This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/uA7Vx2C904r9TfjpNMf_38HK6tA.roa File: uA7Vx2C904r9TfjpNMf_38HK6tA.roa (raw, json) Hash identifier: mh6KzvsWQ7ay62shUSjJavZVXDITnNYoJN+fQex29Ro= Subject key identifier: B8:0E:D5:C7:60:BD:D3:8A:FD:4D:F8:E9:34:C7:FF:DF:C1:CA:EA:D0 Certificate issuer: /CN=7153b0294d3c8db15306ab109d506da74ae70979 Certificate serial: 019B7CED330992CE0E7EBC41D09FA207E311 Authority key identifier: 71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/uA7Vx2C904r9TfjpNMf_38HK6tA.roa Signing time: Fri 02 Jan 2026 04:17:58 +0000 ROA not before: Fri 02 Jan 2026 04:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5470 IP address blocks: 155.207.0.0/16 maxlen: 16 192.104.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:33:09:92:ce:0e:7e:bc:41:d0:9f:a2:07:e3:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7153b0294d3c8db15306ab109d506da74ae70979 Validity Not Before: Jan 2 04:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b80ed5c760bdd38afd4df8e934c7ffdfc1caead0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dc:2d:78:74:86:e3:31:d2:04:b6:ab:ac:de: 4a:41:30:aa:c3:9a:cf:94:5d:68:63:0b:d0:ca:43: 9a:1a:04:2b:08:3b:5c:b5:6a:42:8c:b9:48:af:7e: f2:db:ee:99:6d:6f:36:05:da:7d:56:ae:25:f3:2b: b3:17:45:d1:a0:f0:91:69:12:18:cc:3b:7e:07:a7: bd:86:ae:41:e1:fa:a1:a7:96:eb:3b:c4:ff:79:3b: f7:3a:cb:a1:d1:80:ed:39:1d:b7:df:ac:b2:fc:75: 3d:80:47:d6:c7:ff:92:a3:0f:1c:8a:08:de:92:5b: b7:0e:02:9b:6f:6d:31:b6:c6:43:fc:a6:87:ca:15: 3c:56:62:63:b9:3e:d8:c4:2d:a0:b1:7f:54:4f:7c: f9:ce:01:22:7c:f5:27:43:11:3f:2f:cb:36:a9:8a: 6f:48:a6:26:84:59:b2:a5:19:8e:25:a6:6a:f3:a7: ff:88:56:58:51:f8:fe:83:47:9b:b1:f0:4a:c0:85: 3b:5b:65:6b:6f:e3:71:6f:02:25:88:5e:15:45:c5: 4f:df:05:02:a1:cb:ca:24:a4:9b:b3:3f:fe:e6:49: eb:76:00:89:f8:06:e6:aa:fc:e7:71:ac:e1:b5:75: 05:67:32:48:d2:76:76:60:8e:97:07:8e:03:50:f2: 56:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:0E:D5:C7:60:BD:D3:8A:FD:4D:F8:E9:34:C7:FF:DF:C1:CA:EA:D0 X509v3 Authority Key Identifier: keyid:71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/uA7Vx2C904r9TfjpNMf_38HK6tA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.207.0.0/16 192.104.147.0/24 Signature Algorithm: sha256WithRSAEncryption 35:d3:79:56:4e:97:2c:c8:83:61:72:16:67:9a:8e:86:6a:8b: 5f:e3:25:3b:c4:ba:b6:9f:3b:50:b9:39:d3:b9:30:90:07:d5: c8:03:36:19:49:81:54:f0:66:59:1c:0c:e7:dc:ec:04:e5:2a: 0a:37:24:79:ee:03:91:14:85:25:1a:e8:72:02:c8:e7:49:41: 6e:49:b0:46:df:a3:55:ec:11:fd:04:02:17:6a:b1:ee:f6:66: 70:90:d0:d9:ab:ba:fc:07:e6:3e:bf:b3:b5:24:d6:5f:0b:e1: 74:3a:3f:9a:45:e8:47:7a:5b:b8:e7:37:1f:3d:17:f4:07:3e: 7e:67:78:82:60:aa:09:d0:5e:2a:23:98:63:5f:23:76:83:8c: 69:77:3e:d9:8c:4d:3f:5e:30:d9:6c:2b:8f:52:87:9f:21:b2: 78:3f:56:63:d9:36:ec:9b:65:91:a1:75:3a:ee:da:14:1e:6e: e4:ae:bb:8b:d9:b8:5f:42:12:34:64:64:ed:45:d3:42:b0:12: f3:4d:77:b6:44:38:0f:da:bd:ce:e2:1d:05:02:3a:2c:b6:ed: aa:74:8f:f9:25:db:d6:99:b3:8b:25:cc:51:01:ec:b4:2d:dd: 0a:c7:21:64:b4:7c:bd:1a:97:50:60:b1:a9:38:6a:5c:ce:0b: c3:dd:e4:4c -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt87TMJks4OfrxB0J+iB+MRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNTNiMDI5NGQzYzhkYjE1MzA2YWIxMDlkNTA2ZGE3NGFl NzA5NzkwHhcNMjYwMTAyMDQxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODBlZDVjNzYwYmRkMzhhZmQ0ZGY4ZTkzNGM3ZmZkZmMxY2FlYWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdwteHSG4zHSBLarrN5KQTCqw5rP lF1oYwvQykOaGgQrCDtctWpCjLlIr37y2+6ZbW82Bdp9Vq4l8yuzF0XRoPCRaRIY zDt+B6e9hq5B4fqhp5brO8T/eTv3Osuh0YDtOR2336yy/HU9gEfWx/+Sow8cigje klu3DgKbb20xtsZD/KaHyhU8VmJjuT7YxC2gsX9UT3z5zgEifPUnQxE/L8s2qYpv SKYmhFmypRmOJaZq86f/iFZYUfj+g0ebsfBKwIU7W2Vrb+NxbwIliF4VRcVP3wUC ocvKJKSbsz/+5knrdgCJ+AbmqvzncazhtXUFZzJI0nZ2YI6XB44DUPJWRwIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFLgO1cdgvdOK/U346TTH/9/ByurQMB8GA1UdIwQY MBaAFHFTsClNPI2xUwarEJ1QbadK5wl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1ZPd0tVMDhqYkZUQnFzUW5WQnRwMHJuQ1hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83NjZlMTItOWEwOS00NTUzLThmNjIt MjI5NGNkZGE2YTQwLzEvdUE3VngyQzkwNHI5VGZqcE5NZl8zOEhLNnRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi83NjZlMTItOWEwOS00NTUzLThmNjItMjI5NGNkZGE2YTQw LzEvY1ZPd0tVMDhqYkZUQnFzUW5WQnRwMHJuQ1hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAm88DBADA aJMwDQYJKoZIhvcNAQELBQADggEBADXTeVZOlyzIg2FyFmeajoZqi1/jJTvEuraf O1C5OdO5MJAH1cgDNhlJgVTwZlkcDOfc7ATlKgo3JHnuA5EUhSUa6HICyOdJQW5J sEbfo1XsEf0EAhdqse72ZnCQ0NmruvwH5j6/s7Uk1l8L4XQ6P5pF6Ed6W7jnNx89 F/QHPn5neIJgqgnQXiojmGNfI3aDjGl3PtmMTT9eMNlsK49Sh58hsng/VmPZNuyb ZZGhdTru2hQebuSuu4vZuF9CEjRkZO1F00KwEvNNd7ZEOA/avc7iHQUCOiy27ap0 j/kl29aZs4slzFEB7LQt3QrHIWS0fL0al1Bgsak4alzOC8Pd5Ew= -----END CERTIFICATE-----Generated at Mon Feb 2 14:24:40 2026 by rpki-client