This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/7uHJu7In6geY62mGLWsA-BkgXxQ.roa File: 7uHJu7In6geY62mGLWsA-BkgXxQ.roa (raw, json) Hash identifier: pCDrNYSeQf8254wV63If3iDd+pDCOI3GCLUFpM1rWQ4= Subject key identifier: EE:E1:C9:BB:B2:27:EA:07:98:EB:69:86:2D:6B:00:F8:19:20:5F:14 Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53 Certificate serial: 019B7B369994044F3F2B9656F8153C14F82C Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/7uHJu7In6geY62mGLWsA-BkgXxQ.roa Signing time: Thu 01 Jan 2026 20:18:54 +0000 ROA not before: Thu 01 Jan 2026 20:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205154 IP address blocks: 91.224.165.0/24 maxlen: 24 2a12:efc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:99:94:04:4f:3f:2b:96:56:f8:15:3c:14:f8:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53 Validity Not Before: Jan 1 20:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eee1c9bbb227ea0798eb69862d6b00f819205f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cc:8e:13:93:32:cf:3f:a6:fd:23:7e:eb:76: ce:53:c4:8b:cb:0d:4e:c5:bc:d8:1f:76:d4:7e:88: ee:b3:57:ce:72:ef:5d:52:8a:95:28:b5:42:0c:d9: 9d:7f:a6:f3:05:85:61:77:cd:6b:39:fc:d2:48:b7: c6:e3:73:ff:6e:8e:22:47:51:33:2a:4d:11:13:af: 08:a4:eb:a1:0c:3a:e1:56:43:18:c6:b4:ec:94:85: dc:39:d9:ef:17:6e:40:b4:c7:a6:4c:df:2a:94:c8: 06:21:4d:21:11:50:d8:84:98:52:03:53:7c:01:86: 5b:a8:ef:14:26:12:4f:64:dc:bd:59:1c:b4:a0:53: 12:25:9b:b6:be:aa:2e:47:8b:e1:dc:4d:12:5d:5c: 9a:cc:75:8c:b6:af:c9:66:d1:ca:06:9b:1d:57:5b: 87:47:d1:53:04:d6:a4:ce:ba:14:d0:c1:e8:b6:a5: 90:6e:5f:e8:a5:da:dc:6f:5e:bf:eb:0e:32:2e:85: d2:5b:32:ee:22:77:05:b7:69:1a:2e:5c:fb:49:08: e6:c4:fa:aa:bb:1e:bc:39:95:8f:26:20:84:11:45: c4:c2:5d:e8:ca:7a:56:32:ed:8a:a2:0f:ce:ec:fc: f4:4e:38:56:de:41:ff:b9:68:4b:73:8b:20:14:5a: 4d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E1:C9:BB:B2:27:EA:07:98:EB:69:86:2D:6B:00:F8:19:20:5F:14 X509v3 Authority Key Identifier: keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/7uHJu7In6geY62mGLWsA-BkgXxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.165.0/24 IPv6: 2a12:efc0::/29 Signature Algorithm: sha256WithRSAEncryption 66:b7:15:05:8e:66:eb:4a:23:19:ed:e6:58:de:09:3a:0b:8f: 0f:5a:79:2a:67:6b:7c:a2:1d:f9:12:0b:37:38:ac:18:33:32: b4:79:57:30:c2:f1:84:78:bb:f0:15:d2:a0:92:44:ba:00:32: ed:8b:04:42:98:dc:de:b8:56:5b:3c:3e:fd:7f:b4:83:65:f4: d9:6d:de:0c:1c:3a:bd:28:62:e5:b4:45:50:c3:73:96:48:8a: 37:a5:8a:f6:b7:a0:23:64:d4:e6:3d:18:cc:92:08:64:a0:e3: 38:50:38:98:43:73:bd:41:d8:79:c3:df:f0:2d:bd:35:74:ef: f3:77:54:27:59:28:d7:82:18:ba:67:d8:d4:81:32:af:20:52: 75:2f:5f:37:14:b0:f1:15:3c:2a:a3:be:2b:14:df:c0:aa:df: 8b:c8:b0:3c:d1:13:2b:3e:05:97:e4:73:fd:8d:99:a6:03:c7: 73:9a:9e:c9:b6:03:b6:7d:56:24:16:38:e7:99:c7:91:e6:3e: 9a:e7:9c:6e:c0:92:dd:62:b3:45:76:13:a4:89:e4:a7:2d:e6: f4:fa:3a:20:68:be:aa:fb:6a:44:63:09:a5:6c:36:fe:02:03: b2:3f:ea:15:33:15:51:a5:96:cf:14:e1:df:9c:46:57:2d:11: ab:64:51:93 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NpmUBE8/K5ZW+BU8FPgsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YzA3ZGI5ODgwMTMzYzVjZGNlMDA1YmNhMTExYjU1MmNk MTRjNTMwHhcNMjYwMTAxMjAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWUxYzliYmIyMjdlYTA3OThlYjY5ODYyZDZiMDBmODE5MjA1ZjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMyOE5Myzz+m/SN+63bOU8SLyw1O xbzYH3bUfojus1fOcu9dUoqVKLVCDNmdf6bzBYVhd81rOfzSSLfG43P/bo4iR1Ez Kk0RE68IpOuhDDrhVkMYxrTslIXcOdnvF25AtMemTN8qlMgGIU0hEVDYhJhSA1N8 AYZbqO8UJhJPZNy9WRy0oFMSJZu2vqouR4vh3E0SXVyazHWMtq/JZtHKBpsdV1uH R9FTBNakzroU0MHotqWQbl/opdrcb16/6w4yLoXSWzLuIncFt2kaLlz7SQjmxPqq ux68OZWPJiCEEUXEwl3oynpWMu2Kog/O7Pz0TjhW3kH/uWhLc4sgFFpNqwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFO7hybuyJ+oHmOtphi1rAPgZIF8UMB8GA1UdIwQY MBaAFOfAfbmIATPFzc4AW8oRG1Us0UxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMt MGFhNDYzY2RmY2EwLzEvN3VISnU3SW42Z2VZNjJtR0xXc0EtQmtnWHhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMtMGFhNDYzY2RmY2Ew LzEvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW+ClMA0E AgACMAcDBQMqEu/AMA0GCSqGSIb3DQEBCwUAA4IBAQBmtxUFjmbrSiMZ7eZY3gk6 C48PWnkqZ2t8oh35Egs3OKwYMzK0eVcwwvGEeLvwFdKgkkS6ADLtiwRCmNzeuFZb PD79f7SDZfTZbd4MHDq9KGLltEVQw3OWSIo3pYr2t6AjZNTmPRjMkghkoOM4UDiY Q3O9Qdh5w9/wLb01dO/zd1QnWSjXghi6Z9jUgTKvIFJ1L183FLDxFTwqo74rFN/A qt+LyLA80RMrPgWX5HP9jZmmA8dzmp7JtgO2fVYkFjjnmceR5j6a55xuwJLdYrNF dhOkieSnLeb0+jogaL6q+2pEYwmlbDb+AgOyP+oVMxVRpZbPFOHfnEZXLRGrZFGT -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:44 2026 by rpki-client