This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/7AN2y--6BWBDlHsQXRo-Ms_T9_E.roa File: 7AN2y--6BWBDlHsQXRo-Ms_T9_E.roa (raw, json) Hash identifier: 5G/O/em7a1btfI5sEj4BLe5JKY4pGeRIT+C2NR1XoD4= Subject key identifier: EC:03:76:CB:EF:BA:05:60:43:94:7B:10:5D:1A:3E:32:CF:D3:F7:F1 Certificate issuer: /CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d Certificate serial: 019B7E3830C2692BBCED01AF604D622824B2 Authority key identifier: B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/7AN2y--6BWBDlHsQXRo-Ms_T9_E.roa Signing time: Fri 02 Jan 2026 10:19:30 +0000 ROA not before: Fri 02 Jan 2026 10:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61213 IP address blocks: 94.140.17.0/24 maxlen: 24 185.206.4.0/22 maxlen: 23 2a02:d60::/32 maxlen: 32 2a02:d60::/48 maxlen: 48 2a02:d60:1::/48 maxlen: 48 2a02:d60:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:30:c2:69:2b:bc:ed:01:af:60:4d:62:28:24:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d Validity Not Before: Jan 2 10:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec0376cbefba056043947b105d1a3e32cfd3f7f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9a:d1:fb:70:ef:90:20:9e:36:08:49:8a:be: 30:07:66:76:64:70:05:f2:fd:ca:e3:67:bc:fd:cb: 30:81:34:12:13:3c:27:34:f9:c7:6e:f6:1a:21:ae: 1d:fc:e0:b1:6b:2b:0f:11:17:88:48:e7:80:34:8c: 70:d3:7f:51:bb:c8:7a:58:b7:04:55:0c:57:11:ef: dc:0c:8f:62:e3:4e:de:a5:4c:86:96:7c:59:4b:11: ee:2a:2a:f3:fc:0b:f9:f4:af:5e:47:e7:bf:dc:46: 1a:3d:d5:4e:ba:64:11:c2:2a:b7:5e:83:b6:20:7b: 9a:80:82:d7:53:6c:55:dc:e1:64:f7:1a:e9:f8:43: 23:5a:d0:de:e6:51:d5:5b:ef:9a:f1:e9:ae:08:55: 0f:be:4e:ea:fe:3c:13:85:c1:2d:9f:ca:96:22:80: 8e:b2:3b:e3:28:41:3d:29:95:4b:f3:89:b2:a2:63: b7:71:04:91:31:02:b0:78:59:0c:01:3f:c3:82:d8: b0:0c:03:1c:85:69:80:7c:10:f7:89:b4:18:8e:72: a1:5c:57:69:96:3b:40:72:7f:fb:2f:bf:08:e5:64: 28:04:ce:2b:02:8b:59:f7:a0:be:02:af:0c:c8:f5: 1f:ae:7f:c7:3c:61:45:d8:46:56:c8:a0:8a:26:a1: 65:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:03:76:CB:EF:BA:05:60:43:94:7B:10:5D:1A:3E:32:CF:D3:F7:F1 X509v3 Authority Key Identifier: keyid:B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/7AN2y--6BWBDlHsQXRo-Ms_T9_E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.140.17.0/24 185.206.4.0/22 IPv6: 2a02:d60::/32 Signature Algorithm: sha256WithRSAEncryption 25:bf:37:d4:20:3e:19:3e:a0:1e:e2:23:ad:ed:e5:db:4e:ef: e8:d2:08:48:7d:68:f0:56:6b:f3:38:27:99:a2:07:d4:0f:e6: 4d:41:6f:89:15:de:38:37:61:57:3d:6e:79:c3:2b:61:dd:65: bf:e2:30:8b:ef:8d:f5:00:16:60:00:8c:b7:26:12:b6:36:08: c9:a8:65:ca:59:f6:6a:64:ff:45:78:c4:b6:ae:ef:ef:2b:29: 4b:8f:29:dd:47:5d:9a:d3:81:91:f9:a8:00:a7:12:ff:f7:b4: d6:61:22:e9:cb:80:c2:72:bc:fb:b7:d8:13:8b:9a:03:98:2b: 6e:c9:0a:93:cb:53:47:69:98:3a:00:51:a5:15:ce:c2:3d:4c: e1:22:06:5f:59:04:81:74:a6:5b:4b:33:58:68:fe:0c:3f:5b: 02:99:40:d0:ab:f5:58:3a:bc:82:76:9c:3a:3c:a0:e7:20:28: 39:32:a1:6e:2c:93:d3:f4:ed:1f:3a:80:6d:d2:20:67:ae:80: 74:51:8c:32:80:d3:d0:24:db:80:90:0e:7f:d7:4e:34:6b:4a: f9:89:8c:7a:37:0e:68:d5:d5:93:38:b4:a9:22:11:7c:e6:5e: 4f:22:48:de:57:db:05:af:02:d7:5c:45:ac:88:15:d2:cb:92: 0b:3b:72:da -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+ODDCaSu87QGvYE1iKCSyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ODM4MGI0MWUzN2I1NzU3ZDNkNGUyZWVjZGYwNmQ5MzBh NzBiOWQwHhcNMjYwMTAyMTAxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzAzNzZjYmVmYmEwNTYwNDM5NDdiMTA1ZDFhM2UzMmNmZDNmN2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZrR+3DvkCCeNghJir4wB2Z2ZHAF 8v3K42e8/cswgTQSEzwnNPnHbvYaIa4d/OCxaysPEReISOeANIxw039Ru8h6WLcE VQxXEe/cDI9i407epUyGlnxZSxHuKirz/Av59K9eR+e/3EYaPdVOumQRwiq3XoO2 IHuagILXU2xV3OFk9xrp+EMjWtDe5lHVW++a8emuCFUPvk7q/jwThcEtn8qWIoCO sjvjKEE9KZVL84myomO3cQSRMQKweFkMAT/DgtiwDAMchWmAfBD3ibQYjnKhXFdp ljtAcn/7L78I5WQoBM4rAotZ96C+Aq8MyPUfrn/HPGFF2EZWyKCKJqFl+wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOwDdsvvugVgQ5R7EF0aPjLP0/fxMB8GA1UdIwQY MBaAFLeDgLQeN7V1fT1OLuzfBtkwpwudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDRPQXRCNDN0WFY5UFU0dTdOOEcyVENuQzUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yZTY2MTMtNDMzMi00YzE5LWFkZGYt ZGVkYWY3OTM1NmNlLzEvN0FOMnktLTZCV0JEbEhzUVhSby1Nc19UOV9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8yZTY2MTMtNDMzMi00YzE5LWFkZGYtZGVkYWY3OTM1NmNl LzEvdDRPQXRCNDN0WFY5UFU0dTdOOEcyVENuQzUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAXowRAwQC uc4EMA0EAgACMAcDBQAqAg1gMA0GCSqGSIb3DQEBCwUAA4IBAQAlvzfUID4ZPqAe 4iOt7eXbTu/o0ghIfWjwVmvzOCeZogfUD+ZNQW+JFd44N2FXPW55wyth3WW/4jCL 7431ABZgAIy3JhK2NgjJqGXKWfZqZP9FeMS2ru/vKylLjyndR12a04GR+agApxL/ 97TWYSLpy4DCcrz7t9gTi5oDmCtuyQqTy1NHaZg6AFGlFc7CPUzhIgZfWQSBdKZb SzNYaP4MP1sCmUDQq/VYOryCdpw6PKDnICg5MqFuLJPT9O0fOoBt0iBnroB0UYwy gNPQJNuAkA5/1040a0r5iYx6Nw5o1dWTOLSpIhF85l5PIkjeV9sFrwLXXEWsiBXS y5ILO3La -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:58 2026 by rpki-client