This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/K7W2HCvsA8JxFMmzeilzEcsyppo.roa File: K7W2HCvsA8JxFMmzeilzEcsyppo.roa (raw, json) Hash identifier: jiMWX4J6RYOzWaNm/5z8OYJi7Equ31upjXJ+Jtp8KZY= Subject key identifier: 2B:B5:B6:1C:2B:EC:03:C2:71:14:C9:B3:7A:29:73:11:CB:32:A6:9A Certificate issuer: /CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227 Certificate serial: 019B77C6D714C3F7B2C2AE787181F7D29E98 Authority key identifier: 3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/K7W2HCvsA8JxFMmzeilzEcsyppo.roa Signing time: Thu 01 Jan 2026 04:17:58 +0000 ROA not before: Thu 01 Jan 2026 04:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200374 IP address blocks: 194.53.64.0/22 maxlen: 22 195.5.98.0/23 maxlen: 23 2a0c:f7c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d7:14:c3:f7:b2:c2:ae:78:71:81:f7:d2:9e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227 Validity Not Before: Jan 1 04:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bb5b61c2bec03c27114c9b37a297311cb32a69a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:75:84:cf:90:f7:3a:34:0e:28:5b:bd:e7:35: 5c:3d:cc:e2:71:d6:42:d1:53:22:1e:81:9f:aa:6c: 63:cd:80:90:fe:43:1a:36:d7:55:89:2e:37:a6:88: ab:8a:77:8d:c3:16:0c:31:ed:d2:0d:86:84:5f:04: f0:f7:92:61:b8:dc:9c:72:ee:bb:97:e1:ce:dc:50: 37:dd:63:83:18:02:0b:8f:69:74:ca:27:77:f1:01: af:54:fb:8c:8d:11:78:c2:b0:7d:1e:6e:ea:b3:5b: 36:d6:ff:b5:52:a1:f7:a8:38:e1:af:d2:4b:be:51: ea:18:07:ac:dc:94:60:f7:a1:8e:bc:21:8b:c3:ea: 6d:3c:28:2b:4f:f7:00:16:b9:28:a7:fb:09:13:9c: 03:a9:b7:dc:11:5a:63:a6:d1:f8:42:35:b7:7d:5d: 89:80:c5:c2:5c:f3:de:f5:a1:02:41:bb:93:54:45: af:64:8a:96:cc:e8:65:3e:f0:20:e1:bb:fc:76:7e: fb:12:8c:e9:fd:4a:aa:13:59:12:e3:05:a2:61:96: 26:1a:f2:a6:70:00:32:39:2a:e1:54:d8:27:1f:fd: 6c:87:43:95:dd:08:ce:56:a4:01:03:83:a3:c1:10: 5e:bb:7f:67:4a:ec:60:31:45:51:1d:d3:14:7e:9c: 25:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B5:B6:1C:2B:EC:03:C2:71:14:C9:B3:7A:29:73:11:CB:32:A6:9A X509v3 Authority Key Identifier: keyid:3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/K7W2HCvsA8JxFMmzeilzEcsyppo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.53.64.0/22 195.5.98.0/23 IPv6: 2a0c:f7c0::/29 Signature Algorithm: sha256WithRSAEncryption 66:ff:bf:fa:9f:7d:a7:a5:ef:c2:a3:ae:a9:75:f6:27:00:63: bf:a6:e8:ea:28:db:56:40:e0:3f:0b:23:5f:b4:c2:7d:d0:59: 38:96:fa:63:04:dd:ec:3d:03:0b:93:6f:8f:eb:8c:3f:44:3e: 5e:49:51:ea:da:8d:28:51:25:a1:38:b9:3e:4c:ae:c4:41:3a: e6:3e:c2:21:e7:a3:79:7d:4d:ba:4b:e3:a6:1f:5f:86:dc:79: fa:16:c1:23:1e:94:dc:a1:34:2f:e1:d4:7b:f6:7d:5b:1a:bc: a8:ec:24:83:12:90:eb:fc:8a:26:de:42:ab:44:a7:e9:8b:f0: d3:ff:c5:06:70:e0:55:d3:04:c4:bf:44:11:2a:85:1f:f3:e8: d2:41:72:80:dd:be:08:99:b3:d2:f3:20:ee:23:9a:99:b1:fb: 36:24:de:10:60:70:c1:b5:ca:8c:93:e0:90:fe:9b:40:97:75: 9b:76:a9:eb:f4:ae:11:1a:b1:a0:13:44:b7:2e:fd:33:4f:dd: 11:a4:99:6b:fc:de:09:66:6a:76:a6:f0:03:3e:c7:d2:b9:96: 6e:66:b7:fa:38:6a:94:ef:eb:a7:66:b4:65:a8:a4:59:19:1e: a7:e9:33:56:ca:42:b6:e4:17:eb:c4:6d:34:49:47:b6:25:ad: 35:04:48:28 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3xtcUw/eywq54cYH30p6YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNmJjYWZmM2U4MGFlNDE5YTE1ZDFiY2IzNmUzMTk4ZGVm OGUyMjcwHhcNMjYwMTAxMDQxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmI1YjYxYzJiZWMwM2MyNzExNGM5YjM3YTI5NzMxMWNiMzJhNjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHWEz5D3OjQOKFu95zVcPczicdZC 0VMiHoGfqmxjzYCQ/kMaNtdViS43poirineNwxYMMe3SDYaEXwTw95JhuNyccu67 l+HO3FA33WODGAILj2l0yid38QGvVPuMjRF4wrB9Hm7qs1s21v+1UqH3qDjhr9JL vlHqGAes3JRg96GOvCGLw+ptPCgrT/cAFrkop/sJE5wDqbfcEVpjptH4QjW3fV2J gMXCXPPe9aECQbuTVEWvZIqWzOhlPvAg4bv8dn77Eozp/UqqE1kS4wWiYZYmGvKm cAAyOSrhVNgnH/1sh0OV3QjOVqQBA4OjwRBeu39nSuxgMUVRHdMUfpwl2QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCu1thwr7APCcRTJs3opcxHLMqaaMB8GA1UdIwQY MBaAFDxryv8+gK5BmhXRvLNuMZje+OInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEd2S196NkFya0dhRmRHOHMyNHhtTjc0NGljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9mMzI4ZmYtOTI3Zi00MTE2LThlMzMt NDA0M2IyYzc3YmJmLzEvSzdXMkhDdnNBOEp4Rk1temVpbHpFY3N5cHBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9mMzI4ZmYtOTI3Zi00MTE2LThlMzMtNDA0M2IyYzc3YmJm LzEvUEd2S196NkFya0dhRmRHOHMyNHhtTjc0NGljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCwjVAAwQB wwViMA0EAgACMAcDBQMqDPfAMA0GCSqGSIb3DQEBCwUAA4IBAQBm/7/6n32npe/C o66pdfYnAGO/pujqKNtWQOA/CyNftMJ90Fk4lvpjBN3sPQMLk2+P64w/RD5eSVHq 2o0oUSWhOLk+TK7EQTrmPsIh56N5fU26S+OmH1+G3Hn6FsEjHpTcoTQv4dR79n1b Gryo7CSDEpDr/Iom3kKrRKfpi/DT/8UGcOBV0wTEv0QRKoUf8+jSQXKA3b4ImbPS 8yDuI5qZsfs2JN4QYHDBtcqMk+CQ/ptAl3Wbdqnr9K4RGrGgE0S3Lv0zT90RpJlr /N4JZmp2pvADPsfSuZZuZrf6OGqU7+unZrRlqKRZGR6n6TNWykK25BfrxG00SUe2 Ja01BEgo -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:09 2026 by rpki-client