This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/7e4cKF3TuVRmJGKrCMROf7YbeTM.roa File: 7e4cKF3TuVRmJGKrCMROf7YbeTM.roa (raw, json) Hash identifier: EI5hNOLcVf+LZoym/zm/8vnZenolnXToI8NdHBuqEzE= Subject key identifier: ED:EE:1C:28:5D:D3:B9:54:66:24:62:AB:08:C4:4E:7F:B6:1B:79:33 Certificate issuer: /CN=8335444c581161c588ae84be01965bc8e83780b8 Certificate serial: 019B7D5D23BB2FD443389BAEBDA2933A5861 Authority key identifier: 83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/7e4cKF3TuVRmJGKrCMROf7YbeTM.roa Signing time: Fri 02 Jan 2026 06:20:14 +0000 ROA not before: Fri 02 Jan 2026 06:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6908 IP address blocks: 185.8.89.0/24 maxlen: 24 185.8.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:23:bb:2f:d4:43:38:9b:ae:bd:a2:93:3a:58:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8335444c581161c588ae84be01965bc8e83780b8 Validity Not Before: Jan 2 06:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edee1c285dd3b954662462ab08c44e7fb61b7933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e3:d6:c5:29:65:4e:7e:62:32:db:81:c5:40: 71:53:3c:d2:8d:f0:58:95:bc:32:42:fe:64:58:07: c3:a1:f2:63:4c:54:c8:d7:85:aa:df:f0:73:20:ea: 5d:ce:e2:ee:da:d1:85:74:f9:a9:47:8a:6b:2f:ff: 2e:da:6a:97:91:b0:a5:ca:4e:c8:27:14:78:88:0a: 3e:b3:b4:07:11:1f:a4:89:db:40:0c:d6:b0:56:cc: 6c:89:30:f4:7a:25:99:44:80:fe:9e:e6:d4:3c:22: 3b:dc:55:42:f1:ee:d9:ab:12:ba:4f:47:b1:82:3f: cf:1c:fe:4b:76:93:54:58:26:a5:bb:8a:2d:7c:18: be:d9:84:3c:7a:0f:e9:21:4d:af:e8:91:fc:a8:23: 91:49:d8:93:40:a7:b9:02:81:89:a2:42:4c:0c:01: f9:65:9b:35:05:95:62:6b:a6:ca:83:44:fa:fc:89: 65:9e:67:f5:30:2c:3d:ff:44:1a:55:30:85:df:e9: 44:f0:86:c7:60:3b:dd:81:59:10:1c:07:16:76:49: 76:17:b0:43:44:3d:e6:0a:de:76:ef:82:cd:1c:a5: c3:7b:a5:e6:fd:66:67:e1:ee:68:b2:ab:0c:04:40: d1:00:dd:c2:e7:2e:a9:b6:0b:a9:30:55:de:6d:2b: f3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:EE:1C:28:5D:D3:B9:54:66:24:62:AB:08:C4:4E:7F:B6:1B:79:33 X509v3 Authority Key Identifier: keyid:83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/7e4cKF3TuVRmJGKrCMROf7YbeTM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.8.89.0/24 185.8.91.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:7d:3f:6e:a8:4a:77:50:8e:09:15:2b:03:51:8b:c9:71:e0: 6a:38:ef:b7:d4:4e:3d:32:3f:06:15:ae:30:b9:43:df:4f:3e: 15:a4:ff:52:ca:45:d4:00:b6:3c:61:89:b5:fc:80:57:aa:a8: 17:c1:49:e2:40:b7:63:23:56:d4:79:f2:fd:47:d9:fb:0d:6a: 5a:de:9e:27:5d:8c:6b:33:d8:45:bd:ea:d3:fa:c6:36:75:f3: e3:fa:8d:a4:5a:3e:49:9a:45:7e:b8:41:d9:f5:18:4c:b4:1b: 14:f7:a4:bc:4d:7e:df:46:29:32:1c:8d:ca:8a:1c:a5:4d:fe: 43:3e:40:4f:74:23:e6:25:60:6d:88:57:98:bf:b2:94:a3:ad: fb:71:fa:4b:a2:9d:b5:30:17:f6:7e:62:9f:a7:b7:14:7b:33: a1:5e:00:02:b8:6e:6f:c6:d4:fb:b7:48:07:4f:3b:4d:1a:2e: a8:cd:c0:59:7f:7d:f3:a2:32:41:23:c1:f6:c9:af:5f:ed:62: db:76:9e:ad:33:de:2d:e0:e4:1b:7d:f6:e8:1b:45:5a:23:b9: f6:05:80:90:b0:21:36:48:17:ff:95:0b:5e:c6:f9:47:29:c8: a6:16:fe:15:62:c6:a5:cb:80:1a:00:c6:22:6c:29:b3:ba:c3: 78:3b:f8:85 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XSO7L9RDOJuuvaKTOlhhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMzU0NDRjNTgxMTYxYzU4OGFlODRiZTAxOTY1YmM4ZTgz NzgwYjgwHhcNMjYwMTAyMDYyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGVlMWMyODVkZDNiOTU0NjYyNDYyYWIwOGM0NGU3ZmI2MWI3OTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruPWxSllTn5iMtuBxUBxUzzSjfBY lbwyQv5kWAfDofJjTFTI14Wq3/BzIOpdzuLu2tGFdPmpR4prL/8u2mqXkbClyk7I JxR4iAo+s7QHER+kidtADNawVsxsiTD0eiWZRID+nubUPCI73FVC8e7ZqxK6T0ex gj/PHP5LdpNUWCalu4otfBi+2YQ8eg/pIU2v6JH8qCORSdiTQKe5AoGJokJMDAH5 ZZs1BZVia6bKg0T6/Illnmf1MCw9/0QaVTCF3+lE8IbHYDvdgVkQHAcWdkl2F7BD RD3mCt5274LNHKXDe6Xm/WZn4e5osqsMBEDRAN3C5y6ptgupMFXebSvz6QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFO3uHChd07lUZiRiqwjETn+2G3kzMB8GA1UdIwQY MBaAFIM1RExYEWHFiK6EvgGWW8joN4C4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3pWRVRGZ1JZY1dJcm9TLUFaWmJ5T2czZ0xnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wNGI5MWEtZTM0OS00MGNkLWI5MDEt MWYxM2Y1NWQwMDU5LzEvN2U0Y0tGM1R1VlJtSkdLckNNUk9mN1liZVRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wNGI5MWEtZTM0OS00MGNkLWI5MDEtMWYxM2Y1NWQwMDU5 LzEvZ3pWRVRGZ1JZY1dJcm9TLUFaWmJ5T2czZ0xnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuQhZAwQA uQhbMA0GCSqGSIb3DQEBCwUAA4IBAQAufT9uqEp3UI4JFSsDUYvJceBqOO+31E49 Mj8GFa4wuUPfTz4VpP9SykXUALY8YYm1/IBXqqgXwUniQLdjI1bUefL9R9n7DWpa 3p4nXYxrM9hFverT+sY2dfPj+o2kWj5JmkV+uEHZ9RhMtBsU96S8TX7fRikyHI3K ihylTf5DPkBPdCPmJWBtiFeYv7KUo637cfpLop21MBf2fmKfp7cUezOhXgACuG5v xtT7t0gHTztNGi6ozcBZf33zojJBI8H2ya9f7WLbdp6tM94t4OQbffboG0VaI7n2 BYCQsCE2SBf/lQtexvlHKcimFv4VYsaly4AaAMYibCmzusN4O/iF -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:11 2026 by rpki-client