This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/7t-QMh_AB92nrya7tNjufAiIaNU.roa File: 7t-QMh_AB92nrya7tNjufAiIaNU.roa (raw, json) Hash identifier: LTbV2PdrQop6XvBMoLsBRV4fZwR2wk3jFKlBOeHWh48= Subject key identifier: EE:DF:90:32:1F:C0:07:DD:A7:AF:26:BB:B4:D8:EE:7C:08:88:68:D5 Certificate issuer: /CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae Certificate serial: 019B78A2BF5808AA8322D69BBC48E610A53D Authority key identifier: 5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/7t-QMh_AB92nrya7tNjufAiIaNU.roa Signing time: Thu 01 Jan 2026 08:18:10 +0000 ROA not before: Thu 01 Jan 2026 08:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15644 IP address blocks: 5.61.64.0/21 maxlen: 21 5.61.68.0/24 maxlen: 24 5.61.69.0/24 maxlen: 24 5.61.70.0/24 maxlen: 24 5.61.71.0/24 maxlen: 24 2a01:52c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:bf:58:08:aa:83:22:d6:9b:bc:48:e6:10:a5:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae Validity Not Before: Jan 1 08:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eedf90321fc007dda7af26bbb4d8ee7c088868d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e8:38:32:8f:1c:0a:0a:28:ca:b9:16:07:43: be:d5:01:2a:4a:ff:4a:a8:38:e6:44:5c:5d:c8:b2: 83:76:03:9e:e9:84:d9:87:55:9a:a5:f1:f1:43:67: a3:24:27:ba:2b:27:42:af:a4:05:fe:9c:11:d8:e4: 52:a9:32:4e:07:e7:9b:cb:49:77:70:ed:6d:f9:1d: ba:3c:1f:6b:c3:2f:cc:67:7c:f9:3f:36:8d:fc:19: 21:b2:b7:34:8e:8b:a8:22:ab:df:90:2c:4f:a9:36: 4f:bc:38:c7:d5:d6:af:ee:a7:12:fb:51:9d:60:ad: 6d:05:29:4c:09:4d:34:4b:0d:2a:0c:13:93:2d:13: 1f:c0:c2:72:77:8d:97:e4:05:8d:35:57:88:fe:c5: aa:9e:27:8f:61:b0:ab:3e:96:43:b0:08:21:58:b7: 13:dc:eb:8c:95:db:46:e6:20:05:ce:2f:e3:af:be: 73:2d:e6:c4:2c:e3:69:50:19:a4:8e:08:6e:32:77: 15:7e:87:26:c1:d4:f3:c9:98:14:7f:a4:75:cf:e5: f0:0c:6f:e5:88:bf:9f:ff:49:8a:f6:9b:34:01:ce: 47:ee:dc:db:a7:9d:83:32:2a:97:22:98:c9:7a:04: 2d:b0:f6:77:54:37:8d:79:ad:23:cb:84:37:f3:e2: 05:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:DF:90:32:1F:C0:07:DD:A7:AF:26:BB:B4:D8:EE:7C:08:88:68:D5 X509v3 Authority Key Identifier: keyid:5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/7t-QMh_AB92nrya7tNjufAiIaNU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.61.64.0/21 IPv6: 2a01:52c0::/32 Signature Algorithm: sha256WithRSAEncryption 98:1a:a2:f9:ee:26:04:a0:0e:f7:77:35:d6:53:73:09:f5:20: 68:07:0a:41:43:4d:55:e0:f8:f7:ed:d7:9e:1a:8e:c1:e3:5c: 9f:14:88:2b:5e:be:ac:1b:2e:76:34:f1:38:3d:5e:eb:cd:e6: d0:48:69:63:03:c2:6f:7d:24:ac:9d:f8:40:43:2a:3c:97:9b: 9f:93:b0:57:93:92:ab:ed:7f:e4:d1:e6:ac:17:12:13:e6:22: 10:03:4b:6a:15:dd:44:92:4c:b4:19:04:8d:c2:5d:c0:51:4e: 4a:43:c2:b9:99:e3:a6:9c:16:69:99:8f:97:0b:aa:9a:d7:90: 94:3c:81:1b:c9:64:20:28:9f:14:a4:ac:d5:bf:fc:90:ae:87: b4:8f:3c:ae:5d:eb:16:b2:5f:9f:f6:6e:95:18:4f:78:91:00: 48:d1:55:ed:59:1d:47:c1:16:e7:77:ea:6f:f6:99:2c:62:26: 45:a4:00:8d:28:fc:47:66:84:e9:d4:3c:8d:69:0a:4a:9b:0c: f9:24:93:04:21:d3:91:96:41:e0:94:c0:e0:a9:8d:0b:91:2c: 4a:5c:bc:87:ee:75:c2:76:7b:f7:c1:8c:d0:2d:60:ad:ad:7b: 61:23:96:47:13:a2:78:c1:6f:98:e5:3a:8d:af:af:d4:b0:b2: a6:e7:38:1c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4or9YCKqDItabvEjmEKU9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZjRiYzYxMzdjNTQwYTg5YjkxNzNjYzJkZTMyZWIwNGM5 ZTZlYWUwHhcNMjYwMTAxMDgxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWRmOTAzMjFmYzAwN2RkYTdhZjI2YmJiNGQ4ZWU3YzA4ODg2OGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Og4Mo8cCgooyrkWB0O+1QEqSv9K qDjmRFxdyLKDdgOe6YTZh1WapfHxQ2ejJCe6KydCr6QF/pwR2ORSqTJOB+eby0l3 cO1t+R26PB9rwy/MZ3z5PzaN/Bkhsrc0jouoIqvfkCxPqTZPvDjH1dav7qcS+1Gd YK1tBSlMCU00Sw0qDBOTLRMfwMJyd42X5AWNNVeI/sWqniePYbCrPpZDsAghWLcT 3OuMldtG5iAFzi/jr75zLebELONpUBmkjghuMncVfocmwdTzyZgUf6R1z+XwDG/l iL+f/0mK9ps0Ac5H7tzbp52DMiqXIpjJegQtsPZ3VDeNea0jy4Q38+IFpQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFO7fkDIfwAfdp68mu7TY7nwIiGjVMB8GA1UdIwQY MBaAFF/0vGE3xUCom5FzzC3jLrBMnm6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWF9TOFlUZkZRS2lia1hQTUxlTXVzRXllYnE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9jMDExY2EtNDU2Yi00ZjUxLWJjOGIt MDA1Y2I0ZGNhNjNmLzEvN3QtUU1oX0FCOTJucnlhN3ROanVmQWlJYU5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9jMDExY2EtNDU2Yi00ZjUxLWJjOGItMDA1Y2I0ZGNhNjNm LzEvWF9TOFlUZkZRS2lia1hQTUxlTXVzRXllYnE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDBT1AMA0E AgACMAcDBQAqAVLAMA0GCSqGSIb3DQEBCwUAA4IBAQCYGqL57iYEoA73dzXWU3MJ 9SBoBwpBQ01V4Pj37deeGo7B41yfFIgrXr6sGy52NPE4PV7rzebQSGljA8JvfSSs nfhAQyo8l5ufk7BXk5Kr7X/k0easFxIT5iIQA0tqFd1Ekky0GQSNwl3AUU5KQ8K5 meOmnBZpmY+XC6qa15CUPIEbyWQgKJ8UpKzVv/yQroe0jzyuXesWsl+f9m6VGE94 kQBI0VXtWR1HwRbnd+pv9pksYiZFpACNKPxHZoTp1DyNaQpKmwz5JJMEIdORlkHg lMDgqY0LkSxKXLyH7nXCdnv3wYzQLWCtrXthI5ZHE6J4wW+Y5TqNr6/UsLKm5zgc -----END CERTIFICATE-----Generated at Sun Jan 25 20:01:07 2026 by rpki-client