This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7jhEN03qlAkIXq8Y8PrBdVpA3oU.roa File: 7jhEN03qlAkIXq8Y8PrBdVpA3oU.roa (raw, json) Hash identifier: c5O3dd2XTGkLkC5BGjJQQiJa2F/+bsR9jP7ptyTDkb0= Subject key identifier: EE:38:44:37:4D:EA:94:09:08:5E:AF:18:F0:FA:C1:75:5A:40:DE:85 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C138E6CA13B1A15B2A01C0E6BC2CE49 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7jhEN03qlAkIXq8Y8PrBdVpA3oU.roa Signing time: Fri 02 Jan 2026 00:20:15 +0000 ROA not before: Fri 02 Jan 2026 00:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209336 IP address blocks: 185.246.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:8e:6c:a1:3b:1a:15:b2:a0:1c:0e:6b:c2:ce:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee3844374dea9409085eaf18f0fac1755a40de85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bb:48:64:24:bb:43:56:0c:ce:41:27:72:5b: a9:4f:cf:68:ae:78:30:7f:90:e3:19:37:9b:95:bd: e5:28:76:4d:cc:ed:2f:d0:51:60:0f:65:72:8b:48: ec:e9:27:ed:ed:fa:40:fe:4a:14:7f:43:58:33:69: e0:a9:01:d7:3b:d6:88:20:d3:e3:fe:7f:8b:99:57: 1e:7e:fe:8f:fd:42:13:98:13:cc:d9:ba:2d:44:d3: cb:d6:94:b4:93:bf:58:0f:ec:b1:de:09:19:fe:da: c8:fa:43:9e:45:8b:40:e3:69:0c:03:58:94:f2:10: 01:52:ad:c9:30:a0:5a:9c:81:ac:aa:b1:ce:e5:eb: 4b:21:92:db:64:e8:72:c4:98:8b:91:a5:cc:75:ef: 9c:19:b0:e9:99:5a:5c:05:ab:81:89:3f:26:61:c3: ba:05:ce:e4:d6:83:cd:95:cf:ae:16:d8:c9:33:c3: ab:e8:96:21:1a:51:b8:7c:b8:f5:ae:0e:b8:77:84: 88:fc:f1:01:5a:38:8d:90:b2:93:89:f3:31:dd:8a: 16:73:56:76:1b:29:ee:92:95:ae:ab:36:15:4c:67: ee:56:2b:2b:dd:c0:8a:73:8d:ba:04:59:3f:ce:ba: b8:da:7c:ab:78:99:33:9a:e7:a6:fa:50:e3:a4:f7: be:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:38:44:37:4D:EA:94:09:08:5E:AF:18:F0:FA:C1:75:5A:40:DE:85 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7jhEN03qlAkIXq8Y8PrBdVpA3oU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.246.114.0/24 Signature Algorithm: sha256WithRSAEncryption c3:42:0d:50:33:ef:fd:03:89:a6:fc:cc:bb:a4:6f:a4:55:fe: c2:0d:00:89:bb:e2:03:c7:1f:cd:42:a5:ab:e4:20:1d:2f:94: e9:66:e0:5d:36:2c:6d:db:fd:b5:b2:9a:a5:6f:b6:1c:d2:64: 84:6d:7d:ef:7f:28:3b:be:9d:9c:51:05:52:5a:e3:95:2d:fa: 9c:37:6e:1b:04:65:99:83:d7:8d:22:c9:30:64:85:7a:c7:4e: cd:bb:d7:e9:d0:59:30:62:6d:c5:e6:49:cf:5d:cd:5e:25:9b: ac:bc:37:3e:85:f1:0a:fe:fa:4c:83:83:be:68:96:c8:93:2c: 12:e9:ee:9b:71:a4:8d:09:10:46:7b:ea:9e:09:41:bd:4f:a4: cb:7f:27:f8:ac:a7:4e:cc:dc:47:56:92:b5:ee:a8:25:3e:a4: f4:81:55:b6:60:01:24:4c:a2:da:2a:4e:d0:f8:b7:bc:8f:40: 41:2b:7b:c4:d0:4c:ef:b8:23:c9:5b:00:d7:41:63:bf:dc:5e: 1c:07:61:4b:ec:95:70:01:cd:a0:70:b6:f1:9c:2f:c2:09:8d: b6:05:90:b9:17:a1:b5:64:2b:9b:0d:9a:67:53:90:32:3e:c9: d7:5a:c0:aa:d4:11:a3:a0:92:e0:b8:3e:f4:5f:24:8f:60:2f: 02:95:3b:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E45soTsaFbKgHA5rws5JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTM4NDQzNzRkZWE5NDA5MDg1ZWFmMThmMGZhYzE3NTVhNDBkZTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbtIZCS7Q1YMzkEnclupT89orngw f5DjGTeblb3lKHZNzO0v0FFgD2Vyi0js6Sft7fpA/koUf0NYM2ngqQHXO9aIINPj /n+LmVcefv6P/UITmBPM2botRNPL1pS0k79YD+yx3gkZ/trI+kOeRYtA42kMA1iU 8hABUq3JMKBanIGsqrHO5etLIZLbZOhyxJiLkaXMde+cGbDpmVpcBauBiT8mYcO6 Bc7k1oPNlc+uFtjJM8Or6JYhGlG4fLj1rg64d4SI/PEBWjiNkLKTifMx3YoWc1Z2 GynukpWuqzYVTGfuVisr3cCKc426BFk/zrq42nyreJkzmuem+lDjpPe+kQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO44RDdN6pQJCF6vGPD6wXVaQN6FMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvN2poRU4wM3FsQWtJWHE4WThQckJkVnBBM29VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufZyMA0G CSqGSIb3DQEBCwUAA4IBAQDDQg1QM+/9A4mm/My7pG+kVf7CDQCJu+IDxx/NQqWr 5CAdL5TpZuBdNixt2/21spqlb7Yc0mSEbX3vfyg7vp2cUQVSWuOVLfqcN24bBGWZ g9eNIskwZIV6x07Nu9fp0FkwYm3F5knPXc1eJZusvDc+hfEK/vpMg4O+aJbIkywS 6e6bcaSNCRBGe+qeCUG9T6TLfyf4rKdOzNxHVpK17qglPqT0gVW2YAEkTKLaKk7Q +Le8j0BBK3vE0EzvuCPJWwDXQWO/3F4cB2FL7JVwAc2gcLbxnC/CCY22BZC5F6G1 ZCubDZpnU5AyPsnXWsCq1BGjoJLguD70XySPYC8ClTuq -----END CERTIFICATE-----Generated at Fri Jan 2 23:47:27 2026 by rpki-client