This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/7HoJjRsw9_yGsPOoQZOg5iSXzM8.roa File: 7HoJjRsw9_yGsPOoQZOg5iSXzM8.roa (raw, json) Hash identifier: wOK3QkIDyuyuhwElcyAXXhM7VzIujoUrpG6d1AXTVD0= Subject key identifier: EC:7A:09:8D:1B:30:F7:FC:86:B0:F3:A8:41:93:A0:E6:24:97:CC:CF Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 019B79ED1FB5225BA45CC6862F5EC3B88001 Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/7HoJjRsw9_yGsPOoQZOg5iSXzM8.roa Signing time: Thu 01 Jan 2026 14:19:01 +0000 ROA not before: Thu 01 Jan 2026 14:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205209 IP address blocks: 80.74.96.0/24 maxlen: 24 80.74.97.0/24 maxlen: 24 80.74.99.0/24 maxlen: 24 80.74.123.0/24 maxlen: 24 92.61.224.0/24 maxlen: 24 92.61.225.0/24 maxlen: 24 92.61.226.0/24 maxlen: 24 92.61.230.0/24 maxlen: 24 92.61.231.0/24 maxlen: 24 92.61.234.0/23 maxlen: 23 92.61.234.0/24 maxlen: 24 92.61.235.0/24 maxlen: 24 94.188.136.0/24 maxlen: 24 94.188.138.0/24 maxlen: 24 94.188.140.0/24 maxlen: 24 94.188.142.0/24 maxlen: 24 94.188.161.0/24 maxlen: 24 94.188.162.0/24 maxlen: 24 94.188.165.0/24 maxlen: 24 94.188.166.0/24 maxlen: 24 94.188.167.0/24 maxlen: 24 94.188.169.0/24 maxlen: 24 94.188.171.0/24 maxlen: 24 94.188.175.0/24 maxlen: 24 94.188.178.0/24 maxlen: 24 94.188.179.0/24 maxlen: 24 94.188.186.0/23 maxlen: 23 94.188.188.0/23 maxlen: 23 94.188.191.0/24 maxlen: 24 94.188.196.0/24 maxlen: 24 94.188.197.0/24 maxlen: 24 94.188.200.0/24 maxlen: 24 94.188.242.0/24 maxlen: 24 94.188.243.0/24 maxlen: 24 94.188.251.0/24 maxlen: 24 2a02:23b8:2::/52 maxlen: 52 2a02:23b8:1a00::/56 maxlen: 56 2a02:23b8:1a00:200::/56 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1f:b5:22:5b:a4:5c:c6:86:2f:5e:c3:b8:80:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Jan 1 14:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec7a098d1b30f7fc86b0f3a84193a0e62497cccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9b:93:d0:80:cb:00:ee:3f:de:10:56:ce:55: 79:a9:ec:dd:61:24:ce:9d:e3:ff:4e:75:cf:da:f7: 1e:28:33:f2:8a:d2:cb:a8:2b:e3:91:d4:3e:4c:d2: 01:4e:88:58:82:44:12:10:6d:34:3f:f4:b2:ae:5a: f0:e9:0d:24:da:82:39:61:90:16:76:4c:aa:d2:cf: 59:93:b4:33:30:48:51:2e:99:d9:5a:6d:b2:da:54: 55:97:b1:4c:1b:09:7a:29:35:4d:64:74:73:6e:bc: 06:17:9d:2a:a5:a2:94:b8:04:60:b3:1b:43:b9:87: 6f:84:31:ac:fc:51:4e:19:df:11:50:3f:bc:50:db: b4:13:7c:52:50:dd:2b:ca:9c:da:6d:34:b4:1c:98: df:7a:91:bf:81:bd:f1:d5:95:5d:e1:2c:7e:4f:18: cb:9b:56:42:f9:5d:5f:ca:2b:f6:61:1c:56:be:44: 4d:9e:af:56:a9:0d:d9:7c:67:46:95:8f:b8:19:8c: ef:61:37:1c:c5:23:09:20:63:1f:45:9b:4e:c0:0b: 29:da:84:bc:91:3e:85:d0:a8:2d:60:f9:b2:d8:b1: ee:e0:61:f2:d9:02:2c:b2:c8:ab:54:59:ce:f8:8d: a4:79:ba:a3:ba:a1:55:6a:cf:f3:c7:bb:fb:2a:9c: 51:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:7A:09:8D:1B:30:F7:FC:86:B0:F3:A8:41:93:A0:E6:24:97:CC:CF X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/7HoJjRsw9_yGsPOoQZOg5iSXzM8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.74.96.0/23 80.74.99.0/24 80.74.123.0/24 92.61.224.0-92.61.226.255 92.61.230.0/23 92.61.234.0/23 94.188.136.0/24 94.188.138.0/24 94.188.140.0/24 94.188.142.0/24 94.188.161.0-94.188.162.255 94.188.165.0-94.188.167.255 94.188.169.0/24 94.188.171.0/24 94.188.175.0/24 94.188.178.0/23 94.188.186.0-94.188.189.255 94.188.191.0/24 94.188.196.0/23 94.188.200.0/24 94.188.242.0/23 94.188.251.0/24 IPv6: 2a02:23b8:2::/52 2a02:23b8:1a00::/56 2a02:23b8:1a00:200::/56 Signature Algorithm: sha256WithRSAEncryption 89:99:f8:9a:3a:10:90:a1:20:6e:4a:4b:39:3c:d1:87:eb:a0: 7e:91:97:da:5b:53:11:bb:8c:67:ec:01:06:f3:b7:60:a8:0f: 26:f9:02:b9:d8:a4:aa:5e:55:e6:14:50:74:6d:52:74:3f:40: 5b:68:ab:2c:f6:09:c7:17:01:28:66:6b:e4:c0:d6:fd:c6:51: 82:41:83:27:35:05:1b:41:21:60:8c:a4:00:e8:62:f4:0e:40: ba:36:ff:9f:5e:88:2e:90:3b:c7:0e:47:57:8d:63:89:43:57: cf:57:c5:36:54:26:36:58:db:6e:a4:36:28:b4:f8:a9:e5:81: 2f:52:ba:85:af:93:67:e7:b1:94:6a:88:35:9f:dc:3a:bd:64: 61:e0:bc:cd:ee:f1:a4:46:c2:53:8d:19:e8:8e:c7:06:e2:d0: ff:14:bc:22:8b:7d:26:ac:81:58:f9:aa:3d:19:cf:98:af:3a: 13:cb:25:0d:92:fd:3e:73:ec:de:ba:58:a0:15:5a:6c:75:ef: f7:d4:5b:ac:c7:fa:c2:54:5e:19:f1:2d:84:d6:06:1e:a9:ba: ab:25:e2:54:29:8c:cf:8d:9f:cc:d4:cb:62:34:47:b7:0f:ef: 10:cb:ad:05:95:d8:d9:91:58:1f:3b:00:ca:74:af:09:ae:29: 3e:1e:ad:02 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgISAZt57R+1IlukXMaGL17DuIABMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjYwMTAxMTQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzdhMDk4ZDFiMzBmN2ZjODZiMGYzYTg0MTkzYTBlNjI0OTdjY2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpuT0IDLAO4/3hBWzlV5qezdYSTO neP/TnXP2vceKDPyitLLqCvjkdQ+TNIBTohYgkQSEG00P/Syrlrw6Q0k2oI5YZAW dkyq0s9Zk7QzMEhRLpnZWm2y2lRVl7FMGwl6KTVNZHRzbrwGF50qpaKUuARgsxtD uYdvhDGs/FFOGd8RUD+8UNu0E3xSUN0rypzabTS0HJjfepG/gb3x1ZVd4Sx+TxjL m1ZC+V1fyiv2YRxWvkRNnq9WqQ3ZfGdGlY+4GYzvYTccxSMJIGMfRZtOwAsp2oS8 kT6F0KgtYPmy2LHu4GHy2QIsssirVFnO+I2kebqjuqFVas/zx7v7KpxRZQIDAQAB o4IC0jCCAs4wHQYDVR0OBBYEFOx6CY0bMPf8hrDzqEGToOYkl8zPMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvN0hvSmpSc3c5X3lHc1BPb1FaT2c1aVNYek04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHnBggrBgEFBQcBBwEB/wSB1zCB1DCBqwQCAAEwgaQDBAFQ SmADBABQSmMDBABQSnswDAMEBVw94AMEAFw94gMEAVw95gMEAVw96gMEAF68iAME AF68igMEAF68jAMEAF68jjAMAwQAXryhAwQAXryiMAwDBABevKUDBANevKADBABe vKkDBABevKsDBABevK8DBAFevLIwDAMEAV68ugMEAV68vAMEAF68vwMEAV68xAME AF68yAMEAV688gMEAF68+zAkBAIAAjAeAwgEKgIjuAACAAMIACoCI7gaAAADCAAq AiO4GgACMA0GCSqGSIb3DQEBCwUAA4IBAQCJmfiaOhCQoSBuSks5PNGH66B+kZfa W1MRu4xn7AEG87dgqA8m+QK52KSqXlXmFFB0bVJ0P0BbaKss9gnHFwEoZmvkwNb9 xlGCQYMnNQUbQSFgjKQA6GL0DkC6Nv+fXogukDvHDkdXjWOJQ1fPV8U2VCY2WNtu pDYotPip5YEvUrqFr5Nn57GUaog1n9w6vWRh4LzN7vGkRsJTjRnojscG4tD/FLwi i30mrIFY+ao9Gc+YrzoTyyUNkv0+c+zeuligFVpsde/31Fusx/rCVF4Z8S2E1gYe qbqrJeJUKYzPjZ/M1MtiNEe3D+8Qy60FldjZkVgfOwDKdK8Jrik+Hq0C -----END CERTIFICATE-----Generated at Sun Jan 25 08:51:57 2026 by rpki-client