This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/7HpWZ8JsTHRKitkQiB-HL7tVhQU.roa File: 7HpWZ8JsTHRKitkQiB-HL7tVhQU.roa (raw, json) Hash identifier: go++botqtIXYynK7T+rgO/KPJxpRmv9z/xVOLNzuEFk= Subject key identifier: EC:7A:56:67:C2:6C:4C:74:4A:8A:D9:10:88:1F:87:2F:BB:55:85:05 Certificate issuer: /CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9 Certificate serial: 019B797E833B8351C039AC8E826E0F51ADFD Authority key identifier: 36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/7HpWZ8JsTHRKitkQiB-HL7tVhQU.roa Signing time: Thu 01 Jan 2026 12:18:12 +0000 ROA not before: Thu 01 Jan 2026 12:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 91.239.147.0/24 maxlen: 24 2001:67c:1240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 09:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:83:3b:83:51:c0:39:ac:8e:82:6e:0f:51:ad:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9 Validity Not Before: Jan 1 12:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec7a5667c26c4c744a8ad910881f872fbb558505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:76:fb:c1:d4:79:bb:9b:e2:81:ed:9a:30:f4: 26:6b:2a:e0:97:66:88:0d:d7:5a:7d:af:ec:10:9e: be:8e:47:9a:e6:c5:a7:ce:8b:5d:df:dd:8b:62:8e: df:8e:3d:2f:82:bb:60:06:f2:a2:6e:46:f6:9c:77: 37:14:5f:d1:f8:a5:1c:a3:d4:0a:48:49:6a:0e:3d: ae:84:8e:11:bd:88:ca:7a:c9:18:20:e4:e1:0a:c9: e8:73:25:2b:62:c9:a9:32:2b:23:ee:82:c3:4e:9e: dd:32:2f:0d:32:e5:47:d8:7d:29:ae:90:b8:30:56: 89:6b:7a:b1:b6:30:6a:28:34:c9:dd:0e:92:14:66: 98:df:72:2f:94:e1:e2:65:43:8e:57:86:1a:ab:48: aa:9d:66:a4:f6:a5:48:42:67:c5:f4:97:81:3e:f1: 51:f3:40:00:c2:28:84:d5:99:d8:24:db:8a:3b:7c: 25:b5:8c:bf:ba:93:02:cc:e0:79:0e:ca:d6:cf:68: 00:b2:e6:33:20:e9:ed:d8:bd:47:bf:9f:5d:a1:d7: 54:16:d8:32:05:9c:bb:92:fb:32:d3:0b:cf:fc:3d: da:fd:23:fb:ee:7f:90:0e:cc:a6:12:fb:7f:d5:c0: 80:10:0d:f6:5e:25:02:84:78:2d:75:23:9c:85:a8: 5b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:7A:56:67:C2:6C:4C:74:4A:8A:D9:10:88:1F:87:2F:BB:55:85:05 X509v3 Authority Key Identifier: keyid:36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/7HpWZ8JsTHRKitkQiB-HL7tVhQU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.147.0/24 IPv6: 2001:67c:1240::/48 Signature Algorithm: sha256WithRSAEncryption 83:a9:c3:e8:4e:57:91:da:46:bf:95:6b:aa:b1:9b:7c:34:47: 0f:a5:c3:c5:78:e3:00:66:40:bd:5d:e8:28:0a:31:46:12:4a: 85:89:c0:ed:e6:b0:65:87:19:0f:f3:63:e9:80:41:fa:cc:d8: 26:33:07:94:f0:8a:79:91:7a:20:8f:4e:23:b6:56:e2:7a:9d: f2:a2:a1:56:9e:3a:67:c1:11:bb:93:95:4e:7f:34:75:80:1a: 58:2e:71:fe:cc:86:aa:ee:57:cf:5b:a3:b2:40:99:3c:a1:98: 82:36:b4:65:9c:fd:cc:18:49:94:23:fe:71:9c:9c:a0:a1:33: 00:bf:e1:60:03:f0:7d:a3:6f:96:b8:3a:6c:4d:4f:08:63:fc: 2c:76:0e:ea:62:b0:38:91:4e:a7:6e:8e:d5:26:51:b2:14:f1: b8:e9:89:4b:30:5a:ef:bb:49:e5:3d:81:71:3b:b3:12:3f:95: 71:a2:e9:5b:3f:7a:58:bc:8f:5c:59:de:e8:99:82:5b:6b:d0: a4:41:ce:72:2b:cf:4b:cb:79:25:bf:1e:bd:ba:c2:18:21:17: f0:d1:b8:81:c9:9d:fc:7e:03:34:84:f2:e2:0f:be:17:b7:94: c0:29:9f:ec:fa:d9:2a:6c:3c:65:f6:ee:9f:ab:c3:bc:50:59: e2:bc:c2:7a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5foM7g1HAOayOgm4PUa39MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MWFkZjU3YzhkY2I3YmZkMzRlOWFlY2Q4M2UzNjM0MmVj M2EzYzkwHhcNMjYwMTAxMTIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzdhNTY2N2MyNmM0Yzc0NGE4YWQ5MTA4ODFmODcyZmJiNTU4NTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXb7wdR5u5vige2aMPQmayrgl2aI Dddafa/sEJ6+jkea5sWnzotd392LYo7fjj0vgrtgBvKibkb2nHc3FF/R+KUco9QK SElqDj2uhI4RvYjKeskYIOThCsnocyUrYsmpMisj7oLDTp7dMi8NMuVH2H0prpC4 MFaJa3qxtjBqKDTJ3Q6SFGaY33IvlOHiZUOOV4Yaq0iqnWak9qVIQmfF9JeBPvFR 80AAwiiE1ZnYJNuKO3wltYy/upMCzOB5DsrWz2gAsuYzIOnt2L1Hv59doddUFtgy BZy7kvsy0wvP/D3a/SP77n+QDsymEvt/1cCAEA32XiUChHgtdSOchahbnQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOx6VmfCbEx0SorZEIgfhy+7VYUFMB8GA1UdIwQY MBaAFDYa31fI3Le/006a7Ng+NjQuw6PJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lMGY4YzYtYWFkYy00YzMxLWI5MmIt MWExODczOGI0NzQxLzEvN0hwV1o4SnNUSFJLaXRrUWlCLUhMN3RWaFFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9lMGY4YzYtYWFkYy00YzMxLWI5MmItMWExODczOGI0NzQx LzEvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW++TMA8E AgACMAkDBwAgAQZ8EkAwDQYJKoZIhvcNAQELBQADggEBAIOpw+hOV5HaRr+Va6qx m3w0Rw+lw8V44wBmQL1d6CgKMUYSSoWJwO3msGWHGQ/zY+mAQfrM2CYzB5TwinmR eiCPTiO2VuJ6nfKioVaeOmfBEbuTlU5/NHWAGlgucf7MhqruV89bo7JAmTyhmII2 tGWc/cwYSZQj/nGcnKChMwC/4WAD8H2jb5a4OmxNTwhj/Cx2DupisDiRTqdujtUm UbIU8bjpiUswWu+7SeU9gXE7sxI/lXGi6Vs/eli8j1xZ3uiZgltr0KRBznIrz0vL eSW/Hr26whghF/DRuIHJnfx+AzSE8uIPvhe3lMApn+z62SpsPGX27p+rw7xQWeK8 wno= -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:10 2026 by rpki-client