This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/rx7GC_CHfYxl4Ofnp8MOvM23hM8.roa File: rx7GC_CHfYxl4Ofnp8MOvM23hM8.roa (raw, json) Hash identifier: 81lkujtMvuC5mIlhZHNqQoKSuJAiHrlt9j7cnoTOQdQ= Subject key identifier: AF:1E:C6:0B:F0:87:7D:8C:65:E0:E7:E7:A7:C3:0E:BC:CD:B7:84:CF Certificate issuer: /CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84 Certificate serial: 019B7C7FD90FEC958B7A97D948DB18462C48 Authority key identifier: 8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/rx7GC_CHfYxl4Ofnp8MOvM23hM8.roa Signing time: Fri 02 Jan 2026 02:18:31 +0000 ROA not before: Fri 02 Jan 2026 02:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203701 IP address blocks: 195.54.166.0/24 maxlen: 24 195.54.167.0/24 maxlen: 24 202.122.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:d9:0f:ec:95:8b:7a:97:d9:48:db:18:46:2c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84 Validity Not Before: Jan 2 02:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af1ec60bf0877d8c65e0e7e7a7c30ebccdb784cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a4:0b:6d:01:a0:d3:d5:a3:b9:00:2d:1b:f7: 1f:d4:32:4e:5e:fb:d8:92:2a:b2:48:96:a1:c8:f4: 50:ec:24:ea:03:d6:c9:a8:3b:b0:ed:a1:2e:e2:0e: ac:68:00:8e:f6:29:b3:a5:7c:9d:24:19:95:78:3e: eb:9d:dc:68:82:3d:f7:b7:5c:8a:50:ab:92:f4:08: 66:e0:69:1a:ba:2c:e2:35:67:81:b8:61:e3:ba:32: 56:16:ba:57:21:1e:b0:c7:78:de:3a:46:af:3f:57: 75:d6:e1:a0:5a:4d:ce:ba:07:c3:9a:23:c4:c8:08: dc:e7:fa:0a:04:4d:2f:31:86:97:1d:5b:1a:b4:5c: d5:38:c9:ec:fe:ed:34:0e:49:8a:54:93:59:17:e6: b2:a9:b9:00:52:d6:66:c8:ac:3f:0a:61:99:f9:d2: f1:30:9c:da:a1:e3:bf:ec:09:19:76:c8:95:9c:1a: d5:a7:20:3f:95:de:aa:75:f8:fe:3e:f3:81:9b:8f: 69:fb:fb:9e:b5:9e:d8:2e:74:e8:50:6a:9d:62:80: f6:de:7d:fb:b0:43:49:e8:8b:b0:07:b0:dc:73:d3: 35:35:7d:26:2f:af:28:43:44:ed:91:c4:08:c6:32: de:02:40:a0:8b:f7:b8:39:14:04:49:85:0e:81:fb: 95:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1E:C6:0B:F0:87:7D:8C:65:E0:E7:E7:A7:C3:0E:BC:CD:B7:84:CF X509v3 Authority Key Identifier: keyid:8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/rx7GC_CHfYxl4Ofnp8MOvM23hM8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.54.166.0/23 202.122.129.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:bb:00:cf:c8:55:46:8e:0c:86:de:d3:9c:42:37:8b:b9:55: 6d:53:80:20:7a:13:7d:60:b0:f2:88:e4:87:e1:8a:00:ea:09: e6:2b:cc:95:4d:7f:74:1c:04:d2:0c:14:01:64:8c:73:ab:9a: d4:58:35:81:19:d2:3d:22:09:22:e5:f2:ce:e2:f4:16:2a:73: 42:fc:8e:12:d8:7e:61:98:b6:0a:fb:d6:66:a5:13:ef:bf:9d: d4:d1:75:3f:9b:f1:9d:b9:bd:e6:d8:0e:5e:3b:73:f0:c2:bd: 29:39:59:70:d3:cb:5b:7d:7c:a8:c0:80:d4:4d:17:b1:47:fc: ad:b5:a1:74:1c:92:fe:4b:02:96:90:ac:c7:e7:54:1e:e6:5d: 58:6d:a8:3b:58:c6:17:2e:8b:e6:f7:4d:e2:99:0a:c3:ee:87: d3:d9:51:dd:0b:dd:1c:f7:ee:0e:f4:3a:20:63:13:ca:2c:8f: da:0e:f8:74:5a:18:38:57:ba:82:6d:27:97:a6:93:9e:64:54: 6b:9e:7f:b4:1b:22:90:eb:e4:55:2d:d4:82:cf:24:9d:3a:07: 9c:8e:d7:22:e9:69:dd:bf:2f:c4:e3:52:19:15:b4:0b:ac:54: 8d:98:86:13:02:db:1e:91:82:e8:eb:d7:12:a9:86:58:dc:24: ec:d2:87:59 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8f9kP7JWLepfZSNsYRixIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlZmM2MTBjZTdiY2Y0Nzk2NTFmZDk1MThjMjg4OTRlZDFl YjVhODQwHhcNMjYwMTAyMDIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjFlYzYwYmYwODc3ZDhjNjVlMGU3ZTdhN2MzMGViY2NkYjc4NGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6QLbQGg09WjuQAtG/cf1DJOXvvY kiqySJahyPRQ7CTqA9bJqDuw7aEu4g6saACO9imzpXydJBmVeD7rndxogj33t1yK UKuS9Ahm4GkauiziNWeBuGHjujJWFrpXIR6wx3jeOkavP1d11uGgWk3OugfDmiPE yAjc5/oKBE0vMYaXHVsatFzVOMns/u00DkmKVJNZF+ayqbkAUtZmyKw/CmGZ+dLx MJzaoeO/7AkZdsiVnBrVpyA/ld6qdfj+PvOBm49p+/uetZ7YLnToUGqdYoD23n37 sENJ6IuwB7Dcc9M1NX0mL68oQ0TtkcQIxjLeAkCgi/e4ORQESYUOgfuVawIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK8exgvwh32MZeDn56fDDrzNt4TPMB8GA1UdIwQY MBaAFI78YQznvPR5ZR/ZUYwoiU7R61qEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanZ4aERPZTg5SGxsSDlsUmpDaUpUdEhyV29RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yODk0ZDctMTRlZS00NmFiLTg4MmEt MjEyNzJiODc3MjhiLzEvcng3R0NfQ0hmWXhsNE9mbnA4TU92TTIzaE04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8yODk0ZDctMTRlZS00NmFiLTg4MmEtMjEyNzJiODc3Mjhi LzEvanZ4aERPZTg5SGxsSDlsUmpDaUpUdEhyV29RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwzamAwQA ynqBMA0GCSqGSIb3DQEBCwUAA4IBAQA7uwDPyFVGjgyG3tOcQjeLuVVtU4AgehN9 YLDyiOSH4YoA6gnmK8yVTX90HATSDBQBZIxzq5rUWDWBGdI9Igki5fLO4vQWKnNC /I4S2H5hmLYK+9ZmpRPvv53U0XU/m/Gdub3m2A5eO3Pwwr0pOVlw08tbfXyowIDU TRexR/yttaF0HJL+SwKWkKzH51Qe5l1Ybag7WMYXLovm903imQrD7ofT2VHdC90c 9+4O9DogYxPKLI/aDvh0Whg4V7qCbSeXppOeZFRrnn+0GyKQ6+RVLdSCzySdOgec jtci6Wndvy/E41IZFbQLrFSNmIYTAtsekYLo69cSqYZY3CTs0odZ -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:09 2026 by rpki-client