This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/a7TYTdeddL1SxnkOrRw2usET5iM.roa File: a7TYTdeddL1SxnkOrRw2usET5iM.roa (raw, json) Hash identifier: ubcc0fxkaBQyclVOo5DJil17c/isc8aeI6TLK79DIGc= Subject key identifier: 6B:B4:D8:4D:D7:9D:74:BD:52:C6:79:0E:AD:1C:36:BA:C1:13:E6:23 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C1378FCD7B5C937BCC30D2D6122AE6B Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/a7TYTdeddL1SxnkOrRw2usET5iM.roa Signing time: Fri 02 Jan 2026 00:20:09 +0000 ROA not before: Fri 02 Jan 2026 00:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 185.199.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:78:fc:d7:b5:c9:37:bc:c3:0d:2d:61:22:ae:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6bb4d84dd79d74bd52c6790ead1c36bac113e623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e3:46:ae:9d:4d:fc:30:1d:31:e1:76:24:1c: 6d:ab:fc:22:db:2d:a4:86:95:3f:ac:81:1a:b2:c5: a8:b4:2a:79:34:38:e5:da:93:a5:a3:71:dd:88:3b: ca:25:3a:e0:cd:e2:48:67:83:5f:0d:0b:81:d3:99: 84:16:e4:a0:c2:04:ff:9e:02:72:be:21:1d:ab:27: b0:b3:47:f2:1f:63:6e:96:97:e5:05:e8:0e:e4:26: b0:56:68:04:77:63:44:da:97:d1:af:c5:80:9b:55: f3:62:34:91:67:d8:dc:3e:7d:72:23:69:25:e4:00: 0f:83:25:59:0a:a9:9f:ce:3b:67:4a:c9:44:ab:76: 98:26:7b:62:37:6a:f3:f1:c5:d4:8b:82:07:29:81: fc:b2:2e:51:fa:af:d3:ab:20:19:62:35:84:a8:bc: 83:8e:df:07:05:b2:6f:66:66:29:89:dd:35:08:44: 0f:e5:1e:dd:a9:d5:f6:7a:a6:11:eb:8e:68:42:c5: b2:be:9c:78:67:8a:98:65:f3:87:1e:df:b0:61:b1: f9:b8:a7:90:67:19:3b:95:ec:c6:23:d2:8c:6d:72: 73:75:40:8b:23:d6:33:bc:c7:45:64:52:c2:3e:ee: c2:36:12:b5:e0:16:ab:e0:3e:68:a8:b8:84:e3:21: 6c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B4:D8:4D:D7:9D:74:BD:52:C6:79:0E:AD:1C:36:BA:C1:13:E6:23 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/a7TYTdeddL1SxnkOrRw2usET5iM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.199.157.0/24 Signature Algorithm: sha256WithRSAEncryption 45:fb:f6:a2:45:ee:1a:9d:6d:98:cd:95:78:06:c6:7c:c8:f0: df:22:4c:7c:ed:f1:a5:97:c5:ef:8f:00:b6:3c:53:23:61:8f: 5c:77:3a:19:8e:87:ad:76:18:33:29:a1:c4:a6:2b:7d:63:78: ab:81:5c:42:94:3a:94:13:4b:24:a0:9d:d8:b6:4c:a4:e8:3d: 4c:88:4f:04:77:00:53:8d:74:3e:ae:38:3c:aa:fc:f7:cb:39: c5:ed:11:a2:01:9e:eb:94:f3:37:f7:6b:3f:1b:dd:15:ee:8c: a8:68:dc:73:ee:70:5c:47:bd:32:ec:42:ba:a0:25:e1:6a:4c: 5a:77:d2:20:5e:d9:2a:3c:ac:75:2a:e1:7e:86:28:c5:79:f3: 4d:31:77:35:43:74:04:e2:5f:59:7e:69:af:93:62:55:5b:16: a2:7c:db:ab:c8:cf:2a:20:f0:88:37:c0:a6:83:f6:03:ba:05: 4d:45:5b:d7:52:82:dd:0e:33:2d:b9:fc:76:34:74:7b:e1:f4: 98:6a:e5:3c:9d:f6:92:72:53:4e:1d:a5:80:1e:65:70:ba:23: 34:8f:fd:70:c8:b6:83:92:26:ae:b9:1a:fc:c8:04:40:25:16: 12:a3:c3:01:63:39:4f:58:db:95:4c:a2:d0:99:dc:ee:a9:62: 88:a9:08:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E3j817XJN7zDDS1hIq5rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmI0ZDg0ZGQ3OWQ3NGJkNTJjNjc5MGVhZDFjMzZiYWMxMTNlNjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuNGrp1N/DAdMeF2JBxtq/wi2y2k hpU/rIEassWotCp5NDjl2pOlo3HdiDvKJTrgzeJIZ4NfDQuB05mEFuSgwgT/ngJy viEdqyews0fyH2NulpflBegO5CawVmgEd2NE2pfRr8WAm1XzYjSRZ9jcPn1yI2kl 5AAPgyVZCqmfzjtnSslEq3aYJntiN2rz8cXUi4IHKYH8si5R+q/TqyAZYjWEqLyD jt8HBbJvZmYpid01CEQP5R7dqdX2eqYR645oQsWyvpx4Z4qYZfOHHt+wYbH5uKeQ Zxk7lezGI9KMbXJzdUCLI9YzvMdFZFLCPu7CNhK14Bar4D5oqLiE4yFsWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGu02E3XnXS9UsZ5Dq0cNrrBE+YjMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvYTdUWVRkZWRkTDFTeG5rT3JSdzJ1c0VUNWlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucedMA0G CSqGSIb3DQEBCwUAA4IBAQBF+/aiRe4anW2YzZV4BsZ8yPDfIkx87fGll8XvjwC2 PFMjYY9cdzoZjoetdhgzKaHEpit9Y3irgVxClDqUE0skoJ3Ytkyk6D1MiE8EdwBT jXQ+rjg8qvz3yznF7RGiAZ7rlPM392s/G90V7oyoaNxz7nBcR70y7EK6oCXhakxa d9IgXtkqPKx1KuF+hijFefNNMXc1Q3QE4l9Zfmmvk2JVWxaifNuryM8qIPCIN8Cm g/YDugVNRVvXUoLdDjMtufx2NHR74fSYauU8nfaSclNOHaWAHmVwuiM0j/1wyLaD kiauuRr8yARAJRYSo8MBYzlPWNuVTKLQmdzuqWKIqQis -----END CERTIFICATE-----Generated at Fri Jan 2 23:47:31 2026 by rpki-client