRqcZkR03pnZmW16lr7Hv9mQSeCNRsb+TQZXezwBkUP CJiap8bTIxpSm0ZmBt992EV5HcyDJ9iJvBwarTqL78noNXTTE2NG++kL1ByX4qmn /zxJKkmWTVBAzQkac8AXH334RSlQOdl2y97q7mBoNx9C -----END CERTIFICATE-----Generated at Fri Jan 9 06:25:47 2026 by rpki-client