This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/7gkM7YDQNG3-1_Cc7pilIYXiVxM.roa File: 7gkM7YDQNG3-1_Cc7pilIYXiVxM.roa (raw, json) Hash identifier: RxktB/X/0ILAUcnLgcdw93xVGc/tLoK9pE6XU1OCXqQ= Subject key identifier: EE:09:0C:ED:80:D0:34:6D:FE:D7:F0:9C:EE:98:A5:21:85:E2:57:13 Certificate issuer: /CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a Certificate serial: 019B7F156A681CAC9493952BBA1053DC0B97 Authority key identifier: 04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/7gkM7YDQNG3-1_Cc7pilIYXiVxM.roa Signing time: Fri 02 Jan 2026 14:21:08 +0000 ROA not before: Fri 02 Jan 2026 14:21:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58282 IP address blocks: 91.208.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:6a:68:1c:ac:94:93:95:2b:ba:10:53:dc:0b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a Validity Not Before: Jan 2 14:21:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee090ced80d0346dfed7f09cee98a52185e25713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8c:43:a8:b3:70:dc:e8:2c:5c:c6:5a:5d:be: ab:eb:fe:cc:72:78:56:61:63:31:9f:1c:5d:7c:d7: 34:68:80:fc:fa:87:c2:7c:6f:e9:8a:6d:e6:8d:76: 56:ba:0e:94:a6:62:d6:81:a5:bf:1a:c0:44:96:21: 70:65:70:91:94:5d:43:c3:d5:cd:bd:85:b7:5e:7d: ee:1a:f8:2c:17:63:5e:42:fc:d1:b4:04:88:b7:f4: d9:17:0c:9c:16:6c:1d:eb:07:4f:cf:be:34:bb:50: 26:80:3c:35:9c:7f:89:28:32:0b:09:53:3d:60:5d: 41:ca:84:18:32:fa:f6:70:03:8a:32:92:88:3e:8f: de:80:be:3a:94:d8:ca:ff:80:9e:cd:4f:1c:79:d1: 2f:94:15:ed:bb:3c:d2:13:d4:86:a1:1b:c4:17:4f: 34:28:25:c0:bf:77:f4:10:ab:0c:8e:d7:87:ca:c5: e2:1c:61:85:1a:b1:0c:96:18:04:6b:eb:58:e2:3a: 26:3d:13:72:2d:a6:c5:ea:64:3a:ad:1f:b8:ef:22: 5a:32:b3:e6:ed:4f:4c:37:cf:46:ec:ae:4a:cf:c3: 8e:d0:32:bd:15:63:95:26:d0:0e:20:aa:46:c6:6a: 60:19:3a:1e:01:96:1f:13:9b:ee:e3:36:a5:68:d2: dd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:09:0C:ED:80:D0:34:6D:FE:D7:F0:9C:EE:98:A5:21:85:E2:57:13 X509v3 Authority Key Identifier: keyid:04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/7gkM7YDQNG3-1_Cc7pilIYXiVxM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.157.0/24 Signature Algorithm: sha256WithRSAEncryption 58:d1:a2:e7:5d:be:55:a4:0e:25:fe:72:56:e2:e4:57:bb:f8: a4:62:17:00:c2:41:d0:2c:76:8d:25:82:48:35:d5:10:8d:77: 0f:87:38:f3:df:65:4c:a3:d5:54:46:25:ba:94:49:59:76:06: 91:c0:ba:4b:1e:cc:85:c3:d3:a8:ae:65:66:64:1c:d4:3b:f3: 95:67:a8:59:a1:71:81:f8:d6:45:89:52:aa:22:8b:15:62:25: 63:28:eb:e6:d9:ae:dd:07:48:39:75:e1:71:c7:50:f3:13:16: a0:14:60:26:69:ad:42:0d:ad:5c:15:45:e8:94:5f:93:89:9b: ca:83:de:04:d5:88:d9:f5:40:ae:25:7e:d1:f4:50:09:0e:59: fd:60:d6:3d:0a:10:72:34:45:87:c3:e7:70:26:36:6d:55:7b: 04:d3:11:9e:61:89:b5:f2:05:1f:2b:01:17:3c:8f:77:00:76: e2:f2:b5:9d:c7:48:b4:f7:b1:2c:4f:98:0d:91:41:e2:82:4e: 3a:2b:2d:a3:16:ee:f0:9a:d4:b3:6e:e8:91:1b:22:f0:64:28: 6e:cb:35:8e:16:fb:d7:26:fc:59:30:c5:1e:e2:95:db:90:f2: 11:d2:97:8d:1d:13:65:f8:1e:31:cb:64:37:62:68:e6:94:4f: 1d:79:00:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FWpoHKyUk5UruhBT3AuXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YjU2ZWMzYmFmMGE5ZWIyMmExMzYxNDc2M2YxODE0NWQw Y2YwNGEwHhcNMjYwMTAyMTQyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTA5MGNlZDgwZDAzNDZkZmVkN2YwOWNlZTk4YTUyMTg1ZTI1NzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4xDqLNw3OgsXMZaXb6r6/7McnhW YWMxnxxdfNc0aID8+ofCfG/pim3mjXZWug6UpmLWgaW/GsBEliFwZXCRlF1Dw9XN vYW3Xn3uGvgsF2NeQvzRtASIt/TZFwycFmwd6wdPz740u1AmgDw1nH+JKDILCVM9 YF1ByoQYMvr2cAOKMpKIPo/egL46lNjK/4CezU8cedEvlBXtuzzSE9SGoRvEF080 KCXAv3f0EKsMjteHysXiHGGFGrEMlhgEa+tY4jomPRNyLabF6mQ6rR+47yJaMrPm 7U9MN89G7K5Kz8OO0DK9FWOVJtAOIKpGxmpgGToeAZYfE5vu4zalaNLdYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO4JDO2A0DRt/tfwnO6YpSGF4lcTMB8GA1UdIwQY MBaAFAS1bsO68KnrIqE2FHY/GBRdDPBKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkxWdXc3cndxZXNpb1RZVWRqOFlGRjBNOEVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYzYwY2QtZDBiNC00YzhiLThhNGQt Njk1ZDgyOTk5MjZlLzEvN2drTTdZRFFORzMtMV9DYzdwaWxJWVhpVnhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYzYwY2QtZDBiNC00YzhiLThhNGQtNjk1ZDgyOTk5MjZl LzEvQkxWdXc3cndxZXNpb1RZVWRqOFlGRjBNOEVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9CdMA0G CSqGSIb3DQEBCwUAA4IBAQBY0aLnXb5VpA4l/nJW4uRXu/ikYhcAwkHQLHaNJYJI NdUQjXcPhzjz32VMo9VURiW6lElZdgaRwLpLHsyFw9OormVmZBzUO/OVZ6hZoXGB +NZFiVKqIosVYiVjKOvm2a7dB0g5deFxx1DzExagFGAmaa1CDa1cFUXolF+TiZvK g94E1YjZ9UCuJX7R9FAJDln9YNY9ChByNEWHw+dwJjZtVXsE0xGeYYm18gUfKwEX PI93AHbi8rWdx0i097EsT5gNkUHigk46Ky2jFu7wmtSzbuiRGyLwZChuyzWOFvvX JvxZMMUe4pXbkPIR0peNHRNl+B4xy2Q3YmjmlE8deQAK -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:24 2026 by rpki-client