This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/7XwuNf8ZI8FggCTIu3xLPPBwACo.roa File: 7XwuNf8ZI8FggCTIu3xLPPBwACo.roa (raw, json) Hash identifier: W+WJkHmtpXyF1YCQ32I9zdl7SdlSiAPaPn3XEwacVdM= Subject key identifier: ED:7C:2E:35:FF:19:23:C1:60:80:24:C8:BB:7C:4B:3C:F0:70:00:2A Certificate issuer: /CN=7714e817158dc307eed4d4c6edf51a89e5703ecf Certificate serial: 019B7B365065F876D418B3DC1CB9AB5DB727 Authority key identifier: 77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/7XwuNf8ZI8FggCTIu3xLPPBwACo.roa Signing time: Thu 01 Jan 2026 20:18:35 +0000 ROA not before: Thu 01 Jan 2026 20:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210524 IP address blocks: 212.52.21.0/24 maxlen: 24 2a12:6a00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:50:65:f8:76:d4:18:b3:dc:1c:b9:ab:5d:b7:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7714e817158dc307eed4d4c6edf51a89e5703ecf Validity Not Before: Jan 1 20:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed7c2e35ff1923c1608024c8bb7c4b3cf070002a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b3:58:0d:cf:c1:99:30:54:6d:0f:81:e1:45: ab:43:78:a7:75:ca:a8:53:ab:39:00:23:3a:7e:9c: 54:65:85:6c:c1:08:08:f3:aa:f9:da:6d:e6:b3:7f: a8:fb:1f:2a:61:23:fd:e4:39:c5:e6:4b:41:35:71: 35:35:7c:a0:72:3e:4a:09:ae:4e:3b:92:0f:1e:1e: dd:4d:53:ea:43:78:78:6f:8a:ad:5e:a8:7f:68:7c: 53:6d:37:ff:d0:fd:1a:62:db:5e:39:68:2d:5c:13: 9c:26:e2:6f:23:0e:4a:11:c4:a1:f4:7b:cb:10:80: ae:d8:7a:95:11:7f:00:4a:88:6e:87:ad:c7:b6:64: c2:0a:e1:8f:19:a8:c7:5f:d4:2c:6d:cf:31:6f:13: 94:eb:0d:e7:b4:41:d1:d3:c0:df:e2:d2:5f:39:f7: 6a:25:ea:4d:2e:c8:7e:53:3c:e9:1f:76:0d:f8:e7: 31:47:3d:2c:50:8c:0b:38:03:2e:bb:0f:d8:b5:03: 5f:61:83:d1:45:a8:f6:52:d4:88:d6:74:97:ac:70: a3:65:1d:8d:e6:51:cf:5e:b9:48:31:d1:41:ec:61: 74:45:00:17:2f:41:d9:65:df:dd:43:db:ea:72:48: e2:5a:3b:80:fa:b7:24:64:45:89:3f:9e:55:f6:4f: fe:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7C:2E:35:FF:19:23:C1:60:80:24:C8:BB:7C:4B:3C:F0:70:00:2A X509v3 Authority Key Identifier: keyid:77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/7XwuNf8ZI8FggCTIu3xLPPBwACo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.52.21.0/24 IPv6: 2a12:6a00::/29 Signature Algorithm: sha256WithRSAEncryption 1d:9a:45:d3:fd:bd:61:8d:72:ef:ec:59:c6:06:e1:cc:57:78: 83:64:12:57:39:a5:2f:bb:a9:47:23:a3:c3:23:b2:f8:20:43: 81:b0:c0:96:78:ed:0e:e2:03:6e:87:34:9e:1c:2d:21:78:0e: 20:84:a4:6e:a3:04:d2:5f:a9:0c:a3:c2:6b:87:46:5d:a4:12: 2a:3f:cc:28:c6:4d:5d:ba:16:bb:a5:ea:b4:ae:57:e7:a0:1d: 14:fc:44:24:ac:fe:73:e7:d6:6a:29:ec:fa:9f:84:52:02:a9: 10:23:f1:f5:82:dd:ec:20:8d:d7:c2:02:46:b8:3a:82:df:ce: c7:53:c6:00:9d:54:83:5c:f3:5b:c4:1f:43:bd:86:b7:67:99: c3:77:ea:89:58:66:a6:ca:38:20:b9:0b:8b:0e:30:9c:99:31: 15:a0:df:18:fe:02:6f:88:f1:de:cf:07:b1:46:2a:26:8e:15: a6:86:f1:6a:b0:9f:ce:37:d2:44:26:b8:70:d2:93:9c:cd:19: 25:f1:b5:1e:da:30:d4:b6:0d:53:01:30:b2:99:32:9b:47:de: a8:c2:94:d8:62:88:c1:f0:41:e5:a7:86:f8:d6:48:c6:83:f7: 48:c9:ea:5d:5a:0e:bc:0b:4e:b5:40:f7:04:7b:ca:97:c0:09: e0:5a:ca:3d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NlBl+HbUGLPcHLmrXbcnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MTRlODE3MTU4ZGMzMDdlZWQ0ZDRjNmVkZjUxYTg5ZTU3 MDNlY2YwHhcNMjYwMTAxMjAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDdjMmUzNWZmMTkyM2MxNjA4MDI0YzhiYjdjNGIzY2YwNzAwMDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47NYDc/BmTBUbQ+B4UWrQ3indcqo U6s5ACM6fpxUZYVswQgI86r52m3ms3+o+x8qYSP95DnF5ktBNXE1NXygcj5KCa5O O5IPHh7dTVPqQ3h4b4qtXqh/aHxTbTf/0P0aYtteOWgtXBOcJuJvIw5KEcSh9HvL EICu2HqVEX8ASohuh63HtmTCCuGPGajHX9Qsbc8xbxOU6w3ntEHR08Df4tJfOfdq JepNLsh+UzzpH3YN+OcxRz0sUIwLOAMuuw/YtQNfYYPRRaj2UtSI1nSXrHCjZR2N 5lHPXrlIMdFB7GF0RQAXL0HZZd/dQ9vqckjiWjuA+rckZEWJP55V9k/+3wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFO18LjX/GSPBYIAkyLt8SzzwcAAqMB8GA1UdIwQY MBaAFHcU6BcVjcMH7tTUxu31GonlcD7PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHhUb0Z4V053d2Z1MU5URzdmVWFpZVZ3UHM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8xZTZkNTktMjdjZi00MTlmLWFkMWQt NjIxMDY0MWU1MmQ2LzEvN1h3dU5mOFpJOEZnZ0NUSXUzeExQUEJ3QUNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8xZTZkNTktMjdjZi00MTlmLWFkMWQtNjIxMDY0MWU1MmQ2 LzEvZHhUb0Z4V053d2Z1MU5URzdmVWFpZVZ3UHM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA1DQVMA0E AgACMAcDBQMqEmoAMA0GCSqGSIb3DQEBCwUAA4IBAQAdmkXT/b1hjXLv7FnGBuHM V3iDZBJXOaUvu6lHI6PDI7L4IEOBsMCWeO0O4gNuhzSeHC0heA4ghKRuowTSX6kM o8Jrh0ZdpBIqP8woxk1duha7peq0rlfnoB0U/EQkrP5z59ZqKez6n4RSAqkQI/H1 gt3sII3XwgJGuDqC387HU8YAnVSDXPNbxB9DvYa3Z5nDd+qJWGamyjgguQuLDjCc mTEVoN8Y/gJviPHezwexRiomjhWmhvFqsJ/ON9JEJrhw0pOczRkl8bUe2jDUtg1T ATCymTKbR96owpTYYojB8EHlp4b41kjGg/dIyepdWg68C061QPcEe8qXwAngWso9 -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:30 2026 by rpki-client