This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/7syofHXFJmPSL6BJ-29lF-gFfeM.roa File: 7syofHXFJmPSL6BJ-29lF-gFfeM.roa (raw, json) Hash identifier: NO9XiETKh7e/kgh6aR14rNQhQwpTu97o6Yw7GN8zhwk= Subject key identifier: EE:CC:A8:7C:75:C5:26:63:D2:2F:A0:49:FB:6F:65:17:E8:05:7D:E3 Certificate issuer: /CN=3384241ade5f261ac8ece843e5e7db7ee108e33c Certificate serial: 019B7A5AE99778E2397DED2EA3207A2D5DA7 Authority key identifier: 33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/7syofHXFJmPSL6BJ-29lF-gFfeM.roa Signing time: Thu 01 Jan 2026 16:18:56 +0000 ROA not before: Thu 01 Jan 2026 16:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210491 IP address blocks: 146.19.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e9:97:78:e2:39:7d:ed:2e:a3:20:7a:2d:5d:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3384241ade5f261ac8ece843e5e7db7ee108e33c Validity Not Before: Jan 1 16:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eecca87c75c52663d22fa049fb6f6517e8057de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ff:bc:0b:1c:cf:90:e1:76:99:15:cc:ac:46: be:fa:f6:d3:08:c2:ce:de:b2:4d:56:2a:1e:24:45: f5:8f:c8:5a:c7:ec:ce:56:c1:53:6e:5f:1f:a8:22: 04:81:95:c4:37:d1:ab:82:b5:df:6b:66:97:5a:d3: 48:85:5b:3c:00:fa:7e:b4:30:56:50:a3:6d:a8:39: 22:27:40:3c:05:94:9e:fe:72:76:0e:9f:86:1e:11: f9:9a:2b:2d:c5:e9:0b:92:40:90:9b:5e:0a:b1:57: 0d:2c:97:0d:68:a9:6a:40:ee:42:e2:c8:44:f4:07: 8d:5c:e6:0b:10:1d:8b:8a:30:ff:f4:75:93:db:7a: 3e:3b:47:d5:9f:71:db:97:01:46:01:9e:20:5a:64: df:c7:5c:40:37:7b:95:94:27:71:8f:9d:21:58:77: 5c:b3:c3:d5:f1:ec:b4:1b:ea:b9:15:e5:1e:ee:53: 8d:78:15:73:ec:62:a7:3d:30:f2:4a:61:50:cc:0f: 7a:af:1c:39:12:66:1d:8d:f1:28:02:21:80:d5:9d: 4d:aa:c9:71:bf:0a:20:d8:15:1c:57:3a:67:f7:04: 18:7e:a4:e5:62:cd:39:f7:0f:cf:b5:92:3e:64:d6: 66:ed:18:e0:72:c0:3b:98:de:94:32:cc:46:79:e0: 8a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CC:A8:7C:75:C5:26:63:D2:2F:A0:49:FB:6F:65:17:E8:05:7D:E3 X509v3 Authority Key Identifier: keyid:33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/7syofHXFJmPSL6BJ-29lF-gFfeM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.58.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:af:7b:bf:2e:da:12:fe:3c:2e:2a:7f:e9:50:b6:88:6d:7a: d2:d5:2e:d0:8f:b8:8d:01:4d:0f:c4:95:06:60:ea:06:d2:30: 93:16:27:70:59:d5:90:d2:2f:22:7f:75:e2:ce:60:e3:4f:59: 3d:e3:e9:50:c5:f3:f8:b8:92:8a:0a:ef:15:2d:b4:29:8c:88: e4:85:e3:26:78:6b:5b:95:ab:c6:1e:d5:ee:90:a3:bb:40:d8: ea:97:c8:9c:2c:73:82:a9:44:db:63:4e:c7:ed:1d:9a:53:ab: 37:1d:76:45:cd:41:d3:3b:f1:24:01:8e:7f:bd:5e:27:35:5e: 46:37:29:c5:c8:53:10:eb:13:f8:47:e3:14:18:90:30:89:be: 62:9b:46:cd:0d:6d:66:26:51:57:4e:05:f1:a8:9f:69:1f:2e: e0:68:cb:7a:22:ab:4a:59:18:c4:50:ba:d1:cf:fd:a6:ba:8b: b4:7e:cd:78:e1:04:86:c9:b2:0a:60:5d:d9:69:55:1c:90:51: 7e:7e:1d:83:bb:8a:5f:bd:e5:a4:dd:8a:19:a0:75:c6:22:8b: c8:36:b5:96:5f:d2:e0:5e:b1:59:0d:4b:4c:d6:a9:1e:27:76: ff:a2:0c:06:7a:22:bd:d1:c9:d7:37:26:5e:df:8a:9a:c5:b4: 67:7a:33:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WumXeOI5fe0uoyB6LV2nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzODQyNDFhZGU1ZjI2MWFjOGVjZTg0M2U1ZTdkYjdlZTEw OGUzM2MwHhcNMjYwMTAxMTYxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWNjYTg3Yzc1YzUyNjYzZDIyZmEwNDlmYjZmNjUxN2U4MDU3ZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P+8CxzPkOF2mRXMrEa++vbTCMLO 3rJNVioeJEX1j8hax+zOVsFTbl8fqCIEgZXEN9GrgrXfa2aXWtNIhVs8APp+tDBW UKNtqDkiJ0A8BZSe/nJ2Dp+GHhH5mistxekLkkCQm14KsVcNLJcNaKlqQO5C4shE 9AeNXOYLEB2LijD/9HWT23o+O0fVn3HblwFGAZ4gWmTfx1xAN3uVlCdxj50hWHdc s8PV8ey0G+q5FeUe7lONeBVz7GKnPTDySmFQzA96rxw5EmYdjfEoAiGA1Z1Nqslx vwog2BUcVzpn9wQYfqTlYs059w/PtZI+ZNZm7RjgcsA7mN6UMsxGeeCKywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO7MqHx1xSZj0i+gSftvZRfoBX3jMB8GA1UdIwQY MBaAFDOEJBreXyYayOzoQ+Xn237hCOM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTRRa0d0NWZKaHJJN09oRDVlZmJmdUVJNHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8zYzU2ZTItZTRiOC00NWZjLTk1OWYt YzdhYTE5ZWFiYmE3LzEvN3N5b2ZIWEZKbVBTTDZCSi0yOWxGLWdGZmVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8zYzU2ZTItZTRiOC00NWZjLTk1OWYtYzdhYTE5ZWFiYmE3 LzEvTTRRa0d0NWZKaHJJN09oRDVlZmJmdUVJNHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhM6MA0G CSqGSIb3DQEBCwUAA4IBAQA/r3u/LtoS/jwuKn/pULaIbXrS1S7Qj7iNAU0PxJUG YOoG0jCTFidwWdWQ0i8if3XizmDjT1k94+lQxfP4uJKKCu8VLbQpjIjkheMmeGtb lavGHtXukKO7QNjql8icLHOCqUTbY07H7R2aU6s3HXZFzUHTO/EkAY5/vV4nNV5G NynFyFMQ6xP4R+MUGJAwib5im0bNDW1mJlFXTgXxqJ9pHy7gaMt6IqtKWRjEULrR z/2muou0fs144QSGybIKYF3ZaVUckFF+fh2Du4pfveWk3YoZoHXGIovINrWWX9Lg XrFZDUtM1qkeJ3b/ogwGeiK90cnXNyZe34qaxbRnejMh -----END CERTIFICATE-----Generated at Tue Feb 10 08:37:20 2026 by rpki-client