This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/s7B9p4vTJAow4sBYhbnToQXwFKo.roa File: s7B9p4vTJAow4sBYhbnToQXwFKo.roa (raw, json) Hash identifier: nHDCoe/MNgEdbVoOhEHnJFTP5BTnyS6pKwNLw3+w7aM= Subject key identifier: B3:B0:7D:A7:8B:D3:24:0A:30:E2:C0:58:85:B9:D3:A1:05:F0:14:AA Certificate issuer: /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd Certificate serial: 019B7F15F006E155009187CD788F9FBF91F7 Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/s7B9p4vTJAow4sBYhbnToQXwFKo.roa Signing time: Fri 02 Jan 2026 14:21:42 +0000 ROA not before: Fri 02 Jan 2026 14:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14061 IP address blocks: 141.0.169.0/24 maxlen: 24 141.0.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f0:06:e1:55:00:91:87:cd:78:8f:9f:bf:91:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd Validity Not Before: Jan 2 14:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3b07da78bd3240a30e2c05885b9d3a105f014aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:52:05:52:81:ea:da:81:c4:d1:af:5d:a5:04: f6:5e:03:91:61:e7:f8:df:df:54:b7:ed:d1:13:28: 22:19:f8:34:fe:41:ca:97:dd:d8:10:9a:37:fe:50: 3f:ad:06:58:0e:94:cf:ee:5e:f3:32:c6:44:52:d0: 8e:b9:b1:f1:d3:a7:e7:ea:c0:d8:fb:88:ae:f2:e5: bf:d9:be:4a:1c:4b:4d:b4:c6:bc:38:1d:c7:73:21: 68:27:91:1c:24:ae:f2:8a:2a:4c:60:b1:ca:f7:bb: 02:e8:ce:7f:1d:9a:c8:72:04:ce:1e:1c:4d:dc:99: bc:b6:93:da:78:39:ef:8d:c4:c4:05:56:8c:cc:53: bd:3a:94:a2:90:0c:83:7e:27:d3:26:a0:c7:08:c8: 26:72:2c:05:e1:39:a0:c6:23:f7:18:f5:73:9e:f4: 78:d4:58:24:a7:b8:ab:58:eb:01:7c:10:ec:af:16: ee:0c:46:74:e3:66:23:a2:30:b4:c7:36:c9:ec:a7: 7c:48:06:36:fc:26:84:a3:f0:12:21:88:ee:b6:4b: 6f:83:fe:52:a5:79:dc:7d:34:c8:6c:37:65:10:34: e3:55:2b:76:32:d1:ae:6c:ad:ef:7e:1d:ea:d6:d4: 0e:1a:8c:4c:4e:42:23:3d:d6:33:41:1a:fb:68:12: 56:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B0:7D:A7:8B:D3:24:0A:30:E2:C0:58:85:B9:D3:A1:05:F0:14:AA X509v3 Authority Key Identifier: keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/s7B9p4vTJAow4sBYhbnToQXwFKo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.0.169.0-141.0.170.255 Signature Algorithm: sha256WithRSAEncryption af:19:9e:a0:1f:c3:33:4f:2f:e2:21:db:8a:69:96:2e:46:24: ca:22:7d:ba:71:6d:d4:42:e7:8f:f5:72:c0:52:83:33:bf:66: fb:30:03:99:ea:93:1a:29:65:1a:58:16:b3:5e:91:30:0f:99: 55:74:1a:8a:c2:b8:b6:8d:b9:da:ee:5a:83:27:ee:27:d7:3c: 02:b6:3f:27:3c:35:18:57:29:88:ab:cb:13:3b:f5:b6:89:ea: 89:ab:63:cd:26:a8:9b:bb:58:d2:e2:22:c6:97:35:85:68:44: 3a:1b:d7:ed:f8:b7:a5:3a:ad:d7:85:f8:4f:74:74:c4:cd:65: a4:a4:32:fc:07:7c:be:10:48:22:19:33:ae:d2:7f:c2:fb:4b: 2f:cb:86:d9:23:d0:51:8f:70:ee:90:9d:4e:55:7d:96:01:36: b7:f5:43:fe:35:dd:15:b1:df:7b:e6:7b:1d:25:23:a6:e5:0d: 5d:d7:7b:8b:86:92:9d:2f:d9:06:67:de:92:9f:8a:68:e3:fd: c3:44:80:cd:77:b2:8d:10:8b:7b:b9:d9:36:b5:98:16:77:3e: 6b:2f:e9:db:4e:03:75:4c:a5:e2:a1:86:10:06:30:44:b8:00: e8:28:89:ed:24:14:22:b1:10:5b:c3:41:0b:90:21:4c:59:9e: 84:a6:e4:8a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/FfAG4VUAkYfNeI+fv5H3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMWQyMTU0YjkzMjRlZmIzOWNhMzhiYTE5MzFiYTVkZmI1 OWU4ZmQwHhcNMjYwMTAyMTQyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2IwN2RhNzhiZDMyNDBhMzBlMmMwNTg4NWI5ZDNhMTA1ZjAxNGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VIFUoHq2oHE0a9dpQT2XgORYef4 399Ut+3REygiGfg0/kHKl93YEJo3/lA/rQZYDpTP7l7zMsZEUtCOubHx06fn6sDY +4iu8uW/2b5KHEtNtMa8OB3HcyFoJ5EcJK7yiipMYLHK97sC6M5/HZrIcgTOHhxN 3Jm8tpPaeDnvjcTEBVaMzFO9OpSikAyDfifTJqDHCMgmciwF4TmgxiP3GPVznvR4 1Fgkp7irWOsBfBDsrxbuDEZ042YjojC0xzbJ7Kd8SAY2/CaEo/ASIYjutktvg/5S pXncfTTIbDdlEDTjVSt2MtGubK3vfh3q1tQOGoxMTkIjPdYzQRr7aBJWHQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLOwfaeL0yQKMOLAWIW506EF8BSqMB8GA1UdIwQY MBaAFBodIVS5Mk77Oco4uhkxul37Wej9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82MGY2MjMtZWQ3OS00MDMwLTg5ODAt ODkwMWIwNTJiODZiLzEvczdCOXA0dlRKQW93NHNCWWhiblRvUVh3RktvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC82MGY2MjMtZWQ3OS00MDMwLTg5ODAtODkwMWIwNTJiODZi LzEvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACNAKkD BACNAKowDQYJKoZIhvcNAQELBQADggEBAK8ZnqAfwzNPL+Ih24ppli5GJMoifbpx bdRC54/1csBSgzO/ZvswA5nqkxopZRpYFrNekTAPmVV0GorCuLaNudruWoMn7ifX PAK2Pyc8NRhXKYiryxM79baJ6omrY80mqJu7WNLiIsaXNYVoRDob1+34t6U6rdeF +E90dMTNZaSkMvwHfL4QSCIZM67Sf8L7Sy/Lhtkj0FGPcO6QnU5VfZYBNrf1Q/41 3RWx33vmex0lI6blDV3Xe4uGkp0v2QZn3pKfimjj/cNEgM13so0Qi3u52Ta1mBZ3 Pmsv6dtOA3VMpeKhhhAGMES4AOgoie0kFCKxEFvDQQuQIUxZnoSm5Io= -----END CERTIFICATE-----Generated at Mon Feb 2 21:09:18 2026 by rpki-client