This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/7duJmg6XBu7Dkr56DQUbxqUTtGI.roa File: 7duJmg6XBu7Dkr56DQUbxqUTtGI.roa (raw, json) Hash identifier: vRnmShBspjKGY8+2c67XY2q1Q6Ro3wJjFJL27Iuvolk= Subject key identifier: ED:DB:89:9A:0E:97:06:EE:C3:92:BE:7A:0D:05:1B:C6:A5:13:B4:62 Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33 Certificate serial: 019B7834E76421FD66C4269297531BE2ECCC Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/7duJmg6XBu7Dkr56DQUbxqUTtGI.roa Signing time: Thu 01 Jan 2026 06:18:11 +0000 ROA not before: Thu 01 Jan 2026 06:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35280 IP address blocks: 185.6.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:e7:64:21:fd:66:c4:26:92:97:53:1b:e2:ec:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33 Validity Not Before: Jan 1 06:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eddb899a0e9706eec392be7a0d051bc6a513b462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:cc:e5:f7:43:d2:23:8a:b3:34:16:31:b9:fd: 0a:50:e2:35:ec:ff:a2:2e:88:e6:4a:3e:9b:eb:dd: d8:23:36:93:06:de:9d:cc:58:f8:bf:4e:7c:6f:33: b5:5c:a2:5e:32:ca:1c:9e:c6:a9:9a:53:d4:66:e9: 65:82:94:4f:2b:b9:1b:bf:89:d2:a3:fc:b4:30:14: de:4b:9b:54:3d:08:0f:87:bc:b8:3f:f6:18:d7:7d: bf:ec:2d:7c:1e:1d:63:aa:15:ab:e0:c4:a5:36:0c: fd:83:87:61:b6:bd:4c:a8:8b:bc:a0:c2:10:c2:0e: 93:cd:f6:81:f8:df:b7:fe:29:db:8a:be:86:27:1a: 11:5b:11:4d:de:af:1e:03:f8:a0:c0:72:70:e6:5d: 60:be:c8:35:a1:39:03:d5:d6:2b:01:5b:04:0a:2c: 3f:88:29:6a:2e:52:96:25:4f:53:4f:55:29:07:47: 87:50:cf:1d:f0:77:a1:95:2c:6d:1f:6b:d6:60:10: 9b:4b:0e:68:37:0c:bb:4d:cb:c8:25:5d:3c:fe:84: f8:1c:9d:7b:37:5e:d2:5c:29:3d:ab:5e:d5:df:29: 97:7f:3f:27:c9:51:00:39:f5:bb:61:47:83:8e:e2: 6a:df:2d:ec:0f:c0:11:c0:ac:fe:68:73:3e:a5:26: f6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:DB:89:9A:0E:97:06:EE:C3:92:BE:7A:0D:05:1B:C6:A5:13:B4:62 X509v3 Authority Key Identifier: keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/7duJmg6XBu7Dkr56DQUbxqUTtGI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.6.60.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:d2:bd:36:4e:56:87:56:3f:2f:19:5c:53:81:dc:a2:14:ec: 30:e7:4e:75:33:de:6d:c1:1b:5b:04:dc:37:32:9b:c7:38:c4: e0:24:64:b8:38:0f:1b:c5:8f:d1:ea:3b:e1:bf:84:2b:23:51: 2b:18:a3:76:38:74:46:d8:57:7b:a1:0e:19:b3:e8:ae:9d:5d: c8:c5:81:34:b9:93:41:ec:95:16:c1:c4:9a:89:09:02:4e:fa: 90:74:62:d3:da:db:05:f0:60:d8:f3:44:85:00:11:70:05:2e: 5a:5a:e7:88:bb:ad:11:48:7e:c5:f4:2b:12:47:4d:77:db:0b: bc:d1:b3:af:77:64:46:7d:57:9f:b1:eb:d2:05:86:fd:46:0f: 93:6e:f8:00:19:b4:c6:c2:e3:e2:bf:a4:f3:ea:d8:73:d2:3f: d3:5e:94:71:13:7c:31:b3:b2:09:1d:5b:9f:8e:d2:39:22:c3: 46:f8:61:db:ba:34:8a:56:2c:c9:da:68:95:e7:21:c1:32:96: c5:86:29:9f:2b:17:e4:9c:fa:01:a2:e0:7e:e0:74:cf:0e:00: ed:8a:82:8a:6f:16:5f:3f:94:b6:b1:f0:ea:a1:36:c7:37:56: 3e:eb:c6:33:f4:6a:94:c9:bc:fc:2d:49:b8:6a:ec:11:63:ba: 46:8e:17:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NOdkIf1mxCaSl1Mb4uzMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZWQ2NGM5M2RkZmRmMmY0OWI3ZWExYzIzZWFhZDA4NzAy NDlhMzMwHhcNMjYwMTAxMDYxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGRiODk5YTBlOTcwNmVlYzM5MmJlN2EwZDA1MWJjNmE1MTNiNDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9szl90PSI4qzNBYxuf0KUOI17P+i LojmSj6b693YIzaTBt6dzFj4v058bzO1XKJeMsocnsapmlPUZullgpRPK7kbv4nS o/y0MBTeS5tUPQgPh7y4P/YY132/7C18Hh1jqhWr4MSlNgz9g4dhtr1MqIu8oMIQ wg6TzfaB+N+3/inbir6GJxoRWxFN3q8eA/igwHJw5l1gvsg1oTkD1dYrAVsECiw/ iClqLlKWJU9TT1UpB0eHUM8d8HehlSxtH2vWYBCbSw5oNwy7TcvIJV08/oT4HJ17 N17SXCk9q17V3ymXfz8nyVEAOfW7YUeDjuJq3y3sD8ARwKz+aHM+pSb27wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO3biZoOlwbuw5K+eg0FG8alE7RiMB8GA1UdIwQY MBaAFMntZMk9398vSbfqHCPqrQhwJJozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yYTJhYjItMzA5OC00YTBmLTgwOWMt MzVlZDViNTNkYTA1LzEvN2R1Sm1nNlhCdTdEa3I1NkRRVWJ4cVVUdEdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8yYTJhYjItMzA5OC00YTBmLTgwOWMtMzVlZDViNTNkYTA1 LzEveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQY8MA0G CSqGSIb3DQEBCwUAA4IBAQBa0r02TlaHVj8vGVxTgdyiFOww5051M95twRtbBNw3 MpvHOMTgJGS4OA8bxY/R6jvhv4QrI1ErGKN2OHRG2Fd7oQ4Zs+iunV3IxYE0uZNB 7JUWwcSaiQkCTvqQdGLT2tsF8GDY80SFABFwBS5aWueIu60RSH7F9CsSR0132wu8 0bOvd2RGfVefsevSBYb9Rg+TbvgAGbTGwuPiv6Tz6thz0j/TXpRxE3wxs7IJHVuf jtI5IsNG+GHbujSKVizJ2miV5yHBMpbFhimfKxfknPoBouB+4HTPDgDtioKKbxZf P5S2sfDqoTbHN1Y+68Yz9GqUybz8LUm4auwRY7pGjhcP -----END CERTIFICATE-----Generated at Thu Jan 8 09:14:09 2026 by rpki-client