This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/FOy7M5QfwLhnleJj9CXN45P03n0.roa File: FOy7M5QfwLhnleJj9CXN45P03n0.roa (raw, json) Hash identifier: ZwAa4LHTg8NRy6qzC3/r4Eh5zisKi17JWU8PiKVfqxk= Subject key identifier: 14:EC:BB:33:94:1F:C0:B8:67:95:E2:63:F4:25:CD:E3:93:F4:DE:7D Certificate issuer: /CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5 Certificate serial: 019B7C807C0CE57B7E8DFD5EC910DE0F85F9 Authority key identifier: 0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/FOy7M5QfwLhnleJj9CXN45P03n0.roa Signing time: Fri 02 Jan 2026 02:19:13 +0000 ROA not before: Fri 02 Jan 2026 02:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59741 IP address blocks: 195.190.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:7c:0c:e5:7b:7e:8d:fd:5e:c9:10:de:0f:85:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5 Validity Not Before: Jan 2 02:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14ecbb33941fc0b86795e263f425cde393f4de7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4b:7d:51:6e:9e:f8:82:fa:6c:50:0d:26:d3: 84:20:ba:ab:16:c5:76:43:43:b1:00:fa:06:32:e4: e1:ca:40:71:84:8a:28:27:05:c5:37:6d:e3:0f:71: 34:af:4c:87:40:f3:e1:d2:8c:5c:6b:ac:e7:c7:d7: 91:76:8c:c5:3a:af:a0:81:04:89:2d:c1:b3:99:07: b9:27:3f:1a:66:c9:8e:12:54:c2:69:0a:3a:85:f8: 20:f4:93:15:ed:54:ec:f1:74:f4:e2:67:b2:2f:5e: 1c:cb:02:40:ba:7c:3a:04:dc:b3:02:6c:c0:62:72: 5a:fb:87:6b:ff:02:54:6b:c5:f0:b4:c0:e5:e7:ca: 6e:e2:34:65:2c:df:41:52:f7:99:76:52:37:6d:00: 3c:ed:29:3f:61:39:23:29:86:6c:c9:fc:3b:1b:65: 9e:42:c8:e0:e5:6d:69:6b:e9:3e:e3:82:eb:b9:1c: 92:ef:71:8d:81:5f:da:d1:8d:d8:23:e4:62:4e:00: d3:4d:16:b3:aa:ad:f5:71:33:d8:fd:aa:4f:34:d7: 93:47:fd:37:a9:d8:69:db:33:84:f5:7a:fa:40:43: 8d:3e:47:c6:21:37:78:11:d1:e2:73:f3:b1:5b:1f: 73:8e:e0:d5:f2:13:7f:05:89:45:c6:a0:2d:75:94: 69:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:EC:BB:33:94:1F:C0:B8:67:95:E2:63:F4:25:CD:E3:93:F4:DE:7D X509v3 Authority Key Identifier: keyid:0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/FOy7M5QfwLhnleJj9CXN45P03n0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.190.7.0/24 Signature Algorithm: sha256WithRSAEncryption 34:09:02:5f:10:a2:7b:d9:52:f3:21:70:c5:26:29:8c:29:46: ed:d9:6b:e7:b5:66:9f:0d:6e:df:e2:ff:1b:dc:73:5f:25:e5: d9:b4:24:3a:4b:af:88:85:30:e9:87:d7:d1:2a:53:e8:12:f3: 50:27:88:5c:41:6d:d3:9c:b8:4b:d5:21:b9:d9:10:1a:4e:95: 83:1e:c9:e4:ce:4a:d1:00:42:6e:07:e5:e0:29:4d:61:10:24: 40:70:3f:82:c7:2a:0e:19:db:f7:b6:64:ac:23:4e:65:46:5f: ee:87:4b:22:58:d8:df:84:7f:8b:a0:28:ba:3b:6a:00:ae:f9: 8d:cd:48:10:c0:99:e1:02:5a:de:23:e2:d3:74:bc:23:67:2a: ae:34:3a:c5:00:02:f9:df:ec:86:1b:22:5e:63:f0:7a:22:94: 62:8e:08:d8:3d:89:21:ff:26:00:58:a4:8b:4c:29:97:e1:86: f2:0e:e5:36:81:41:b0:04:cd:0a:11:11:2c:81:44:69:db:b2: fb:0b:15:b3:02:1f:61:d2:25:02:b5:2e:b6:b2:b9:10:97:5c: 42:e3:a0:86:74:04:1d:11:16:d0:7b:24:7d:95:f5:3a:4e:29: 8f:99:77:8e:72:da:8a:ae:26:34:c7:bc:31:21:da:a0:d7:f1: 75:a4:99:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gHwM5Xt+jf1eyRDeD4X5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkM2ZmNzExNTFhNDVlZDM5ZmIxZGE1ZmZiNDAzMmVkNzRm YTE5YzUwHhcNMjYwMTAyMDIxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGVjYmIzMzk0MWZjMGI4Njc5NWUyNjNmNDI1Y2RlMzkzZjRkZTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0t9UW6e+IL6bFANJtOEILqrFsV2 Q0OxAPoGMuThykBxhIooJwXFN23jD3E0r0yHQPPh0oxca6znx9eRdozFOq+ggQSJ LcGzmQe5Jz8aZsmOElTCaQo6hfgg9JMV7VTs8XT04meyL14cywJAunw6BNyzAmzA YnJa+4dr/wJUa8XwtMDl58pu4jRlLN9BUveZdlI3bQA87Sk/YTkjKYZsyfw7G2We Qsjg5W1pa+k+44LruRyS73GNgV/a0Y3YI+RiTgDTTRazqq31cTPY/apPNNeTR/03 qdhp2zOE9Xr6QEONPkfGITd4EdHic/OxWx9zjuDV8hN/BYlFxqAtdZRpZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBTsuzOUH8C4Z5XiY/QlzeOT9N59MB8GA1UdIwQY MBaAFA0/9xFRpF7Tn7HaX/tAMu10+hnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFRfM0VWR2tYdE9mc2RwZi0wQXk3WFQ2R2NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9lYTlkOTktNzM4Yi00YmFhLWI0NTUt YTZjYjA1NGFjOTdiLzEvRk95N001UWZ3TGhubGVKajlDWE40NVAwM24wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9lYTlkOTktNzM4Yi00YmFhLWI0NTUtYTZjYjA1NGFjOTdi LzEvRFRfM0VWR2tYdE9mc2RwZi0wQXk3WFQ2R2NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw74HMA0G CSqGSIb3DQEBCwUAA4IBAQA0CQJfEKJ72VLzIXDFJimMKUbt2WvntWafDW7f4v8b 3HNfJeXZtCQ6S6+IhTDph9fRKlPoEvNQJ4hcQW3TnLhL1SG52RAaTpWDHsnkzkrR AEJuB+XgKU1hECRAcD+CxyoOGdv3tmSsI05lRl/uh0siWNjfhH+LoCi6O2oArvmN zUgQwJnhAlreI+LTdLwjZyquNDrFAAL53+yGGyJeY/B6IpRijgjYPYkh/yYAWKSL TCmX4YbyDuU2gUGwBM0KEREsgURp27L7CxWzAh9h0iUCtS62srkQl1xC46CGdAQd ERbQeyR9lfU6TimPmXeOctqKriY0x7wxIdqg1/F1pJnC -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:16 2026 by rpki-client