This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/7IHoFTom1ovbc32ROfwOsVohnOY.roa File: 7IHoFTom1ovbc32ROfwOsVohnOY.roa (raw, json) Hash identifier: QxYm3BEgI8MopzvcjZkVuxTvAcrTlamB8ZE+JEtn02I= Subject key identifier: EC:81:E8:15:3A:26:D6:8B:DB:73:7D:91:39:FC:0E:B1:5A:21:9C:E6 Certificate issuer: /CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4 Certificate serial: 019B79112CDDA96AE0971512C98897AB1327 Authority key identifier: 8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/7IHoFTom1ovbc32ROfwOsVohnOY.roa Signing time: Thu 01 Jan 2026 10:18:47 +0000 ROA not before: Thu 01 Jan 2026 10:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216046 IP address blocks: 77.247.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2c:dd:a9:6a:e0:97:15:12:c9:88:97:ab:13:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4 Validity Not Before: Jan 1 10:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec81e8153a26d68bdb737d9139fc0eb15a219ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b4:7c:a6:b3:56:8a:b5:2d:1c:17:c7:d3:23: 73:23:5f:f2:0a:bb:a1:fa:66:42:04:17:27:7d:be: 38:3b:55:65:65:bb:8b:b6:8d:e3:37:9c:e1:a9:e7: d1:7e:a8:bf:28:1f:54:85:ae:32:be:48:5f:88:a1: 9f:9c:57:5d:62:f3:46:e5:83:28:c8:ce:4c:d1:7f: a6:e5:65:6f:d8:2a:58:dc:5f:44:26:e0:bc:de:f7: 63:69:e5:69:7a:d3:0c:fa:b2:78:40:df:ee:f4:07: e9:5c:04:bd:21:b7:f5:0d:f3:e1:25:b1:36:ba:32: 2e:48:b1:40:69:12:9c:77:33:26:ef:cc:e5:11:53: 37:1e:28:32:58:8e:8f:b5:a0:8b:e2:20:1b:15:d6: 0c:0f:fa:0c:13:5a:3e:7b:97:fb:10:60:72:55:2a: b1:6f:c4:0c:38:35:b7:3e:98:2c:02:0e:6c:61:7e: a9:87:1b:bd:59:48:6b:0a:b3:ac:b4:7b:14:fe:dd: c3:14:7c:9e:ed:21:89:45:a7:45:c3:97:ba:fd:f9: bc:15:31:94:d5:9a:c3:8e:87:b7:c4:55:05:78:54: 43:3c:ae:67:8b:51:83:ab:a8:25:83:b6:54:0d:9b: d0:80:7d:73:9c:8d:03:8b:35:25:5a:b2:9d:0a:59: a0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:81:E8:15:3A:26:D6:8B:DB:73:7D:91:39:FC:0E:B1:5A:21:9C:E6 X509v3 Authority Key Identifier: keyid:8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/7IHoFTom1ovbc32ROfwOsVohnOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.247.88.0/24 Signature Algorithm: sha256WithRSAEncryption a9:00:49:eb:1b:6a:d8:04:bf:b0:cb:9c:b0:70:13:19:c0:94: 4c:42:27:ea:bc:ca:ae:99:39:c3:bb:c4:06:6c:28:66:56:aa: 1f:a4:99:99:28:25:1c:a0:c0:a1:d4:76:84:8a:62:4f:73:7e: 64:0a:eb:fb:37:f3:fa:f4:35:96:24:80:8c:71:62:4b:55:24: 2b:4e:f9:b8:f3:c6:05:14:ba:21:5b:fe:17:1e:64:57:5a:3e: bc:f4:b3:db:da:26:27:95:f6:65:29:94:90:70:25:d0:00:d3: 3c:34:7d:f0:c7:53:ca:6d:4e:c4:f8:c0:ef:0d:fb:66:95:ea: a3:d8:0a:01:14:55:e5:9d:80:36:3e:66:6d:0e:1a:69:da:18: a9:2e:e3:f1:43:99:bc:5d:25:a4:c4:1b:86:2d:26:27:c3:0a: a9:1a:48:99:56:26:5a:26:00:6c:16:c9:a4:d7:a8:bc:a7:52: 13:4f:4a:14:55:e1:35:58:36:0b:38:9a:d8:55:18:ad:be:c0: bc:b8:2c:e7:66:3a:11:86:cb:69:16:9f:10:1c:9e:ce:a7:81: 41:f5:97:03:2e:48:e5:f5:e7:11:60:f7:52:e2:ed:3b:7c:12: d4:a7:a7:e6:e6:4a:8b:4e:81:80:12:20:60:3e:eb:16:b6:79: 5c:4e:f9:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ESzdqWrglxUSyYiXqxMnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZDI5MzBkMWZlMWRkNDMwNDkxZmQ3YjgzMWRlOWM2MTY5 MmFkZTQwHhcNMjYwMTAxMTAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzgxZTgxNTNhMjZkNjhiZGI3MzdkOTEzOWZjMGViMTVhMjE5Y2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibR8prNWirUtHBfH0yNzI1/yCruh +mZCBBcnfb44O1VlZbuLto3jN5zhqefRfqi/KB9Uha4yvkhfiKGfnFddYvNG5YMo yM5M0X+m5WVv2CpY3F9EJuC83vdjaeVpetMM+rJ4QN/u9AfpXAS9Ibf1DfPhJbE2 ujIuSLFAaRKcdzMm78zlEVM3HigyWI6PtaCL4iAbFdYMD/oME1o+e5f7EGByVSqx b8QMODW3PpgsAg5sYX6phxu9WUhrCrOstHsU/t3DFHye7SGJRadFw5e6/fm8FTGU 1ZrDjoe3xFUFeFRDPK5ni1GDq6glg7ZUDZvQgH1znI0DizUlWrKdClmgVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOyB6BU6JtaL23N9kTn8DrFaIZzmMB8GA1UdIwQY MBaAFIrSkw0f4d1DBJH9e4Md6cYWkq3kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXRLVERSX2gzVU1Fa2YxN2d4M3B4aGFTcmVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9iZTc4OTQtMGNjYy00ZmJkLTg4MGIt OTc1OGNiMmI4NDRlLzEvN0lIb0ZUb20xb3ZiYzMyUk9md09zVm9obk9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9iZTc4OTQtMGNjYy00ZmJkLTg4MGItOTc1OGNiMmI4NDRl LzEvaXRLVERSX2gzVU1Fa2YxN2d4M3B4aGFTcmVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATfdYMA0G CSqGSIb3DQEBCwUAA4IBAQCpAEnrG2rYBL+wy5ywcBMZwJRMQifqvMqumTnDu8QG bChmVqofpJmZKCUcoMCh1HaEimJPc35kCuv7N/P69DWWJICMcWJLVSQrTvm488YF FLohW/4XHmRXWj689LPb2iYnlfZlKZSQcCXQANM8NH3wx1PKbU7E+MDvDftmleqj 2AoBFFXlnYA2PmZtDhpp2hipLuPxQ5m8XSWkxBuGLSYnwwqpGkiZViZaJgBsFsmk 16i8p1ITT0oUVeE1WDYLOJrYVRitvsC8uCznZjoRhstpFp8QHJ7Op4FB9ZcDLkjl 9ecRYPdS4u07fBLUp6fm5kqLToGAEiBgPusWtnlcTvme -----END CERTIFICATE-----Generated at Tue Feb 10 02:58:27 2026 by rpki-client