This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/x7XIqJcPUru0lXudcs2kUD4a4dY.roa File: x7XIqJcPUru0lXudcs2kUD4a4dY.roa (raw, json) Hash identifier: RMRq+vG8pwIp8zMMZ4x4ZnddCysQFlJ5lwvYXFg2Sb0= Subject key identifier: C7:B5:C8:A8:97:0F:52:BB:B4:95:7B:9D:72:CD:A4:50:3E:1A:E1:D6 Certificate issuer: /CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2 Certificate serial: 019B7BA4232263E85540EA50215B0CAE8754 Authority key identifier: 72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/x7XIqJcPUru0lXudcs2kUD4a4dY.roa Signing time: Thu 01 Jan 2026 22:18:32 +0000 ROA not before: Thu 01 Jan 2026 22:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42708 IP address blocks: 91.212.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:23:22:63:e8:55:40:ea:50:21:5b:0c:ae:87:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2 Validity Not Before: Jan 1 22:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7b5c8a8970f52bbb4957b9d72cda4503e1ae1d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d8:ac:12:76:f1:72:74:a7:81:b0:5d:ba:56: 67:1c:e8:07:2d:17:93:80:15:3f:df:2f:64:57:55: 35:fa:1d:dd:19:10:61:6a:11:0a:e1:f9:b1:01:e1: c9:c4:02:8a:c1:8b:96:8a:f3:c0:f3:64:06:6d:4c: 59:ab:9e:89:eb:69:6d:45:51:fb:1e:11:04:87:09: 42:44:ef:7a:64:32:99:4e:1e:30:76:ec:d8:ea:5f: f1:14:46:02:61:19:ec:83:72:76:13:e8:ee:ea:60: 26:4c:89:d1:dd:4f:0e:a5:ee:d4:6f:5f:9b:75:70: ed:95:34:0b:eb:18:48:2b:17:92:ee:a7:46:8f:02: 50:d2:9c:48:ce:cb:bc:15:a3:c2:34:2f:f7:9e:3f: b5:fb:76:8c:8f:32:8e:4d:10:84:67:20:dc:16:13: 0f:f5:fd:29:ae:d4:75:03:ff:dc:85:a2:87:e4:22: 85:88:41:dd:b7:1c:d3:63:51:79:a0:3d:49:0d:f0: e7:f3:6c:bc:18:1e:23:1f:7a:34:32:be:6f:ae:65: db:20:fb:5c:96:4e:f9:21:43:bc:47:b8:37:41:b3: f9:c4:c1:da:3f:42:eb:27:24:97:1f:76:3b:1c:33: 90:8d:33:6d:95:1c:b8:7f:d3:8d:92:c8:04:d1:81: eb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B5:C8:A8:97:0F:52:BB:B4:95:7B:9D:72:CD:A4:50:3E:1A:E1:D6 X509v3 Authority Key Identifier: keyid:72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/x7XIqJcPUru0lXudcs2kUD4a4dY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.10.0/24 Signature Algorithm: sha256WithRSAEncryption 36:24:32:45:da:f5:87:5d:34:7b:8e:0a:92:4b:01:d5:a0:20: 99:c6:ba:c0:e4:eb:8e:e0:5e:d2:bb:68:55:9e:78:48:e6:17: 8a:4d:85:c7:38:9f:b5:7f:b0:9e:cf:8c:80:a2:81:7a:6b:b6: 29:91:07:bc:f3:7d:c8:d1:fc:97:ea:5f:b8:39:14:f1:bd:91: 51:dc:28:ef:50:01:6d:39:79:99:69:1d:5d:ed:11:06:cf:e0: 1d:8d:8c:a2:46:8c:08:3a:e3:00:40:a9:e9:2f:31:f8:1e:b3: 4d:ff:bb:9f:13:ca:1e:3b:52:f3:d7:3f:d1:29:05:f6:b2:a4: 29:51:6d:c8:69:a3:f5:d9:48:af:23:23:5d:d2:56:d7:c5:ad: 2e:52:ca:d8:26:10:c5:5f:5d:a3:6c:6c:17:a6:cb:3d:8b:2a: f1:a8:6a:69:4a:20:b3:3c:fe:0a:7b:07:e5:4b:20:c1:05:1d: a9:7c:69:b6:4e:04:b3:90:59:a8:c5:48:a8:f9:78:80:6c:fe: 46:dc:f5:6d:9e:99:79:30:38:ef:e7:ce:a2:76:4b:ed:80:5d: b5:3c:c1:d3:8c:05:ac:0e:ab:9f:93:b5:b3:ab:c7:08:6a:64: 86:ac:3e:3a:88:1e:12:e5:bd:89:14:ab:9e:d4:c0:43:70:27: 3c:59:9b:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pCMiY+hVQOpQIVsMrodUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYWEwMmY0NWI5NzkzMGM3YTQ2ZDBlZjE4YTkxYzBhYWY4 OTkyZjIwHhcNMjYwMTAxMjIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2I1YzhhODk3MGY1MmJiYjQ5NTdiOWQ3MmNkYTQ1MDNlMWFlMWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudisEnbxcnSngbBdulZnHOgHLReT gBU/3y9kV1U1+h3dGRBhahEK4fmxAeHJxAKKwYuWivPA82QGbUxZq56J62ltRVH7 HhEEhwlCRO96ZDKZTh4wduzY6l/xFEYCYRnsg3J2E+ju6mAmTInR3U8Ope7Ub1+b dXDtlTQL6xhIKxeS7qdGjwJQ0pxIzsu8FaPCNC/3nj+1+3aMjzKOTRCEZyDcFhMP 9f0prtR1A//chaKH5CKFiEHdtxzTY1F5oD1JDfDn82y8GB4jH3o0Mr5vrmXbIPtc lk75IUO8R7g3QbP5xMHaP0LrJySXH3Y7HDOQjTNtlRy4f9ONksgE0YHrOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMe1yKiXD1K7tJV7nXLNpFA+GuHWMB8GA1UdIwQY MBaAFHKqAvRbl5MMekbQ7xipHAqviZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3FvQzlGdVhrd3g2UnREdkdLa2NDcS1Ka3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82MDM0NDQtNGEwZC00YzUyLWJlZjct ZDc5YjBlYzc4ZTk3LzEveDdYSXFKY1BVcnUwbFh1ZGNzMmtVRDRhNGRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC82MDM0NDQtNGEwZC00YzUyLWJlZjctZDc5YjBlYzc4ZTk3 LzEvY3FvQzlGdVhrd3g2UnREdkdLa2NDcS1Ka3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9QKMA0G CSqGSIb3DQEBCwUAA4IBAQA2JDJF2vWHXTR7jgqSSwHVoCCZxrrA5OuO4F7Su2hV nnhI5heKTYXHOJ+1f7Cez4yAooF6a7YpkQe8833I0fyX6l+4ORTxvZFR3CjvUAFt OXmZaR1d7REGz+AdjYyiRowIOuMAQKnpLzH4HrNN/7ufE8oeO1Lz1z/RKQX2sqQp UW3IaaP12UivIyNd0lbXxa0uUsrYJhDFX12jbGwXpss9iyrxqGppSiCzPP4Kewfl SyDBBR2pfGm2TgSzkFmoxUio+XiAbP5G3PVtnpl5MDjv586idkvtgF21PMHTjAWs Dqufk7Wzq8cIamSGrD46iB4S5b2JFKue1MBDcCc8WZui -----END CERTIFICATE-----Generated at Mon Jan 19 17:47:28 2026 by rpki-client