This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/7qKC_f93I4x5vZAkFd7YPrFcC7k.roa File: 7qKC_f93I4x5vZAkFd7YPrFcC7k.roa (raw, json) Hash identifier: Fej8whp10bdKNIubAsMMxHxf8nDoH0W086yoYql/4Y0= Subject key identifier: EE:A2:82:FD:FF:77:23:8C:79:BD:90:24:15:DE:D8:3E:B1:5C:0B:B9 Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f Certificate serial: 019B7E38D8B8A77F3D82639194BC37647837 Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/7qKC_f93I4x5vZAkFd7YPrFcC7k.roa Signing time: Fri 02 Jan 2026 10:20:13 +0000 ROA not before: Fri 02 Jan 2026 10:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200002 IP address blocks: 185.205.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d8:b8:a7:7f:3d:82:63:91:94:bc:37:64:78:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f Validity Not Before: Jan 2 10:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eea282fdff77238c79bd902415ded83eb15c0bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:11:d2:ad:03:2e:93:e4:fe:96:2f:f9:24:cc: b2:2d:b8:f9:1c:c3:47:b1:70:51:7b:15:93:20:0f: ea:97:8c:1c:94:f0:5e:ed:0b:02:87:98:b1:df:28: f0:0b:ff:ce:e0:8c:89:80:d8:92:7a:e2:a9:19:85: dd:52:23:2a:5b:59:de:43:5e:bf:c4:30:1a:41:2e: ca:6e:8e:97:bf:52:30:d5:e1:32:48:bd:bf:7a:cb: da:33:a4:19:53:98:58:2c:0a:e3:fa:af:6d:82:d9: a3:dc:33:26:0b:5f:51:7a:82:50:6e:b8:b6:90:86: 8c:89:80:01:78:ca:46:bc:5a:2c:32:37:cd:1a:45: 4b:9f:ce:58:dc:93:6d:b6:c6:f9:d4:7e:16:b0:d9: 17:8c:2f:0b:16:05:0a:0d:c8:23:7c:98:2e:38:a1: 3b:a6:13:7b:cc:5f:64:6c:39:82:ba:d2:10:85:98: f3:b2:a7:c4:30:12:95:46:fd:72:ef:38:a0:76:0b: fc:13:9c:82:5c:99:02:88:a3:7c:ef:66:23:17:2c: 71:e6:14:b7:3b:a0:e4:11:e0:0f:ab:08:34:e9:73: ac:7d:1f:10:3b:84:75:29:1b:82:01:64:81:15:20: b3:5b:c7:fe:c6:86:fd:36:67:13:17:32:5d:a6:2c: 6e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A2:82:FD:FF:77:23:8C:79:BD:90:24:15:DE:D8:3E:B1:5C:0B:B9 X509v3 Authority Key Identifier: keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/7qKC_f93I4x5vZAkFd7YPrFcC7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.205.19.0/24 Signature Algorithm: sha256WithRSAEncryption bf:69:66:77:11:87:fb:88:48:ae:c7:ee:94:2e:1f:05:ea:36: bb:9f:18:00:b9:d6:4a:48:07:3d:3b:e8:1f:df:3f:b7:03:ae: 3d:87:7f:db:05:35:0c:c9:cd:c2:2c:50:94:1c:e1:f3:47:a3: 26:1c:32:f9:1a:79:9d:3c:fb:b6:55:fb:b7:6a:3a:88:d4:0d: 20:19:2b:1e:78:fa:1c:51:1d:37:bd:b3:f8:6c:e2:8b:a5:26: 27:73:2d:e5:9f:b3:87:5b:7c:65:96:d4:6d:c9:3a:56:8f:bd: 10:1d:12:b8:49:76:1a:3b:c0:90:6b:fa:72:5f:84:8c:12:19: 5f:58:37:bf:77:e4:c2:6a:dc:98:9d:be:0d:b1:2e:4b:e5:05: 26:20:37:09:7f:ef:5d:8b:91:b7:0b:c2:b2:4c:54:80:3a:0b: 66:a6:b8:f6:e7:58:21:e3:52:9a:d2:c9:b7:6f:11:28:44:f2: 58:ab:b5:2e:4d:0f:c6:b6:5a:0f:37:28:5f:8e:6f:eb:e7:89: 8f:b6:b2:76:d7:9b:43:6d:16:b6:e2:54:a2:81:ed:55:50:53: b4:b2:76:08:4d:75:90:44:3c:56:0e:11:57:b1:65:c8:84:c3: 6c:ed:ed:73:ca:74:07:c3:10:09:34:5e:18:b8:fe:68:6e:27: cd:1c:af:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ONi4p389gmORlLw3ZHg3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTkyZTY4ODk1YzcwNjhiNDY1NTUwODkxN2FkNWJiZGRi ZDBhNWYwHhcNMjYwMTAyMTAyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWEyODJmZGZmNzcyMzhjNzliZDkwMjQxNWRlZDgzZWIxNWMwYmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRHSrQMuk+T+li/5JMyyLbj5HMNH sXBRexWTIA/ql4wclPBe7QsCh5ix3yjwC//O4IyJgNiSeuKpGYXdUiMqW1neQ16/ xDAaQS7Kbo6Xv1Iw1eEySL2/esvaM6QZU5hYLArj+q9tgtmj3DMmC19ReoJQbri2 kIaMiYABeMpGvFosMjfNGkVLn85Y3JNttsb51H4WsNkXjC8LFgUKDcgjfJguOKE7 phN7zF9kbDmCutIQhZjzsqfEMBKVRv1y7zigdgv8E5yCXJkCiKN872YjFyxx5hS3 O6DkEeAPqwg06XOsfR8QO4R1KRuCAWSBFSCzW8f+xob9NmcTFzJdpixuVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO6igv3/dyOMeb2QJBXe2D6xXAu5MB8GA1UdIwQY MBaAFFBZLmiJXHBotGVVCJF61bvdvQpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEt N2JiZDI4Y2U0YTc1LzEvN3FLQ19mOTNJNHg1dlpBa0ZkN1lQckZjQzdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEtN2JiZDI4Y2U0YTc1 LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc0TMA0G CSqGSIb3DQEBCwUAA4IBAQC/aWZ3EYf7iEiux+6ULh8F6ja7nxgAudZKSAc9O+gf 3z+3A649h3/bBTUMyc3CLFCUHOHzR6MmHDL5GnmdPPu2Vfu3ajqI1A0gGSseePoc UR03vbP4bOKLpSYncy3ln7OHW3xlltRtyTpWj70QHRK4SXYaO8CQa/pyX4SMEhlf WDe/d+TCatyYnb4NsS5L5QUmIDcJf+9di5G3C8KyTFSAOgtmprj251gh41Ka0sm3 bxEoRPJYq7UuTQ/GtloPNyhfjm/r54mPtrJ215tDbRa24lSige1VUFO0snYITXWQ RDxWDhFXsWXIhMNs7e1zynQHwxAJNF4YuP5obifNHK/4 -----END CERTIFICATE-----Generated at Mon Jan 26 15:34:11 2026 by rpki-client