This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/O7DvE_j0yVa8Neokc-i_HaDtXmM.roa File: O7DvE_j0yVa8Neokc-i_HaDtXmM.roa (raw, json) Hash identifier: 3lAq1Q6ERq8LruEXX9XUeCK19VsJiVKMmGnOXIPs3os= Subject key identifier: 3B:B0:EF:13:F8:F4:C9:56:BC:35:EA:24:73:E8:BF:1D:A0:ED:5E:63 Certificate issuer: /CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3 Certificate serial: 019B7CED4CDA7067E6B479731E797DE46B08 Authority key identifier: C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/O7DvE_j0yVa8Neokc-i_HaDtXmM.roa Signing time: Fri 02 Jan 2026 04:18:05 +0000 ROA not before: Fri 02 Jan 2026 04:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49250 IP address blocks: 37.1.104.0/21 maxlen: 24 91.212.183.0/24 maxlen: 28 91.223.233.0/24 maxlen: 28 185.191.12.0/22 maxlen: 24 2a00:d540::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:4c:da:70:67:e6:b4:79:73:1e:79:7d:e4:6b:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3 Validity Not Before: Jan 2 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bb0ef13f8f4c956bc35ea2473e8bf1da0ed5e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7e:50:ee:a7:82:b4:d4:42:56:a8:b0:09:e5: 38:d2:46:27:48:64:06:5b:95:44:6b:8e:d3:83:e6: ae:b4:7d:af:bf:e0:15:0b:bd:9a:ef:9c:e1:44:fa: a9:67:e9:0c:d9:ec:b6:e5:f1:6d:20:cd:e5:36:ad: 57:9e:b6:c1:19:a2:0d:8c:11:e3:fe:db:4b:27:14: 99:1c:63:eb:d8:ba:b0:75:8b:0c:14:3f:93:36:5a: 96:99:96:f8:d9:c6:18:84:74:b2:10:c1:af:f9:23: d7:c8:2b:4d:ad:f2:e4:0a:c9:67:66:c2:2b:9b:21: a9:a2:5e:74:57:81:9b:55:f8:0b:48:ea:5e:6d:f1: f6:15:c5:6d:97:c5:44:5a:03:67:64:02:76:a9:25: 52:b4:99:ae:3e:ed:e5:50:00:9d:04:55:b9:61:ae: 19:46:9d:3b:6c:cd:01:a0:24:4c:90:c9:1e:9c:79: 34:de:e7:9c:6b:0e:7b:a6:8b:aa:bf:bf:bc:98:e5: 9e:3f:22:22:90:1e:f7:a7:31:28:fe:3d:8d:a5:8b: 96:de:f8:75:2e:5b:70:2b:44:16:42:11:65:0c:49: a0:71:b6:77:69:10:21:e5:64:34:04:2f:71:5c:f5: 3a:02:52:0f:a9:d8:b1:70:98:bb:f7:af:42:af:df: 95:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B0:EF:13:F8:F4:C9:56:BC:35:EA:24:73:E8:BF:1D:A0:ED:5E:63 X509v3 Authority Key Identifier: keyid:C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/O7DvE_j0yVa8Neokc-i_HaDtXmM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.1.104.0/21 91.212.183.0/24 91.223.233.0/24 185.191.12.0/22 IPv6: 2a00:d540::/29 Signature Algorithm: sha256WithRSAEncryption bf:c6:e5:7a:70:c7:84:39:11:bd:ff:95:47:0e:9c:7d:e1:92: f3:bf:81:91:ed:64:7c:94:42:c7:ad:df:9b:69:b4:9e:3f:be: f7:93:a3:0e:49:c6:28:c9:d2:37:f1:72:d9:ac:b5:24:8c:a1: e0:08:82:94:76:65:12:ce:82:9e:e7:fc:82:74:95:44:66:78: 3e:9d:60:b2:6d:4d:7b:67:47:ff:0c:22:b6:67:5d:9d:4a:81: 64:b0:b1:c5:fd:3e:99:6b:58:b7:70:8d:7a:d0:cc:42:9d:97: b6:be:82:74:9d:30:5c:67:48:42:c7:97:8f:4a:dc:a8:72:e7: 61:01:25:3e:77:59:bc:c8:d1:15:5c:9f:4d:fe:d7:d9:6b:ac: 0c:1d:1c:12:a4:14:65:8f:8d:ba:c9:db:f8:a2:3d:73:21:89: a2:68:b4:b0:fb:4a:de:ed:38:f8:59:32:36:f0:18:88:73:e1: d9:54:c1:cd:c1:66:54:a4:b7:da:85:07:ed:30:a3:0e:ef:7c: e1:f7:8b:45:a6:77:b0:5c:1c:31:5e:4d:6e:ad:c2:11:96:e9: 13:45:64:12:7d:3a:ca:2f:83:0e:37:4c:5e:37:d8:9c:bb:d0: 97:89:22:6b:ac:3e:e9:ce:ff:82:4b:ee:64:eb:7a:56:57:23: b3:4e:00:99 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt87UzacGfmtHlzHnl95GsIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NzE3MWE1ZTQ1NTA2Yzg2YzkwMTZiYmU1YjE0YjNkYjhi YzZjYzMwHhcNMjYwMTAyMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmIwZWYxM2Y4ZjRjOTU2YmMzNWVhMjQ3M2U4YmYxZGEwZWQ1ZTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon5Q7qeCtNRCVqiwCeU40kYnSGQG W5VEa47Tg+autH2vv+AVC72a75zhRPqpZ+kM2ey25fFtIM3lNq1XnrbBGaINjBHj /ttLJxSZHGPr2LqwdYsMFD+TNlqWmZb42cYYhHSyEMGv+SPXyCtNrfLkCslnZsIr myGpol50V4GbVfgLSOpebfH2FcVtl8VEWgNnZAJ2qSVStJmuPu3lUACdBFW5Ya4Z Rp07bM0BoCRMkMkenHk03uecaw57pouqv7+8mOWePyIikB73pzEo/j2NpYuW3vh1 LltwK0QWQhFlDEmgcbZ3aRAh5WQ0BC9xXPU6AlIPqdixcJi7969Cr9+V0wIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFDuw7xP49MlWvDXqJHPovx2g7V5jMB8GA1UdIwQY MBaAFMdxcaXkVQbIbJAWu+WxSz24vGzDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNGeHBlUlZCc2hza0JhNzViRkxQYmk4Yk1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83ZjhmNTgtZDgzYy00NDBlLTk5MGIt YjQzOGI1Yjg4Y2YyLzEvTzdEdkVfajB5VmE4TmVva2MtaV9IYUR0WG1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy83ZjhmNTgtZDgzYy00NDBlLTk5MGItYjQzOGI1Yjg4Y2Yy LzEveDNGeHBlUlZCc2hza0JhNzViRkxQYmk4Yk1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDJQFoAwQA W9S3AwQAW9/pAwQCub8MMA0EAgACMAcDBQMqANVAMA0GCSqGSIb3DQEBCwUAA4IB AQC/xuV6cMeEORG9/5VHDpx94ZLzv4GR7WR8lELHrd+babSeP773k6MOScYoydI3 8XLZrLUkjKHgCIKUdmUSzoKe5/yCdJVEZng+nWCybU17Z0f/DCK2Z12dSoFksLHF /T6Za1i3cI160MxCnZe2voJ0nTBcZ0hCx5ePStyocudhASU+d1m8yNEVXJ9N/tfZ a6wMHRwSpBRlj426ydv4oj1zIYmiaLSw+0re7Tj4WTI28BiIc+HZVMHNwWZUpLfa hQftMKMO73zh94tFpnewXBwxXk1urcIRlukTRWQSfTrKL4MON0xeN9icu9CXiSJr rD7pzv+CS+5k63pWVyOzTgCZ -----END CERTIFICATE-----Generated at Tue Feb 10 02:30:39 2026 by rpki-client