This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/s7-y41zPRmkHcrILtIvpGUfe7SI.roa File: s7-y41zPRmkHcrILtIvpGUfe7SI.roa (raw, json) Hash identifier: k/m4SqHR3oYDvv5JTtyJN297BXfGfqcf9sOF+T2TJHs= Subject key identifier: B3:BF:B2:E3:5C:CF:46:69:07:72:B2:0B:B4:8B:E9:19:47:DE:ED:22 Certificate issuer: /CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69 Certificate serial: 019B78A2320F2BB336B95265FF6B7A622DC7 Authority key identifier: EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/s7-y41zPRmkHcrILtIvpGUfe7SI.roa Signing time: Thu 01 Jan 2026 08:17:34 +0000 ROA not before: Thu 01 Jan 2026 08:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60195 IP address blocks: 91.204.28.0/22 maxlen: 22 91.238.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:32:0f:2b:b3:36:b9:52:65:ff:6b:7a:62:2d:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69 Validity Not Before: Jan 1 08:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3bfb2e35ccf46690772b20bb48be91947deed22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:89:74:19:ec:67:d1:a2:9e:a5:5d:31:12:2b: 2d:6c:88:3a:a5:17:7b:61:0a:4f:05:f5:21:0c:db: fc:70:d3:5d:6e:af:6a:7a:40:ed:92:83:50:6c:b6: b7:f4:98:17:ff:67:ef:03:59:99:c1:49:49:e7:a6: 59:26:a9:0d:09:8e:8c:5f:38:11:6f:ab:e6:c1:5f: 84:ec:5d:0e:4e:b0:22:64:34:80:b3:5b:73:07:06: f9:14:98:72:32:38:43:2d:5e:a7:f5:9e:c3:fb:4b: 5a:b4:a3:1d:fa:7e:96:6f:78:02:6d:71:76:e3:30: 2a:43:49:8c:c8:52:15:ad:4d:af:3d:41:d6:9c:91: f6:63:2a:ea:8d:c1:0f:87:6b:1b:d6:93:99:74:1b: 1a:99:7a:c8:13:b9:12:f3:b4:ed:4f:2b:97:83:9c: cf:9b:d7:c0:9d:7e:79:16:bd:79:85:f6:4c:23:5d: 57:d4:a8:d1:67:79:e4:bb:87:10:3b:b2:ea:e6:3d: 45:d5:f9:2c:bf:21:54:79:3a:4c:2d:9f:f8:fd:12: 6c:4c:11:66:de:2f:33:1f:3a:52:8c:b6:78:7c:e1: 73:60:f2:20:20:fa:fa:66:00:be:ee:24:2e:44:9d: 3e:9f:1b:4a:9f:25:18:4b:c2:f2:f9:31:eb:0f:0d: 1c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:BF:B2:E3:5C:CF:46:69:07:72:B2:0B:B4:8B:E9:19:47:DE:ED:22 X509v3 Authority Key Identifier: keyid:EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/s7-y41zPRmkHcrILtIvpGUfe7SI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.204.28.0/22 91.238.166.0/23 Signature Algorithm: sha256WithRSAEncryption 40:e2:78:6c:35:09:44:13:18:e5:91:d0:f4:73:90:85:74:79: a2:73:a4:13:10:4d:15:f3:b8:be:93:78:fa:dd:d6:49:67:3b: 50:86:2c:6f:89:2b:be:fd:c4:b3:90:da:62:a2:e9:b0:32:93: a2:44:f6:b1:53:ae:e8:90:65:15:b0:38:b5:07:6a:00:bc:e6: 1f:e2:4d:63:a3:a3:18:5f:7c:91:c5:2f:63:83:ae:5c:72:cb: a4:9a:f1:3d:6f:b6:c6:2b:af:e5:9e:3d:13:2a:4c:6c:17:fa: a6:e7:87:48:41:f4:4b:67:5f:a9:04:b2:c4:63:e5:d8:fe:37: be:aa:01:3a:4f:c3:db:b0:5c:5a:af:85:15:6d:da:9d:c0:fe: 4a:93:ed:b7:93:b1:d7:6f:8e:29:a5:c9:fc:cb:ef:5a:97:cd: f7:fe:04:13:9e:1e:99:ed:a1:e5:a7:11:70:61:e1:d9:d5:94: aa:42:e6:84:7e:3c:4d:99:85:64:1c:f4:fb:49:95:08:47:56: 83:88:cc:b2:fb:1c:68:c9:aa:06:0c:65:33:11:82:5e:e2:a7: 9f:cf:42:63:62:68:15:a3:0a:7e:04:e5:8a:0c:3d:78:d1:cb: 6c:e9:e4:dd:75:ab:e1:94:54:19:c3:99:2d:15:c8:42:c0:ec: c4:1a:3a:4b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ojIPK7M2uVJl/2t6Yi3HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMmE4ZWMwM2VlYzNiY2ZjMzNjZjkwZjFmNGY4ZTdlOTAy MzRlNjkwHhcNMjYwMTAxMDgxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2JmYjJlMzVjY2Y0NjY5MDc3MmIyMGJiNDhiZTkxOTQ3ZGVlZDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxol0Gexn0aKepV0xEistbIg6pRd7 YQpPBfUhDNv8cNNdbq9qekDtkoNQbLa39JgX/2fvA1mZwUlJ56ZZJqkNCY6MXzgR b6vmwV+E7F0OTrAiZDSAs1tzBwb5FJhyMjhDLV6n9Z7D+0tatKMd+n6Wb3gCbXF2 4zAqQ0mMyFIVrU2vPUHWnJH2YyrqjcEPh2sb1pOZdBsamXrIE7kS87TtTyuXg5zP m9fAnX55Fr15hfZMI11X1KjRZ3nku4cQO7Lq5j1F1fksvyFUeTpMLZ/4/RJsTBFm 3i8zHzpSjLZ4fOFzYPIgIPr6ZgC+7iQuRJ0+nxtKnyUYS8Ly+THrDw0crQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLO/suNcz0ZpB3KyC7SL6RlH3u0iMB8GA1UdIwQY MBaAFO8qjsA+7DvPwzz5Dx9Pjn6QI05pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3lxT3dEN3NPOF9EUFBrUEgwLU9mcEFqVG1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS83ZDgzYjktMTk0Ni00YjQ3LTk5ZGUt MDVjMDY3OTZlOTM4LzEvczcteTQxelBSbWtIY3JJTHRJdnBHVWZlN1NJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS83ZDgzYjktMTk0Ni00YjQ3LTk5ZGUtMDVjMDY3OTZlOTM4 LzEvN3lxT3dEN3NPOF9EUFBrUEgwLU9mcEFqVG1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8wcAwQB W+6mMA0GCSqGSIb3DQEBCwUAA4IBAQBA4nhsNQlEExjlkdD0c5CFdHmic6QTEE0V 87i+k3j63dZJZztQhixviSu+/cSzkNpioumwMpOiRPaxU67okGUVsDi1B2oAvOYf 4k1jo6MYX3yRxS9jg65ccsukmvE9b7bGK6/lnj0TKkxsF/qm54dIQfRLZ1+pBLLE Y+XY/je+qgE6T8PbsFxar4UVbdqdwP5Kk+23k7HXb44ppcn8y+9al833/gQTnh6Z 7aHlpxFwYeHZ1ZSqQuaEfjxNmYVkHPT7SZUIR1aDiMyy+xxoyaoGDGUzEYJe4qef z0JjYmgVowp+BOWKDD140cts6eTddavhlFQZw5ktFchCwOzEGjpL -----END CERTIFICATE-----Generated at Tue Feb 10 02:48:06 2026 by rpki-client