This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/7qTF0jqmrE5sqWppz2XaId92Nsg.roa File: 7qTF0jqmrE5sqWppz2XaId92Nsg.roa (raw, json) Hash identifier: BXslQtBYGdpBVanESXoQgNGnECD/ohyq+njOEg7cP8o= Subject key identifier: EE:A4:C5:D2:3A:A6:AC:4E:6C:A9:6A:69:CF:65:DA:21:DF:76:36:C8 Certificate issuer: /CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06 Certificate serial: 019B7C8001CB9648062DD968AA206E4AE121 Authority key identifier: AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/7qTF0jqmrE5sqWppz2XaId92Nsg.roa Signing time: Fri 02 Jan 2026 02:18:42 +0000 ROA not before: Fri 02 Jan 2026 02:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196646 IP address blocks: 5.11.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:01:cb:96:48:06:2d:d9:68:aa:20:6e:4a:e1:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06 Validity Not Before: Jan 2 02:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eea4c5d23aa6ac4e6ca96a69cf65da21df7636c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4b:ae:e5:49:70:ca:0d:80:9c:84:5d:cb:6c: 7d:83:86:e1:21:de:3a:8b:fb:10:a4:66:72:6c:16: f7:4e:87:54:ec:29:aa:6d:9e:c1:0d:1c:7b:ee:6c: 0b:44:74:00:6c:35:e0:2c:aa:b7:33:c2:70:65:1d: b2:62:a3:c9:50:46:77:6b:94:a5:03:43:61:f5:db: 5b:c0:5f:1a:80:ce:55:6b:b4:38:f7:c2:54:dc:21: 40:19:7d:68:85:24:bf:59:e6:92:a6:51:cb:c5:8e: 75:fb:aa:8e:c8:3d:a5:ca:93:f9:41:0b:cc:7a:ff: 23:75:99:6d:5b:ed:c9:db:39:10:be:5c:6e:f0:43: 22:b1:db:80:d2:dd:cc:4f:b5:f9:ec:bf:a1:a6:bb: f3:92:b4:6b:fc:0f:3c:c0:44:d2:69:b9:0b:41:e1: 51:fb:02:86:c1:cb:28:69:0e:13:89:5b:21:b1:58: 17:de:94:a5:19:a7:97:7f:18:e4:88:af:14:fc:ac: 08:95:b5:70:36:96:1a:73:1a:03:88:11:6f:9a:0b: 2d:0a:d8:fe:5e:25:71:7c:50:72:e5:fd:ee:7b:26: e7:89:db:20:b7:35:fe:1c:5e:4d:a3:3b:0d:85:43: 6b:cc:b9:a3:e9:71:41:fd:55:f0:68:06:96:c2:dc: 56:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A4:C5:D2:3A:A6:AC:4E:6C:A9:6A:69:CF:65:DA:21:DF:76:36:C8 X509v3 Authority Key Identifier: keyid:AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/7qTF0jqmrE5sqWppz2XaId92Nsg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.11.88.0/21 Signature Algorithm: sha256WithRSAEncryption b5:0a:2c:f8:ac:ef:fb:cd:0c:e2:f6:0c:bb:3e:68:7d:2a:ae: 22:83:eb:4b:aa:20:4d:26:5d:ed:44:42:59:01:40:c1:c8:e2: 08:80:40:e6:d7:ff:7a:c6:45:c8:d1:09:b7:15:fb:ef:97:4e: 40:f5:31:b0:e1:7f:09:5e:d9:0c:62:67:2b:2c:0a:be:fb:53: 19:d5:45:23:29:79:11:bc:39:46:be:c0:72:b4:9a:59:3c:22: 07:2c:51:be:bd:af:87:ca:75:da:ac:84:35:ad:5d:d5:f9:c6: c1:d0:5b:ac:61:fd:58:02:f1:e4:5c:4c:2c:01:69:81:a1:a0: 0e:e1:10:9f:11:29:e7:a4:4a:22:d6:53:eb:8a:58:00:00:01: 3d:20:1b:e3:2d:68:db:2b:ce:dc:d4:79:79:a4:c3:9b:b8:7d: 57:47:d5:3f:30:ee:b6:22:f4:c4:5c:6d:71:92:87:7d:5c:fb: 9a:38:c9:40:ec:6e:20:0e:f6:0a:a3:b9:5c:51:ca:ea:0c:49: 8f:f4:64:2b:b0:aa:6c:56:cc:23:63:24:ff:5d:7e:1b:e7:2e: a5:eb:64:fd:18:3d:cf:c3:e0:bf:40:80:62:25:f0:5c:d1:77: e0:bf:d2:0f:05:5a:74:2a:8b:7a:d3:b2:f1:0c:fe:a1:2a:af: 86:fe:1e:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gAHLlkgGLdloqiBuSuEhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMzkyZjI4ZGVjNmI4Y2NlYjdjZDcwZTdhZjcxZDhjZGNh YTlhMDYwHhcNMjYwMTAyMDIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWE0YzVkMjNhYTZhYzRlNmNhOTZhNjljZjY1ZGEyMWRmNzYzNmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0uu5Ulwyg2AnIRdy2x9g4bhId46 i/sQpGZybBb3TodU7CmqbZ7BDRx77mwLRHQAbDXgLKq3M8JwZR2yYqPJUEZ3a5Sl A0Nh9dtbwF8agM5Va7Q498JU3CFAGX1ohSS/WeaSplHLxY51+6qOyD2lypP5QQvM ev8jdZltW+3J2zkQvlxu8EMisduA0t3MT7X57L+hprvzkrRr/A88wETSabkLQeFR +wKGwcsoaQ4TiVshsVgX3pSlGaeXfxjkiK8U/KwIlbVwNpYacxoDiBFvmgstCtj+ XiVxfFBy5f3ueybnidsgtzX+HF5NozsNhUNrzLmj6XFB/VXwaAaWwtxWXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO6kxdI6pqxObKlqac9l2iHfdjbIMB8GA1UdIwQY MBaAFK85LyjexrjM63zXDnr3HYzcqpoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnprdktON0d1TXpyZk5jT2V2Y2RqTnlxbWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8yZjM2ZDQtNzJlMS00MDQ2LWI3M2Yt YWI5ZWFkYjFkNzk3LzEvN3FURjBqcW1yRTVzcVdwcHoyWGFJZDkyTnNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8yZjM2ZDQtNzJlMS00MDQ2LWI3M2YtYWI5ZWFkYjFkNzk3 LzEvcnprdktON0d1TXpyZk5jT2V2Y2RqTnlxbWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDBQtYMA0G CSqGSIb3DQEBCwUAA4IBAQC1Ciz4rO/7zQzi9gy7Pmh9Kq4ig+tLqiBNJl3tREJZ AUDByOIIgEDm1/96xkXI0Qm3Ffvvl05A9TGw4X8JXtkMYmcrLAq++1MZ1UUjKXkR vDlGvsBytJpZPCIHLFG+va+HynXarIQ1rV3V+cbB0FusYf1YAvHkXEwsAWmBoaAO 4RCfESnnpEoi1lPrilgAAAE9IBvjLWjbK87c1Hl5pMObuH1XR9U/MO62IvTEXG1x kod9XPuaOMlA7G4gDvYKo7lcUcrqDEmP9GQrsKpsVswjYyT/XX4b5y6l62T9GD3P w+C/QIBiJfBc0Xfgv9IPBVp0Kot607LxDP6hKq+G/h4k -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:26 2026 by rpki-client