This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/7y2-JyJSBLPzJ1F-GfRB9L2A1lc.roa File: 7y2-JyJSBLPzJ1F-GfRB9L2A1lc.roa (raw, json) Hash identifier: Je64415GY9BUK++a0MLtgLPvf9KrlsWdU946uIXLKos= Subject key identifier: EF:2D:BE:27:22:52:04:B3:F3:27:51:7E:19:F4:41:F4:BD:80:D6:57 Certificate issuer: /CN=d2d4bd71a43d8cdd462a61eee0d94700c7e6425f Certificate serial: 019B7DC998EE125B0A32329B21E1DBD8BFE5 Authority key identifier: D2:D4:BD:71:A4:3D:8C:DD:46:2A:61:EE:E0:D9:47:00:C7:E6:42:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tS9caQ9jN1GKmHu4NlHAMfmQl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/7y2-JyJSBLPzJ1F-GfRB9L2A1lc.roa Signing time: Fri 02 Jan 2026 08:18:42 +0000 ROA not before: Fri 02 Jan 2026 08:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199593 IP address blocks: 185.9.204.0/22 maxlen: 22 185.9.204.0/24 maxlen: 24 185.9.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.mft rsync://rpki.ripe.net/repository/DEFAULT/0tS9caQ9jN1GKmHu4NlHAMfmQl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:98:ee:12:5b:0a:32:32:9b:21:e1:db:d8:bf:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2d4bd71a43d8cdd462a61eee0d94700c7e6425f Validity Not Before: Jan 2 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef2dbe27225204b3f327517e19f441f4bd80d657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e9:df:01:4c:3f:79:4d:f9:bb:8d:5f:ce:e7: ce:fe:25:53:ac:a7:82:b3:91:7f:f7:c7:19:b1:21: 4d:1e:50:22:4b:67:0e:2b:c9:32:06:a2:c4:2d:89: 94:67:d3:dd:c8:64:0c:50:c2:4b:2e:ae:6c:14:25: 54:57:2d:d6:6d:00:a4:c6:b4:2e:ec:a9:68:dd:e0: 43:36:2f:94:57:f2:bc:9b:94:de:63:7a:24:2e:e2: 39:e8:57:11:c1:52:2f:ab:ca:72:26:88:bd:a4:e5: 2d:81:c4:d6:e0:6c:42:0c:e2:b2:91:74:02:54:d2: 9c:10:d1:47:74:b5:1e:fc:b7:aa:f4:0f:66:74:d7: 12:13:6e:1a:ca:7d:b8:75:0e:24:b2:7f:36:a2:dc: db:77:bf:bf:a1:c9:7d:cf:a6:be:61:5c:66:9a:e4: a5:51:dc:a3:31:0c:0f:35:3d:a6:9d:68:03:1f:e7: 00:8b:6b:1b:2b:f0:e7:3e:c7:9a:f9:1c:b6:84:75: a4:f9:b6:b2:d9:bd:ae:ee:ba:56:13:e0:4b:2c:1c: 96:fa:e2:63:0d:1b:60:5a:da:fc:05:2c:4f:c7:bd: 74:e9:60:a3:b1:68:b7:11:6a:72:dd:d7:bf:53:0b: d8:86:7a:3d:8c:68:45:93:9f:de:99:97:eb:ec:9e: c4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:2D:BE:27:22:52:04:B3:F3:27:51:7E:19:F4:41:F4:BD:80:D6:57 X509v3 Authority Key Identifier: keyid:D2:D4:BD:71:A4:3D:8C:DD:46:2A:61:EE:E0:D9:47:00:C7:E6:42:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tS9caQ9jN1GKmHu4NlHAMfmQl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/7y2-JyJSBLPzJ1F-GfRB9L2A1lc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.9.204.0/22 Signature Algorithm: sha256WithRSAEncryption 91:4f:9e:16:33:92:90:6a:fa:9c:b1:ab:ae:78:76:fa:60:98: 01:8a:b6:a3:0d:b9:93:ea:db:b7:af:eb:ba:c0:67:00:88:bc: 39:13:13:72:15:69:c3:2a:03:bc:a9:0d:5c:25:b0:c0:18:6f: ac:6c:7a:f3:78:5f:13:19:b1:43:0d:dc:c3:a3:16:e7:13:5f: 0c:c3:2d:96:f4:d2:5b:71:d6:5f:30:f5:d7:4e:1e:b8:45:07: cb:af:ae:f0:0a:b7:73:c3:65:3c:80:e9:08:ee:ab:b4:0f:83: f5:df:7e:8b:56:f1:bf:a6:69:a9:77:e7:d5:95:6b:ce:84:b2: bb:8e:a0:40:0e:fc:bf:eb:9b:d7:ce:4e:be:0e:ef:39:55:27: 47:31:7d:ae:59:05:6b:be:df:1e:d1:f3:a8:05:11:2c:73:f3: 6b:f6:cf:07:21:44:cf:50:9a:cc:10:92:b1:a0:c4:95:c6:6d: 14:e3:a3:bb:90:28:83:6d:b7:62:02:89:bb:4b:3f:51:ec:da: 8a:e8:cb:82:30:b0:8a:7b:67:45:3b:e9:82:ae:2f:63:f3:86: 10:06:33:03:fe:4b:9d:44:3a:24:1e:7a:bb:8e:da:0b:d8:82: 99:62:48:6a:e2:f1:b4:cb:75:b3:ae:96:12:2c:b9:78:ce:6a: b2:65:a2:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yZjuElsKMjKbIeHb2L/lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZDRiZDcxYTQzZDhjZGQ0NjJhNjFlZWUwZDk0NzAwYzdl NjQyNWYwHhcNMjYwMTAyMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjJkYmUyNzIyNTIwNGIzZjMyNzUxN2UxOWY0NDFmNGJkODBkNjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+nfAUw/eU35u41fzufO/iVTrKeC s5F/98cZsSFNHlAiS2cOK8kyBqLELYmUZ9PdyGQMUMJLLq5sFCVUVy3WbQCkxrQu 7Klo3eBDNi+UV/K8m5TeY3okLuI56FcRwVIvq8pyJoi9pOUtgcTW4GxCDOKykXQC VNKcENFHdLUe/Leq9A9mdNcSE24ayn24dQ4ksn82otzbd7+/ocl9z6a+YVxmmuSl UdyjMQwPNT2mnWgDH+cAi2sbK/DnPsea+Ry2hHWk+bay2b2u7rpWE+BLLByW+uJj DRtgWtr8BSxPx7106WCjsWi3EWpy3de/UwvYhno9jGhFk5/emZfr7J7ELQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO8tviciUgSz8ydRfhn0QfS9gNZXMB8GA1UdIwQY MBaAFNLUvXGkPYzdRiph7uDZRwDH5kJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHRTOWNhUTlqTjFHS21IdTRObEhBTWZtUWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80MWRkMDAtYjU3Yi00NjM4LWEwOGIt Njg1M2M0MWNhMDNlLzEvN3kyLUp5SlNCTFB6SjFGLUdmUkI5TDJBMWxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80MWRkMDAtYjU3Yi00NjM4LWEwOGItNjg1M2M0MWNhMDNl LzEvMHRTOWNhUTlqTjFHS21IdTRObEhBTWZtUWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuQnMMA0G CSqGSIb3DQEBCwUAA4IBAQCRT54WM5KQavqcsauueHb6YJgBirajDbmT6tu3r+u6 wGcAiLw5ExNyFWnDKgO8qQ1cJbDAGG+sbHrzeF8TGbFDDdzDoxbnE18Mwy2W9NJb cdZfMPXXTh64RQfLr67wCrdzw2U8gOkI7qu0D4P1336LVvG/pmmpd+fVlWvOhLK7 jqBADvy/65vXzk6+Du85VSdHMX2uWQVrvt8e0fOoBREsc/Nr9s8HIUTPUJrMEJKx oMSVxm0U46O7kCiDbbdiAom7Sz9R7NqK6MuCMLCKe2dFO+mCri9j84YQBjMD/kud RDokHnq7jtoL2IKZYkhq4vG0y3WzrpYSLLl4zmqyZaLF -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:31 2026 by rpki-client