This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/C7fQ7Ve9jd1KjW3OO8oxR9QhSyI.roa File: C7fQ7Ve9jd1KjW3OO8oxR9QhSyI.roa (raw, json) Hash identifier: R/aIjhVfQy4DuH2HYkC6Yf9teDlMa+Wx7kzzvb2vFZ0= Subject key identifier: 0B:B7:D0:ED:57:BD:8D:DD:4A:8D:6D:CE:3B:CA:31:47:D4:21:4B:22 Certificate issuer: /CN=eca33c96f02a9f0bef25cd3806a2467ca165637b Certificate serial: 019B7A5A03267CF7653767A6774835A12711 Authority key identifier: EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/C7fQ7Ve9jd1KjW3OO8oxR9QhSyI.roa Signing time: Thu 01 Jan 2026 16:17:57 +0000 ROA not before: Thu 01 Jan 2026 16:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199571 IP address blocks: 37.9.136.0/21 maxlen: 21 185.219.228.0/22 maxlen: 22 2a02:e640::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 16:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:03:26:7c:f7:65:37:67:a6:77:48:35:a1:27:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eca33c96f02a9f0bef25cd3806a2467ca165637b Validity Not Before: Jan 1 16:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bb7d0ed57bd8ddd4a8d6dce3bca3147d4214b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6a:a1:91:e9:b7:5f:73:06:b6:c3:8d:4c:77: 21:de:ab:21:99:19:5a:60:c2:dd:2d:f1:ba:10:7b: af:8f:77:79:e3:1c:4f:5f:bd:29:db:89:2f:69:e1: 30:e6:f7:bf:2a:7f:a8:c4:8d:17:f1:8a:fa:5b:94: 5b:bc:0d:64:6e:53:1a:23:25:c2:a2:08:4a:4c:61: b6:1b:ed:d5:d3:4b:e0:2c:72:01:c0:1c:f1:f4:b2: a5:40:1e:d7:d0:3f:6d:8a:f3:3d:dd:ad:b7:65:b4: 41:79:20:2a:24:2d:4c:0a:83:3f:64:29:1a:d5:8f: b4:13:e4:3d:e6:cb:8e:a7:1d:d9:d6:41:11:89:5d: 03:d7:c2:eb:c3:9a:20:cb:9e:38:d6:97:d3:93:eb: af:2a:fe:62:9e:01:a7:f4:c7:f0:b0:26:0f:ee:41: 1a:40:02:2d:fb:c1:9f:83:6e:71:4a:6a:88:0d:f6: 4e:5e:81:cc:f1:d2:fe:0d:ec:49:9e:38:63:2d:45: 91:9d:8c:d9:6b:b0:be:f3:a9:2f:6e:1e:5d:2d:af: f8:e6:cf:d3:89:5e:88:ba:01:b7:6b:94:0b:bc:16: 89:0e:1a:ef:45:5f:ec:1c:30:63:e8:80:3b:e5:89: 1e:99:8b:11:b0:a7:5f:79:44:19:17:95:ff:5b:c6: b5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B7:D0:ED:57:BD:8D:DD:4A:8D:6D:CE:3B:CA:31:47:D4:21:4B:22 X509v3 Authority Key Identifier: keyid:EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/C7fQ7Ve9jd1KjW3OO8oxR9QhSyI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.9.136.0/21 185.219.228.0/22 IPv6: 2a02:e640::/29 Signature Algorithm: sha256WithRSAEncryption 4a:7d:1f:c7:21:de:f2:5f:9f:c6:94:24:e8:98:66:40:c8:4e: 84:7c:cf:17:70:e2:5c:73:74:cc:d9:30:a6:50:40:c6:b1:a9: f4:9a:b5:51:e4:e7:6a:8c:c0:06:d0:a6:ff:4b:05:3c:10:91: 78:4f:ba:90:e0:de:cb:0b:34:d2:76:6d:42:ce:d5:e7:3d:b7: e8:b3:5a:f9:9a:7c:dd:27:17:10:b6:ff:b9:2c:9f:fa:bd:97: 2f:f6:26:bb:9a:c0:11:ae:25:5a:35:f5:0a:f8:1f:b3:2a:f6: 27:6c:ab:ea:06:16:7c:e8:da:ce:22:e9:f9:10:0c:38:70:d8: 63:00:3b:f9:68:ce:9a:70:68:f8:3f:0c:c1:bd:61:bc:5d:6b: 3b:e8:52:5e:03:1f:da:ba:f0:25:9f:6f:ed:e1:32:a9:b4:ad: 0b:e8:f6:93:c0:13:7c:80:de:d1:1b:68:d6:e5:21:76:66:60: be:69:53:99:a0:54:ab:d7:0e:e2:bd:31:a6:27:ad:bb:c5:ee: bc:8a:be:8e:73:21:40:eb:39:06:30:af:ab:3c:2c:dc:24:84: 9b:0d:2a:d2:f6:57:8b:c7:72:fb:f3:73:d4:b0:c5:78:7d:45: 18:d2:8d:29:76:90:de:09:47:cc:a1:dc:52:a6:7e:ec:a8:08: 62:3b:63:21 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6WgMmfPdlN2emd0g1oScRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYTMzYzk2ZjAyYTlmMGJlZjI1Y2QzODA2YTI0NjdjYTE2 NTYzN2IwHhcNMjYwMTAxMTYxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmI3ZDBlZDU3YmQ4ZGRkNGE4ZDZkY2UzYmNhMzE0N2Q0MjE0YjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmqhkem3X3MGtsONTHch3qshmRla YMLdLfG6EHuvj3d54xxPX70p24kvaeEw5ve/Kn+oxI0X8Yr6W5RbvA1kblMaIyXC oghKTGG2G+3V00vgLHIBwBzx9LKlQB7X0D9tivM93a23ZbRBeSAqJC1MCoM/ZCka 1Y+0E+Q95suOpx3Z1kERiV0D18Lrw5ogy5441pfTk+uvKv5ingGn9MfwsCYP7kEa QAIt+8Gfg25xSmqIDfZOXoHM8dL+DexJnjhjLUWRnYzZa7C+86kvbh5dLa/45s/T iV6IugG3a5QLvBaJDhrvRV/sHDBj6IA75YkemYsRsKdfeUQZF5X/W8a1HwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAu30O1XvY3dSo1tzjvKMUfUIUsiMB8GA1UdIwQY MBaAFOyjPJbwKp8L7yXNOAaiRnyhZWN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi80OWFlNDItMGU5YS00ZTI0LWJhMTUt MjVlZjI5OTBmMTY2LzEvQzdmUTdWZTlqZDFLalczT084b3hSOVFoU3lJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi80OWFlNDItMGU5YS00ZTI0LWJhMTUtMjVlZjI5OTBmMTY2 LzEvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDJQmIAwQC udvkMA0EAgACMAcDBQMqAuZAMA0GCSqGSIb3DQEBCwUAA4IBAQBKfR/HId7yX5/G lCTomGZAyE6EfM8XcOJcc3TM2TCmUEDGsan0mrVR5OdqjMAG0Kb/SwU8EJF4T7qQ 4N7LCzTSdm1CztXnPbfos1r5mnzdJxcQtv+5LJ/6vZcv9ia7msARriVaNfUK+B+z KvYnbKvqBhZ86NrOIun5EAw4cNhjADv5aM6acGj4PwzBvWG8XWs76FJeAx/auvAl n2/t4TKptK0L6PaTwBN8gN7RG2jW5SF2ZmC+aVOZoFSr1w7ivTGmJ627xe68ir6O cyFA6zkGMK+rPCzcJISbDSrS9leLx3L783PUsMV4fUUY0o0pdpDeCUfModxSpn7s qAhiO2Mh -----END CERTIFICATE-----Generated at Thu Jan 1 21:24:01 2026 by rpki-client