This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/7GQ9Go4t-nftndZjqWcwpqT2cyA.roa File: 7GQ9Go4t-nftndZjqWcwpqT2cyA.roa (raw, json) Hash identifier: 6D6ISAC07Xvz4amnsg7PkhtQR5UqUKKR6P12gP68O4o= Subject key identifier: EC:64:3D:1A:8E:2D:FA:77:ED:9D:D6:63:A9:67:30:A6:A4:F6:73:20 Certificate issuer: /CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20 Certificate serial: 019B7DCA8D183232EA00C1A312D8E50370C6 Authority key identifier: AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/7GQ9Go4t-nftndZjqWcwpqT2cyA.roa Signing time: Fri 02 Jan 2026 08:19:44 +0000 ROA not before: Fri 02 Jan 2026 08:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212978 IP address blocks: 185.50.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:8d:18:32:32:ea:00:c1:a3:12:d8:e5:03:70:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20 Validity Not Before: Jan 2 08:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec643d1a8e2dfa77ed9dd663a96730a6a4f67320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:af:88:78:c4:7b:9f:6e:11:d6:d6:89:85:f7: 3b:a3:98:86:51:5f:10:35:55:db:7f:e1:d8:c0:7f: 1f:a0:9a:43:23:32:14:b0:ee:70:55:a4:09:c0:23: 46:3b:c5:3b:10:d5:dd:27:45:e3:87:bb:31:ff:fe: 1d:93:c5:f4:ca:c5:4d:fb:86:34:7e:6e:8e:d9:b0: 13:79:eb:98:bc:e0:6f:fd:9d:90:c8:94:7d:22:95: e8:1e:e1:93:30:e1:55:a4:52:5f:c4:6e:70:4e:bc: 93:6a:01:e8:4d:af:34:b4:6c:31:fa:17:11:29:10: f2:0f:c8:98:b3:df:ee:bf:87:9c:d8:64:a1:e9:89: 5f:3b:63:4d:ed:2d:bd:a8:5c:dc:21:f7:9f:83:e8: 32:4b:9f:e3:b1:b2:ff:ed:06:0c:0c:7d:02:9f:ab: 96:82:6a:2d:be:f9:31:f5:94:7d:c9:35:26:d1:67: 85:c9:ef:fa:aa:fd:c2:9b:12:73:e9:b4:f8:2f:3c: 83:44:ef:cc:2f:79:a5:a8:ae:e1:97:49:9f:e1:2c: dc:7a:7d:94:93:6e:84:18:99:fd:bb:a3:aa:c4:50: 4d:fc:ad:fc:17:05:a9:7a:58:fb:3f:24:09:25:48: be:ef:f1:dd:77:3c:5f:2e:dc:a1:9d:73:f8:89:b7: 01:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:64:3D:1A:8E:2D:FA:77:ED:9D:D6:63:A9:67:30:A6:A4:F6:73:20 X509v3 Authority Key Identifier: keyid:AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/7GQ9Go4t-nftndZjqWcwpqT2cyA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.50.36.0/24 Signature Algorithm: sha256WithRSAEncryption 45:c6:88:d2:c0:8e:69:47:68:18:a9:4f:81:56:aa:bc:8a:47: 49:af:1c:55:ad:dc:ad:44:48:13:60:4d:f1:d5:bf:47:6a:5a: 80:51:6f:67:1e:b8:0d:c6:ce:51:86:45:58:db:c8:59:b0:81: 40:60:84:52:10:de:90:14:25:d5:92:96:3f:b1:28:07:b1:92: 59:67:4e:0f:96:d8:f8:57:81:7b:8d:cc:75:3a:7a:39:3b:fc: b4:d3:44:7f:7f:fd:32:e5:83:5c:c5:e9:08:51:50:de:c7:5e: 3d:e8:69:26:e2:a6:5e:46:3e:ed:79:3e:18:65:59:dc:77:cf: 82:68:ff:44:16:66:75:8a:78:50:49:9f:82:a8:3b:0e:d0:df: 61:ba:8d:47:e0:39:d9:df:c0:aa:61:8a:44:c7:65:0e:16:96: 5d:c6:96:b9:dd:f3:f8:4f:1b:f8:3a:73:55:86:25:6d:39:25: 9d:f1:94:93:a9:83:53:59:ec:60:8b:6f:9f:87:31:f8:3e:1f: 7f:07:0c:e7:5a:f4:ff:5e:5e:2c:d2:57:db:7a:53:97:ba:ac: dd:62:51:a6:55:c9:32:74:0b:ce:26:fc:02:36:be:08:5a:78: 13:3c:73:a7:8c:fe:de:44:44:32:3a:49:64:72:d5:83:4e:e0: 43:da:95:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yo0YMjLqAMGjEtjlA3DGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzNhMzA5MWMzYjFhOGM5ZTgyYTA5ZDM3NDA5MGY2ZDcz MDBiMjAwHhcNMjYwMTAyMDgxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzY0M2QxYThlMmRmYTc3ZWQ5ZGQ2NjNhOTY3MzBhNmE0ZjY3MzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq+IeMR7n24R1taJhfc7o5iGUV8Q NVXbf+HYwH8foJpDIzIUsO5wVaQJwCNGO8U7ENXdJ0Xjh7sx//4dk8X0ysVN+4Y0 fm6O2bATeeuYvOBv/Z2QyJR9IpXoHuGTMOFVpFJfxG5wTryTagHoTa80tGwx+hcR KRDyD8iYs9/uv4ec2GSh6YlfO2NN7S29qFzcIfefg+gyS5/jsbL/7QYMDH0Cn6uW gmotvvkx9ZR9yTUm0WeFye/6qv3CmxJz6bT4LzyDRO/ML3mlqK7hl0mf4Szcen2U k26EGJn9u6OqxFBN/K38FwWpelj7PyQJJUi+7/HddzxfLtyhnXP4ibcBYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOxkPRqOLfp37Z3WY6lnMKak9nMgMB8GA1UdIwQY MBaAFKvDowkcOxqMnoKgnTdAkPbXMAsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThPakNSdzdHb3llZ3FDZE4wQ1E5dGN3Q3lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iNzM5ZTktMTZhOC00MmRmLTgyMGMt MThhNzY4YjYwZmNkLzEvN0dROUdvNHQtbmZ0bmRaanFXY3dwcVQyY3lBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9iNzM5ZTktMTZhOC00MmRmLTgyMGMtMThhNzY4YjYwZmNk LzEvcThPakNSdzdHb3llZ3FDZE4wQ1E5dGN3Q3lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTIkMA0G CSqGSIb3DQEBCwUAA4IBAQBFxojSwI5pR2gYqU+BVqq8ikdJrxxVrdytREgTYE3x 1b9HalqAUW9nHrgNxs5RhkVY28hZsIFAYIRSEN6QFCXVkpY/sSgHsZJZZ04Pltj4 V4F7jcx1Ono5O/y000R/f/0y5YNcxekIUVDex1496Gkm4qZeRj7teT4YZVncd8+C aP9EFmZ1inhQSZ+CqDsO0N9huo1H4DnZ38CqYYpEx2UOFpZdxpa53fP4Txv4OnNV hiVtOSWd8ZSTqYNTWexgi2+fhzH4Ph9/BwznWvT/Xl4s0lfbelOXuqzdYlGmVcky dAvOJvwCNr4IWngTPHOnjP7eREQyOklkctWDTuBD2pUO -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:22 2026 by rpki-client