This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/7lgvftt3YplOqtGKAXFKXfxxBQE.roa File: 7lgvftt3YplOqtGKAXFKXfxxBQE.roa (raw, json) Hash identifier: UMQdS0dx3gIMuyKJd19IDX0DWYOOtAEHJUPWP0Uspm8= Subject key identifier: EE:58:2F:7E:DB:77:62:99:4E:AA:D1:8A:01:71:4A:5D:FC:71:05:01 Certificate issuer: /CN=39a4603b245b1d20849df88f16ee370cc0b4390d Certificate serial: 019B7B36768952F356B8164900512CF4B3C3 Authority key identifier: 39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/7lgvftt3YplOqtGKAXFKXfxxBQE.roa Signing time: Thu 01 Jan 2026 20:18:45 +0000 ROA not before: Thu 01 Jan 2026 20:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25504 IP address blocks: 46.175.56.0/21 maxlen: 24 91.233.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:76:89:52:f3:56:b8:16:49:00:51:2c:f4:b3:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39a4603b245b1d20849df88f16ee370cc0b4390d Validity Not Before: Jan 1 20:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee582f7edb7762994eaad18a01714a5dfc710501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ef:fc:60:d5:9d:e8:30:ee:da:74:a5:51:33: 81:46:fa:06:63:2d:7b:15:7d:b6:9f:44:48:71:bb: ab:b2:58:d0:c7:b2:90:64:a7:90:91:d5:75:77:54: 85:78:14:bd:dd:60:5a:05:70:fa:28:ce:97:4e:86: 80:14:21:a3:04:3c:a0:7d:d9:71:7b:e8:cb:21:7d: 50:ea:b5:dd:24:e9:a9:46:ee:82:9f:f8:68:42:ae: b7:3e:ec:7d:2a:1e:39:2b:55:aa:b6:67:58:13:d9: 0e:e6:7a:8c:04:72:6f:f5:bc:15:b6:1d:1f:01:d9: ed:02:23:5d:23:7d:26:17:59:19:f7:f8:86:ef:6d: 7e:12:f4:10:2f:a2:88:5c:f0:bf:7f:8d:be:1d:79: 0f:b6:5f:c6:61:48:66:35:f7:f5:2e:49:fd:39:47: 90:fe:95:8a:96:8c:aa:d2:09:ac:cc:4b:9f:66:4a: 8f:25:2f:ae:a0:c5:56:f4:a7:ba:84:5a:a6:2a:ff: 4a:64:c3:f2:79:4a:0c:51:27:aa:07:f4:f6:f3:12: d4:26:2c:be:88:11:0f:16:12:89:4a:ac:c9:a3:17: 80:dd:fb:36:c9:12:4f:50:35:5b:a4:8b:7a:ad:a2: d5:4f:76:cc:c8:64:80:b1:06:8d:79:d1:d1:88:8b: 41:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:58:2F:7E:DB:77:62:99:4E:AA:D1:8A:01:71:4A:5D:FC:71:05:01 X509v3 Authority Key Identifier: keyid:39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/7lgvftt3YplOqtGKAXFKXfxxBQE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.175.56.0/21 91.233.26.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:cc:3f:f6:9c:99:86:37:fd:97:e5:55:19:72:a1:d2:8a:ee: 79:7a:37:47:f4:d5:36:1e:e4:fa:34:e9:b2:e8:ae:60:33:77: eb:c7:12:ef:96:3c:30:33:06:cd:d2:2e:c4:96:7b:66:0f:31: b1:3d:04:e0:7b:4a:56:e8:60:d2:6e:91:e7:49:d9:90:eb:76: 0d:93:95:69:6d:6a:e7:17:ed:40:75:c3:20:d4:ff:5d:3d:af: 00:de:b3:19:2a:59:7d:e1:d1:88:18:d8:f3:a3:4c:dc:19:db: 3c:ee:b0:27:ee:fa:7b:fb:0a:b9:b6:d8:12:c5:b8:26:e0:b7: a3:f2:30:66:9b:73:dd:a9:96:6b:71:31:27:c3:7c:b9:94:41: 23:df:04:9b:d3:af:5e:66:84:d4:a1:5f:1b:31:08:97:5c:c0: 09:56:13:f6:46:6c:61:39:26:b1:e3:0b:28:c9:52:93:81:a7: fc:98:e6:e5:66:43:29:19:ce:44:8a:1c:dc:05:cd:2a:d7:99: 69:d9:fe:69:5b:fa:5b:54:d0:41:f2:b5:3d:d3:e3:f2:e0:3f: 40:d4:c5:1a:28:3e:97:2f:37:98:65:59:62:52:d7:e0:70:dd: 20:98:78:ae:89:7b:97:c9:85:2d:ed:14:31:34:34:50:1c:82: c1:2e:f0:04 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NnaJUvNWuBZJAFEs9LPDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YTQ2MDNiMjQ1YjFkMjA4NDlkZjg4ZjE2ZWUzNzBjYzBi NDM5MGQwHhcNMjYwMTAxMjAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTU4MmY3ZWRiNzc2Mjk5NGVhYWQxOGEwMTcxNGE1ZGZjNzEwNTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu/8YNWd6DDu2nSlUTOBRvoGYy17 FX22n0RIcbursljQx7KQZKeQkdV1d1SFeBS93WBaBXD6KM6XToaAFCGjBDygfdlx e+jLIX1Q6rXdJOmpRu6Cn/hoQq63Pux9Kh45K1WqtmdYE9kO5nqMBHJv9bwVth0f AdntAiNdI30mF1kZ9/iG721+EvQQL6KIXPC/f42+HXkPtl/GYUhmNff1Lkn9OUeQ /pWKloyq0gmszEufZkqPJS+uoMVW9Ke6hFqmKv9KZMPyeUoMUSeqB/T28xLUJiy+ iBEPFhKJSqzJoxeA3fs2yRJPUDVbpIt6raLVT3bMyGSAsQaNedHRiItBeQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFO5YL37bd2KZTqrRigFxSl38cQUBMB8GA1UdIwQY MBaAFDmkYDskWx0ghJ34jxbuNwzAtDkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2FSZ095UmJIU0NFbmZpUEZ1NDNETUMwT1EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi81ZTE3N2YtNWY1Zi00MjE0LWE4MTEt ZmNmMTA1ZmQyMDRjLzEvN2xndmZ0dDNZcGxPcXRHS0FYRktYZnh4QlFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi81ZTE3N2YtNWY1Zi00MjE0LWE4MTEtZmNmMTA1ZmQyMDRj LzEvT2FSZ095UmJIU0NFbmZpUEZ1NDNETUMwT1EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLq84AwQB W+kaMA0GCSqGSIb3DQEBCwUAA4IBAQB/zD/2nJmGN/2X5VUZcqHSiu55ejdH9NU2 HuT6NOmy6K5gM3frxxLvljwwMwbN0i7ElntmDzGxPQTge0pW6GDSbpHnSdmQ63YN k5VpbWrnF+1AdcMg1P9dPa8A3rMZKll94dGIGNjzo0zcGds87rAn7vp7+wq5ttgS xbgm4Lej8jBmm3PdqZZrcTEnw3y5lEEj3wSb069eZoTUoV8bMQiXXMAJVhP2Rmxh OSax4wsoyVKTgaf8mOblZkMpGc5EihzcBc0q15lp2f5pW/pbVNBB8rU90+Py4D9A 1MUaKD6XLzeYZVliUtfgcN0gmHiuiXuXyYUt7RQxNDRQHILBLvAE -----END CERTIFICATE-----Generated at Mon Feb 9 22:58:11 2026 by rpki-client