This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/7_HY5yB8d3Njtf3VZahbVmixIZU.roa File: 7_HY5yB8d3Njtf3VZahbVmixIZU.roa (raw, json) Hash identifier: H45Wi9cbUIzhStJ6D1qNpJlOHim13UV0HCf2YP0fQEc= Subject key identifier: EF:F1:D8:E7:20:7C:77:73:63:B5:FD:D5:65:A8:5B:56:68:B1:21:95 Certificate issuer: /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9 Certificate serial: 019B7B36AA3AB1D2161839871787598098F7 Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/7_HY5yB8d3Njtf3VZahbVmixIZU.roa Signing time: Thu 01 Jan 2026 20:18:58 +0000 ROA not before: Thu 01 Jan 2026 20:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43139 IP address blocks: 91.196.148.0/22 maxlen: 22 94.158.80.0/20 maxlen: 20 109.207.192.0/20 maxlen: 20 178.158.192.0/18 maxlen: 24 185.199.96.0/22 maxlen: 22 195.128.25.0/24 maxlen: 24 195.128.26.0/23 maxlen: 23 195.128.27.0/24 maxlen: 24 2001:67c:738::/48 maxlen: 48 2a0a:9b40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:aa:3a:b1:d2:16:18:39:87:17:87:59:80:98:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9 Validity Not Before: Jan 1 20:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eff1d8e7207c777363b5fdd565a85b5668b12195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6d:cf:d4:3f:9a:69:a9:fb:10:21:8b:b7:ce: f2:87:c1:8e:e8:a9:89:2a:46:47:ad:95:a1:05:29: 6c:1f:6d:18:91:31:bc:e0:1e:65:b5:30:dc:02:07: be:b8:ae:35:9e:94:84:74:d0:78:03:3c:6c:64:03: fe:93:ff:4b:1e:76:c2:22:07:fd:55:43:f4:c8:bc: f7:ae:c7:04:84:ca:c4:f8:e3:eb:8d:ae:cd:34:16: 00:bb:35:87:4c:19:61:39:72:44:6a:c4:50:49:36: a2:83:c5:9c:bf:bb:7d:1c:64:2b:87:65:d3:0b:66: e7:60:ca:35:7c:2f:c4:46:3b:ca:a8:15:2d:bf:32: eb:86:5c:e3:a2:62:a0:e1:69:23:9a:ac:12:1c:ea: 6e:1b:e4:4a:2a:18:76:90:8d:5e:ba:9d:6b:53:f6: 04:e7:ff:92:ab:e3:2f:3a:d9:c5:49:af:f6:38:17: 3e:ae:f8:8a:83:94:28:84:f4:9c:9b:a0:87:e6:7f: 9c:13:52:9b:9f:a3:23:94:77:e1:45:74:3d:37:62: e8:4a:12:60:c4:61:7c:d4:5c:0b:ff:ac:51:82:7f: 65:6e:bd:f0:35:5b:cc:1b:ea:31:63:62:75:ee:5b: 0f:56:f1:5a:7a:1c:4c:fa:c0:f3:f5:71:34:a0:0e: 9a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F1:D8:E7:20:7C:77:73:63:B5:FD:D5:65:A8:5B:56:68:B1:21:95 X509v3 Authority Key Identifier: keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/7_HY5yB8d3Njtf3VZahbVmixIZU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.148.0/22 94.158.80.0/20 109.207.192.0/20 178.158.192.0/18 185.199.96.0/22 195.128.25.0-195.128.27.255 IPv6: 2001:67c:738::/48 2a0a:9b40::/29 Signature Algorithm: sha256WithRSAEncryption 1f:c1:d3:a4:e2:84:3f:98:07:1b:bd:62:47:9b:94:aa:4e:a7: a1:4b:cb:54:93:a3:82:e8:e7:ec:1a:e2:fe:4a:2b:7a:bf:87: 75:9d:6f:cd:c3:9b:95:fd:4c:b8:af:b7:04:27:a7:1d:b6:e9: 05:d4:6b:3f:8c:c9:58:26:b0:f7:7e:08:5e:08:7a:7f:3e:0c: b4:0e:3e:56:b0:13:89:09:a2:61:dc:de:70:7c:a7:06:44:5c: 97:ce:be:5d:cd:38:50:9f:e3:d6:f2:ed:86:01:a4:d1:53:06: 9d:ef:3f:73:6d:5b:51:76:1e:55:6e:66:ee:b6:ba:a3:18:b8: aa:77:79:57:be:a8:51:47:cd:df:fe:83:ce:af:71:b9:ff:15: 45:c8:ab:c2:a5:ca:3a:9c:03:5e:51:2b:0c:96:37:c0:29:6c: b6:a9:84:6d:de:5a:b1:74:46:c2:3f:66:e9:61:b5:91:3a:fb: e4:1d:d7:05:71:a3:53:cf:40:c4:c4:cd:ec:55:40:04:37:7e: 9a:c2:e2:b1:db:44:5f:3e:c8:eb:30:2a:dc:76:58:9a:c5:7b: 44:7d:9a:ec:14:6a:0e:c2:e6:e7:2c:cf:88:90:5f:20:24:22: 2f:61:b7:e5:9d:fc:40:58:13:a2:a2:38:31:50:33:95:c5:61: e6:08:4a:6f -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgISAZt7Nqo6sdIWGDmHF4dZgJj3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzOTNkZjg3N2JmMmYwY2YwMWE5NzE4OTczZWFlZWU4N2Iw Njk3ZDkwHhcNMjYwMTAxMjAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmYxZDhlNzIwN2M3NzczNjNiNWZkZDU2NWE4NWI1NjY4YjEyMTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo23P1D+aaan7ECGLt87yh8GO6KmJ KkZHrZWhBSlsH20YkTG84B5ltTDcAge+uK41npSEdNB4AzxsZAP+k/9LHnbCIgf9 VUP0yLz3rscEhMrE+OPrja7NNBYAuzWHTBlhOXJEasRQSTaig8Wcv7t9HGQrh2XT C2bnYMo1fC/ERjvKqBUtvzLrhlzjomKg4WkjmqwSHOpuG+RKKhh2kI1eup1rU/YE 5/+Sq+MvOtnFSa/2OBc+rviKg5QohPScm6CH5n+cE1Kbn6MjlHfhRXQ9N2LoShJg xGF81FwL/6xRgn9lbr3wNVvMG+oxY2J17lsPVvFaehxM+sDz9XE0oA6alwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFO/x2OcgfHdzY7X91WWoW1ZosSGVMB8GA1UdIwQY MBaAFLOT34d78vDPAalxiXPq7uh7BpfZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczVQZmgzdnk4TThCcVhHSmMtcnU2SHNHbDlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85Mzc1ZTMtMzc3ZS00YjcwLWJhMzYt Mzk2YmM3MjBlMmI0LzEvN19IWTV5QjhkM05qdGYzVlphaGJWbWl4SVpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi85Mzc1ZTMtMzc3ZS00YjcwLWJhMzYtMzk2YmM3MjBlMmI0 LzEvczVQZmgzdnk4TThCcVhHSmMtcnU2SHNHbDlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDAyBAIAATAsAwQCW8SUAwQE Xp5QAwQEbc/AAwQGsp7AAwQCucdgMAwDBADDgBkDBALDgBgwFgQCAAIwEAMHACAB BnwHOAMFAyoKm0AwDQYJKoZIhvcNAQELBQADggEBAB/B06TihD+YBxu9YkeblKpO p6FLy1STo4Lo5+wa4v5KK3q/h3Wdb83Dm5X9TLivtwQnpx226QXUaz+MyVgmsPd+ CF4Ien8+DLQOPlawE4kJomHc3nB8pwZEXJfOvl3NOFCf49by7YYBpNFTBp3vP3Nt W1F2HlVuZu62uqMYuKp3eVe+qFFHzd/+g86vcbn/FUXIq8KlyjqcA15RKwyWN8Ap bLaphG3eWrF0RsI/ZulhtZE6++Qd1wVxo1PPQMTEzexVQAQ3fprC4rHbRF8+yOsw Ktx2WJrFe0R9muwUag7C5ucsz4iQXyAkIi9ht+Wd/EBYE6KiODFQM5XFYeYISm8= -----END CERTIFICATE-----Generated at Mon Jan 26 03:06:05 2026 by rpki-client