This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/7F2Ex1XJYm3L0yL5pGpEfKLiopU.roa File: 7F2Ex1XJYm3L0yL5pGpEfKLiopU.roa (raw, json) Hash identifier: 97Psvm/KgB7i0n7mJmomBUafk4NIFwigHMo3F5EKRwQ= Subject key identifier: EC:5D:84:C7:55:C9:62:6D:CB:D3:22:F9:A4:6A:44:7C:A2:E2:A2:95 Certificate issuer: /CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21 Certificate serial: 019B76EB3655F76DD5E38B56CFE8B34D3D38 Authority key identifier: 44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/7F2Ex1XJYm3L0yL5pGpEfKLiopU.roa Signing time: Thu 01 Jan 2026 00:18:04 +0000 ROA not before: Thu 01 Jan 2026 00:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44384 IP address blocks: 92.61.192.0/20 maxlen: 20 185.111.140.0/22 maxlen: 22 2a02:5240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:36:55:f7:6d:d5:e3:8b:56:cf:e8:b3:4d:3d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21 Validity Not Before: Jan 1 00:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec5d84c755c9626dcbd322f9a46a447ca2e2a295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:20:b0:6d:16:6b:a3:62:47:24:f0:0e:26:57: 1a:8c:87:14:a5:d4:be:3f:ff:5a:a2:92:f7:b1:af: 06:c9:d6:6c:fb:16:6c:0a:bc:05:8f:7f:6b:19:cf: fc:c4:ae:db:77:ea:34:2f:18:02:d3:f1:e9:ea:26: c8:56:ff:8f:88:dd:e9:8d:0f:96:a1:76:82:39:b6: 0a:97:3b:9f:e2:ab:4a:f4:a4:40:34:18:eb:4b:19: bc:54:5a:95:32:b3:6b:82:55:63:5a:8f:17:27:53: cd:8c:94:76:84:a1:f7:b6:c0:66:1c:99:e8:30:dd: f0:85:4a:5f:5c:b5:67:e0:11:20:e9:6e:48:77:90: 7a:b6:97:ca:81:9d:b4:0a:25:44:94:1d:27:c0:8d: 6a:73:19:46:b4:ee:5e:03:8e:2f:d7:38:04:db:17: 65:5b:c7:48:63:19:27:96:a0:f3:3f:c2:75:5a:db: f5:48:6a:d7:a2:4d:0b:14:02:72:d3:3c:f6:1b:20: 24:84:1a:1a:bf:63:9f:13:26:f1:39:e2:a7:e1:66: b7:42:35:2c:ca:43:af:88:9b:01:ed:cb:e8:ef:72: 09:6f:0d:8c:08:4c:b1:fb:2e:c7:66:ce:8e:94:3e: 12:1a:69:b1:f5:f3:62:78:88:13:27:1d:79:95:93: 37:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:5D:84:C7:55:C9:62:6D:CB:D3:22:F9:A4:6A:44:7C:A2:E2:A2:95 X509v3 Authority Key Identifier: keyid:44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/7F2Ex1XJYm3L0yL5pGpEfKLiopU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.61.192.0/20 185.111.140.0/22 IPv6: 2a02:5240::/32 Signature Algorithm: sha256WithRSAEncryption ab:d6:c2:46:b9:d9:9c:77:28:6c:ab:3e:9b:10:e8:1a:60:34: 89:dc:ed:29:ac:a1:c0:bf:86:4a:c0:c8:e2:79:56:b7:d0:ee: 17:20:3f:33:57:d4:1d:cf:1d:38:61:36:7f:7e:96:3f:a0:63: f4:89:8c:08:4a:7d:5d:ac:32:2c:6f:a3:bf:3f:c3:b3:4c:c1: 0b:83:a6:82:f9:0a:51:ff:a8:29:c5:73:f8:1c:1c:90:f8:b0: 10:24:90:28:b1:3a:96:3e:1a:76:2a:8a:18:cc:5e:33:9c:8a: e5:9a:97:8d:b3:4e:e5:5f:37:09:2e:23:96:46:94:d5:50:a8: d6:2e:41:c7:7b:7f:bf:a7:6d:95:0f:08:9d:c8:a5:a6:fc:12: ba:d5:0c:78:17:59:51:3e:dd:d1:c9:b6:35:a9:73:9a:6f:85: 55:65:6f:40:d0:0c:fb:6e:9d:eb:2d:a1:a5:c2:6f:a9:d5:fa: c1:71:58:89:ac:58:18:20:a3:e2:91:40:3a:49:65:0a:e4:1a: 84:6d:6b:5a:f9:51:01:a8:d0:7d:21:04:c5:62:36:5e:1e:d6: 57:67:6e:b6:34:f3:39:ad:ce:9d:f1:1d:53:b4:36:5d:93:3f: e1:f7:86:81:61:6e:47:f7:2e:7b:0d:52:14:e9:f6:17:bc:1b: 7c:e7:83:6b -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt26zZV923V44tWz+izTT04MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YzQ0NTVlYmIwOTE4MmQ0ZmJlYjNiNDU2MGUyMDg5ODZl MWFlMjEwHhcNMjYwMTAxMDAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzVkODRjNzU1Yzk2MjZkY2JkMzIyZjlhNDZhNDQ3Y2EyZTJhMjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yCwbRZro2JHJPAOJlcajIcUpdS+ P/9aopL3sa8GydZs+xZsCrwFj39rGc/8xK7bd+o0LxgC0/Hp6ibIVv+PiN3pjQ+W oXaCObYKlzuf4qtK9KRANBjrSxm8VFqVMrNrglVjWo8XJ1PNjJR2hKH3tsBmHJno MN3whUpfXLVn4BEg6W5Id5B6tpfKgZ20CiVElB0nwI1qcxlGtO5eA44v1zgE2xdl W8dIYxknlqDzP8J1Wtv1SGrXok0LFAJy0zz2GyAkhBoav2OfEybxOeKn4Wa3QjUs ykOviJsB7cvo73IJbw2MCEyx+y7HZs6OlD4SGmmx9fNieIgTJx15lZM3BQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOxdhMdVyWJty9Mi+aRqRHyi4qKVMB8GA1UdIwQY MBaAFETERV67CRgtT76ztFYOIImG4a4hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk1SRlhyc0pHQzFQdnJPMFZnNGdpWWJocmlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wNWE5MDMtZDljMC00Njg5LTlhYzgt YzMyZGU5MGUzZmMzLzEvN0YyRXgxWEpZbTNMMHlMNXBHcEVmS0xpb3BVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8wNWE5MDMtZDljMC00Njg5LTlhYzgtYzMyZGU5MGUzZmMz LzEvUk1SRlhyc0pHQzFQdnJPMFZnNGdpWWJocmlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEXD3AAwQC uW+MMA0EAgACMAcDBQAqAlJAMA0GCSqGSIb3DQEBCwUAA4IBAQCr1sJGudmcdyhs qz6bEOgaYDSJ3O0prKHAv4ZKwMjieVa30O4XID8zV9Qdzx04YTZ/fpY/oGP0iYwI Sn1drDIsb6O/P8OzTMELg6aC+QpR/6gpxXP4HByQ+LAQJJAosTqWPhp2KooYzF4z nIrlmpeNs07lXzcJLiOWRpTVUKjWLkHHe3+/p22VDwidyKWm/BK61Qx4F1lRPt3R ybY1qXOab4VVZW9A0Az7bp3rLaGlwm+p1frBcViJrFgYIKPikUA6SWUK5BqEbWta +VEBqNB9IQTFYjZeHtZXZ262NPM5rc6d8R1TtDZdkz/h94aBYW5H9y57DVIU6fYX vBt854Nr -----END CERTIFICATE-----Generated at Mon Feb 2 08:08:20 2026 by rpki-client