This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/7A2lBMy1HRZHgPKDk_bkGj5ETvY.roa File: 7A2lBMy1HRZHgPKDk_bkGj5ETvY.roa (raw, json) Hash identifier: rL2+XjzMdSu0K1H05+EkUEOgBJlzmxMsT4JTGcTaBGg= Subject key identifier: EC:0D:A5:04:CC:B5:1D:16:47:80:F2:83:93:F6:E4:1A:3E:44:4E:F6 Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e Certificate serial: 019B7B36370B21B0A0DA94822A4353F008D8 Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/7A2lBMy1HRZHgPKDk_bkGj5ETvY.roa Signing time: Thu 01 Jan 2026 20:18:29 +0000 ROA not before: Thu 01 Jan 2026 20:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59586 IP address blocks: 94.136.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:37:0b:21:b0:a0:da:94:82:2a:43:53:f0:08:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e Validity Not Before: Jan 1 20:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec0da504ccb51d164780f28393f6e41a3e444ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:53:9a:ca:20:ba:c4:0b:06:f7:1c:df:90:e6: bf:c3:ee:69:ca:b9:44:c4:96:f1:9b:7c:97:ab:2a: 11:ce:3d:33:aa:e7:01:f5:e7:80:3a:a2:52:ea:53: c4:c3:6b:78:5d:81:69:e0:01:33:fe:2a:31:3c:da: 1c:bc:aa:62:5c:36:12:68:5c:d2:df:18:f6:55:cf: 84:d1:d7:20:ae:fb:39:3c:ea:74:02:a0:c6:e9:db: 0a:25:9b:9b:b6:57:b7:5b:47:a5:a7:44:c4:87:4a: 53:69:ed:bd:5e:b3:5c:31:79:8f:6f:6c:3c:a1:13: 74:61:50:41:17:fa:41:15:bb:09:ca:57:84:7e:bf: 72:ec:e1:d4:b8:5e:3a:a7:c5:a1:ba:37:7c:6e:a4: 0f:d9:2f:35:a6:6b:5f:0c:e8:60:16:15:0c:5d:34: 7c:5b:63:0b:94:28:bc:a2:5f:89:05:da:4a:d6:d7: d4:fc:d6:6a:67:1b:92:41:4a:16:cf:25:0f:06:47: 4a:b5:74:b8:bd:65:1d:be:47:56:ba:2e:6b:c8:d8: 93:90:a2:32:69:54:3a:c4:33:3c:63:7d:89:e0:98: dd:5e:2a:fc:c6:28:ec:30:d6:50:b6:31:26:bb:93: 9b:00:5f:58:a6:56:9b:52:3b:77:64:52:1d:21:7c: 2a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0D:A5:04:CC:B5:1D:16:47:80:F2:83:93:F6:E4:1A:3E:44:4E:F6 X509v3 Authority Key Identifier: keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/7A2lBMy1HRZHgPKDk_bkGj5ETvY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.136.75.0/24 Signature Algorithm: sha256WithRSAEncryption 06:79:f3:af:f6:10:11:b1:66:48:00:84:2f:0a:b9:f1:33:f0: 9b:96:f1:71:0a:78:04:eb:de:47:bb:80:82:41:7c:61:dc:a4: d3:4b:a3:1c:1a:c2:06:8b:21:9b:c9:a6:fc:4d:94:09:fe:27: 69:eb:67:20:94:63:c5:d6:bf:80:1d:ae:66:d5:c0:b3:89:c6: 96:51:13:d2:8e:16:7d:c3:71:b5:fc:36:19:0e:96:3c:f1:c7: 89:f0:e1:57:6a:c2:5c:12:a3:f8:aa:3c:9e:f2:cd:60:6a:b0: 85:7e:57:f9:d5:9d:41:4e:42:10:49:78:4b:39:14:5c:f1:fe: 25:30:3c:ff:1f:cf:98:de:c0:92:ad:ac:dd:d4:ec:03:aa:98: 90:d2:b5:dc:33:e4:3a:5b:70:cd:c0:0c:47:f8:b1:57:f4:13: 41:7f:62:cb:f1:be:87:c1:6e:86:15:c6:34:da:2b:54:df:4f: d3:88:f9:f0:de:6e:08:37:4e:0e:44:56:fd:36:78:53:d5:87: 27:01:a3:81:7e:b2:48:d0:a2:4b:78:9d:10:f8:7d:ee:b0:e4: bf:30:c9:ac:36:6c:10:da:d7:16:ce:06:b9:47:82:ac:f7:fa: 2b:4d:4d:fd:1c:cf:5a:8b:2f:e0:84:ad:03:7f:5a:cf:12:c5: d0:e3:e0:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NjcLIbCg2pSCKkNT8AjYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmOTM4NTAzZDcyOTMxNjI2ZGNiOGQxZTk0NmIyYWUwNmE3 M2QwMmUwHhcNMjYwMTAxMjAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzBkYTUwNGNjYjUxZDE2NDc4MGYyODM5M2Y2ZTQxYTNlNDQ0ZWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1OayiC6xAsG9xzfkOa/w+5pyrlE xJbxm3yXqyoRzj0zqucB9eeAOqJS6lPEw2t4XYFp4AEz/ioxPNocvKpiXDYSaFzS 3xj2Vc+E0dcgrvs5POp0AqDG6dsKJZubtle3W0elp0TEh0pTae29XrNcMXmPb2w8 oRN0YVBBF/pBFbsJyleEfr9y7OHUuF46p8Whujd8bqQP2S81pmtfDOhgFhUMXTR8 W2MLlCi8ol+JBdpK1tfU/NZqZxuSQUoWzyUPBkdKtXS4vWUdvkdWui5ryNiTkKIy aVQ6xDM8Y32J4JjdXir8xijsMNZQtjEmu5ObAF9YplabUjt3ZFIdIXwqWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOwNpQTMtR0WR4Dyg5P25Bo+RE72MB8GA1UdIwQY MBaAFK+ThQPXKTFibcuNHpRrKuBqc9AuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYt M2I4YjBkMWE1OWE5LzEvN0EybEJNeTFIUlpIZ1BLRGtfYmtHajVFVHZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYtM2I4YjBkMWE1OWE5 LzEvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXohLMA0G CSqGSIb3DQEBCwUAA4IBAQAGefOv9hARsWZIAIQvCrnxM/CblvFxCngE695Hu4CC QXxh3KTTS6McGsIGiyGbyab8TZQJ/idp62cglGPF1r+AHa5m1cCzicaWURPSjhZ9 w3G1/DYZDpY88ceJ8OFXasJcEqP4qjye8s1garCFflf51Z1BTkIQSXhLORRc8f4l MDz/H8+Y3sCSrazd1OwDqpiQ0rXcM+Q6W3DNwAxH+LFX9BNBf2LL8b6HwW6GFcY0 2itU30/TiPnw3m4IN04ORFb9NnhT1YcnAaOBfrJI0KJLeJ0Q+H3usOS/MMmsNmwQ 2tcWzga5R4Ks9/orTU39HM9aiy/ghK0Df1rPEsXQ4+At -----END CERTIFICATE-----Generated at Mon Jan 26 16:57:20 2026 by rpki-client