This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7O0-WQodmjjGVUBOxW6Jvd4Ww7I.roa File: 7O0-WQodmjjGVUBOxW6Jvd4Ww7I.roa (raw, json) Hash identifier: DsSc/REu21MuM1a9JQHPgAHIAE36g5CaUqClp3hJ+dc= Subject key identifier: EC:ED:3E:59:0A:1D:9A:38:C6:55:40:4E:C5:6E:89:BD:DE:16:C3:B2 Certificate issuer: /CN=efe01974743a3b3a28f7a64e2d871bf1e5e5f6e5 Certificate serial: 019B7758E4732C56D99A301250B5EEA9B8C0 Authority key identifier: EF:E0:19:74:74:3A:3B:3A:28:F7:A6:4E:2D:87:1B:F1:E5:E5:F6:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7O0-WQodmjjGVUBOxW6Jvd4Ww7I.roa Signing time: Thu 01 Jan 2026 02:17:52 +0000 ROA not before: Thu 01 Jan 2026 02:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13190 IP address blocks: 185.117.164.0/22 maxlen: 22 2001:678:bbc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.mft rsync://rpki.ripe.net/repository/DEFAULT/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e4:73:2c:56:d9:9a:30:12:50:b5:ee:a9:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efe01974743a3b3a28f7a64e2d871bf1e5e5f6e5 Validity Not Before: Jan 1 02:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eced3e590a1d9a38c655404ec56e89bdde16c3b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:26:60:f1:f3:82:19:d0:b6:4b:f9:9d:ee:3d: d5:7e:63:0a:2e:46:0a:1c:7a:cc:03:61:17:7c:53: a3:98:a3:11:5a:b8:bc:7d:2a:8d:40:59:be:18:5f: e0:48:3a:bc:83:80:b6:19:18:f3:32:3f:68:ab:7b: b8:5d:63:6b:98:68:83:32:a8:7e:dc:9e:9f:52:7c: 09:2b:57:5e:b5:5d:3e:4a:0a:6a:84:cb:5b:8b:51: d5:7d:34:92:ab:f2:52:06:57:b1:98:0d:ff:65:b3: b1:71:31:12:3b:8c:fe:e6:f9:80:3d:96:e3:69:f5: af:86:5d:80:2e:c4:1a:bb:6b:e6:aa:4f:93:82:79: 99:4a:cb:e3:fa:ff:7c:a9:be:61:e3:ba:6e:5a:87: 19:cd:dc:f4:7e:28:4e:0b:1b:cd:cb:fb:46:e5:00: 5e:0b:58:fc:e8:78:71:12:10:25:cb:c3:6e:63:02: bb:d3:47:de:f1:7d:cb:c5:70:27:9c:4f:53:b4:4f: a7:d6:d5:04:39:89:c9:b2:47:94:81:da:4f:7a:a8: dd:24:75:f6:3c:d0:bb:a4:ae:ec:3f:2d:27:8e:04: 76:71:e9:0b:cd:7f:dc:4f:9a:0b:16:5a:70:59:0f: 05:d6:22:5f:e0:61:e1:f2:bd:e4:7d:ca:0f:77:15: 4a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:ED:3E:59:0A:1D:9A:38:C6:55:40:4E:C5:6E:89:BD:DE:16:C3:B2 X509v3 Authority Key Identifier: keyid:EF:E0:19:74:74:3A:3B:3A:28:F7:A6:4E:2D:87:1B:F1:E5:E5:F6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7O0-WQodmjjGVUBOxW6Jvd4Ww7I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.164.0/22 IPv6: 2001:678:bbc::/48 Signature Algorithm: sha256WithRSAEncryption 55:ff:85:27:91:07:36:f0:0b:87:80:0f:05:f3:60:55:f6:8f: 23:66:fd:3b:c9:13:0e:21:e4:8c:29:ee:95:0a:c1:9e:2f:9c: ff:93:9c:b6:fe:c7:72:5b:d9:cd:12:fe:01:4b:fa:91:dd:30: 36:e1:af:78:fe:5f:73:6b:5a:03:06:f9:e4:4d:8c:5d:01:0a: 5f:ed:14:55:d6:6f:97:c4:39:d5:a1:da:48:4e:2f:23:ab:90: 36:94:54:8c:10:8b:c4:5f:f9:05:24:2d:8d:8f:c2:61:f7:9f: de:92:0a:bc:7a:df:f4:53:d0:f7:4f:ee:44:40:f7:66:6c:fc: 32:6f:da:c1:4b:21:63:6c:56:03:c5:0e:1f:22:3b:ea:95:19: d3:cf:b0:58:1c:5a:fd:27:0c:0c:cb:74:8f:1a:f8:7a:f4:23: 80:22:8d:b0:c8:b5:ec:8a:60:bf:38:fb:05:7e:34:98:6b:f4: 14:91:26:ed:8d:a3:5e:a7:30:0d:b8:80:df:4f:d2:94:14:dc: b7:1a:c1:e9:88:78:55:cf:be:fd:f5:56:61:47:f1:e2:57:b2: 88:d6:37:cb:d9:ef:3f:d7:f3:cf:a3:8e:4c:ea:90:80:8e:c8: a7:de:dd:9a:5a:e6:7c:d2:7b:6d:4d:bc:5a:83:5d:02:d4:74: a2:f2:07:10 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3WORzLFbZmjASULXuqbjAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZTAxOTc0NzQzYTNiM2EyOGY3YTY0ZTJkODcxYmYxZTVl NWY2ZTUwHhcNMjYwMTAxMDIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2VkM2U1OTBhMWQ5YTM4YzY1NTQwNGVjNTZlODliZGRlMTZjM2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCZg8fOCGdC2S/md7j3VfmMKLkYK HHrMA2EXfFOjmKMRWri8fSqNQFm+GF/gSDq8g4C2GRjzMj9oq3u4XWNrmGiDMqh+ 3J6fUnwJK1detV0+SgpqhMtbi1HVfTSSq/JSBlexmA3/ZbOxcTESO4z+5vmAPZbj afWvhl2ALsQau2vmqk+TgnmZSsvj+v98qb5h47puWocZzdz0fihOCxvNy/tG5QBe C1j86HhxEhAly8NuYwK700fe8X3LxXAnnE9TtE+n1tUEOYnJskeUgdpPeqjdJHX2 PNC7pK7sPy0njgR2cekLzX/cT5oLFlpwWQ8F1iJf4GHh8r3kfcoPdxVKRQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOztPlkKHZo4xlVATsVuib3eFsOyMB8GA1UdIwQY MBaAFO/gGXR0Ojs6KPemTi2HG/Hl5fblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNy1BWmRIUTZPem9vOTZaT0xZY2I4ZVhsOXVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85NDM4YjctMzlhMi00Yzk1LWFmMWEt Y2RiMWZkYzlkNTdkLzEvN08wLVdRb2RtampHVlVCT3hXNkp2ZDRXdzdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC85NDM4YjctMzlhMi00Yzk1LWFmMWEtY2RiMWZkYzlkNTdk LzEvNy1BWmRIUTZPem9vOTZaT0xZY2I4ZVhsOXVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuXWkMA8E AgACMAkDBwAgAQZ4C7wwDQYJKoZIhvcNAQELBQADggEBAFX/hSeRBzbwC4eADwXz YFX2jyNm/TvJEw4h5Iwp7pUKwZ4vnP+TnLb+x3Jb2c0S/gFL+pHdMDbhr3j+X3Nr WgMG+eRNjF0BCl/tFFXWb5fEOdWh2khOLyOrkDaUVIwQi8Rf+QUkLY2PwmH3n96S Crx63/RT0PdP7kRA92Zs/DJv2sFLIWNsVgPFDh8iO+qVGdPPsFgcWv0nDAzLdI8a +Hr0I4AijbDIteyKYL84+wV+NJhr9BSRJu2No16nMA24gN9P0pQU3LcawemIeFXP vv31VmFH8eJXsojWN8vZ7z/X88+jjkzqkICOyKfe3Zpa5nzSe21NvFqDXQLUdKLy BxA= -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:44 2026 by rpki-client