This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/7F5MFPLGX7n9kqmK4iPr3DwuhNU.roa File: 7F5MFPLGX7n9kqmK4iPr3DwuhNU.roa (raw, json) Hash identifier: sUozPnCyk9y8i1GS+PfFGedUQX43402xLyKa/GCV0HY= Subject key identifier: EC:5E:4C:14:F2:C6:5F:B9:FD:92:A9:8A:E2:23:EB:DC:3C:2E:84:D5 Certificate issuer: /CN=1f482e5e412c1debb776dedfaf45c33174e7642e Certificate serial: 019B791009967AD75396E27D169F030EEBE5 Authority key identifier: 1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/7F5MFPLGX7n9kqmK4iPr3DwuhNU.roa Signing time: Thu 01 Jan 2026 10:17:32 +0000 ROA not before: Thu 01 Jan 2026 10:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60893 IP address blocks: 130.255.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:09:96:7a:d7:53:96:e2:7d:16:9f:03:0e:eb:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f482e5e412c1debb776dedfaf45c33174e7642e Validity Not Before: Jan 1 10:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec5e4c14f2c65fb9fd92a98ae223ebdc3c2e84d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:aa:fb:f8:7a:47:56:ee:3e:6a:da:7d:04:f5: 44:95:15:72:96:14:43:41:2d:e2:7e:47:63:91:a1: e5:16:fd:e9:40:57:70:b9:29:20:e7:a0:17:76:c9: 0a:ca:7e:3b:fe:28:40:78:d6:bc:2c:9d:d9:fe:95: af:ea:a6:06:3e:37:e1:46:c6:d3:f8:37:f6:f2:72: f7:28:3f:7c:40:c0:37:13:95:16:38:08:a0:25:61: 9c:25:a5:28:6a:1d:91:8a:cf:16:e2:67:72:23:33: c1:4a:b4:da:3d:b5:b1:23:1c:d2:95:b3:32:b1:c3: 58:27:6f:37:a1:90:10:04:fa:d9:6b:08:61:1f:9f: 7d:30:28:c5:dd:4e:b8:d9:7d:b8:bf:3f:b2:f3:00: eb:03:13:f4:9e:cc:b2:ed:6f:b8:ac:df:0b:6d:2e: b9:d7:12:d9:4b:9a:85:88:be:ec:90:d5:6e:7b:19: de:0e:c4:0c:58:c6:6c:94:dc:28:97:28:26:60:41: 3c:a3:53:6e:50:2d:a2:f6:c8:a6:7e:be:66:7d:db: 5a:7f:ab:ab:53:e4:e2:97:d9:4a:7e:e8:db:52:e1: 20:e9:fa:36:85:e3:3c:45:98:d5:93:db:3f:a0:35: a5:0e:8c:aa:f3:ff:12:2b:7c:14:74:c0:72:72:91: 72:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:5E:4C:14:F2:C6:5F:B9:FD:92:A9:8A:E2:23:EB:DC:3C:2E:84:D5 X509v3 Authority Key Identifier: keyid:1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/7F5MFPLGX7n9kqmK4iPr3DwuhNU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.255.171.0/24 Signature Algorithm: sha256WithRSAEncryption 38:0c:47:1a:f1:79:de:51:46:d3:18:f8:c6:92:a8:66:4a:97: f2:f4:c7:65:69:18:00:17:56:13:c6:5f:29:ae:45:6b:ae:59: 6a:d5:1a:e9:12:27:81:ec:ff:61:c7:86:38:26:d6:83:42:10: df:c4:86:75:9a:ac:66:08:59:1e:f3:00:ea:61:74:97:61:8a: 43:fb:e3:59:cb:03:21:c3:2a:6b:f5:09:74:9c:29:6b:c0:67: b5:6b:29:a8:e9:e2:6b:1c:d6:17:7d:15:a7:e8:ef:ae:3d:a6: 4f:1f:5e:e8:e8:30:7c:d6:eb:3f:78:1a:56:73:13:ba:2b:56: 28:e7:b3:5a:1d:6f:cc:c4:57:93:ad:1e:cc:1d:68:7a:94:41: e1:aa:c3:19:f8:36:69:dd:f8:f6:57:8e:3c:be:60:e6:9b:ba: fa:15:54:c1:93:8e:41:eb:dc:fb:0d:79:e3:f1:78:15:67:2d: a6:49:c7:69:3a:48:45:8f:3d:1a:1b:35:ae:c9:9c:dd:15:ae: dc:a9:4c:84:28:f6:62:c2:b1:87:e5:4e:e0:21:78:92:1d:2d: 9e:ef:68:8b:57:c1:81:ec:b9:34:5b:b1:78:d6:ba:8c:31:1c: 8b:56:42:7d:5e:6c:1d:42:b3:4a:bc:c2:6d:00:e6:63:09:42: 63:ee:ff:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EAmWetdTluJ9Fp8DDuvlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDgyZTVlNDEyYzFkZWJiNzc2ZGVkZmFmNDVjMzMxNzRl NzY0MmUwHhcNMjYwMTAxMTAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzVlNGMxNGYyYzY1ZmI5ZmQ5MmE5OGFlMjIzZWJkYzNjMmU4NGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6r7+HpHVu4+atp9BPVElRVylhRD QS3ifkdjkaHlFv3pQFdwuSkg56AXdskKyn47/ihAeNa8LJ3Z/pWv6qYGPjfhRsbT +Df28nL3KD98QMA3E5UWOAigJWGcJaUoah2Ris8W4mdyIzPBSrTaPbWxIxzSlbMy scNYJ283oZAQBPrZawhhH599MCjF3U642X24vz+y8wDrAxP0nsyy7W+4rN8LbS65 1xLZS5qFiL7skNVuexneDsQMWMZslNwolygmYEE8o1NuUC2i9simfr5mfdtaf6ur U+Til9lKfujbUuEg6fo2heM8RZjVk9s/oDWlDoyq8/8SK3wUdMBycpFyDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOxeTBTyxl+5/ZKpiuIj69w8LoTVMB8GA1UdIwQY MBaAFB9ILl5BLB3rt3be369FwzF052QuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBndVhrRXNIZXUzZHQ3ZnIwWERNWFRuWkM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83ZGRlOTYtMTBkZC00MzIzLTgxZDIt ZDJlMzM3MmFjMjljLzEvN0Y1TUZQTEdYN245a3FtSzRpUHIzRHd1aE5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS83ZGRlOTYtMTBkZC00MzIzLTgxZDItZDJlMzM3MmFjMjlj LzEvSDBndVhrRXNIZXUzZHQ3ZnIwWERNWFRuWkM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv+rMA0G CSqGSIb3DQEBCwUAA4IBAQA4DEca8XneUUbTGPjGkqhmSpfy9MdlaRgAF1YTxl8p rkVrrllq1RrpEieB7P9hx4Y4JtaDQhDfxIZ1mqxmCFke8wDqYXSXYYpD++NZywMh wypr9Ql0nClrwGe1aymo6eJrHNYXfRWn6O+uPaZPH17o6DB81us/eBpWcxO6K1Yo 57NaHW/MxFeTrR7MHWh6lEHhqsMZ+DZp3fj2V448vmDmm7r6FVTBk45B69z7DXnj 8XgVZy2mScdpOkhFjz0aGzWuyZzdFa7cqUyEKPZiwrGH5U7gIXiSHS2e72iLV8GB 7Lk0W7F41rqMMRyLVkJ9XmwdQrNKvMJtAOZjCUJj7v+f -----END CERTIFICATE-----Generated at Mon Jan 26 11:06:03 2026 by rpki-client