This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/7eP7TwNaRBKXgHVXQPj9yKJaIEQ.roa File: 7eP7TwNaRBKXgHVXQPj9yKJaIEQ.roa (raw, json) Hash identifier: ilu1OaDtcIPxYeaNVeuS9YaTFPbuPd9sYiHNRmOaCMs= Subject key identifier: ED:E3:FB:4F:03:5A:44:12:97:80:75:57:40:F8:FD:C8:A2:5A:20:44 Certificate issuer: /CN=61374fc4eab00d41c1eee47fdfb001078c74fa85 Certificate serial: 019B998B2F227C0F22973B17E9956F6B7B23 Authority key identifier: 61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/7eP7TwNaRBKXgHVXQPj9yKJaIEQ.roa Signing time: Wed 07 Jan 2026 17:39:54 +0000 ROA not before: Wed 07 Jan 2026 17:39:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210895 IP address blocks: 45.131.183.0/24 maxlen: 24 213.134.31.0/24 maxlen: 24 2a13:4ac0:8::/46 maxlen: 46 2a13:4ac0:c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:99:8b:2f:22:7c:0f:22:97:3b:17:e9:95:6f:6b:7b:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61374fc4eab00d41c1eee47fdfb001078c74fa85 Validity Not Before: Jan 7 17:39:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ede3fb4f035a44129780755740f8fdc8a25a2044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:59:d9:56:a8:fb:1b:4f:df:0a:34:bb:45:01: 0b:2e:08:66:79:62:10:f4:06:dc:50:5b:d9:9c:98: b9:9b:23:34:df:cb:13:0d:9d:cb:25:35:f6:cf:f4: 94:4d:40:9f:a2:9c:b3:38:d1:62:35:74:eb:c0:b5: e1:dd:29:86:54:bb:4f:96:cf:2c:63:12:f3:d4:d5: 83:e8:ff:61:f1:12:4a:54:69:3d:ba:f2:9d:3f:b7: 9a:63:f4:84:65:30:50:f1:f6:fe:43:4d:3d:8d:92: 0a:d5:ae:ff:a5:8a:b0:9d:d1:78:ab:de:15:9f:17: 68:cd:02:29:8f:f1:f5:a3:7e:1c:91:52:27:90:d6: 99:90:4e:8a:6a:6e:a7:89:09:95:df:89:ed:2e:88: c1:04:68:22:9e:e4:db:59:17:87:ba:01:30:da:70: 22:29:3a:18:2f:c4:03:b7:c2:f3:5c:d9:ae:97:8c: d5:5e:c1:af:7c:37:4c:ab:0d:68:05:ba:9a:2e:b4: 5e:a8:71:be:c8:c9:6c:e4:70:4a:5d:b9:ee:9e:1d: 19:4d:9f:61:4c:57:e7:48:20:e5:1d:c7:08:6a:f1: da:73:4a:aa:ac:7b:49:8f:aa:7e:24:62:fb:b8:b4: 69:33:a5:fa:18:ad:ce:fd:46:47:6d:25:81:2f:db: e6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E3:FB:4F:03:5A:44:12:97:80:75:57:40:F8:FD:C8:A2:5A:20:44 X509v3 Authority Key Identifier: keyid:61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/7eP7TwNaRBKXgHVXQPj9yKJaIEQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.183.0/24 213.134.31.0/24 IPv6: 2a13:4ac0:8::/45 Signature Algorithm: sha256WithRSAEncryption 02:e4:98:4b:b2:bb:86:24:72:8d:19:7f:ad:31:5e:a9:18:44: 32:eb:77:ab:6a:19:2f:7c:a6:15:1d:df:24:a0:66:5a:f8:12: 7e:c0:fb:a9:16:69:f8:cb:2d:9f:f5:0c:d7:12:ec:7a:04:8c: 49:5f:71:1d:48:9a:f3:27:c0:8e:27:92:41:82:56:75:73:28: 69:9e:5f:19:e1:de:1e:dc:d2:5e:64:13:5e:ca:a2:f6:9c:31: 7d:18:f4:37:1b:5e:77:b9:b9:8f:ba:3e:d7:cd:3f:ed:77:be: af:1a:2b:03:44:e5:fd:f3:92:3c:85:41:75:d2:98:f2:05:63: 01:87:27:12:09:34:0d:9e:a3:ea:2a:aa:3e:5c:77:84:5b:52: dc:e3:50:dd:6f:52:07:06:b5:08:6e:36:96:6f:1e:c2:3b:d2: fe:11:83:a4:9f:a5:e1:e4:d5:ee:0e:a8:80:68:f4:48:9e:eb: 3b:82:b6:eb:9b:97:e0:01:c3:d3:c0:e0:37:85:fa:57:84:ab: d8:02:9d:f1:20:80:f9:c7:0b:63:6d:39:94:d8:d3:4e:d3:95: dc:0a:71:43:54:b3:3e:7b:07:c5:54:dd:b4:ba:cb:83:a0:62: d0:d4:22:64:d3:69:8a:9c:c7:0a:c3:ef:d8:0d:79:90:a6:55: ba:f0:3e:af -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZuZiy8ifA8ilzsX6ZVva3sjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMzc0ZmM0ZWFiMDBkNDFjMWVlZTQ3ZmRmYjAwMTA3OGM3 NGZhODUwHhcNMjYwMTA3MTczOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGUzZmI0ZjAzNWE0NDEyOTc4MDc1NTc0MGY4ZmRjOGEyNWEyMDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVnZVqj7G0/fCjS7RQELLghmeWIQ 9AbcUFvZnJi5myM038sTDZ3LJTX2z/SUTUCfopyzONFiNXTrwLXh3SmGVLtPls8s YxLz1NWD6P9h8RJKVGk9uvKdP7eaY/SEZTBQ8fb+Q009jZIK1a7/pYqwndF4q94V nxdozQIpj/H1o34ckVInkNaZkE6Kam6niQmV34ntLojBBGginuTbWReHugEw2nAi KToYL8QDt8LzXNmul4zVXsGvfDdMqw1oBbqaLrReqHG+yMls5HBKXbnunh0ZTZ9h TFfnSCDlHccIavHac0qqrHtJj6p+JGL7uLRpM6X6GK3O/UZHbSWBL9vm0QIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFO3j+08DWkQSl4B1V0D4/ciiWiBEMB8GA1UdIwQY MBaAFGE3T8TqsA1Bwe7kf9+wAQeMdPqFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVRkUHhPcXdEVUhCN3VSXzM3QUJCNHgwLW9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hMTRkNDYtNDA4YS00NzBjLTkyOWQt MWZjMjU5YmI3ZGUyLzEvN2VQN1R3TmFSQktYZ0hWWFFQajl5S0phSUVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9hMTRkNDYtNDA4YS00NzBjLTkyOWQtMWZjMjU5YmI3ZGUy LzEvWVRkUHhPcXdEVUhCN3VSXzM3QUJCNHgwLW9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQALYO3AwQA 1YYfMA8EAgACMAkDBwMqE0rAAAgwDQYJKoZIhvcNAQELBQADggEBAALkmEuyu4Yk co0Zf60xXqkYRDLrd6tqGS98phUd3ySgZlr4En7A+6kWafjLLZ/1DNcS7HoEjElf cR1ImvMnwI4nkkGCVnVzKGmeXxnh3h7c0l5kE17KovacMX0Y9DcbXne5uY+6PtfN P+13vq8aKwNE5f3zkjyFQXXSmPIFYwGHJxIJNA2eo+oqqj5cd4RbUtzjUN1vUgcG tQhuNpZvHsI70v4Rg6SfpeHk1e4OqIBo9Eie6zuCtuubl+ABw9PA4DeF+leEq9gC nfEggPnHC2NtOZTY007TldwKcUNUsz57B8VU3bS6y4OgYtDUImTTaYqcxwrD79gN eZCmVbrwPq8= -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:43 2026 by rpki-client