This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/7PMwWghG1f2GH2kcgJJT1T19mKA.roa File: 7PMwWghG1f2GH2kcgJJT1T19mKA.roa (raw, json) Hash identifier: iSWM8zD4dnBfc8rm3hdCfD29wpDU7MXGImntX+CzTys= Subject key identifier: EC:F3:30:5A:08:46:D5:FD:86:1F:69:1C:80:92:53:D5:3D:7D:98:A0 Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Certificate serial: 019B7A5B8ED385CB6DA8D51DECA67DAFE111 Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/7PMwWghG1f2GH2kcgJJT1T19mKA.roa Signing time: Thu 01 Jan 2026 16:19:39 +0000 ROA not before: Thu 01 Jan 2026 16:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43009 IP address blocks: 89.164.98.0/24 maxlen: 24 2001:1af0:9020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:8e:d3:85:cb:6d:a8:d5:1d:ec:a6:7d:af:e1:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Validity Not Before: Jan 1 16:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ecf3305a0846d5fd861f691c809253d53d7d98a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:32:23:04:08:21:cd:4a:94:82:12:9e:a5:f2: f4:ce:93:d3:ee:6a:a7:e3:21:61:bc:bb:91:84:b4: c3:bb:6f:fe:36:ba:46:72:fe:14:95:42:24:f3:e9: 11:3b:c8:29:67:7b:6d:42:8e:27:5a:ef:30:7d:f3: ff:32:96:51:b7:fd:06:5f:9d:4a:c0:24:4a:c4:e1: 50:77:11:04:29:e2:7c:1e:44:69:71:21:ba:59:2f: 98:1f:ed:2b:2b:97:ab:2e:ca:d1:90:b8:89:6c:cc: 28:2a:3e:7e:48:d6:4c:55:cf:c4:ae:7f:60:be:42: 02:53:eb:68:07:58:84:9b:82:62:ea:23:01:44:6e: 1a:42:1b:cb:56:b5:d6:5c:a8:72:85:c2:f7:41:e7: 38:69:07:72:e2:8a:40:da:c9:b1:87:0c:23:1f:44: e4:42:b6:02:2a:91:a7:18:7d:7d:62:bc:aa:1e:10: c5:4f:09:42:52:e2:04:53:77:3c:48:cf:1f:71:28: 11:75:ea:11:54:64:9e:36:f3:37:d4:62:43:ba:54: e7:ca:8a:d6:0c:ef:b1:49:5f:dc:60:ec:be:6a:ed: 10:8b:15:2e:10:5e:8a:8c:f8:65:48:ba:fb:77:c8: f4:32:9d:63:1f:02:9d:cd:ff:1f:05:f3:95:b6:91: 82:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F3:30:5A:08:46:D5:FD:86:1F:69:1C:80:92:53:D5:3D:7D:98:A0 X509v3 Authority Key Identifier: keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/7PMwWghG1f2GH2kcgJJT1T19mKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.164.98.0/24 IPv6: 2001:1af0:9020::/48 Signature Algorithm: sha256WithRSAEncryption 36:a2:fb:99:66:40:e2:58:6e:16:63:38:59:1b:84:6b:0b:b3: c4:6f:1f:65:41:d1:03:df:51:1f:de:d5:57:99:31:ff:6f:9a: ce:83:f1:16:42:19:c7:7d:17:bb:e5:57:f9:08:e5:22:d7:31: ba:97:65:83:26:e5:3b:41:fd:4b:24:25:ab:25:b7:07:2a:2b: a2:91:a2:ad:64:89:00:8b:67:18:9a:d5:13:3e:34:3f:bf:81: 57:98:48:ff:76:f2:be:b2:29:d3:ce:f1:3c:d6:d4:31:f8:7e: 34:ed:5a:6c:78:ef:a3:99:84:05:d0:68:35:00:14:49:b2:98: ed:68:19:11:09:56:7f:8e:a4:ee:88:b4:9f:92:ca:8a:ad:96: 47:89:cd:cd:8f:e9:8a:18:47:b4:db:e1:02:85:2b:28:ac:76: 6c:39:5c:92:23:a5:0e:4d:9f:47:80:af:b0:a8:b2:a3:77:25: 12:c2:66:d6:2f:60:8b:79:78:51:ff:04:a8:ff:55:cd:0b:c6: dc:ae:7e:db:37:f2:ca:8b:c1:9f:4c:3f:2b:49:27:0b:c6:3b: 42:5d:5c:1e:d2:d9:83:f9:a2:1e:77:9e:24:cb:8a:fd:d9:66: 13:29:a2:54:6d:1f:34:74:f7:3f:6c:e8:18:1c:44:4b:6d:e2: 54:b8:c9:fc -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6W47ThcttqNUd7KZ9r+ERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm MDIwMjAwHhcNMjYwMTAxMTYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2YzMzA1YTA4NDZkNWZkODYxZjY5MWM4MDkyNTNkNTNkN2Q5OGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzIjBAghzUqUghKepfL0zpPT7mqn 4yFhvLuRhLTDu2/+NrpGcv4UlUIk8+kRO8gpZ3ttQo4nWu8wffP/MpZRt/0GX51K wCRKxOFQdxEEKeJ8HkRpcSG6WS+YH+0rK5erLsrRkLiJbMwoKj5+SNZMVc/Ern9g vkICU+toB1iEm4Ji6iMBRG4aQhvLVrXWXKhyhcL3Qec4aQdy4opA2smxhwwjH0Tk QrYCKpGnGH19YryqHhDFTwlCUuIEU3c8SM8fcSgRdeoRVGSeNvM31GJDulTnyorW DO+xSV/cYOy+au0QixUuEF6KjPhlSLr7d8j0Mp1jHwKdzf8fBfOVtpGCxQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOzzMFoIRtX9hh9pHICSU9U9fZigMB8GA1UdIwQY MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt NGI2YzFjZjlmZTRmLzEvN1BNd1dnaEcxZjJHSDJrY2dKSlQxVDE5bUtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAWaRiMA8E AgACMAkDBwAgARrwkCAwDQYJKoZIhvcNAQELBQADggEBADai+5lmQOJYbhZjOFkb hGsLs8RvH2VB0QPfUR/e1VeZMf9vms6D8RZCGcd9F7vlV/kI5SLXMbqXZYMm5TtB /UskJasltwcqK6KRoq1kiQCLZxia1RM+ND+/gVeYSP928r6yKdPO8TzW1DH4fjTt Wmx476OZhAXQaDUAFEmymO1oGREJVn+OpO6ItJ+SyoqtlkeJzc2P6YoYR7Tb4QKF Kyisdmw5XJIjpQ5Nn0eAr7CosqN3JRLCZtYvYIt5eFH/BKj/Vc0Lxtyufts38sqL wZ9MPytJJwvGO0JdXB7S2YP5oh53niTLiv3ZZhMpolRtHzR09z9s6BgcREtt4lS4 yfw= -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:41 2026 by rpki-client