This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/rPrtjH1Zaddd3LQfktc8-OPOsGA.roa File: rPrtjH1Zaddd3LQfktc8-OPOsGA.roa (raw, json) Hash identifier: g5QcyO1/rh6YC2cKBEwfUlrViqov7ad2W2RK1YKQpXs= Subject key identifier: AC:FA:ED:8C:7D:59:69:D7:5D:DC:B4:1F:92:D7:3C:F8:E3:CE:B0:60 Certificate issuer: /CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5 Certificate serial: 019B7C807BDB195669AD0515A12E369CD971 Authority key identifier: 0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/rPrtjH1Zaddd3LQfktc8-OPOsGA.roa Signing time: Fri 02 Jan 2026 02:19:13 +0000 ROA not before: Fri 02 Jan 2026 02:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47108 IP address blocks: 195.190.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:7b:db:19:56:69:ad:05:15:a1:2e:36:9c:d9:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5 Validity Not Before: Jan 2 02:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acfaed8c7d5969d75ddcb41f92d73cf8e3ceb060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:56:da:2e:45:d1:1d:93:7b:5c:15:7f:f1:59: cf:85:0a:73:47:0a:ea:97:d1:8c:5a:ba:e1:b2:ea: 6c:c8:10:0c:b8:6b:46:8d:ee:9c:ee:fb:74:f9:95: 3d:2e:10:8a:ae:d9:61:89:27:38:98:a6:20:df:2c: 7c:91:94:07:2a:d4:6b:7d:85:9d:0a:8c:d7:fa:d1: 9f:e4:e7:bd:cf:a3:c9:4f:c9:ad:dd:4d:e9:59:ae: 5d:30:c8:15:db:c4:2e:0a:41:dc:53:7f:ba:12:19: 9c:43:fb:43:9b:7d:b7:8f:12:f1:f9:82:76:b1:ac: 5e:90:14:ce:58:d9:d7:cd:c3:1f:41:bd:e8:6c:39: 98:9f:97:e5:05:47:5e:09:79:bd:fd:b6:84:f6:3c: 3b:84:2c:5a:74:c2:dd:f7:92:09:8b:80:59:48:e3: ae:d4:c9:fa:fe:8b:16:81:02:97:2a:69:fb:0a:a0: 0e:0a:f9:af:c5:fc:2f:7c:51:aa:98:47:3c:ba:43: 4a:a3:de:44:16:29:cf:52:eb:a6:f6:9b:18:65:90: 0a:48:83:a2:e4:b4:43:31:c7:4b:16:f6:9a:2d:7f: 5c:64:58:86:ce:6c:60:41:08:2e:bf:fa:2f:9f:4f: fd:ce:70:bd:28:ea:57:4e:1e:9f:97:c0:aa:9d:95: 17:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:FA:ED:8C:7D:59:69:D7:5D:DC:B4:1F:92:D7:3C:F8:E3:CE:B0:60 X509v3 Authority Key Identifier: keyid:0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/rPrtjH1Zaddd3LQfktc8-OPOsGA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.190.7.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:5f:df:d0:20:f9:b6:63:5f:78:51:54:19:0a:70:90:9e:5e: 81:aa:61:9f:c2:88:9a:6c:18:9e:f8:bd:f9:ac:82:22:62:e2: a5:71:b9:c7:4f:f9:3d:31:34:a6:ae:d6:04:fb:ff:0f:a3:ef: 28:6d:2a:6b:71:6f:94:fa:11:4e:6f:c2:a3:68:54:14:ba:e4: 26:f1:41:53:82:29:ae:cf:3a:ca:de:5e:9b:9a:b8:01:4f:0d: b5:f3:c1:4a:47:60:6a:70:87:1f:8c:48:a8:94:b4:24:9b:5b: 4c:8e:b0:5a:52:6b:7c:8d:f3:02:47:7f:65:fe:1e:83:33:11: bd:d8:5c:14:8e:17:a6:88:e0:d8:c0:20:ff:c3:24:ac:fc:ec: 49:28:a2:4c:24:4a:a3:06:ae:df:35:6d:a3:c5:56:f5:10:71: 51:6a:fe:5c:e4:4c:88:5c:ce:62:e7:e6:62:51:41:df:31:96: 15:4e:0d:c7:7a:2d:30:5a:d5:ba:78:f3:73:5c:b1:52:e9:bf: 2b:6a:4a:45:ba:bb:ee:64:57:26:48:e9:04:a0:0c:bc:2e:07: a1:04:58:e8:bd:a6:70:0b:ac:ed:7b:a6:39:85:b0:b3:34:c9: 09:6e:b0:c5:82:ad:62:7a:31:3b:07:3a:ad:5f:ab:07:66:3e: 2f:40:c0:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gHvbGVZprQUVoS42nNlxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkM2ZmNzExNTFhNDVlZDM5ZmIxZGE1ZmZiNDAzMmVkNzRm YTE5YzUwHhcNMjYwMTAyMDIxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2ZhZWQ4YzdkNTk2OWQ3NWRkY2I0MWY5MmQ3M2NmOGUzY2ViMDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslbaLkXRHZN7XBV/8VnPhQpzRwrq l9GMWrrhsupsyBAMuGtGje6c7vt0+ZU9LhCKrtlhiSc4mKYg3yx8kZQHKtRrfYWd CozX+tGf5Oe9z6PJT8mt3U3pWa5dMMgV28QuCkHcU3+6EhmcQ/tDm323jxLx+YJ2 saxekBTOWNnXzcMfQb3obDmYn5flBUdeCXm9/baE9jw7hCxadMLd95IJi4BZSOOu 1Mn6/osWgQKXKmn7CqAOCvmvxfwvfFGqmEc8ukNKo95EFinPUuum9psYZZAKSIOi 5LRDMcdLFvaaLX9cZFiGzmxgQQguv/ovn0/9znC9KOpXTh6fl8CqnZUXmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKz67Yx9WWnXXdy0H5LXPPjjzrBgMB8GA1UdIwQY MBaAFA0/9xFRpF7Tn7HaX/tAMu10+hnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFRfM0VWR2tYdE9mc2RwZi0wQXk3WFQ2R2NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9lYTlkOTktNzM4Yi00YmFhLWI0NTUt YTZjYjA1NGFjOTdiLzEvclBydGpIMVphZGRkM0xRZmt0YzgtT1BPc0dBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9lYTlkOTktNzM4Yi00YmFhLWI0NTUtYTZjYjA1NGFjOTdi LzEvRFRfM0VWR2tYdE9mc2RwZi0wQXk3WFQ2R2NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw74HMA0G CSqGSIb3DQEBCwUAA4IBAQBqX9/QIPm2Y194UVQZCnCQnl6BqmGfwoiabBie+L35 rIIiYuKlcbnHT/k9MTSmrtYE+/8Po+8obSprcW+U+hFOb8KjaFQUuuQm8UFTgimu zzrK3l6bmrgBTw2188FKR2BqcIcfjEiolLQkm1tMjrBaUmt8jfMCR39l/h6DMxG9 2FwUjhemiODYwCD/wySs/OxJKKJMJEqjBq7fNW2jxVb1EHFRav5c5EyIXM5i5+Zi UUHfMZYVTg3Hei0wWtW6ePNzXLFS6b8rakpFurvuZFcmSOkEoAy8LgehBFjovaZw C6zte6Y5hbCzNMkJbrDFgq1iejE7BzqtX6sHZj4vQMDu -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:29 2026 by rpki-client