This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/7Ptpz77GbsWneLzHS_xYiCRmfRM.roa File: 7Ptpz77GbsWneLzHS_xYiCRmfRM.roa (raw, json) Hash identifier: giptJ0k6ABexmkT87uxsZbt4+g/9rtgSll7SmUYIWGw= Subject key identifier: EC:FB:69:CF:BE:C6:6E:C5:A7:78:BC:C7:4B:FC:58:88:24:66:7D:13 Certificate issuer: /CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f Certificate serial: 019B7E37BCC99B673A0CCCACA7704CD3A40C Authority key identifier: 48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/7Ptpz77GbsWneLzHS_xYiCRmfRM.roa Signing time: Fri 02 Jan 2026 10:19:00 +0000 ROA not before: Fri 02 Jan 2026 10:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211850 IP address blocks: 185.235.207.0/24 maxlen: 24 2a10:86c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:bc:c9:9b:67:3a:0c:cc:ac:a7:70:4c:d3:a4:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f Validity Not Before: Jan 2 10:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ecfb69cfbec66ec5a778bcc74bfc588824667d13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:47:3f:1d:df:1e:95:2b:b9:04:4c:c7:41:0d: b0:15:d3:23:e6:21:a5:0f:51:53:fc:62:3c:cd:a2: 9f:a6:df:30:09:c6:9a:75:06:72:8c:eb:26:64:4a: 88:61:4d:4a:fc:52:12:08:cc:ab:1d:ce:21:24:00: ce:b1:6c:79:36:77:4d:8c:5a:3b:12:32:3a:b0:26: d4:45:20:1a:54:9e:b7:c9:27:45:e9:88:e5:48:6b: 99:5a:1c:d0:5e:ac:7e:4b:df:35:a7:af:56:79:e8: 65:d3:52:30:39:02:e1:7f:b5:b3:af:91:f6:04:38: 8b:f9:71:07:e1:77:47:1f:56:cf:9c:45:e1:d4:f8: 7a:0f:c7:ad:fa:dc:55:00:89:8a:76:38:9e:0e:89: be:ab:12:2e:5b:22:da:4f:9b:dc:f2:06:de:ed:f7: 40:84:a8:44:99:ee:49:aa:76:c5:c3:f3:80:1e:d5: d5:62:84:0b:b0:7e:2e:df:7b:ac:30:fa:be:d2:23: ff:cd:fc:a9:81:50:22:cc:d5:a1:18:d1:bb:99:76: 62:53:eb:3d:89:d0:97:9a:1c:6c:c6:48:9e:57:0f: 65:dc:aa:f8:bb:f5:8c:cf:b8:49:0e:c9:f5:65:da: 38:2d:8f:3d:46:00:43:5e:3d:4c:f3:dd:cb:67:91: 82:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FB:69:CF:BE:C6:6E:C5:A7:78:BC:C7:4B:FC:58:88:24:66:7D:13 X509v3 Authority Key Identifier: keyid:48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/7Ptpz77GbsWneLzHS_xYiCRmfRM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.235.207.0/24 IPv6: 2a10:86c0::/29 Signature Algorithm: sha256WithRSAEncryption 6d:81:4a:88:ea:5c:10:75:4e:59:8b:c2:26:11:cb:5c:77:c7: ec:f5:b8:9c:08:dd:ff:dd:86:3d:e1:2a:6f:86:07:8d:c3:11: 73:e3:ff:18:0d:e2:6b:1d:6f:73:09:45:8c:00:96:72:bd:4c: 8e:c2:2e:35:d1:bf:df:5d:b8:74:23:a4:94:3c:08:fa:bb:d7: 5f:59:c2:8c:f4:d0:1a:31:61:6f:91:9d:d5:57:cb:50:3f:1a: dc:d4:f9:0f:f3:f4:08:69:42:c9:f4:dc:9e:94:67:25:1d:e2: f7:bf:49:d1:4c:4f:be:6d:ca:98:b1:40:5b:39:45:a6:9e:0b: d9:82:e2:be:7d:e1:ca:25:23:99:2c:03:84:9a:14:23:e0:bf: 17:93:cc:5a:a4:b7:97:30:87:5d:ec:91:5d:ba:d9:64:df:0c: 9f:c9:fb:c0:b2:60:83:6d:6d:22:c6:b9:51:78:3b:d5:10:1c: 6e:f0:e5:af:98:40:97:86:50:20:54:9a:fa:4f:cb:a4:17:26: 70:b5:59:90:50:34:56:cd:ae:d9:16:29:1b:21:3c:91:d1:b7: 8a:11:8f:3b:d4:c1:20:47:1e:8a:49:1b:a9:39:b4:83:a2:8a: 4f:d5:c5:9e:bf:10:2b:30:d9:b9:32:b6:af:70:97:90:2c:ab: 99:e9:42:c8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+N7zJm2c6DMysp3BM06QMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDZiOWU2MmYxYjAwZjJjZjk4ZDBkY2M1ODMyOTJhZmFj YjUyMmYwHhcNMjYwMTAyMTAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2ZiNjljZmJlYzY2ZWM1YTc3OGJjYzc0YmZjNTg4ODI0NjY3ZDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkc/Hd8elSu5BEzHQQ2wFdMj5iGl D1FT/GI8zaKfpt8wCcaadQZyjOsmZEqIYU1K/FISCMyrHc4hJADOsWx5NndNjFo7 EjI6sCbURSAaVJ63ySdF6YjlSGuZWhzQXqx+S981p69Weehl01IwOQLhf7Wzr5H2 BDiL+XEH4XdHH1bPnEXh1Ph6D8et+txVAImKdjieDom+qxIuWyLaT5vc8gbe7fdA hKhEme5JqnbFw/OAHtXVYoQLsH4u33usMPq+0iP/zfypgVAizNWhGNG7mXZiU+s9 idCXmhxsxkieVw9l3Kr4u/WMz7hJDsn1Zdo4LY89RgBDXj1M893LZ5GCtwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOz7ac++xm7Fp3i8x0v8WIgkZn0TMB8GA1UdIwQY MBaAFEgGueYvGwDyz5jQ3MWDKSr6y1IvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FhNTVpOGJBUExQbU5EY3hZTXBLdnJMVWk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iYWE0YmMtOTI0ZS00MzY0LTlmMTMt YTVjOTZlMjExNjA1LzEvN1B0cHo3N0dic1duZUx6SFNfeFlpQ1JtZlJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9iYWE0YmMtOTI0ZS00MzY0LTlmMTMtYTVjOTZlMjExNjA1 LzEvU0FhNTVpOGJBUExQbU5EY3hZTXBLdnJMVWk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuevPMA0E AgACMAcDBQMqEIbAMA0GCSqGSIb3DQEBCwUAA4IBAQBtgUqI6lwQdU5Zi8ImEctc d8fs9bicCN3/3YY94SpvhgeNwxFz4/8YDeJrHW9zCUWMAJZyvUyOwi410b/fXbh0 I6SUPAj6u9dfWcKM9NAaMWFvkZ3VV8tQPxrc1PkP8/QIaULJ9NyelGclHeL3v0nR TE++bcqYsUBbOUWmngvZguK+feHKJSOZLAOEmhQj4L8Xk8xapLeXMIdd7JFdutlk 3wyfyfvAsmCDbW0ixrlReDvVEBxu8OWvmECXhlAgVJr6T8ukFyZwtVmQUDRWza7Z FikbITyR0beKEY871MEgRx6KSRupObSDoopP1cWevxArMNm5MravcJeQLKuZ6ULI -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:32 2026 by rpki-client