This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/7b3oCOIjVeUfzIONemPuPRY8fP4.roa File: 7b3oCOIjVeUfzIONemPuPRY8fP4.roa (raw, json) Hash identifier: H9b66ELHR+w2F5gCPvHb64KHcpWmKG3dLSjCZrEQ/H8= Subject key identifier: ED:BD:E8:08:E2:23:55:E5:1F:CC:83:8D:7A:63:EE:3D:16:3C:7C:FE Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D4E1482528E3E323DAF029CCC0BF6 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/7b3oCOIjVeUfzIONemPuPRY8fP4.roa Signing time: Fri 02 Jan 2026 06:20:25 +0000 ROA not before: Fri 02 Jan 2026 06:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198080 IP address blocks: 92.114.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:4e:14:82:52:8e:3e:32:3d:af:02:9c:cc:0b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edbde808e22355e51fcc838d7a63ee3d163c7cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b6:73:21:c5:72:cf:7d:b2:bd:4d:00:9a:33: ed:42:b3:f1:99:6f:ea:41:85:e5:24:0b:1e:f2:64: 0d:1b:22:59:01:06:4c:70:1b:7b:a4:8e:57:12:c0: c8:12:66:97:ce:37:ed:41:57:75:84:9a:74:cb:b6: dc:46:d4:b2:8b:99:a3:d1:81:f3:4d:55:ee:f1:9e: e7:ed:ed:9d:b8:fa:70:70:d3:ed:46:01:36:24:58: c2:f6:8a:5a:f8:92:7b:20:12:7e:29:a4:1b:cb:59: 7f:fb:e8:e1:27:8f:43:a8:fe:f6:a4:ac:75:88:09: 4b:87:51:31:c4:b5:ff:59:7a:60:f2:c7:14:41:be: 18:7b:41:7f:ee:4e:b0:34:8b:55:7f:c4:65:da:25: 22:59:3c:c1:dd:f8:02:63:26:9c:30:60:5f:de:ed: bb:d2:08:e2:46:13:ad:40:d4:7c:f9:9e:76:49:c3: bf:21:c8:4e:3c:53:a3:f4:7e:57:dd:d1:09:59:ec: de:00:cb:54:15:c9:e5:f5:82:7c:36:b5:65:ef:97: 76:ea:3b:39:25:f1:20:9b:d2:8e:20:ed:b8:a0:f4: 1b:83:f1:ce:b6:b5:6c:6a:3f:d1:e1:6d:a1:27:d6: 47:f2:f9:51:71:29:fc:7d:dd:77:cc:9c:5d:9d:7e: 34:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:BD:E8:08:E2:23:55:E5:1F:CC:83:8D:7A:63:EE:3D:16:3C:7C:FE X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/7b3oCOIjVeUfzIONemPuPRY8fP4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.114.84.0/24 Signature Algorithm: sha256WithRSAEncryption 07:43:df:a2:77:06:d4:50:6c:84:1b:1d:b6:a3:8f:53:46:7a: 09:bc:ce:5c:f6:98:de:26:b6:05:91:a9:9f:ee:dc:18:72:d1: 53:57:c7:e8:a1:41:56:bb:19:2e:cf:a2:dd:24:32:b9:30:dc: 72:28:72:da:fb:cf:a3:33:5f:fc:ad:bc:00:b7:82:e4:73:87: cd:c5:60:31:df:d0:be:55:2d:6a:6d:85:5a:65:6b:49:b9:be: 88:c5:5f:93:94:5a:89:59:35:b4:6d:d0:fd:47:57:38:21:b4: 3f:80:7e:15:94:df:f4:f6:e8:95:a4:9d:d5:02:60:14:31:6c: 69:79:9d:6d:14:ea:2a:ae:c4:de:77:70:b6:34:3f:93:6c:95: a2:b1:fb:18:ce:5c:17:67:02:29:4f:ea:01:92:78:b0:c4:d8: a6:41:69:df:e2:a1:1a:59:ff:6e:c5:27:0a:8c:00:a2:c9:58: e5:95:55:37:19:ee:4e:77:26:03:32:1f:9e:54:5f:95:08:18: 53:2d:85:bd:dc:54:85:13:89:7a:0c:f6:b6:c7:23:d1:2f:69: 07:62:65:46:8d:9d:42:55:e7:07:ac:17:53:f1:bf:56:35:b5: d3:b5:a5:34:f2:55:cb:38:42:93:0b:f9:05:5a:dd:69:32:16: a6:52:b9:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XU4UglKOPjI9rwKczAv2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGJkZTgwOGUyMjM1NWU1MWZjYzgzOGQ3YTYzZWUzZDE2M2M3Y2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrZzIcVyz32yvU0AmjPtQrPxmW/q QYXlJAse8mQNGyJZAQZMcBt7pI5XEsDIEmaXzjftQVd1hJp0y7bcRtSyi5mj0YHz TVXu8Z7n7e2duPpwcNPtRgE2JFjC9opa+JJ7IBJ+KaQby1l/++jhJ49DqP72pKx1 iAlLh1ExxLX/WXpg8scUQb4Ye0F/7k6wNItVf8Rl2iUiWTzB3fgCYyacMGBf3u27 0gjiRhOtQNR8+Z52ScO/IchOPFOj9H5X3dEJWezeAMtUFcnl9YJ8NrVl75d26js5 JfEgm9KOIO24oPQbg/HOtrVsaj/R4W2hJ9ZH8vlRcSn8fd13zJxdnX40TwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO296AjiI1XlH8yDjXpj7j0WPHz+MB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvN2Izb0NPSWpWZVVmeklPTmVtUHVQUlk4ZlA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHJUMA0G CSqGSIb3DQEBCwUAA4IBAQAHQ9+idwbUUGyEGx22o49TRnoJvM5c9pjeJrYFkamf 7twYctFTV8fooUFWuxkuz6LdJDK5MNxyKHLa+8+jM1/8rbwAt4Lkc4fNxWAx39C+ VS1qbYVaZWtJub6IxV+TlFqJWTW0bdD9R1c4IbQ/gH4VlN/09uiVpJ3VAmAUMWxp eZ1tFOoqrsTed3C2ND+TbJWisfsYzlwXZwIpT+oBkniwxNimQWnf4qEaWf9uxScK jACiyVjllVU3Ge5OdyYDMh+eVF+VCBhTLYW93FSFE4l6DPa2xyPRL2kHYmVGjZ1C VecHrBdT8b9WNbXTtaU08lXLOEKTC/kFWt1pMhamUrll -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:34 2026 by rpki-client