This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/7ODkEA8GW4XqQMX815M0xDjVvrs.roa File: 7ODkEA8GW4XqQMX815M0xDjVvrs.roa (raw, json) Hash identifier: Ncp1j3mzzX7ml5rvDVDTsQNEgjoz0Dt1wsNtC6lEi94= Subject key identifier: EC:E0:E4:10:0F:06:5B:85:EA:40:C5:FC:D7:93:34:C4:38:D5:BE:BB Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019B77C6C66BF02CD2D1AF85372ABCE9C3BF Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/7ODkEA8GW4XqQMX815M0xDjVvrs.roa Signing time: Thu 01 Jan 2026 04:17:54 +0000 ROA not before: Thu 01 Jan 2026 04:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49581 IP address blocks: 88.151.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c6:6b:f0:2c:d2:d1:af:85:37:2a:bc:e9:c3:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Jan 1 04:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ece0e4100f065b85ea40c5fcd79334c438d5bebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a3:70:01:dc:20:6e:fe:76:39:5e:76:42:1b: b8:0d:f3:a7:9d:4c:5f:15:ee:36:6d:30:89:f4:71: b1:ed:35:d6:74:6d:53:91:86:41:0d:08:1d:7f:e9: 09:19:86:84:2c:af:bd:5f:7c:5f:34:ca:65:ce:d9: 4b:cd:ca:a2:1d:96:02:22:30:3b:72:c2:78:19:bd: b5:b6:7c:f7:d8:9a:72:50:cd:45:7c:e2:1d:95:01: a7:6c:e6:d2:32:1e:89:65:07:5f:3f:95:23:87:fe: 6a:a4:e2:23:9c:6a:7d:5b:45:d4:00:de:6b:e4:01: f6:71:44:cc:c0:f5:f2:5d:63:dd:e6:2b:8a:b6:3b: dc:e6:26:bb:01:66:66:5e:77:de:ea:88:d1:a7:d7: 80:69:ef:52:d0:c2:70:1b:29:dc:54:ca:05:ce:09: 4b:21:df:d9:dc:e8:cf:9e:39:b1:bf:76:1a:39:a5: 6c:a1:db:7a:d3:d2:a9:f1:05:12:a9:98:76:81:a4: f6:b0:31:2d:87:34:aa:a7:38:5f:38:99:ac:30:2c: d1:dd:10:9e:34:fe:4c:6c:99:5d:11:19:c8:b5:06: 1f:4a:28:84:e9:82:da:3d:44:b4:6b:9a:e1:7d:d0: 23:24:2a:d8:43:a1:74:aa:fd:fc:d5:64:0a:ed:11: 3e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E0:E4:10:0F:06:5B:85:EA:40:C5:FC:D7:93:34:C4:38:D5:BE:BB X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/7ODkEA8GW4XqQMX815M0xDjVvrs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.151.194.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:b5:32:23:d6:8d:6e:1f:c3:bd:db:c6:42:e6:9e:b3:1f:61: 60:03:8a:c1:b0:5d:8d:d3:8a:68:e7:2d:05:3a:b2:99:07:91: 68:a0:22:6c:21:74:6f:00:74:00:2d:64:0d:38:7f:97:37:0c: e7:38:06:3c:49:4d:f4:a4:bb:17:cf:fe:9d:b1:e9:e6:93:79: 4b:00:57:b0:5c:df:c9:c9:03:cc:2f:00:08:a2:e6:4d:d0:a5: 08:c0:4d:fe:f0:0b:33:02:f6:a9:da:8b:2b:89:9a:d7:74:c9: 3a:47:26:0c:82:b4:00:ac:77:90:f1:32:a7:71:14:0d:58:90: 74:82:47:7c:b9:7b:c6:d5:4b:b6:0d:c0:fd:07:78:c6:5c:cf: 4a:8b:eb:e2:19:8f:da:b6:3f:32:65:e7:35:b9:d9:7d:98:c5: 2d:27:ff:33:2d:8d:77:fe:a3:5a:fb:31:ec:9e:c5:27:85:a2: fc:cf:6c:2a:69:c3:5b:49:30:42:df:3f:a4:16:7d:88:8a:4e: 33:00:4a:3e:73:44:dd:cd:1d:e9:6f:dd:3a:c0:57:74:ad:c0: 37:0f:68:dd:3b:64:dd:22:ae:ac:55:c8:2f:b1:7f:fe:b9:1b: 7e:6f:b8:e4:7b:82:32:18:72:5a:f7:37:fe:25:87:a2:53:3b: eb:7b:f6:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xsZr8CzS0a+FNyq86cO/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjYwMTAxMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2UwZTQxMDBmMDY1Yjg1ZWE0MGM1ZmNkNzkzMzRjNDM4ZDViZWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36NwAdwgbv52OV52Qhu4DfOnnUxf Fe42bTCJ9HGx7TXWdG1TkYZBDQgdf+kJGYaELK+9X3xfNMplztlLzcqiHZYCIjA7 csJ4Gb21tnz32JpyUM1FfOIdlQGnbObSMh6JZQdfP5Ujh/5qpOIjnGp9W0XUAN5r 5AH2cUTMwPXyXWPd5iuKtjvc5ia7AWZmXnfe6ojRp9eAae9S0MJwGyncVMoFzglL Id/Z3OjPnjmxv3YaOaVsodt609Kp8QUSqZh2gaT2sDEthzSqpzhfOJmsMCzR3RCe NP5MbJldERnItQYfSiiE6YLaPUS0a5rhfdAjJCrYQ6F0qv381WQK7RE+bwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOzg5BAPBluF6kDF/NeTNMQ41b67MB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvN09Ea0VBOEdXNFhxUU1YODE1TTB4RGpWdnJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWJfCMA0G CSqGSIb3DQEBCwUAA4IBAQALtTIj1o1uH8O928ZC5p6zH2FgA4rBsF2N04po5y0F OrKZB5FooCJsIXRvAHQALWQNOH+XNwznOAY8SU30pLsXz/6dsenmk3lLAFewXN/J yQPMLwAIouZN0KUIwE3+8AszAvap2osriZrXdMk6RyYMgrQArHeQ8TKncRQNWJB0 gkd8uXvG1Uu2DcD9B3jGXM9Ki+viGY/atj8yZec1udl9mMUtJ/8zLY13/qNa+zHs nsUnhaL8z2wqacNbSTBC3z+kFn2Iik4zAEo+c0TdzR3pb906wFd0rcA3D2jdO2Td Iq6sVcgvsX/+uRt+b7jke4IyGHJa9zf+JYeiUzvre/b1 -----END CERTIFICATE-----Generated at Wed Jan 21 09:13:55 2026 by rpki-client