This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/P7CCm2gaAelH7AcJVGe7VwV6Hs0.roa File: P7CCm2gaAelH7AcJVGe7VwV6Hs0.roa (raw, json) Hash identifier: N3p2w6bqG5zRFFz7bM/xUC80ollsWhPfskT/7E19CiI= Subject key identifier: 3F:B0:82:9B:68:1A:01:E9:47:EC:07:09:54:67:BB:57:05:7A:1E:CD Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA48BE60EB389E6A037F1CDAB04EE2D Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/P7CCm2gaAelH7AcJVGe7VwV6Hs0.roa Signing time: Thu 01 Jan 2026 22:18:59 +0000 ROA not before: Thu 01 Jan 2026 22:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35278 IP address blocks: 45.142.44.0/24 maxlen: 24 80.64.24.0/24 maxlen: 24 185.218.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 10:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:8b:e6:0e:b3:89:e6:a0:37:f1:cd:ab:04:ee:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fb0829b681a01e947ec07095467bb57057a1ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9c:86:f4:d8:26:ab:12:0d:62:69:7a:67:47: 3b:0e:f6:22:76:6a:0f:7c:09:6a:39:23:75:95:31: ad:fe:06:e7:fd:6e:8d:f3:c1:6f:bf:1a:a3:7f:fe: df:8a:44:5c:4b:4d:b2:31:a7:32:22:1e:81:35:27: 34:43:aa:3f:0e:22:98:17:6a:18:1d:ba:f0:c2:a4: 18:d1:83:79:83:ed:43:44:41:a0:ee:3d:1a:01:b9: a8:60:39:f9:8f:e5:53:03:29:83:24:8d:6d:cc:37: 1e:33:fa:52:96:96:14:6a:0a:d8:b3:15:28:d2:7f: dc:08:3c:03:db:af:ae:73:3b:57:fc:20:d2:cc:d6: e6:89:a0:78:50:60:54:8c:f3:48:0a:37:36:b4:eb: 5b:ff:20:c3:d1:5e:5e:14:6a:10:8b:bb:cb:6f:e7: 52:66:e7:be:41:10:fd:ab:66:3c:41:c4:f9:b6:f8: 0f:cc:30:ef:61:b0:94:a4:07:bf:2b:0d:07:0b:06: 03:4c:b5:a8:d3:e5:84:6a:02:3e:2f:84:05:27:0a: 09:22:bf:0c:c8:8e:b4:a1:09:17:5d:ab:ca:ff:38: dd:8f:76:0c:11:3a:c4:7e:e3:8b:c2:25:96:3c:63: 15:f0:25:bb:38:ac:ae:4f:17:d5:2a:31:3a:b6:fa: 80:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B0:82:9B:68:1A:01:E9:47:EC:07:09:54:67:BB:57:05:7A:1E:CD X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/P7CCm2gaAelH7AcJVGe7VwV6Hs0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.44.0/24 80.64.24.0/24 185.218.0.0/24 Signature Algorithm: sha256WithRSAEncryption 30:09:19:04:ad:ee:26:db:3b:04:0b:68:7f:fa:1d:60:49:b5: a4:40:96:b9:f1:77:d9:ac:53:e3:e9:0e:c2:67:04:9b:e3:a1: a9:71:c8:44:be:97:5d:82:cc:6c:cf:d0:73:b0:71:d7:41:3e: ac:cb:0d:2c:a3:53:26:44:72:15:06:39:20:20:b3:58:9d:68: 7a:7a:77:70:fe:de:f8:ee:7e:24:33:de:18:8a:79:07:32:3e: 34:e3:2d:88:06:20:05:de:28:41:41:0c:b0:e4:2e:ac:71:54: 45:20:c5:36:7f:7b:46:a8:7e:a3:b9:87:02:5e:67:fd:7d:01: e9:1d:2f:58:90:50:99:e1:66:43:4f:e1:58:17:04:7d:94:49: e7:e6:35:75:ef:ed:00:e8:1f:97:a5:38:03:35:91:76:03:d9: 46:95:06:e7:e3:60:f5:46:5f:ea:56:50:64:43:00:56:d5:75: 4f:c4:3a:60:2a:e9:7e:30:63:ca:ae:4d:9c:ea:4c:a1:7c:97: c6:e2:b4:4f:1c:36:f6:c3:d7:d1:b4:da:95:cc:53:68:88:79: 23:2d:37:ed:51:84:92:72:d3:af:02:fb:54:70:a9:9f:99:8b: 89:b8:7f:37:46:e8:a0:33:db:84:db:67:ea:18:50:79:e3:ef: 64:a9:44:2f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7pIvmDrOJ5qA38c2rBO4tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmIwODI5YjY4MWEwMWU5NDdlYzA3MDk1NDY3YmI1NzA1N2ExZWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JyG9NgmqxINYml6Z0c7DvYidmoP fAlqOSN1lTGt/gbn/W6N88Fvvxqjf/7fikRcS02yMacyIh6BNSc0Q6o/DiKYF2oY HbrwwqQY0YN5g+1DREGg7j0aAbmoYDn5j+VTAymDJI1tzDceM/pSlpYUagrYsxUo 0n/cCDwD26+ucztX/CDSzNbmiaB4UGBUjPNICjc2tOtb/yDD0V5eFGoQi7vLb+dS Zue+QRD9q2Y8QcT5tvgPzDDvYbCUpAe/Kw0HCwYDTLWo0+WEagI+L4QFJwoJIr8M yI60oQkXXavK/zjdj3YMETrEfuOLwiWWPGMV8CW7OKyuTxfVKjE6tvqAbwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFD+wgptoGgHpR+wHCVRnu1cFeh7NMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvUDdDQ20yZ2FBZWxIN0FjSlZHZTdWd1Y2SHMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALY4sAwQA UEAYAwQAudoAMA0GCSqGSIb3DQEBCwUAA4IBAQAwCRkEre4m2zsEC2h/+h1gSbWk QJa58XfZrFPj6Q7CZwSb46GpcchEvpddgsxsz9BzsHHXQT6syw0so1MmRHIVBjkg ILNYnWh6endw/t747n4kM94YinkHMj404y2IBiAF3ihBQQyw5C6scVRFIMU2f3tG qH6juYcCXmf9fQHpHS9YkFCZ4WZDT+FYFwR9lEnn5jV17+0A6B+XpTgDNZF2A9lG lQbn42D1Rl/qVlBkQwBW1XVPxDpgKul+MGPKrk2c6kyhfJfG4rRPHDb2w9fRtNqV zFNoiHkjLTftUYSSctOvAvtUcKmfmYuJuH83RuigM9uE22fqGFB54+9kqUQv -----END CERTIFICATE-----Generated at Thu Jan 15 17:01:29 2026 by rpki-client