This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/Zi7Fm7xGDMI0wzFEfSwodKSqV1A.roa File: Zi7Fm7xGDMI0wzFEfSwodKSqV1A.roa (raw, json) Hash identifier: xTOm/EemcqAocmaFWYcszLLVt5VioXRzSyJ/5c30dUE= Subject key identifier: 66:2E:C5:9B:BC:46:0C:C2:34:C3:31:44:7D:2C:28:74:A4:AA:57:50 Certificate issuer: /CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b Certificate serial: 019B797DFB81D087908CA64CEFDF8F97208B Authority key identifier: 7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/Zi7Fm7xGDMI0wzFEfSwodKSqV1A.roa Signing time: Thu 01 Jan 2026 12:17:38 +0000 ROA not before: Thu 01 Jan 2026 12:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15757 IP address blocks: 82.114.128.0/19 maxlen: 19 94.124.224.0/21 maxlen: 23 185.165.200.0/22 maxlen: 24 217.17.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:fb:81:d0:87:90:8c:a6:4c:ef:df:8f:97:20:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b Validity Not Before: Jan 1 12:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=662ec59bbc460cc234c331447d2c2874a4aa5750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:90:bd:3b:3b:c3:4a:68:89:e9:44:5e:29:e0: 00:20:a9:77:e6:51:65:c9:72:d7:96:d8:be:ec:79: 9f:a3:6c:47:e7:63:89:08:65:83:2e:41:bb:df:c3: 30:44:a0:47:52:b6:34:2c:2e:ed:af:05:bd:15:6b: 89:ec:6f:e5:57:c9:d3:c7:87:63:01:df:11:52:8d: a9:28:f2:6e:d9:82:15:7f:f6:d3:cd:5f:2d:61:be: e6:b8:92:af:bf:f7:b5:57:ee:74:63:2d:8b:2c:d0: 43:95:07:b0:ba:33:9d:7f:22:4d:f1:ec:a2:bf:46: 73:6e:70:b4:49:ae:52:6d:c5:a7:b9:43:51:1f:e6: 13:7b:5c:62:53:a1:3e:31:38:7d:bf:91:f1:fa:9d: 63:b8:cb:3f:be:90:07:a5:0b:4b:4e:a6:00:11:04: c2:c9:ba:54:f8:9c:7c:98:cb:f2:73:40:ea:a5:68: 6f:cd:13:5b:2d:39:6a:a9:f1:06:7e:f5:bf:fe:e3: d6:f2:a8:ba:7d:75:b0:6d:b0:d9:90:55:7d:fc:e8: 34:bf:57:0f:d6:ba:6e:7c:8e:89:cc:f2:f1:12:d1: 3e:b1:7f:2c:87:51:c4:54:89:4b:f9:c9:dc:62:2d: 3e:89:4d:ef:2a:00:0c:53:85:c1:0d:3e:ff:64:19: 42:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2E:C5:9B:BC:46:0C:C2:34:C3:31:44:7D:2C:28:74:A4:AA:57:50 X509v3 Authority Key Identifier: keyid:7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/Zi7Fm7xGDMI0wzFEfSwodKSqV1A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.114.128.0/19 94.124.224.0/21 185.165.200.0/22 217.17.160.0/19 Signature Algorithm: sha256WithRSAEncryption a2:9b:84:70:86:45:2d:6e:0f:41:c0:15:c8:ff:2a:62:0e:11: 34:11:55:aa:2e:34:d5:97:16:cc:c5:2c:49:52:1d:dc:6e:8f: eb:81:c6:62:7e:fe:e1:2e:f7:f6:ab:9a:21:e8:f3:14:e0:52: 33:45:b3:fa:b6:62:7c:bc:a4:d0:72:09:ad:23:ab:dd:e1:9c: c1:2f:e0:5b:0b:0e:c6:c1:08:cd:a5:de:70:6f:43:96:0a:dc: ef:68:8b:2d:2e:42:ab:90:96:d0:29:98:e0:5c:22:74:60:1d: a2:34:03:30:b4:5b:8d:48:eb:d1:23:46:f0:d8:18:19:1d:69: e5:d6:12:e8:6b:c7:9b:c1:5e:b0:20:ab:6c:0b:9a:ab:13:d7: ac:b7:49:ab:96:74:68:f8:f1:fe:a4:48:34:72:c6:17:65:d0: 96:07:85:46:f7:31:e6:6b:53:75:ee:c0:e9:b7:c3:8c:1c:c1: e4:18:aa:44:6c:59:66:bf:dd:32:af:07:28:29:7f:93:87:12: 68:68:37:13:b1:a1:6e:d5:0f:cd:2c:55:76:39:b7:47:38:8d: c6:68:e6:1e:59:17:92:b6:7b:3e:73:01:cc:d5:71:8a:f7:79: 80:11:b6:2a:38:92:63:71:a8:e2:3b:b6:ab:91:1c:bd:68:4b: 15:40:0e:57 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5ffuB0IeQjKZM79+PlyCLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhNDllZWFmMjQzNDJjM2IyYzYzMmM5ZTQ4NDYzMTM4ZGUy ZGMwMGIwHhcNMjYwMTAxMTIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjJlYzU5YmJjNDYwY2MyMzRjMzMxNDQ3ZDJjMjg3NGE0YWE1NzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspC9OzvDSmiJ6UReKeAAIKl35lFl yXLXlti+7Hmfo2xH52OJCGWDLkG738MwRKBHUrY0LC7trwW9FWuJ7G/lV8nTx4dj Ad8RUo2pKPJu2YIVf/bTzV8tYb7muJKvv/e1V+50Yy2LLNBDlQewujOdfyJN8eyi v0ZzbnC0Sa5SbcWnuUNRH+YTe1xiU6E+MTh9v5Hx+p1juMs/vpAHpQtLTqYAEQTC ybpU+Jx8mMvyc0DqpWhvzRNbLTlqqfEGfvW//uPW8qi6fXWwbbDZkFV9/Og0v1cP 1rpufI6JzPLxEtE+sX8sh1HEVIlL+cncYi0+iU3vKgAMU4XBDT7/ZBlCEQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGYuxZu8RgzCNMMxRH0sKHSkqldQMB8GA1UdIwQY MBaAFHpJ7q8kNCw7LGMsnkhGMTjeLcALMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWtudXJ5UTBMRHNzWXl5ZVNFWXhPTjR0d0FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82M2I4YWEtNzIyZi00MDA5LWFkYTct ZjliNjA3MTE0NTNjLzEvWmk3Rm03eEdETUkwd3pGRWZTd29kS1NxVjFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy82M2I4YWEtNzIyZi00MDA5LWFkYTctZjliNjA3MTE0NTNj LzEvZWtudXJ5UTBMRHNzWXl5ZVNFWXhPTjR0d0FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQFUnKAAwQD XnzgAwQCuaXIAwQF2RGgMA0GCSqGSIb3DQEBCwUAA4IBAQCim4RwhkUtbg9BwBXI /ypiDhE0EVWqLjTVlxbMxSxJUh3cbo/rgcZifv7hLvf2q5oh6PMU4FIzRbP6tmJ8 vKTQcgmtI6vd4ZzBL+BbCw7GwQjNpd5wb0OWCtzvaIstLkKrkJbQKZjgXCJ0YB2i NAMwtFuNSOvRI0bw2BgZHWnl1hLoa8ebwV6wIKtsC5qrE9est0mrlnRo+PH+pEg0 csYXZdCWB4VG9zHma1N17sDpt8OMHMHkGKpEbFlmv90yrwcoKX+ThxJoaDcTsaFu 1Q/NLFV2ObdHOI3GaOYeWReStns+cwHM1XGK93mAEbYqOJJjcajiO7arkRy9aEsV QA5X -----END CERTIFICATE-----Generated at Tue Feb 10 00:01:47 2026 by rpki-client