This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/pk7GnCKoxkqkPmBMLQvy0zcaqM8.roa File: pk7GnCKoxkqkPmBMLQvy0zcaqM8.roa (raw, json) Hash identifier: 3tcXLqvph/hx58R2cNUaqQx5GKRZxyDjikkRZceH7cs= Subject key identifier: A6:4E:C6:9C:22:A8:C6:4A:A4:3E:60:4C:2D:0B:F2:D3:37:1A:A8:CF Certificate issuer: /CN=7b18bcea227a4eac61b5300b304deef14694dc91 Certificate serial: 019B7F15BC91FA63C5EA1FD2AD68DE3C9B73 Authority key identifier: 7B:18:BC:EA:22:7A:4E:AC:61:B5:30:0B:30:4D:EE:F1:46:94:DC:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/pk7GnCKoxkqkPmBMLQvy0zcaqM8.roa Signing time: Fri 02 Jan 2026 14:21:29 +0000 ROA not before: Fri 02 Jan 2026 14:21:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201157 IP address blocks: 185.79.64.0/22 maxlen: 22 2a03:5c60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:bc:91:fa:63:c5:ea:1f:d2:ad:68:de:3c:9b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b18bcea227a4eac61b5300b304deef14694dc91 Validity Not Before: Jan 2 14:21:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a64ec69c22a8c64aa43e604c2d0bf2d3371aa8cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:7d:1f:42:6f:d3:a6:54:85:7b:52:f2:08:83: f9:5b:90:6f:09:79:f2:1d:d2:e5:0e:50:12:10:bf: 22:0e:4d:f9:05:b8:f8:5b:d7:19:a4:88:70:44:1b: 86:14:84:b8:96:73:da:de:0f:c5:73:83:18:bf:75: e5:1d:ec:8b:6e:aa:19:f6:c7:0a:bf:60:23:ca:2c: e8:a6:99:81:3f:60:6e:11:9e:2b:b2:9b:9e:f5:b1: 1a:18:61:03:72:38:9d:c3:b3:ec:20:68:46:e9:bd: ca:e2:a1:1f:45:41:ba:d0:ee:a6:b0:06:af:8a:73: a9:e5:cb:51:e8:ac:44:63:09:e9:df:fa:5f:8d:0f: e1:59:92:39:5b:b2:ba:bf:8c:80:5d:bb:43:8a:4b: 58:be:10:57:d9:41:51:ed:73:e2:52:9a:2b:02:02: 0e:14:e0:ba:91:b8:fb:42:29:d7:29:b6:93:60:83: 7f:3e:cd:fd:e2:c9:8e:63:18:4b:a9:1c:fc:bb:3a: eb:49:42:23:61:70:63:9a:b1:d7:4a:a5:9b:9c:d2: 17:7a:90:a3:32:43:b2:84:ab:ba:fb:14:14:75:c3: 17:76:e1:77:8d:fa:18:f0:92:03:e5:31:5d:19:17: e1:bb:15:37:ac:eb:05:3e:29:7f:ed:08:06:b3:94: 04:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4E:C6:9C:22:A8:C6:4A:A4:3E:60:4C:2D:0B:F2:D3:37:1A:A8:CF X509v3 Authority Key Identifier: keyid:7B:18:BC:EA:22:7A:4E:AC:61:B5:30:0B:30:4D:EE:F1:46:94:DC:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/pk7GnCKoxkqkPmBMLQvy0zcaqM8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.79.64.0/22 IPv6: 2a03:5c60::/32 Signature Algorithm: sha256WithRSAEncryption 59:7b:f3:4f:5f:f9:2b:f1:e2:05:c8:6a:ce:0b:52:79:42:e1: 59:52:67:f3:58:2c:be:de:40:af:2d:fc:57:bb:65:e9:67:ed: dd:fc:af:d8:30:a3:49:3f:e7:0b:44:65:60:63:56:6f:4f:e8: c9:cf:74:8a:15:74:e8:4c:a1:6c:73:1c:f4:73:55:c5:f3:b0: 68:97:42:12:33:81:5d:b5:28:24:40:8d:61:bf:66:9f:29:4e: 29:48:3b:f9:cc:c8:bd:4e:e3:8c:41:3e:27:e2:9c:2d:af:dc: 5a:06:e9:1d:85:8f:af:2e:3d:8e:fa:a1:0c:b2:17:21:eb:57: 82:c5:60:a1:32:b8:6a:96:11:7b:fd:35:f6:50:88:8f:2d:b8: f2:37:6e:02:de:9c:6c:36:c2:da:a1:99:82:53:bc:bf:29:17: 96:7e:0c:f7:d7:10:f2:e6:36:1f:9a:ef:d2:0f:15:92:dd:fc: f6:d2:a0:43:96:b9:39:59:8a:4d:58:58:73:bd:b7:35:e9:ae: 91:f4:f9:91:44:02:7d:a9:df:88:fb:18:2d:e3:66:69:96:8a: 1b:69:b4:9f:bd:75:90:e5:58:25:33:73:54:ce:91:4c:0d:05: 68:c7:1b:9b:33:b8:79:3f:fb:92:35:71:07:9d:89:23:02:10: ca:54:9c:5e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FbyR+mPF6h/SrWjePJtzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMThiY2VhMjI3YTRlYWM2MWI1MzAwYjMwNGRlZWYxNDY5 NGRjOTEwHhcNMjYwMTAyMTQyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjRlYzY5YzIyYThjNjRhYTQzZTYwNGMyZDBiZjJkMzM3MWFhOGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7n0fQm/TplSFe1LyCIP5W5BvCXny HdLlDlASEL8iDk35Bbj4W9cZpIhwRBuGFIS4lnPa3g/Fc4MYv3XlHeyLbqoZ9scK v2AjyizoppmBP2BuEZ4rspue9bEaGGEDcjidw7PsIGhG6b3K4qEfRUG60O6msAav inOp5ctR6KxEYwnp3/pfjQ/hWZI5W7K6v4yAXbtDiktYvhBX2UFR7XPiUporAgIO FOC6kbj7QinXKbaTYIN/Ps394smOYxhLqRz8uzrrSUIjYXBjmrHXSqWbnNIXepCj MkOyhKu6+xQUdcMXduF3jfoY8JID5TFdGRfhuxU3rOsFPil/7QgGs5QEkwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKZOxpwiqMZKpD5gTC0L8tM3GqjPMB8GA1UdIwQY MBaAFHsYvOoiek6sYbUwCzBN7vFGlNyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXhpODZpSjZUcXhodFRBTE1FM3U4VWFVM0pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9kYWMwNzItMGYxZC00NDliLWIzMGIt MDliMTlkMjU1MjU0LzEvcGs3R25DS294a3FrUG1CTUxRdnkwemNhcU04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9kYWMwNzItMGYxZC00NDliLWIzMGItMDliMTlkMjU1MjU0 LzEvZXhpODZpSjZUcXhodFRBTE1FM3U4VWFVM0pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuU9AMA0E AgACMAcDBQAqA1xgMA0GCSqGSIb3DQEBCwUAA4IBAQBZe/NPX/kr8eIFyGrOC1J5 QuFZUmfzWCy+3kCvLfxXu2XpZ+3d/K/YMKNJP+cLRGVgY1ZvT+jJz3SKFXToTKFs cxz0c1XF87Bol0ISM4FdtSgkQI1hv2afKU4pSDv5zMi9TuOMQT4n4pwtr9xaBukd hY+vLj2O+qEMshch61eCxWChMrhqlhF7/TX2UIiPLbjyN24C3pxsNsLaoZmCU7y/ KReWfgz31xDy5jYfmu/SDxWS3fz20qBDlrk5WYpNWFhzvbc16a6R9PmRRAJ9qd+I +xgt42ZploobabSfvXWQ5VglM3NUzpFMDQVoxxubM7h5P/uSNXEHnYkjAhDKVJxe -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:48 2026 by rpki-client