This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/T7CuE8sM8Qd3oo0RRa_h_Cc-W5M.roa File: T7CuE8sM8Qd3oo0RRa_h_Cc-W5M.roa (raw, json) Hash identifier: ZWBCyQYdJoW8TuwkXaB5bNFnPnWKEyVuntW9B90XJeU= Subject key identifier: 4F:B0:AE:13:CB:0C:F1:07:77:A2:8D:11:45:AF:E1:FC:27:3E:5B:93 Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41 Certificate serial: 019B7E38836271195EEC022D35BBAE70D5A2 Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/T7CuE8sM8Qd3oo0RRa_h_Cc-W5M.roa Signing time: Fri 02 Jan 2026 10:19:51 +0000 ROA not before: Fri 02 Jan 2026 10:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31083 IP address blocks: 87.118.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:83:62:71:19:5e:ec:02:2d:35:bb:ae:70:d5:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41 Validity Not Before: Jan 2 10:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fb0ae13cb0cf10777a28d1145afe1fc273e5b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b3:04:93:e6:fc:f9:20:33:26:21:3a:dd:0d: 04:a4:93:40:91:18:75:0d:64:c1:28:96:85:60:f7: f0:d4:b0:9f:c9:2c:04:52:e7:a0:a3:ea:a1:3d:fc: d6:87:ea:46:12:0a:3a:80:92:fb:44:a5:b8:e3:1a: 6a:b3:2a:13:9d:a4:3e:9b:06:62:e1:47:4e:ce:84: 47:2a:67:7a:1a:9a:9c:f3:94:f2:b9:66:fd:97:5c: 48:9b:aa:d0:64:6d:92:2d:b5:6e:03:62:7b:44:ee: 2b:41:ee:53:2b:68:89:77:ec:88:1a:32:3e:99:ca: dd:8c:19:1d:1e:df:0e:db:21:af:f2:03:a3:3f:53: d6:1d:f7:83:40:72:54:bd:d4:af:d9:f5:2f:27:6a: 21:16:15:c1:56:5b:48:da:bc:d1:8a:44:07:3b:f0: 75:b3:63:eb:97:0e:bd:51:33:13:58:dd:fc:cb:42: f2:2d:ea:fe:aa:d7:2d:a4:00:26:ad:f0:ce:01:7c: 0f:cb:99:a9:09:87:8b:12:60:44:fe:11:35:ae:d6: 31:c0:3e:e2:06:0a:f9:a9:9b:9e:35:64:cb:cd:b2: 20:52:2e:89:1f:86:1a:61:f1:c3:6c:15:19:0d:9a: 94:d3:81:ac:12:36:91:fc:19:54:0f:5a:a9:1a:e3: 3e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B0:AE:13:CB:0C:F1:07:77:A2:8D:11:45:AF:E1:FC:27:3E:5B:93 X509v3 Authority Key Identifier: keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/T7CuE8sM8Qd3oo0RRa_h_Cc-W5M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.118.140.0/24 Signature Algorithm: sha256WithRSAEncryption c3:4e:53:17:f3:73:94:5f:c8:c9:32:18:2a:95:f9:7f:35:cb: bf:89:8f:a6:62:3a:29:50:47:73:f6:2b:80:f1:30:42:39:fc: 2c:fc:95:db:80:57:b4:17:03:5d:f7:96:72:10:22:9e:6d:2e: f5:7b:76:6c:fe:5a:4e:ca:99:83:02:d8:58:9d:eb:60:67:00: fd:45:7c:71:2a:9b:be:d7:58:cc:69:9a:4e:01:0e:58:48:b8: 18:0f:56:6a:4d:e6:82:6f:f0:b7:14:da:3b:c9:47:87:ee:55: d5:83:28:3f:34:f6:6e:7e:f6:a2:66:57:c5:f9:df:63:df:d7: 59:88:cb:3e:e1:18:2d:c6:77:93:98:c7:69:0c:46:50:ac:b7: d6:d6:d9:46:ef:c7:fa:31:b3:69:51:dd:4a:ab:ea:99:0e:20: b0:34:6d:71:ac:28:84:58:34:43:3d:30:ea:20:bc:5e:03:9c: ef:53:c3:5b:d7:f8:5c:2c:85:67:f9:e6:2a:f0:c9:c8:ce:54: fb:ec:16:68:41:36:31:52:ef:82:e6:24:9e:da:7f:db:64:f9: e1:08:da:e6:d4:3a:f2:ed:bd:26:99:63:3a:4c:8b:ae:30:a2: 83:24:9a:71:89:19:2f:bf:9a:0e:a5:50:4f:35:f8:01:6e:3e: 04:87:31:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OINicRle7AItNbuucNWiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwN2Q3NTczYWFjYWU4MjFjODdkNmQzNjQzMWNmZTRiMjgw MWFiNDEwHhcNMjYwMTAyMTAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmIwYWUxM2NiMGNmMTA3NzdhMjhkMTE0NWFmZTFmYzI3M2U1YjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrMEk+b8+SAzJiE63Q0EpJNAkRh1 DWTBKJaFYPfw1LCfySwEUuego+qhPfzWh+pGEgo6gJL7RKW44xpqsyoTnaQ+mwZi 4UdOzoRHKmd6Gpqc85TyuWb9l1xIm6rQZG2SLbVuA2J7RO4rQe5TK2iJd+yIGjI+ mcrdjBkdHt8O2yGv8gOjP1PWHfeDQHJUvdSv2fUvJ2ohFhXBVltI2rzRikQHO/B1 s2Prlw69UTMTWN38y0LyLer+qtctpAAmrfDOAXwPy5mpCYeLEmBE/hE1rtYxwD7i Bgr5qZueNWTLzbIgUi6JH4YaYfHDbBUZDZqU04GsEjaR/BlUD1qpGuM+0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE+wrhPLDPEHd6KNEUWv4fwnPluTMB8GA1UdIwQY MBaAFNB9dXOqyughyH1tNkMc/ksoAatBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjIt Y2Y5ZGM1YmFhYTc5LzEvVDdDdUU4c004UWQzb28wUlJhX2hfQ2MtVzVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjItY2Y5ZGM1YmFhYTc5 LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3aMMA0G CSqGSIb3DQEBCwUAA4IBAQDDTlMX83OUX8jJMhgqlfl/Ncu/iY+mYjopUEdz9iuA 8TBCOfws/JXbgFe0FwNd95ZyECKebS71e3Zs/lpOypmDAthYnetgZwD9RXxxKpu+ 11jMaZpOAQ5YSLgYD1ZqTeaCb/C3FNo7yUeH7lXVgyg/NPZufvaiZlfF+d9j39dZ iMs+4RgtxneTmMdpDEZQrLfW1tlG78f6MbNpUd1Kq+qZDiCwNG1xrCiEWDRDPTDq ILxeA5zvU8Nb1/hcLIVn+eYq8MnIzlT77BZoQTYxUu+C5iSe2n/bZPnhCNrm1Dry 7b0mmWM6TIuuMKKDJJpxiRkvv5oOpVBPNfgBbj4EhzEN -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:15 2026 by rpki-client