This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/7blUbad0lyHYKT7BdmBvmq5380U.roa File: 7blUbad0lyHYKT7BdmBvmq5380U.roa (raw, json) Hash identifier: qY+U0bZ6/EBhOS0YQQ7vmCYh9mixFIWmdrvvPqY0Kxw= Subject key identifier: ED:B9:54:6D:A7:74:97:21:D8:29:3E:C1:76:60:6F:9A:AE:77:F3:45 Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 019B7F159AA636A539F62E3DF4B228E843A9 Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/7blUbad0lyHYKT7BdmBvmq5380U.roa Signing time: Fri 02 Jan 2026 14:21:20 +0000 ROA not before: Fri 02 Jan 2026 14:21:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136744 IP address blocks: 185.104.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:9a:a6:36:a5:39:f6:2e:3d:f4:b2:28:e8:43:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: Jan 2 14:21:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edb9546da7749721d8293ec176606f9aae77f345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:58:bd:77:65:df:21:34:54:0b:c6:e3:a2:f2: a4:b3:2a:d3:23:c0:c9:e8:54:ee:22:51:4e:f7:3f: 06:be:79:0d:bf:49:ff:04:46:35:35:af:23:c3:b8: d4:a4:d2:75:ef:de:58:17:ae:15:66:4e:a0:62:22: 17:60:15:15:cc:9b:3e:5c:f7:a3:00:08:ee:30:2f: ad:16:c2:e2:49:17:87:eb:2a:19:36:97:b5:90:b5: 93:8d:00:4e:41:73:2c:12:f3:8f:d3:84:3e:1d:a0: 6f:6b:5e:bf:82:1a:b8:bf:10:e2:5f:63:0e:48:d9: ef:74:00:52:b3:0d:e6:af:06:86:88:2f:1c:2e:0b: 65:92:53:5f:7d:3f:3e:0c:32:b7:b2:9d:cc:ce:8e: 10:78:4a:f1:de:af:50:46:be:33:1f:5e:1f:fc:53: fa:a3:e9:11:be:17:15:58:d0:9e:a4:53:4b:20:98: 5e:e5:68:24:8e:d9:f2:ca:94:fb:e5:27:57:57:78: d0:b2:2c:69:99:0e:ea:3a:25:75:9e:c8:b3:53:d6: c1:2e:c1:01:84:cc:b5:b8:d1:85:22:2f:cf:51:3e: ea:3b:d0:ae:4c:cf:ad:a9:11:47:da:94:bd:3c:29: 39:28:5f:03:5f:34:ac:85:64:e2:b2:79:da:56:8c: 31:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B9:54:6D:A7:74:97:21:D8:29:3E:C1:76:60:6F:9A:AE:77:F3:45 X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/7blUbad0lyHYKT7BdmBvmq5380U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.104.12.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:cb:aa:5a:09:9d:d4:08:85:25:6c:91:10:29:0f:7b:9b:f1: 1b:1c:c2:2e:30:50:8b:0c:94:53:8f:65:f2:a9:70:95:93:aa: e9:dc:03:40:1d:19:de:8d:0a:e9:ae:6a:be:bd:42:b9:f2:6e: a0:bd:bc:79:38:7c:d5:ca:8f:cf:cf:d1:d7:6d:f2:9b:af:1a: 6b:52:10:e5:7c:79:11:1a:56:c0:33:81:d5:e3:c3:f3:83:84: 3a:5e:37:fe:d8:89:dd:bc:17:b1:fd:d7:49:dd:a1:65:01:b4: db:93:3b:e4:fd:72:d6:6c:10:dd:2a:d7:e9:c6:a2:62:7a:3d: 0e:62:0c:bc:65:6e:0f:61:53:b1:7d:54:f3:0c:2b:e3:f3:74: b2:1a:92:8f:b0:10:87:98:00:00:d0:3f:f4:d3:ab:1c:85:70: 6a:97:3b:a1:79:f1:fb:10:35:e2:33:10:e2:6e:9d:92:67:f0: bc:c2:ff:05:03:63:f5:48:08:64:20:97:70:cb:06:7b:29:c0: ca:a7:e0:c2:16:80:c6:06:04:75:9c:27:c5:ee:da:91:90:85: 0b:f9:d3:a8:dc:b7:b2:ed:e3:3d:f7:05:3c:67:67:69:57:48: 2e:19:93:1e:ae:4d:c7:a5:c7:ee:3c:19:4e:0b:f6:60:89:52: 58:ba:dd:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FZqmNqU59i499LIo6EOpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjYwMTAyMTQyMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGI5NTQ2ZGE3NzQ5NzIxZDgyOTNlYzE3NjYwNmY5YWFlNzdmMzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1i9d2XfITRUC8bjovKksyrTI8DJ 6FTuIlFO9z8GvnkNv0n/BEY1Na8jw7jUpNJ1795YF64VZk6gYiIXYBUVzJs+XPej AAjuMC+tFsLiSReH6yoZNpe1kLWTjQBOQXMsEvOP04Q+HaBva16/ghq4vxDiX2MO SNnvdABSsw3mrwaGiC8cLgtlklNffT8+DDK3sp3Mzo4QeErx3q9QRr4zH14f/FP6 o+kRvhcVWNCepFNLIJhe5WgkjtnyypT75SdXV3jQsixpmQ7qOiV1nsizU9bBLsEB hMy1uNGFIi/PUT7qO9CuTM+tqRFH2pS9PCk5KF8DXzSshWTisnnaVowxMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO25VG2ndJch2Ck+wXZgb5qud/NFMB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvN2JsVWJhZDBseUhZS1Q3QmRtQnZtcTUzODBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWgMMA0G CSqGSIb3DQEBCwUAA4IBAQAby6paCZ3UCIUlbJEQKQ97m/EbHMIuMFCLDJRTj2Xy qXCVk6rp3ANAHRnejQrprmq+vUK58m6gvbx5OHzVyo/Pz9HXbfKbrxprUhDlfHkR GlbAM4HV48Pzg4Q6Xjf+2IndvBex/ddJ3aFlAbTbkzvk/XLWbBDdKtfpxqJiej0O Ygy8ZW4PYVOxfVTzDCvj83SyGpKPsBCHmAAA0D/006schXBqlzuhefH7EDXiMxDi bp2SZ/C8wv8FA2P1SAhkIJdwywZ7KcDKp+DCFoDGBgR1nCfF7tqRkIUL+dOo3Ley 7eM99wU8Z2dpV0guGZMerk3HpcfuPBlOC/ZgiVJYut1m -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:24 2026 by rpki-client