This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/7QHZaPi6zF_9KFLPmbyoF3ju4Js.roa File: 7QHZaPi6zF_9KFLPmbyoF3ju4Js.roa (raw, json) Hash identifier: uGtlhWfGFyzTsoRAgtfyrZfPlPC+L8/+nC/qurbI1KA= Subject key identifier: ED:01:D9:68:F8:BA:CC:5F:FD:28:52:CF:99:BC:A8:17:78:EE:E0:9B Certificate issuer: /CN=af935603e52e831537716d458b360192f99a3689 Certificate serial: 019B78A33D064614D3DE6A84FAB2DE1BC202 Authority key identifier: AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/7QHZaPi6zF_9KFLPmbyoF3ju4Js.roa Signing time: Thu 01 Jan 2026 08:18:42 +0000 ROA not before: Thu 01 Jan 2026 08:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.49.132.0/22 maxlen: 22 185.49.132.0/23 maxlen: 23 185.49.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3d:06:46:14:d3:de:6a:84:fa:b2:de:1b:c2:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af935603e52e831537716d458b360192f99a3689 Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed01d968f8bacc5ffd2852cf99bca81778eee09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3f:f1:71:50:07:5a:89:be:a1:e5:46:92:46: bd:b7:2b:33:ee:88:a3:a7:88:c0:fe:75:06:5d:34: ed:12:e5:13:a7:da:d3:db:a4:c3:49:b6:80:52:ac: e8:fb:85:4f:85:07:6b:d5:3d:b3:dd:40:5b:01:63: 84:51:8f:40:3a:ac:df:be:20:f7:5d:5d:b1:a4:06: 01:38:b0:6c:0d:f5:7e:9c:33:08:f2:91:d5:10:ce: ae:35:c8:47:07:53:fb:f6:47:e6:7f:a2:0d:e7:01: d9:85:8a:65:75:51:d6:86:68:b8:2a:dd:a7:ce:cc: dd:ee:04:9c:1e:dd:eb:65:3a:bb:cf:f1:d7:16:6a: 37:17:37:e6:41:10:2e:25:6d:ea:68:ad:35:c0:d3: 4d:55:4b:43:31:f8:54:cf:47:32:89:f6:72:38:fa: 7c:32:d0:67:95:f9:bd:8b:51:9d:dd:51:1d:05:c8: 7c:c3:27:8a:6e:bc:bb:6c:45:74:3a:c0:b0:c3:31: d6:31:08:70:c8:4c:1c:ab:1e:e8:74:d3:d8:d9:cc: 7b:de:3e:e9:ce:81:7a:8b:23:5b:00:62:a0:fb:c5: 26:2f:3c:c2:50:85:51:96:b5:74:78:0d:47:4e:3c: 9b:20:63:5b:f8:95:e2:1a:4b:43:b1:68:6b:da:f3: 5f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:01:D9:68:F8:BA:CC:5F:FD:28:52:CF:99:BC:A8:17:78:EE:E0:9B X509v3 Authority Key Identifier: keyid:AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/7QHZaPi6zF_9KFLPmbyoF3ju4Js.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.49.132.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:7e:de:fd:82:09:95:82:8a:f3:06:e0:1b:b6:e0:29:44:3c: 52:51:4f:28:d9:37:98:11:60:2b:0d:1e:7e:23:7b:7a:e9:ec: 07:0e:31:ea:67:99:cf:33:ce:31:dc:33:e7:b2:0f:10:a7:ad: 37:77:cf:f0:d4:bf:c8:2c:cc:84:da:ab:b6:60:5c:dd:a2:39: 98:30:5d:7d:6d:90:41:34:48:18:6d:cd:62:e3:92:95:0c:52: 2c:5c:3d:2a:51:69:bf:54:b1:e5:c3:db:a1:fd:8f:3d:05:19: 43:99:4f:ff:1d:f4:82:bd:ad:af:ed:8b:81:48:e8:60:72:31: 7c:f2:18:cf:b3:41:35:1e:dd:91:a7:ec:9e:c3:63:e0:3e:dd: e3:04:f1:88:f1:39:85:ea:ba:50:cf:83:98:d6:5e:e3:80:10: 0f:87:39:f2:9f:31:22:ee:01:93:5c:b7:7c:c0:20:a3:36:db: 97:4c:b9:76:c3:76:a2:e1:fd:4c:c4:70:dc:02:c2:26:a3:41: 7c:12:ff:e4:dc:ba:bf:4e:cb:21:c9:75:53:f6:d7:96:71:5c: d1:fb:18:6a:3b:45:dc:14:da:02:fc:08:16:30:9f:d7:93:4e: f9:44:79:36:cf:8c:19:fe:09:89:f4:04:b5:36:9d:74:cf:77: 93:4d:b1:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oz0GRhTT3mqE+rLeG8ICMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmOTM1NjAzZTUyZTgzMTUzNzcxNmQ0NThiMzYwMTkyZjk5 YTM2ODkwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDAxZDk2OGY4YmFjYzVmZmQyODUyY2Y5OWJjYTgxNzc4ZWVlMDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz/xcVAHWom+oeVGkka9tysz7oij p4jA/nUGXTTtEuUTp9rT26TDSbaAUqzo+4VPhQdr1T2z3UBbAWOEUY9AOqzfviD3 XV2xpAYBOLBsDfV+nDMI8pHVEM6uNchHB1P79kfmf6IN5wHZhYpldVHWhmi4Kt2n zszd7gScHt3rZTq7z/HXFmo3FzfmQRAuJW3qaK01wNNNVUtDMfhUz0cyifZyOPp8 MtBnlfm9i1Gd3VEdBch8wyeKbry7bEV0OsCwwzHWMQhwyEwcqx7odNPY2cx73j7p zoF6iyNbAGKg+8UmLzzCUIVRlrV0eA1HTjybIGNb+JXiGktDsWhr2vNfxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO0B2Wj4usxf/ShSz5m8qBd47uCbMB8GA1UdIwQY MBaAFK+TVgPlLoMVN3FtRYs2AZL5mjaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjVOV0EtVXVneFUzY1cxRml6WUJrdm1hTm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8zMDAxYWQtZGU5MC00MzYwLTgxMWYt MGEwZDA1ZWQwYzZiLzEvN1FIWmFQaTZ6Rl85S0ZMUG1ieW9GM2p1NEpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8zMDAxYWQtZGU5MC00MzYwLTgxMWYtMGEwZDA1ZWQwYzZi LzEvcjVOV0EtVXVneFUzY1cxRml6WUJrdm1hTm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTGEMA0G CSqGSIb3DQEBCwUAA4IBAQCLft79ggmVgorzBuAbtuApRDxSUU8o2TeYEWArDR5+ I3t66ewHDjHqZ5nPM84x3DPnsg8Qp603d8/w1L/ILMyE2qu2YFzdojmYMF19bZBB NEgYbc1i45KVDFIsXD0qUWm/VLHlw9uh/Y89BRlDmU//HfSCva2v7YuBSOhgcjF8 8hjPs0E1Ht2Rp+yew2PgPt3jBPGI8TmF6rpQz4OY1l7jgBAPhznynzEi7gGTXLd8 wCCjNtuXTLl2w3ai4f1MxHDcAsImo0F8Ev/k3Lq/TsshyXVT9teWcVzR+xhqO0Xc FNoC/AgWMJ/Xk075RHk2z4wZ/gmJ9AS1Np10z3eTTbHd -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:43 2026 by rpki-client