This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/7QM2KeQ3Wn7b2DM_DaBA8kJny-8.roa File: 7QM2KeQ3Wn7b2DM_DaBA8kJny-8.roa (raw, json) Hash identifier: 62/MDcXDz4G8cxXxwlkwD2glafSnz5PZXVYHbOFIM38= Subject key identifier: ED:03:36:29:E4:37:5A:7E:DB:D8:33:3F:0D:A0:40:F2:42:67:CB:EF Certificate issuer: /CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf Certificate serial: 019B797ED32F2667F127F4D7C39CE5898980 Authority key identifier: 45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/7QM2KeQ3Wn7b2DM_DaBA8kJny-8.roa Signing time: Thu 01 Jan 2026 12:18:33 +0000 ROA not before: Thu 01 Jan 2026 12:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20677 IP address blocks: 77.95.220.0/24 maxlen: 24 2a13:fbc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d3:2f:26:67:f1:27:f4:d7:c3:9c:e5:89:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf Validity Not Before: Jan 1 12:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed033629e4375a7edbd8333f0da040f24267cbef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cc:63:2a:44:23:1b:48:65:4f:d7:ea:63:72: 3e:1d:a1:08:b9:52:59:5e:a4:dd:4d:c5:ed:da:a9: d8:15:93:fd:f4:1e:99:f7:5c:87:ed:ee:45:72:c5: 3f:66:62:a1:73:b7:d2:34:2d:16:20:67:cf:60:f0: ef:bc:b8:69:55:5d:0f:2b:37:78:a8:ac:59:cf:5e: df:bd:1a:dd:82:84:eb:af:bf:46:3a:b8:95:e5:49: 67:30:ca:20:74:59:de:71:87:f3:94:15:c9:10:7e: f5:04:b8:88:7c:12:a6:06:11:ea:63:bb:7d:d1:ff: 29:cf:e1:e0:8b:8e:8c:87:b5:fd:d4:68:ff:a9:f5: 47:e3:85:6c:9f:90:7b:68:b3:8f:91:ca:dd:d2:8f: 5d:df:2f:39:1b:2b:1a:6c:ba:08:55:9b:62:4a:f1: 7d:e5:87:c1:91:a0:0d:5e:37:d3:b8:b5:f9:77:ee: 64:04:c2:d9:05:c7:8c:2f:af:a5:bf:51:15:63:f2: 3a:96:e8:33:32:9f:98:1b:9f:37:ad:a5:c8:ad:72: 4f:0a:9d:2e:7f:fc:99:d8:c0:99:37:d7:ad:59:ce: 7c:cb:fa:2f:de:2b:d0:ad:20:ee:6c:cf:5e:66:33: f9:ed:48:fe:58:df:a0:34:a1:e2:fd:cd:76:3f:83: 9d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:03:36:29:E4:37:5A:7E:DB:D8:33:3F:0D:A0:40:F2:42:67:CB:EF X509v3 Authority Key Identifier: keyid:45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/7QM2KeQ3Wn7b2DM_DaBA8kJny-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.95.220.0/24 IPv6: 2a13:fbc0::/48 Signature Algorithm: sha256WithRSAEncryption 3e:56:e9:87:34:b7:98:2d:a6:a7:f0:aa:d1:a3:93:d8:df:bf: 94:0d:c7:34:7b:e0:81:37:1d:f5:6f:a9:ed:bd:77:c8:45:64: de:9a:d0:dc:c1:c7:45:88:31:23:28:ea:ed:81:cd:21:f6:2e: 40:57:57:e1:81:48:05:87:0f:1b:52:c8:33:c1:c0:49:4c:73: ce:80:86:c3:72:44:c2:21:2f:94:61:87:cf:4b:c0:c7:a4:ab: ec:68:4e:04:0f:f5:f5:40:9b:18:fa:a6:32:59:52:fc:84:92: b2:5e:17:8d:3b:90:95:08:63:13:e9:b9:d0:be:e1:66:e2:bf: d0:4e:53:31:c0:3b:a7:8c:dd:cf:85:3f:40:a8:5a:b8:57:31: 1f:db:6d:47:28:62:b6:19:2e:5f:1e:b1:42:67:5f:c0:85:14: 77:dc:fd:f0:a5:be:32:1b:5c:73:35:3c:10:f5:a6:aa:d3:6b: bf:d3:db:a5:30:19:21:61:4f:70:15:ca:22:89:63:6e:c6:77: c5:f2:b4:a0:e2:b4:17:93:28:e8:a3:86:27:12:5f:68:14:d2: 02:be:a2:60:1b:c4:b4:d3:8f:36:af:ad:b0:ff:44:41:de:6c: d6:60:1f:c4:7e:56:68:62:0c:46:2b:a5:86:5d:49:97:fd:a0: 7c:38:ff:d3 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5ftMvJmfxJ/TXw5zliYmAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OTQ3OGU5ZjFmMzBiMjRmZDE3MTk4ZDFjYWM4MzViYzFl NGRmYWYwHhcNMjYwMTAxMTIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDAzMzYyOWU0Mzc1YTdlZGJkODMzM2YwZGEwNDBmMjQyNjdjYmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8xjKkQjG0hlT9fqY3I+HaEIuVJZ XqTdTcXt2qnYFZP99B6Z91yH7e5FcsU/ZmKhc7fSNC0WIGfPYPDvvLhpVV0PKzd4 qKxZz17fvRrdgoTrr79GOriV5UlnMMogdFnecYfzlBXJEH71BLiIfBKmBhHqY7t9 0f8pz+Hgi46Mh7X91Gj/qfVH44Vsn5B7aLOPkcrd0o9d3y85GysabLoIVZtiSvF9 5YfBkaANXjfTuLX5d+5kBMLZBceML6+lv1EVY/I6lugzMp+YG583raXIrXJPCp0u f/yZ2MCZN9etWc58y/ov3ivQrSDubM9eZjP57Uj+WN+gNKHi/c12P4OdmQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFO0DNinkN1p+29gzPw2gQPJCZ8vvMB8GA1UdIwQY MBaAFEWUeOnx8wsk/RcZjRysg1vB5N+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpSNDZmSHpDeVQ5RnhtTkhLeURXOEhrMzY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80NWE5YzgtYTI1Ny00N2MzLWJlNmYt Njc3ZjUxZWJiZDg1LzEvN1FNMktlUTNXbjdiMkRNX0RhQkE4a0pueS04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC80NWE5YzgtYTI1Ny00N2MzLWJlNmYtNjc3ZjUxZWJiZDg1 LzEvUlpSNDZmSHpDeVQ5RnhtTkhLeURXOEhrMzY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQATV/cMA8E AgACMAkDBwAqE/vAAAAwDQYJKoZIhvcNAQELBQADggEBAD5W6Yc0t5gtpqfwqtGj k9jfv5QNxzR74IE3HfVvqe29d8hFZN6a0NzBx0WIMSMo6u2BzSH2LkBXV+GBSAWH DxtSyDPBwElMc86AhsNyRMIhL5Rhh89LwMekq+xoTgQP9fVAmxj6pjJZUvyEkrJe F407kJUIYxPpudC+4Wbiv9BOUzHAO6eM3c+FP0CoWrhXMR/bbUcoYrYZLl8esUJn X8CFFHfc/fClvjIbXHM1PBD1pqrTa7/T26UwGSFhT3AVyiKJY27Gd8XytKDitBeT KOijhicSX2gU0gK+omAbxLTTjzavrbD/REHebNZgH8R+VmhiDEYrpYZdSZf9oHw4 /9M= -----END CERTIFICATE-----Generated at Tue Feb 10 04:49:01 2026 by rpki-client