This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/0u1EuXjDpMxmJEton1vb24EC90g.roa File: 0u1EuXjDpMxmJEton1vb24EC90g.roa (raw, json) Hash identifier: c5s8FvXe/Y+Qj5eKBuhwHIjGOjYzX65vKHhFShS4Kfo= Subject key identifier: D2:ED:44:B9:78:C3:A4:CC:66:24:4B:68:9F:5B:DB:DB:81:02:F7:48 Certificate issuer: /CN=e7c7ec8d780503db7cabcb141d6b991cd029a6a2 Certificate serial: 019B7E377BBE9B12668B7C19B81FB7B8818E Authority key identifier: E7:C7:EC:8D:78:05:03:DB:7C:AB:CB:14:1D:6B:99:1C:D0:29:A6:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/0u1EuXjDpMxmJEton1vb24EC90g.roa Signing time: Fri 02 Jan 2026 10:18:43 +0000 ROA not before: Fri 02 Jan 2026 10:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48774 IP address blocks: 194.59.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:7b:be:9b:12:66:8b:7c:19:b8:1f:b7:b8:81:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7c7ec8d780503db7cabcb141d6b991cd029a6a2 Validity Not Before: Jan 2 10:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2ed44b978c3a4cc66244b689f5bdbdb8102f748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b2:a9:a8:81:f1:79:b0:7a:b0:52:b0:ae:99: b1:f7:da:62:ef:c7:cd:57:aa:97:9e:91:dd:7c:a6: 53:b1:8b:35:0b:8d:5e:18:8e:1d:8a:0d:96:6d:8f: e2:f7:5c:63:ae:b5:58:06:9a:a2:b7:36:2e:4d:6a: bd:88:4a:22:86:bb:ee:cf:be:96:51:f9:01:bc:5c: ef:f4:cf:18:ae:04:96:2c:3a:7d:ca:d6:bc:31:44: df:0d:8d:c4:2c:0a:cd:2e:e3:75:88:35:0d:73:55: bf:05:bf:33:33:8f:e9:f0:86:da:c3:db:ca:89:fd: d6:a7:c6:98:6d:a4:9d:e5:b1:3b:81:dc:11:ce:b1: bc:95:f4:a2:fe:cd:ac:cb:84:5e:f8:bf:b2:7d:17: d4:14:32:55:f4:2c:bc:dd:a9:73:b3:42:cd:80:ba: a7:a6:43:88:67:c9:13:21:6b:f2:55:70:b3:49:e8: f8:82:7a:4b:49:f6:65:82:a1:b3:91:46:08:d9:14: 84:38:5f:07:07:b3:30:b4:fa:e0:49:42:bb:18:51: 7f:67:06:6b:de:d8:a3:d6:d1:c5:09:7f:a8:9e:e6: 93:8d:dc:9e:c6:8f:60:36:b3:59:09:8a:8c:63:18: ce:10:7f:7c:5d:44:22:2a:a8:5b:48:bb:b7:a7:1c: 2c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:ED:44:B9:78:C3:A4:CC:66:24:4B:68:9F:5B:DB:DB:81:02:F7:48 X509v3 Authority Key Identifier: keyid:E7:C7:EC:8D:78:05:03:DB:7C:AB:CB:14:1D:6B:99:1C:D0:29:A6:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/0u1EuXjDpMxmJEton1vb24EC90g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.59.182.0/24 Signature Algorithm: sha256WithRSAEncryption 22:89:1b:a0:44:43:c6:3a:1c:a3:e3:3a:ba:d0:95:e5:f0:f8: 3b:79:51:af:69:64:7d:03:30:f0:81:95:99:3b:8e:22:29:a7: a9:10:d2:2a:01:01:04:b3:08:15:ee:20:68:30:57:60:4c:74: c2:1c:35:30:8e:68:f8:d5:a9:dc:85:e0:31:63:e7:ca:fe:07: 8b:ec:4f:4e:29:a5:bb:71:50:5c:0f:e3:98:b6:4b:c8:51:13: ab:be:ac:04:58:6a:83:d1:41:fe:da:d7:cd:58:c7:e3:47:3f: 53:c1:e9:a6:88:b3:ff:b6:57:cf:21:64:28:b1:64:f7:73:7c: 83:09:28:5b:2b:18:04:31:a4:81:ab:ac:71:b9:9a:46:88:0d: 65:c1:64:71:19:25:54:02:3d:36:53:e4:83:cf:ac:8a:ed:a2: c9:26:6a:05:c8:6c:d8:2a:29:ee:a1:60:5c:52:dc:d7:22:e6: c6:3f:0b:8c:8a:21:a3:03:7d:b3:93:60:02:7c:e9:bf:ae:b8: 0b:c9:ab:bd:62:4d:5f:0b:e3:fc:c1:2d:e5:2b:c6:d7:40:84: 5f:1b:bc:ab:15:2d:a8:7f:a2:4f:e2:77:2c:c0:e8:4e:60:9a: b1:07:94:df:3e:dd:90:2e:8e:9c:9a:f8:87:5d:c7:8d:34:6d: a2:55:81:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N3u+mxJmi3wZuB+3uIGOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YzdlYzhkNzgwNTAzZGI3Y2FiY2IxNDFkNmI5OTFjZDAy OWE2YTIwHhcNMjYwMTAyMTAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmVkNDRiOTc4YzNhNGNjNjYyNDRiNjg5ZjViZGJkYjgxMDJmNzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07KpqIHxebB6sFKwrpmx99pi78fN V6qXnpHdfKZTsYs1C41eGI4dig2WbY/i91xjrrVYBpqitzYuTWq9iEoihrvuz76W UfkBvFzv9M8YrgSWLDp9yta8MUTfDY3ELArNLuN1iDUNc1W/Bb8zM4/p8Ibaw9vK if3Wp8aYbaSd5bE7gdwRzrG8lfSi/s2sy4Re+L+yfRfUFDJV9Cy83alzs0LNgLqn pkOIZ8kTIWvyVXCzSej4gnpLSfZlgqGzkUYI2RSEOF8HB7MwtPrgSUK7GFF/ZwZr 3tij1tHFCX+onuaTjdyexo9gNrNZCYqMYxjOEH98XUQiKqhbSLu3pxwszQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNLtRLl4w6TMZiRLaJ9b29uBAvdIMB8GA1UdIwQY MBaAFOfH7I14BQPbfKvLFB1rmRzQKaaiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNThmc2pYZ0ZBOXQ4cThzVUhXdVpITkFwcHFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy82NzRlNzYtNDI0NS00MDJkLTljNTEt ZDJkMmFiYTI4ZTgwLzEvMHUxRXVYakRwTXhtSkV0b24xdmIyNEVDOTBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy82NzRlNzYtNDI0NS00MDJkLTljNTEtZDJkMmFiYTI4ZTgw LzEvNThmc2pYZ0ZBOXQ4cThzVUhXdVpITkFwcHFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwju2MA0G CSqGSIb3DQEBCwUAA4IBAQAiiRugREPGOhyj4zq60JXl8Pg7eVGvaWR9AzDwgZWZ O44iKaepENIqAQEEswgV7iBoMFdgTHTCHDUwjmj41ancheAxY+fK/geL7E9OKaW7 cVBcD+OYtkvIUROrvqwEWGqD0UH+2tfNWMfjRz9TwemmiLP/tlfPIWQosWT3c3yD CShbKxgEMaSBq6xxuZpGiA1lwWRxGSVUAj02U+SDz6yK7aLJJmoFyGzYKinuoWBc UtzXIubGPwuMiiGjA32zk2ACfOm/rrgLyau9Yk1fC+P8wS3lK8bXQIRfG7yrFS2o f6JP4ncswOhOYJqxB5TfPt2QLo6cmviHXceNNG2iVYFN -----END CERTIFICATE-----Generated at Tue Feb 10 04:48:51 2026 by rpki-client