This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/m7QNAE122Qw_e1vUF3Iyvg8BQS4.roa File: m7QNAE122Qw_e1vUF3Iyvg8BQS4.roa (raw, json) Hash identifier: RxqoOg9Ver8Jsfn6rkF0Jn88P/Wd6SYCEwBwCZH02WE= Subject key identifier: 9B:B4:0D:00:4D:76:D9:0C:3F:7B:5B:D4:17:72:32:BE:0F:01:41:2E Certificate issuer: /CN=795b319e7b5b00401df9805b095ebf5ae2ce959c Certificate serial: 019B7F84F32A4836EC58FB1EFAEAE03D2B35 Authority key identifier: 79:5B:31:9E:7B:5B:00:40:1D:F9:80:5B:09:5E:BF:5A:E2:CE:95:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eVsxnntbAEAd-YBbCV6_WuLOlZw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/m7QNAE122Qw_e1vUF3Iyvg8BQS4.roa Signing time: Fri 02 Jan 2026 16:22:57 +0000 ROA not before: Fri 02 Jan 2026 16:22:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203605 IP address blocks: 185.198.192.0/23 maxlen: 24 185.198.194.0/23 maxlen: 24 2a0a:8e40::/29 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.mft rsync://rpki.ripe.net/repository/DEFAULT/eVsxnntbAEAd-YBbCV6_WuLOlZw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:f3:2a:48:36:ec:58:fb:1e:fa:ea:e0:3d:2b:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=795b319e7b5b00401df9805b095ebf5ae2ce959c Validity Not Before: Jan 2 16:22:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bb40d004d76d90c3f7b5bd4177232be0f01412e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:49:9a:d5:f1:7d:11:2c:89:84:9b:0f:b6:cb: fd:1d:a1:c6:db:23:04:a4:03:be:79:49:99:c0:e0: 54:10:89:d1:6b:33:1c:5d:c7:51:92:26:77:6a:49: 45:0e:9c:38:0b:66:42:78:11:70:78:16:fb:f3:0f: e7:65:56:f1:aa:ae:e4:f3:32:40:c7:7b:b1:25:33: f7:d0:a3:aa:1f:f6:b4:6a:f1:eb:03:ff:62:bf:e5: 75:80:de:0f:2c:f8:25:67:46:bc:7b:ae:4c:70:12: dd:79:fa:79:c4:bf:5b:be:9e:91:f7:b7:34:ff:87: 91:1d:4a:45:2e:43:42:d1:61:c4:31:50:c5:e4:3a: 2d:fa:f3:ae:6b:f5:4e:0e:d6:ad:94:7a:55:d5:7d: 6e:d0:40:46:17:72:6c:3d:29:ec:3a:7f:db:6c:92: 74:ff:03:97:da:da:64:16:27:d7:82:42:06:f1:24: 76:90:8d:c0:21:6d:55:d0:a8:62:83:52:3f:4c:22: 1e:01:c1:dd:c4:55:00:cf:c7:4d:bc:92:0f:56:98: d6:35:a6:63:df:0b:57:57:f3:70:ab:c5:52:51:8f: e3:91:94:0d:61:79:d0:f1:3c:b5:4d:68:f5:cf:98: 18:2a:91:91:56:50:fd:dd:89:0f:fe:59:87:59:d6: c0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B4:0D:00:4D:76:D9:0C:3F:7B:5B:D4:17:72:32:BE:0F:01:41:2E X509v3 Authority Key Identifier: keyid:79:5B:31:9E:7B:5B:00:40:1D:F9:80:5B:09:5E:BF:5A:E2:CE:95:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVsxnntbAEAd-YBbCV6_WuLOlZw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/m7QNAE122Qw_e1vUF3Iyvg8BQS4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.198.192.0/22 IPv6: 2a0a:8e40::/29 Signature Algorithm: sha256WithRSAEncryption 2b:cb:b1:d9:3f:aa:c2:38:8d:93:dc:b7:91:0c:13:6a:7b:0c: b4:b4:52:67:e6:b0:c8:d2:4e:ef:34:ea:0f:af:4a:84:eb:df: c4:12:52:56:63:ed:89:fd:9a:50:7d:a5:6e:44:e1:99:e8:7b: 72:57:7c:db:2f:93:66:91:fe:cc:f1:70:06:d7:95:ca:79:78: 11:28:31:c7:94:6d:48:e4:2b:04:f5:a8:b4:7d:1b:f1:ab:de: 7e:42:79:6d:8b:72:67:6e:52:84:ac:21:2d:d0:ad:16:3f:c8: 4b:76:d0:ed:63:fa:c1:78:f6:84:4c:a5:0b:4e:b9:12:83:2f: c0:83:7f:62:29:76:a3:85:3a:3e:11:01:5a:af:4d:f5:11:dd: 4c:87:2d:95:ce:e1:86:74:53:8a:51:e7:da:0c:dd:db:a8:f1: 5c:57:8d:71:db:56:c6:f1:90:02:3d:4e:15:36:cb:8f:e6:df: 2d:69:e0:c0:b0:46:10:67:e7:28:be:f4:02:19:42:cc:49:0d: c1:44:62:88:42:d6:9b:eb:5e:d7:7c:35:bd:fd:a6:e9:de:d8: e9:05:83:99:b7:c5:51:ab:f5:cf:09:cc:7f:6e:0b:32:4d:77: ad:7a:90:33:35:91:b4:d6:fe:25:72:03:ef:8f:7e:35:63:c5: b6:a5:d8:12 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/hPMqSDbsWPse+urgPSs1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NWIzMTllN2I1YjAwNDAxZGY5ODA1YjA5NWViZjVhZTJj ZTk1OWMwHhcNMjYwMTAyMTYyMjU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmI0MGQwMDRkNzZkOTBjM2Y3YjViZDQxNzcyMzJiZTBmMDE0MTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Uma1fF9ESyJhJsPtsv9HaHG2yME pAO+eUmZwOBUEInRazMcXcdRkiZ3aklFDpw4C2ZCeBFweBb78w/nZVbxqq7k8zJA x3uxJTP30KOqH/a0avHrA/9iv+V1gN4PLPglZ0a8e65McBLdefp5xL9bvp6R97c0 /4eRHUpFLkNC0WHEMVDF5Dot+vOua/VODtatlHpV1X1u0EBGF3JsPSnsOn/bbJJ0 /wOX2tpkFifXgkIG8SR2kI3AIW1V0Khig1I/TCIeAcHdxFUAz8dNvJIPVpjWNaZj 3wtXV/Nwq8VSUY/jkZQNYXnQ8Ty1TWj1z5gYKpGRVlD93YkP/lmHWdbAlwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJu0DQBNdtkMP3tb1BdyMr4PAUEuMB8GA1UdIwQY MBaAFHlbMZ57WwBAHfmAWwlev1rizpWcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVZzeG5udGJBRUFkLVlCYkNWNl9XdUxPbFp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC84MWE3OWMtYjkwZi00MDUwLWIyMWMt NzhkMTY5ZTNkZjFmLzEvbTdRTkFFMTIyUXdfZTF2VUYzSXl2ZzhCUVM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC84MWE3OWMtYjkwZi00MDUwLWIyMWMtNzhkMTY5ZTNkZjFm LzEvZVZzeG5udGJBRUFkLVlCYkNWNl9XdUxPbFp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCucbAMA0E AgACMAcDBQMqCo5AMA0GCSqGSIb3DQEBCwUAA4IBAQAry7HZP6rCOI2T3LeRDBNq ewy0tFJn5rDI0k7vNOoPr0qE69/EElJWY+2J/ZpQfaVuROGZ6HtyV3zbL5Nmkf7M 8XAG15XKeXgRKDHHlG1I5CsE9ai0fRvxq95+Qnlti3JnblKErCEt0K0WP8hLdtDt Y/rBePaETKULTrkSgy/Ag39iKXajhTo+EQFar031Ed1Mhy2VzuGGdFOKUefaDN3b qPFcV41x21bG8ZACPU4VNsuP5t8taeDAsEYQZ+covvQCGULMSQ3BRGKIQtab617X fDW9/abp3tjpBYOZt8VRq/XPCcx/bgsyTXetepAzNZG01v4lcgPvj341Y8W2pdgS -----END CERTIFICATE-----Generated at Tue Feb 10 06:08:09 2026 by rpki-client