This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/7lnc40Qf7cmKBKbjZfYqwpwmGoI.roa File: 7lnc40Qf7cmKBKbjZfYqwpwmGoI.roa (raw, json) Hash identifier: BeI1VtCjRkNwuAsQq6REw2kbuVRCtpMkqUU7iZWA1og= Subject key identifier: EE:59:DC:E3:44:1F:ED:C9:8A:04:A6:E3:65:F6:2A:C2:9C:26:1A:82 Certificate issuer: /CN=a5abc43afced72fb92778728bee571c678f53853 Certificate serial: 019B7C7EF292EA817E3BF78B1094D0B707F8 Authority key identifier: A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/7lnc40Qf7cmKBKbjZfYqwpwmGoI.roa Signing time: Fri 02 Jan 2026 02:17:33 +0000 ROA not before: Fri 02 Jan 2026 02:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34000 IP address blocks: 83.97.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:f2:92:ea:81:7e:3b:f7:8b:10:94:d0:b7:07:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5abc43afced72fb92778728bee571c678f53853 Validity Not Before: Jan 2 02:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee59dce3441fedc98a04a6e365f62ac29c261a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:25:2e:87:c3:37:b7:39:28:48:38:b3:d5:a3: ea:1f:26:35:14:df:30:44:64:80:43:97:1b:71:38: a1:19:d8:eb:50:95:d2:ba:ca:82:21:d5:67:e8:3c: 55:0c:c0:13:00:51:68:2a:51:57:b6:1e:aa:f3:49: 07:59:7f:02:1f:89:77:bb:9a:49:63:a4:80:6b:e6: 2c:ba:b6:3f:5f:7b:a8:ff:c8:da:0d:79:88:c2:49: 45:95:8b:e0:ce:2a:22:ea:bf:62:dc:9b:ca:58:7f: 99:6e:6a:04:4c:2d:c6:c0:2e:0f:fb:b5:e1:c4:e8: dd:0c:f7:10:6e:23:bb:32:46:5d:af:fc:39:02:50: 22:22:0a:b4:bd:3a:26:cc:1f:06:64:31:76:4a:e8: 27:ef:2c:22:ad:07:f8:09:46:a3:74:d5:94:95:40: d8:1e:fb:73:0f:50:f4:60:f1:28:ee:6f:ad:07:21: 2e:34:6b:80:24:66:9a:15:1e:d4:bc:27:79:79:14: 9a:ad:eb:c5:0c:42:79:19:c1:9c:8d:e2:31:ca:69: aa:f2:80:00:5c:0b:85:a5:6e:c3:11:37:27:3c:a6: 3a:8c:59:f8:73:d7:21:1d:04:f7:a3:ed:2d:6d:de: ae:5c:aa:04:0b:35:a5:ba:71:69:e1:32:d0:42:b5: 10:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:59:DC:E3:44:1F:ED:C9:8A:04:A6:E3:65:F6:2A:C2:9C:26:1A:82 X509v3 Authority Key Identifier: keyid:A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/7lnc40Qf7cmKBKbjZfYqwpwmGoI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.97.56.0/21 Signature Algorithm: sha256WithRSAEncryption bd:7c:36:47:2b:b0:98:66:4a:b8:ea:a1:ec:3f:81:e0:f0:b1: 24:d6:3d:23:f9:d6:60:89:82:2e:ea:a3:fe:7d:37:1c:8f:a8: 31:45:03:8d:40:1e:57:e8:fa:63:58:37:2b:25:0c:6e:f1:62: 02:c6:99:55:9d:87:72:47:1d:7d:9e:58:23:7e:d6:fb:f8:b3: 84:22:d1:f8:18:db:9e:ae:fd:95:c8:5e:6c:a9:4a:89:b4:56: 1a:b9:3e:2c:12:09:78:3f:71:81:83:d3:41:a9:fd:b4:49:8c: 09:8a:8d:42:b4:7c:d4:77:33:bc:57:ba:b7:6e:e8:22:8f:ce: 90:cc:72:13:49:b9:01:cc:55:21:ed:cf:d8:61:f2:47:49:b4: 71:1b:9f:b6:6b:85:84:a6:16:65:dd:74:81:67:1a:fa:b0:8a: 55:ef:10:88:3f:10:70:54:24:cd:b6:56:b3:d8:87:24:b2:67: 60:cd:c2:c0:7e:eb:9c:c5:c7:e9:b5:40:e9:fa:2a:9b:c6:2f: 00:d8:39:80:f9:f2:ec:5f:c7:84:e9:5c:3f:23:b4:63:96:98: 2a:c1:25:48:ee:d5:18:6c:35:fc:f7:4e:6d:f7:43:a3:f9:30: e7:79:03:06:8c:75:6b:1f:62:86:fa:9b:b1:9a:a2:c2:d1:cb: 62:6e:9e:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fvKS6oF+O/eLEJTQtwf4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWJjNDNhZmNlZDcyZmI5Mjc3ODcyOGJlZTU3MWM2Nzhm NTM4NTMwHhcNMjYwMTAyMDIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTU5ZGNlMzQ0MWZlZGM5OGEwNGE2ZTM2NWY2MmFjMjljMjYxYTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSUuh8M3tzkoSDiz1aPqHyY1FN8w RGSAQ5cbcTihGdjrUJXSusqCIdVn6DxVDMATAFFoKlFXth6q80kHWX8CH4l3u5pJ Y6SAa+YsurY/X3uo/8jaDXmIwklFlYvgzioi6r9i3JvKWH+ZbmoETC3GwC4P+7Xh xOjdDPcQbiO7MkZdr/w5AlAiIgq0vTomzB8GZDF2Sugn7ywirQf4CUajdNWUlUDY HvtzD1D0YPEo7m+tByEuNGuAJGaaFR7UvCd5eRSarevFDEJ5GcGcjeIxymmq8oAA XAuFpW7DETcnPKY6jFn4c9chHQT3o+0tbd6uXKoECzWlunFp4TLQQrUQ3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO5Z3ONEH+3JigSm42X2KsKcJhqCMB8GA1UdIwQY MBaAFKWrxDr87XL7kneHKL7lccZ49ThTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGF2RU92enRjdnVTZDRjb3Z1Vnh4bmoxT0ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lOWI3NmEtMTBiMy00N2MwLWE1MTct YjVlOTFmYzY1MDUxLzEvN2xuYzQwUWY3Y21LQktialpmWXF3cHdtR29JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9lOWI3NmEtMTBiMy00N2MwLWE1MTctYjVlOTFmYzY1MDUx LzEvcGF2RU92enRjdnVTZDRjb3Z1Vnh4bmoxT0ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDU2E4MA0G CSqGSIb3DQEBCwUAA4IBAQC9fDZHK7CYZkq46qHsP4Hg8LEk1j0j+dZgiYIu6qP+ fTccj6gxRQONQB5X6PpjWDcrJQxu8WICxplVnYdyRx19nlgjftb7+LOEItH4GNue rv2VyF5sqUqJtFYauT4sEgl4P3GBg9NBqf20SYwJio1CtHzUdzO8V7q3bugij86Q zHITSbkBzFUh7c/YYfJHSbRxG5+2a4WEphZl3XSBZxr6sIpV7xCIPxBwVCTNtlaz 2IcksmdgzcLAfuucxcfptUDp+iqbxi8A2DmA+fLsX8eE6Vw/I7RjlpgqwSVI7tUY bDX8905t90Oj+TDneQMGjHVrH2KG+puxmqLC0ctibp5v -----END CERTIFICATE-----Generated at Mon Jan 26 15:58:22 2026 by rpki-client