This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/f4AJyUE3SrgBCWutynP65IhFU9k.roa File: f4AJyUE3SrgBCWutynP65IhFU9k.roa (raw, json) Hash identifier: /2RLVJGgq3wwGfIcCzG7ueYxdZA4XusvqTsPUnJXmbc= Subject key identifier: 7F:80:09:C9:41:37:4A:B8:01:09:6B:AD:CA:73:FA:E4:88:45:53:D9 Certificate issuer: /CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b Certificate serial: 019B7B353D83B473D513A85388DD9A50CD2C Authority key identifier: C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/f4AJyUE3SrgBCWutynP65IhFU9k.roa Signing time: Thu 01 Jan 2026 20:17:25 +0000 ROA not before: Thu 01 Jan 2026 20:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207539 IP address blocks: 37.60.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:3d:83:b4:73:d5:13:a8:53:88:dd:9a:50:cd:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b Validity Not Before: Jan 1 20:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f8009c941374ab801096badca73fae4884553d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ab:c4:3b:b6:91:af:ad:e1:a4:20:31:06:85: 52:68:03:73:f1:4e:96:92:c6:dc:58:64:dc:97:0b: f1:5f:55:00:17:b4:26:11:02:ad:02:91:ab:8c:ff: a1:bb:35:de:06:46:00:b7:30:b9:36:bb:52:eb:ed: ab:2e:f6:a3:62:0a:a3:db:aa:4c:c3:0b:2f:d4:f3: bb:9e:44:9b:d5:9c:20:ef:ac:59:ba:ce:7d:90:45: 1c:1c:f0:83:e1:9c:82:85:5e:d5:c1:98:3e:cc:3d: bd:79:a4:03:42:67:4c:4b:a3:6d:ea:ab:7d:3a:1a: 49:08:b0:19:ac:25:cc:40:4a:0e:5c:08:fe:e6:54: 6e:ca:ea:89:49:7c:e8:36:22:5d:51:e8:64:51:8d: 8d:31:1a:bc:f2:ae:56:30:2b:73:df:24:fe:6b:9b: d3:38:29:97:e3:9b:74:d1:b2:96:4d:70:cd:7d:33: ea:69:2c:4f:93:6e:48:77:ff:81:a7:23:b7:9c:f7: 13:ad:56:42:68:88:bf:53:57:32:c9:0e:9d:c3:8c: c0:21:aa:f7:80:09:e9:26:44:7c:e8:be:70:53:25: e8:43:f6:e5:56:3a:bf:6b:8e:ab:c5:44:63:27:a9: f1:e9:32:53:41:e3:4d:36:ab:87:86:cb:38:9b:fb: 95:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:80:09:C9:41:37:4A:B8:01:09:6B:AD:CA:73:FA:E4:88:45:53:D9 X509v3 Authority Key Identifier: keyid:C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/f4AJyUE3SrgBCWutynP65IhFU9k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.60.29.0/24 Signature Algorithm: sha256WithRSAEncryption 90:5f:ee:48:26:8d:2d:18:49:97:34:ba:1d:e8:ca:09:cd:2f: 15:da:3c:5d:03:9a:8f:c6:27:85:78:30:21:22:88:e6:47:84: 23:5a:93:55:f4:e4:39:c8:35:1a:9e:dd:37:13:04:85:97:6e: f7:e5:7b:7c:e6:85:57:58:7c:7f:17:75:26:65:6b:a3:03:18: 7b:11:3a:e8:c5:02:5a:0e:ca:1d:d3:64:7e:e5:e5:29:22:45: b5:65:f2:9e:a3:ca:76:6e:25:ab:45:b1:b3:9c:27:92:53:ef: a6:c7:64:c5:f4:19:18:c0:ef:f4:5b:f4:61:55:11:28:8a:7e: 4f:28:19:82:88:0b:94:ad:02:9e:a2:73:e7:6e:43:fc:92:ae: 7f:b3:82:84:19:7b:53:55:03:54:ca:34:4e:aa:87:1c:8b:78: 53:d9:a5:0f:5e:9f:fd:a3:3c:c3:3a:d4:79:f0:f7:9c:e3:34: bd:73:ee:a7:b7:30:24:54:97:8c:7c:41:da:30:44:56:ef:6e: 88:1e:31:f5:9e:2b:e0:2e:5b:a2:31:aa:a2:c5:89:ee:ba:ab: a7:53:36:1d:c0:b4:2e:4e:5d:8f:d6:c3:db:69:16:fb:09:b0: eb:01:46:a8:55:15:ce:1e:0b:63:6b:c9:97:17:be:80:ef:74: 65:42:e4:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NT2DtHPVE6hTiN2aUM0sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZThkOTU5ZjFjOTU2NGEzM2YyOGZlNDRhYjYxNGI4ZjYy YjAwMWIwHhcNMjYwMTAxMjAxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjgwMDljOTQxMzc0YWI4MDEwOTZiYWRjYTczZmFlNDg4NDU1M2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwavEO7aRr63hpCAxBoVSaANz8U6W ksbcWGTclwvxX1UAF7QmEQKtApGrjP+huzXeBkYAtzC5NrtS6+2rLvajYgqj26pM wwsv1PO7nkSb1Zwg76xZus59kEUcHPCD4ZyChV7VwZg+zD29eaQDQmdMS6Nt6qt9 OhpJCLAZrCXMQEoOXAj+5lRuyuqJSXzoNiJdUehkUY2NMRq88q5WMCtz3yT+a5vT OCmX45t00bKWTXDNfTPqaSxPk25Id/+BpyO3nPcTrVZCaIi/U1cyyQ6dw4zAIar3 gAnpJkR86L5wUyXoQ/blVjq/a46rxURjJ6nx6TJTQeNNNquHhss4m/uVfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH+ACclBN0q4AQlrrcpz+uSIRVPZMB8GA1UdIwQY MBaAFMfo2VnxyVZKM/KP5Eq2FLj2KwAbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveC1qWldmSEpWa296OG9fa1NyWVV1UFlyQUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNGUzMjctNzY1OC00NjNjLTg5OTAt YjFjOWI3ODlhYWE5LzEvZjRBSnlVRTNTcmdCQ1d1dHluUDY1SWhGVTlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8yNGUzMjctNzY1OC00NjNjLTg5OTAtYjFjOWI3ODlhYWE5 LzEveC1qWldmSEpWa296OG9fa1NyWVV1UFlyQUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJTwdMA0G CSqGSIb3DQEBCwUAA4IBAQCQX+5IJo0tGEmXNLod6MoJzS8V2jxdA5qPxieFeDAh IojmR4QjWpNV9OQ5yDUant03EwSFl2735Xt85oVXWHx/F3UmZWujAxh7ETroxQJa Dsod02R+5eUpIkW1ZfKeo8p2biWrRbGznCeSU++mx2TF9BkYwO/0W/RhVREoin5P KBmCiAuUrQKeonPnbkP8kq5/s4KEGXtTVQNUyjROqocci3hT2aUPXp/9ozzDOtR5 8Pec4zS9c+6ntzAkVJeMfEHaMERW726IHjH1nivgLluiMaqixYnuuqunUzYdwLQu Tl2P1sPbaRb7CbDrAUaoVRXOHgtja8mXF76A73RlQuS9 -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:56 2026 by rpki-client