This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/7xaTNR1-LrDroCcVfd51GMULPgk.roa File: 7xaTNR1-LrDroCcVfd51GMULPgk.roa (raw, json) Hash identifier: 1/QOFIY+bIYf3uAnfGJ3BJ+RAzrDoN7j26g8Ffhh1eo= Subject key identifier: EF:16:93:35:1D:7E:2E:B0:EB:A0:27:15:7D:DE:75:18:C5:0B:3E:09 Certificate issuer: /CN=e979403cd68c98df738e31062903a0b322600b59 Certificate serial: 019B775967185CAA401C1DA632621A44417D Authority key identifier: E9:79:40:3C:D6:8C:98:DF:73:8E:31:06:29:03:A0:B3:22:60:0B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/7xaTNR1-LrDroCcVfd51GMULPgk.roa Signing time: Thu 01 Jan 2026 02:18:26 +0000 ROA not before: Thu 01 Jan 2026 02:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44153 IP address blocks: 91.199.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:67:18:5c:aa:40:1c:1d:a6:32:62:1a:44:41:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e979403cd68c98df738e31062903a0b322600b59 Validity Not Before: Jan 1 02:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef1693351d7e2eb0eba027157dde7518c50b3e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:39:d8:6a:e3:ed:26:27:29:2c:4e:a9:0e:52: 98:86:dc:22:a6:79:ea:6d:f2:21:e5:79:5c:6f:4f: 37:82:5f:57:9d:65:60:f3:c9:7e:a0:39:b4:1c:22: c1:00:03:e1:a3:52:86:84:ef:4f:69:f5:5d:d3:cd: e2:68:2b:85:e2:82:19:b3:f3:b1:64:d9:1c:95:10: 66:e2:a8:75:c0:33:c3:8e:b6:5d:25:70:7a:c5:a2: be:9e:cd:95:ab:2c:a5:aa:68:49:e3:a5:cb:e0:e4: f8:bb:18:d0:13:3c:a1:8b:35:88:d4:59:a3:87:9e: 1a:69:31:f7:40:44:8a:6d:bc:37:ce:12:90:da:6e: 27:28:39:40:37:7f:74:71:3e:05:18:90:30:a4:0b: 92:0d:aa:93:5f:b2:a7:7a:5c:21:f6:1b:07:4a:00: f5:35:e4:92:42:a7:4e:49:a4:32:de:a0:cc:13:bc: 38:93:5f:ca:f6:d9:bd:c2:68:ef:2b:b6:34:ae:f7: 0e:db:57:5a:dd:dd:3a:7e:bc:df:84:9b:f7:e6:67: 6b:c2:d8:f4:04:7f:6a:2b:71:b0:ec:0e:18:3e:fc: c1:6e:ca:4b:ae:42:4d:e3:4a:ff:75:c3:28:b0:a8: 41:66:cc:59:ac:f5:08:c9:6b:6c:00:d4:f2:10:2d: 55:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:16:93:35:1D:7E:2E:B0:EB:A0:27:15:7D:DE:75:18:C5:0B:3E:09 X509v3 Authority Key Identifier: keyid:E9:79:40:3C:D6:8C:98:DF:73:8E:31:06:29:03:A0:B3:22:60:0B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/7xaTNR1-LrDroCcVfd51GMULPgk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.38.0/24 Signature Algorithm: sha256WithRSAEncryption 52:cc:03:d1:8b:ce:1f:02:59:ed:e6:e4:8a:26:6d:71:61:ec: b2:cd:d9:58:f3:f7:b6:0b:b9:41:44:70:27:67:84:4f:cc:e3: 74:43:66:91:3f:cf:87:4d:a4:23:d4:4a:a1:48:b9:14:ae:bc: 6d:0a:20:ee:d1:7c:68:6a:50:fe:ad:b3:ac:38:d1:40:ff:d6: e6:e5:ca:0b:fa:3f:ee:e3:4c:6b:1e:2f:90:eb:9f:59:31:1a: 0d:6b:b4:4e:3b:05:8f:3c:c8:fd:1f:54:7b:e1:32:85:81:b2: b4:12:6f:a7:98:c6:c7:67:aa:49:e4:03:22:b9:60:5a:5d:36: d4:39:86:62:89:29:4e:67:e9:cc:44:6b:32:de:1d:28:40:a6: f9:ff:7e:c3:67:ab:90:cc:1a:6d:d9:85:67:60:1d:e5:20:0d: e3:e6:81:f2:80:7c:ac:22:8b:52:7d:99:44:9a:4c:ed:e3:a0: 73:a3:5a:c8:24:fc:dc:17:75:10:dd:40:b6:f1:71:58:1b:c8: db:e9:a9:8e:14:37:b8:1c:f4:30:cd:1a:fb:fe:10:a8:53:df: eb:06:8b:de:c1:2a:0d:01:ac:eb:3f:d4:90:de:71:05:99:ea: 15:db:c3:95:81:ea:a1:d8:7c:44:ac:21:d9:f8:08:34:ab:d4: 1c:ba:82:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WWcYXKpAHB2mMmIaREF9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5Nzk0MDNjZDY4Yzk4ZGY3MzhlMzEwNjI5MDNhMGIzMjI2 MDBiNTkwHhcNMjYwMTAxMDIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjE2OTMzNTFkN2UyZWIwZWJhMDI3MTU3ZGRlNzUxOGM1MGIzZTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgznYauPtJicpLE6pDlKYhtwipnnq bfIh5Xlcb083gl9XnWVg88l+oDm0HCLBAAPho1KGhO9PafVd083iaCuF4oIZs/Ox ZNkclRBm4qh1wDPDjrZdJXB6xaK+ns2VqyylqmhJ46XL4OT4uxjQEzyhizWI1Fmj h54aaTH3QESKbbw3zhKQ2m4nKDlAN390cT4FGJAwpAuSDaqTX7Knelwh9hsHSgD1 NeSSQqdOSaQy3qDME7w4k1/K9tm9wmjvK7Y0rvcO21da3d06frzfhJv35mdrwtj0 BH9qK3Gw7A4YPvzBbspLrkJN40r/dcMosKhBZsxZrPUIyWtsANTyEC1VOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO8WkzUdfi6w66AnFX3edRjFCz4JMB8GA1UdIwQY MBaAFOl5QDzWjJjfc44xBikDoLMiYAtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhsQVBOYU1tTjl6ampFR0tRT2dzeUpnQzFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMDNhOGYtMzY3Zi00Y2ZhLTlhNzgt ZTgxNjIxYjYxZDY1LzEvN3hhVE5SMS1MckRyb0NjVmZkNTFHTVVMUGdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zMDNhOGYtMzY3Zi00Y2ZhLTlhNzgtZTgxNjIxYjYxZDY1 LzEvNlhsQVBOYU1tTjl6ampFR0tRT2dzeUpnQzFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8cmMA0G CSqGSIb3DQEBCwUAA4IBAQBSzAPRi84fAlnt5uSKJm1xYeyyzdlY8/e2C7lBRHAn Z4RPzON0Q2aRP8+HTaQj1EqhSLkUrrxtCiDu0XxoalD+rbOsONFA/9bm5coL+j/u 40xrHi+Q659ZMRoNa7ROOwWPPMj9H1R74TKFgbK0Em+nmMbHZ6pJ5AMiuWBaXTbU OYZiiSlOZ+nMRGsy3h0oQKb5/37DZ6uQzBpt2YVnYB3lIA3j5oHygHysIotSfZlE mkzt46Bzo1rIJPzcF3UQ3UC28XFYG8jb6amOFDe4HPQwzRr7/hCoU9/rBovewSoN AazrP9SQ3nEFmeoV28OVgeqh2HxErCHZ+Ag0q9QcuoJf -----END CERTIFICATE-----Generated at Tue Jan 13 01:17:23 2026 by rpki-client