This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/t7fjwmK42FWZE7y1k_7IUkx6rYI.roa File: t7fjwmK42FWZE7y1k_7IUkx6rYI.roa (raw, json) Hash identifier: An31yl38X+FtV1bD85RaGjnhQAZUGGTmiLxRfjuQc/E= Subject key identifier: B7:B7:E3:C2:62:B8:D8:55:99:13:BC:B5:93:FE:C8:52:4C:7A:AD:82 Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84EB619259BF3117EC748199766A2A Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/t7fjwmK42FWZE7y1k_7IUkx6rYI.roa Signing time: Fri 02 Jan 2026 16:22:55 +0000 ROA not before: Fri 02 Jan 2026 16:22:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207107 IP address blocks: 92.52.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:eb:61:92:59:bf:31:17:ec:74:81:99:76:6a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7b7e3c262b8d8559913bcb593fec8524c7aad82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c8:95:75:69:b8:c6:ff:f8:91:bd:93:d7:7d: b4:a1:cc:95:17:5a:86:eb:bf:71:f3:33:26:53:29: a0:4b:64:19:39:41:3e:0c:a1:19:e5:ac:e6:bf:03: 0a:51:3a:50:7c:ce:26:fa:c0:af:55:85:76:19:fd: 8e:29:a0:ac:61:12:99:bb:29:8f:96:08:9a:6c:5b: c3:60:15:4d:0b:35:9a:88:44:17:2c:f1:c9:d2:3d: 6f:da:db:64:d6:8f:73:d9:2c:3c:f0:4c:90:81:94: 12:c6:12:0a:76:a1:d9:82:3a:ad:73:66:65:ca:5e: 3c:f0:67:bc:ec:63:3b:83:bb:f0:98:16:93:95:fa: 90:a5:09:c4:42:a6:c1:87:11:ae:45:10:ec:18:1a: fa:28:0a:f6:3b:ea:3b:3b:44:70:07:eb:d2:e8:27: 00:e7:88:75:c2:9a:5e:b0:5f:1e:db:8f:77:60:e7: 55:a4:ad:59:08:3d:42:c9:29:9d:1b:8a:cd:5a:e6: ed:44:f0:69:49:09:8a:0c:37:28:6e:27:83:76:e9: b5:5a:75:8f:8b:92:a4:fa:08:91:6f:df:0b:e2:3b: 61:6a:49:2d:a1:26:02:9a:2d:64:2c:c9:41:d3:80: 80:60:dc:a7:b5:72:a8:fc:3a:14:41:2e:83:1c:84: b4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B7:E3:C2:62:B8:D8:55:99:13:BC:B5:93:FE:C8:52:4C:7A:AD:82 X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/t7fjwmK42FWZE7y1k_7IUkx6rYI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.52.222.0/24 Signature Algorithm: sha256WithRSAEncryption 15:d1:0f:d9:c2:e3:59:b8:91:61:d6:76:fe:eb:9e:90:08:73: 53:7a:e5:85:78:ca:18:07:78:be:94:d4:68:1b:ae:6b:b1:8e: f4:6e:b9:2f:d3:92:46:07:ab:5e:80:d3:d1:ca:8f:91:a0:d5: 6b:0d:6f:c6:64:4c:ea:99:87:a0:9e:2a:0a:88:9c:8e:73:7a: ab:81:ab:15:13:df:6b:1f:87:41:27:c8:00:33:e8:8b:da:e2: cb:c8:9f:c0:8a:2f:78:e1:fd:df:e6:fb:77:e6:ec:10:52:0b: 51:45:49:08:54:c3:31:25:b1:e4:19:4e:35:fa:7c:a1:a6:07: 01:aa:43:ec:8f:6b:e1:46:96:e5:75:cf:e1:66:d8:b2:3a:17: 29:cb:34:1a:21:64:57:10:63:32:dc:7d:49:66:ba:0d:c3:57: dd:d4:68:52:3a:c3:12:ea:77:17:84:5e:12:83:ac:30:23:35: b2:1c:46:23:a5:49:db:d8:8c:64:43:58:20:4e:be:a5:9b:8e: 21:a5:a5:d7:17:9a:b7:1b:08:f6:7c:92:6d:6e:a6:77:66:a5: 92:85:24:d1:25:d5:11:16:7c:03:c5:eb:a0:d5:72:08:55:c3: f0:18:22:e2:a2:c7:cc:e3:e7:c6:6e:23:0a:18:af:a2:dd:9b: 80:7b:c9:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hOthklm/MRfsdIGZdmoqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2I3ZTNjMjYyYjhkODU1OTkxM2JjYjU5M2ZlYzg1MjRjN2FhZDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMiVdWm4xv/4kb2T1320ocyVF1qG 679x8zMmUymgS2QZOUE+DKEZ5azmvwMKUTpQfM4m+sCvVYV2Gf2OKaCsYRKZuymP lgiabFvDYBVNCzWaiEQXLPHJ0j1v2ttk1o9z2Sw88EyQgZQSxhIKdqHZgjqtc2Zl yl488Ge87GM7g7vwmBaTlfqQpQnEQqbBhxGuRRDsGBr6KAr2O+o7O0RwB+vS6CcA 54h1wppesF8e2493YOdVpK1ZCD1CySmdG4rNWubtRPBpSQmKDDcobieDdum1WnWP i5Kk+giRb98L4jthakktoSYCmi1kLMlB04CAYNyntXKo/DoUQS6DHIS02QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLe348JiuNhVmRO8tZP+yFJMeq2CMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvdDdmandtSzQyRldaRTd5MWtfN0lVa3g2cllJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXDTeMA0G CSqGSIb3DQEBCwUAA4IBAQAV0Q/ZwuNZuJFh1nb+656QCHNTeuWFeMoYB3i+lNRo G65rsY70brkv05JGB6tegNPRyo+RoNVrDW/GZEzqmYegnioKiJyOc3qrgasVE99r H4dBJ8gAM+iL2uLLyJ/Aii944f3f5vt35uwQUgtRRUkIVMMxJbHkGU41+nyhpgcB qkPsj2vhRpbldc/hZtiyOhcpyzQaIWRXEGMy3H1JZroNw1fd1GhSOsMS6ncXhF4S g6wwIzWyHEYjpUnb2IxkQ1ggTr6lm44hpaXXF5q3Gwj2fJJtbqZ3ZqWShSTRJdUR FnwDxeug1XIIVcPwGCLiosfM4+fGbiMKGK+i3ZuAe8k1 -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:39 2026 by rpki-client