This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/7XorW7ITUOWgP4pU38fX3RKpcv0.roa File: 7XorW7ITUOWgP4pU38fX3RKpcv0.roa (raw, json) Hash identifier: dhKstKlCZm4b7W0PXvIWJClLT8IvcIHMNCKR+Y++DYI= Subject key identifier: ED:7A:2B:5B:B2:13:50:E5:A0:3F:8A:54:DF:C7:D7:DD:12:A9:72:FD Certificate issuer: /CN=b921277f3e7954a4af5520a99042fb0893af804d Certificate serial: 019B7E385C471580185906BC44578B0DDFC2 Authority key identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/7XorW7ITUOWgP4pU38fX3RKpcv0.roa Signing time: Fri 02 Jan 2026 10:19:41 +0000 ROA not before: Fri 02 Jan 2026 10:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43372 IP address blocks: 195.88.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:5c:47:15:80:18:59:06:bc:44:57:8b:0d:df:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b921277f3e7954a4af5520a99042fb0893af804d Validity Not Before: Jan 2 10:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed7a2b5bb21350e5a03f8a54dfc7d7dd12a972fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ca:88:ec:58:55:22:94:02:c7:9e:7b:d9:d2: 0d:93:24:78:72:7c:dd:81:79:b7:ce:a9:0c:17:0e: cf:74:e3:0f:77:36:19:8e:fb:20:54:aa:b1:bf:58: 27:0a:19:d9:90:9e:aa:25:e5:8c:d1:9b:91:33:3e: 85:c7:ab:fa:48:e1:4c:bb:e7:bb:3c:dc:81:3b:46: fa:bf:2c:69:1a:a0:e0:9f:89:16:52:a8:4f:37:e5: 5f:6b:95:78:3c:36:7a:c5:75:50:bb:25:d8:d4:67: 7e:49:53:7d:17:4c:f1:09:e0:1e:03:d2:25:60:2e: df:c1:90:52:8d:b8:73:91:23:46:30:16:9d:90:a4: 55:78:13:e2:c5:c7:83:7c:f9:b4:74:5d:1d:fb:4b: 10:ec:6a:2b:19:3c:ad:af:21:44:25:a7:5a:c6:30: 64:94:20:56:a9:4d:d5:b8:8e:6d:73:87:90:6d:67: f8:e1:d0:55:1a:d7:1c:15:e9:ad:72:f5:a9:83:30: 51:7b:9f:31:47:8d:ba:24:a9:fa:51:13:3b:d4:1f: 2f:b9:25:b8:da:8d:e4:31:80:2e:a5:33:ac:e5:46: a3:1c:b1:10:44:06:31:f0:82:75:a5:36:82:74:48: 72:b8:81:e0:9f:08:9f:36:8e:5e:84:0c:84:28:2a: 28:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7A:2B:5B:B2:13:50:E5:A0:3F:8A:54:DF:C7:D7:DD:12:A9:72:FD X509v3 Authority Key Identifier: keyid:B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/7XorW7ITUOWgP4pU38fX3RKpcv0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.88.232.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:f4:93:b0:50:7a:76:ee:c7:ff:e3:1d:f0:57:e9:92:da:95: 26:50:41:be:cf:a3:63:84:83:a2:f8:6e:a7:16:68:d2:e4:3e: 73:fc:f4:2b:d6:19:c8:bd:03:36:9d:1b:b1:24:f7:97:11:42: 20:d5:ae:a0:b5:2e:bf:29:5e:9b:60:a0:ad:a6:12:71:47:95: b6:ae:a1:d8:ae:01:76:07:a7:6b:75:51:c3:0e:29:d9:0a:ed: 63:c0:78:1f:cc:7a:a1:4a:63:7d:27:1b:21:85:97:2b:7b:cd: 37:0d:b6:fe:24:33:78:9d:e9:97:6e:b2:58:60:8b:0f:ab:91: fc:2f:12:b4:20:65:34:cf:5a:aa:a3:5d:3e:c3:93:e9:e2:a1: 1e:63:fd:b0:06:08:1e:9e:a0:d7:a9:09:39:03:3c:ac:d8:d0: d0:fe:39:e7:55:8e:67:84:7d:4d:97:df:de:55:e0:2b:4b:69: 40:90:0b:82:ea:0a:04:8e:f7:98:da:68:54:61:02:7e:18:bd: 36:f9:e1:82:3f:c1:ce:eb:f6:99:1a:c4:64:f1:9d:8d:f4:26: b0:25:d0:e7:f1:44:82:66:22:63:f9:98:53:50:46:44:97:db: 17:81:bb:d7:04:37:6a:0f:81:5d:d1:ee:e2:8e:d9:cd:b0:1e: 46:10:68:b7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OFxHFYAYWQa8RFeLDd/CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MjEyNzdmM2U3OTU0YTRhZjU1MjBhOTkwNDJmYjA4OTNh ZjgwNGQwHhcNMjYwMTAyMTAxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDdhMmI1YmIyMTM1MGU1YTAzZjhhNTRkZmM3ZDdkZDEyYTk3MmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsqI7FhVIpQCx5572dINkyR4cnzd gXm3zqkMFw7PdOMPdzYZjvsgVKqxv1gnChnZkJ6qJeWM0ZuRMz6Fx6v6SOFMu+e7 PNyBO0b6vyxpGqDgn4kWUqhPN+Vfa5V4PDZ6xXVQuyXY1Gd+SVN9F0zxCeAeA9Il YC7fwZBSjbhzkSNGMBadkKRVeBPixceDfPm0dF0d+0sQ7GorGTytryFEJadaxjBk lCBWqU3VuI5tc4eQbWf44dBVGtccFemtcvWpgzBRe58xR426JKn6URM71B8vuSW4 2o3kMYAupTOs5UajHLEQRAYx8IJ1pTaCdEhyuIHgnwifNo5ehAyEKCoo9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO16K1uyE1DloD+KVN/H190SqXL9MB8GA1UdIwQY MBaAFLkhJ38+eVSkr1UgqZBC+wiTr4BNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVNFbmZ6NTVWS1N2VlNDcGtFTDdDSk92Z0UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84Y2NiY2MtY2Q1MS00NGFlLThmMDUt MzZmZDIzMzUxNGY5LzEvN1hvclc3SVRVT1dnUDRwVTM4ZlgzUktwY3YwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi84Y2NiY2MtY2Q1MS00NGFlLThmMDUtMzZmZDIzMzUxNGY5 LzEvdVNFbmZ6NTVWS1N2VlNDcGtFTDdDSk92Z0UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1joMA0G CSqGSIb3DQEBCwUAA4IBAQBr9JOwUHp27sf/4x3wV+mS2pUmUEG+z6NjhIOi+G6n FmjS5D5z/PQr1hnIvQM2nRuxJPeXEUIg1a6gtS6/KV6bYKCtphJxR5W2rqHYrgF2 B6drdVHDDinZCu1jwHgfzHqhSmN9JxshhZcre803Dbb+JDN4nemXbrJYYIsPq5H8 LxK0IGU0z1qqo10+w5Pp4qEeY/2wBggenqDXqQk5Azys2NDQ/jnnVY5nhH1Nl9/e VeArS2lAkAuC6goEjveY2mhUYQJ+GL02+eGCP8HO6/aZGsRk8Z2N9CawJdDn8USC ZiJj+ZhTUEZEl9sXgbvXBDdqD4Fd0e7ijtnNsB5GEGi3 -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:20 2026 by rpki-client