This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/7VsPFkhM_OrYhPPIYt8jc85Ys8Y.roa File: 7VsPFkhM_OrYhPPIYt8jc85Ys8Y.roa (raw, json) Hash identifier: x7mGZCpmu0SwOVi3OquDRZc+flnwWQDFf3B9ZxRJHaY= Subject key identifier: ED:5B:0F:16:48:4C:FC:EA:D8:84:F3:C8:62:DF:23:73:CE:58:B3:C6 Certificate issuer: /CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571 Certificate serial: 019B7CEE2E04D4B1D439F814042F3B6A9338 Authority key identifier: 18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/7VsPFkhM_OrYhPPIYt8jc85Ys8Y.roa Signing time: Fri 02 Jan 2026 04:19:02 +0000 ROA not before: Fri 02 Jan 2026 04:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 393406 IP address blocks: 5.42.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 21:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:2e:04:d4:b1:d4:39:f8:14:04:2f:3b:6a:93:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571 Validity Not Before: Jan 2 04:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed5b0f16484cfcead884f3c862df2373ce58b3c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b8:bb:72:fa:93:69:d0:09:5e:ef:0e:fe:17: 39:6f:04:cc:52:ce:01:fd:ef:28:8c:8c:11:0e:0a: 70:8e:0d:0f:19:85:53:91:a3:85:89:c4:55:fb:35: c1:ba:a3:8e:db:ab:dd:0f:77:96:99:da:1c:4c:fe: 41:59:36:9a:6b:c7:b7:40:9f:53:38:a6:fd:47:8c: ef:06:eb:9a:a0:09:41:18:55:66:6f:05:85:a5:73: c1:7f:8c:39:aa:c4:69:40:2c:69:b7:1c:81:45:1a: f3:33:1e:1d:fa:81:29:00:0f:d5:83:e9:49:83:b1: fc:33:c8:91:1f:82:51:17:6a:09:6c:03:d3:66:fe: 30:5d:1d:ad:5f:97:b8:5a:09:7b:ff:32:c9:98:26: 86:2a:a8:57:d3:3f:d9:5c:ea:44:9f:2d:ff:92:6f: e5:af:33:7c:5b:7e:09:39:8c:ac:85:19:01:23:1e: 98:46:d3:df:c7:9f:7d:fc:3b:f5:c9:87:cb:f4:e9: a2:db:13:bd:2b:4d:2e:50:41:c1:cf:94:8a:91:bc: 03:e3:77:91:07:34:18:e1:d6:41:a7:d0:aa:3c:f8: da:73:d2:e6:b5:f3:c7:d4:5c:95:9e:8b:84:25:18: dd:d6:d5:21:bc:3d:5c:fe:b6:6f:e1:e9:22:c7:89: cb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5B:0F:16:48:4C:FC:EA:D8:84:F3:C8:62:DF:23:73:CE:58:B3:C6 X509v3 Authority Key Identifier: keyid:18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/7VsPFkhM_OrYhPPIYt8jc85Ys8Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.203.0/24 Signature Algorithm: sha256WithRSAEncryption 40:a7:1d:76:88:dd:c5:ae:91:f9:67:07:10:e5:56:48:e0:28: cf:70:f9:36:47:21:68:4d:87:dc:df:a4:65:ba:21:4c:e3:e1: 01:91:c4:80:fe:7e:dc:d2:bc:64:c4:cf:0a:cf:aa:ee:3a:e6: 3d:7b:45:23:6d:db:54:ba:2b:fe:e2:b7:c5:cb:25:3d:ff:2c: 2b:8f:2d:1f:33:64:33:db:db:64:04:29:ab:85:e2:0a:ca:29: ee:7d:f1:c4:c6:cf:9b:aa:25:f5:30:9c:b1:49:e1:30:e7:eb: 85:b6:32:4f:50:e0:bc:4d:c9:4b:48:c1:78:b5:40:87:43:08: 12:72:0b:83:2a:cf:8b:a7:4b:67:37:f7:a6:22:fb:18:3d:d8: cc:99:c3:37:2d:90:94:19:9b:1b:01:a0:ff:36:65:98:67:6c: 02:a3:e2:1f:1f:cc:a8:ed:5c:f1:d7:01:c8:aa:32:a5:68:f7: 76:b9:53:0b:47:59:4e:4c:13:11:2a:86:21:22:b3:d8:ca:55: 57:cc:58:18:52:2f:96:58:b2:98:e3:f6:98:88:3e:53:da:50: 2b:e6:41:b1:c6:8f:98:d5:26:98:08:eb:46:01:f4:19:74:cc: 6b:40:7e:8a:fa:1d:d3:8c:c8:c1:bc:06:f9:21:e0:45:f2:17: be:c4:49:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87i4E1LHUOfgUBC87apM4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MDhiZjdmZTQ4YjA1N2Y5ZjJmM2Q1ZDFhNjMxMGZkOWUx NGM1NzEwHhcNMjYwMTAyMDQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDViMGYxNjQ4NGNmY2VhZDg4NGYzYzg2MmRmMjM3M2NlNThiM2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7i7cvqTadAJXu8O/hc5bwTMUs4B /e8ojIwRDgpwjg0PGYVTkaOFicRV+zXBuqOO26vdD3eWmdocTP5BWTaaa8e3QJ9T OKb9R4zvBuuaoAlBGFVmbwWFpXPBf4w5qsRpQCxptxyBRRrzMx4d+oEpAA/Vg+lJ g7H8M8iRH4JRF2oJbAPTZv4wXR2tX5e4Wgl7/zLJmCaGKqhX0z/ZXOpEny3/km/l rzN8W34JOYyshRkBIx6YRtPfx599/Dv1yYfL9Omi2xO9K00uUEHBz5SKkbwD43eR BzQY4dZBp9CqPPjac9LmtfPH1FyVnouEJRjd1tUhvD1c/rZv4ekix4nLrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO1bDxZITPzq2ITzyGLfI3POWLPGMB8GA1UdIwQY MBaAFBgIv3/kiwV/ny89XRpjEP2eFMVxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MTBjM2ItZjg3MC00NzZiLWExNjMt OWQzOTJlZWUwZjY2LzEvN1ZzUEZraE1fT3JZaFBQSVl0OGpjODVZczhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MTBjM2ItZjg3MC00NzZiLWExNjMtOWQzOTJlZWUwZjY2 LzEvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABSrLMA0G CSqGSIb3DQEBCwUAA4IBAQBApx12iN3FrpH5ZwcQ5VZI4CjPcPk2RyFoTYfc36Rl uiFM4+EBkcSA/n7c0rxkxM8Kz6ruOuY9e0UjbdtUuiv+4rfFyyU9/ywrjy0fM2Qz 29tkBCmrheIKyinuffHExs+bqiX1MJyxSeEw5+uFtjJPUOC8TclLSMF4tUCHQwgS cguDKs+Lp0tnN/emIvsYPdjMmcM3LZCUGZsbAaD/NmWYZ2wCo+IfH8yo7Vzx1wHI qjKlaPd2uVMLR1lOTBMRKoYhIrPYylVXzFgYUi+WWLKY4/aYiD5T2lAr5kGxxo+Y 1SaYCOtGAfQZdMxrQH6K+h3TjMjBvAb5IeBF8he+xEkB -----END CERTIFICATE-----Generated at Tue Jan 6 03:30:41 2026 by rpki-client