This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/o7A96UnzoRTZUSuVj7u0eveSlFA.roa File: o7A96UnzoRTZUSuVj7u0eveSlFA.roa (raw, json) Hash identifier: FF0zn80ZmtefbQSduZMh5HE52BLjPHqOv0VeweTxfaE= Subject key identifier: A3:B0:3D:E9:49:F3:A1:14:D9:51:2B:95:8F:BB:B4:7A:F7:92:94:50 Certificate issuer: /CN=7abe11843dbe80340b2460fc160ec6b9b88f222a Certificate serial: 019B77C75DF7D86281EDA36D4EBE1D3B5DD9 Authority key identifier: 7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/o7A96UnzoRTZUSuVj7u0eveSlFA.roa Signing time: Thu 01 Jan 2026 04:18:32 +0000 ROA not before: Thu 01 Jan 2026 04:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213744 IP address blocks: 91.142.129.0/24 maxlen: 24 212.233.68.0/22 maxlen: 22 212.233.68.0/23 maxlen: 23 212.233.68.0/24 maxlen: 24 212.233.69.0/24 maxlen: 24 212.233.70.0/23 maxlen: 23 212.233.70.0/24 maxlen: 24 212.233.71.0/24 maxlen: 24 2a13:6d40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5d:f7:d8:62:81:ed:a3:6d:4e:be:1d:3b:5d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7abe11843dbe80340b2460fc160ec6b9b88f222a Validity Not Before: Jan 1 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3b03de949f3a114d9512b958fbbb47af7929450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ef:40:22:b8:02:f8:50:1a:96:39:87:bd:59: 2d:51:23:32:aa:4d:5d:b9:1f:cc:a4:e0:6a:11:3e: 63:2e:1b:60:f9:be:03:e9:86:fe:de:ec:de:0d:b3: 39:97:b0:4d:6c:66:83:c5:03:7d:f0:ca:73:9d:61: 58:c2:fd:79:0d:88:61:51:d9:f9:b7:ef:7a:c3:d0: 6e:27:a4:be:ce:7f:09:3b:23:a6:8a:a0:22:43:0e: 02:e9:c6:26:31:70:a9:d7:7b:86:22:ae:69:c2:45: 0a:94:b6:88:1c:bd:c3:db:e2:fd:ff:ed:97:38:77: b8:56:1e:8c:e1:1c:99:74:2f:b8:29:7d:4d:9d:18: 5b:33:84:4e:dc:0d:01:c2:d5:f7:cd:a1:b5:e4:18: 91:59:df:5c:a0:be:ad:42:44:c3:39:80:63:59:87: 0f:47:b4:c8:40:85:d0:fb:f4:fc:18:6f:b4:b7:f1: 18:cf:4f:59:4a:4a:e8:ca:94:68:09:94:73:67:09: 39:8c:54:84:8f:0a:be:85:f4:8a:95:cc:e2:8e:7d: 93:28:8e:29:52:1c:34:4a:20:47:2f:b6:17:a3:a5: 10:7b:39:48:1a:2e:7b:aa:65:ad:b2:28:03:04:80: 48:12:65:05:ac:a5:71:8c:be:76:a5:f0:b8:62:1d: 3d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B0:3D:E9:49:F3:A1:14:D9:51:2B:95:8F:BB:B4:7A:F7:92:94:50 X509v3 Authority Key Identifier: keyid:7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/o7A96UnzoRTZUSuVj7u0eveSlFA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.142.129.0/24 212.233.68.0/22 IPv6: 2a13:6d40::/29 Signature Algorithm: sha256WithRSAEncryption 44:a7:0d:5f:9f:d0:a4:37:5c:7c:47:8f:85:2d:fa:8e:5c:36: f5:1f:30:e8:4d:d9:80:1e:5a:e3:dc:29:25:13:6c:2e:10:9e: 39:47:2e:de:59:80:5b:7f:57:c3:f7:f2:77:5c:1c:b7:de:53: 39:50:bf:a3:57:e1:44:cf:39:0e:1c:20:48:b8:cb:fa:59:b7: c5:f4:16:95:49:2d:cc:ba:dd:81:6f:db:ae:5d:b5:fc:13:61: b0:9d:56:e6:58:5b:6f:00:a2:9c:d7:ee:b4:b0:d5:8d:80:84: 2d:e0:a9:44:42:e6:90:9e:97:cc:94:c5:4e:00:ee:9f:88:7c: 9e:fe:c3:5d:8b:8e:e5:51:71:6b:c9:60:dc:2c:25:fb:ff:f4: ac:62:e6:b8:7d:2c:51:0a:e7:b4:ea:d7:d7:b2:7c:42:2d:0b: e5:ef:5e:ce:70:22:7e:e5:61:88:48:2a:88:f1:63:95:1e:c6: 06:9b:e7:f2:61:16:59:48:fc:9d:2b:1d:1a:2d:a0:e2:f4:03: db:30:f9:eb:51:b3:38:b0:e1:f9:70:c0:5c:01:3e:9e:e9:32: fe:76:4e:c9:16:de:b9:1d:93:36:0a:73:54:e4:1c:5e:21:bd: bc:f6:53:24:7d:28:60:60:df:b9:3a:10:6c:a9:f7:3a:c6:85: eb:34:5d:e5 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3x1332GKB7aNtTr4dO13ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhYmUxMTg0M2RiZTgwMzQwYjI0NjBmYzE2MGVjNmI5Yjg4 ZjIyMmEwHhcNMjYwMTAxMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2IwM2RlOTQ5ZjNhMTE0ZDk1MTJiOTU4ZmJiYjQ3YWY3OTI5NDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO9AIrgC+FAaljmHvVktUSMyqk1d uR/MpOBqET5jLhtg+b4D6Yb+3uzeDbM5l7BNbGaDxQN98MpznWFYwv15DYhhUdn5 t+96w9BuJ6S+zn8JOyOmiqAiQw4C6cYmMXCp13uGIq5pwkUKlLaIHL3D2+L9/+2X OHe4Vh6M4RyZdC+4KX1NnRhbM4RO3A0BwtX3zaG15BiRWd9coL6tQkTDOYBjWYcP R7TIQIXQ+/T8GG+0t/EYz09ZSkroypRoCZRzZwk5jFSEjwq+hfSKlczijn2TKI4p Uhw0SiBHL7YXo6UQezlIGi57qmWtsigDBIBIEmUFrKVxjL52pfC4Yh093QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKOwPelJ86EU2VErlY+7tHr3kpRQMB8GA1UdIwQY MBaAFHq+EYQ9voA0CyRg/BYOxrm4jyIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXI0UmhEMi1nRFFMSkdEOEZnN0d1YmlQSWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82MjM1NjEtMDcxNS00Mjc3LWEwYmUt MzQxMWM2ZmI0ZmNhLzEvbzdBOTZVbnpvUlRaVVN1Vmo3dTBldmVTbEZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi82MjM1NjEtMDcxNS00Mjc3LWEwYmUtMzQxMWM2ZmI0ZmNh LzEvZXI0UmhEMi1nRFFMSkdEOEZnN0d1YmlQSWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW46BAwQC 1OlEMA0EAgACMAcDBQMqE21AMA0GCSqGSIb3DQEBCwUAA4IBAQBEpw1fn9CkN1x8 R4+FLfqOXDb1HzDoTdmAHlrj3CklE2wuEJ45Ry7eWYBbf1fD9/J3XBy33lM5UL+j V+FEzzkOHCBIuMv6WbfF9BaVSS3Mut2Bb9uuXbX8E2GwnVbmWFtvAKKc1+60sNWN gIQt4KlEQuaQnpfMlMVOAO6fiHye/sNdi47lUXFryWDcLCX7//SsYua4fSxRCue0 6tfXsnxCLQvl717OcCJ+5WGISCqI8WOVHsYGm+fyYRZZSPydKx0aLaDi9APbMPnr UbM4sOH5cMBcAT6e6TL+dk7JFt65HZM2CnNU5BxeIb289lMkfShgYN+5OhBsqfc6 xoXrNF3l -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:32 2026 by rpki-client