This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/7Me5WXJix6bhmJacUAumrmlySgk.roa File: 7Me5WXJix6bhmJacUAumrmlySgk.roa (raw, json) Hash identifier: YrS81rUpK2c6Zib9l6JvC9RAlucS71SZij2OkYz09Wc= Subject key identifier: EC:C7:B9:59:72:62:C7:A6:E1:98:96:9C:50:0B:A6:AE:69:72:4A:09 Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Certificate serial: 019B7910CAC35EE7590A26C003CC09D3C866 Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/7Me5WXJix6bhmJacUAumrmlySgk.roa Signing time: Thu 01 Jan 2026 10:18:22 +0000 ROA not before: Thu 01 Jan 2026 10:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33845 IP address blocks: 131.102.0.0/16 maxlen: 24 149.126.48.0/21 maxlen: 24 162.23.0.0/16 maxlen: 24 193.5.216.0/21 maxlen: 24 2a07:2900::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ca:c3:5e:e7:59:0a:26:c0:03:cc:09:d3:c8:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Validity Not Before: Jan 1 10:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ecc7b9597262c7a6e198969c500ba6ae69724a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2e:a2:85:7f:e5:3e:2a:31:cb:97:19:c1:cd: a4:b7:31:6d:59:26:10:da:d5:d8:04:26:ea:3b:f4: 4a:f6:04:26:75:25:e5:7c:52:5b:c4:55:7c:a3:6e: 92:96:a5:ee:6c:41:e6:4f:e4:f1:fb:1e:f3:71:69: d1:aa:98:4f:cf:0c:5f:f7:29:3a:23:08:29:d0:d1: dd:b7:1f:7f:84:a5:b2:a4:d2:31:00:7c:59:ce:08: c7:a0:e7:40:87:c9:74:3c:04:0b:b5:7b:13:28:00: 1e:2c:0a:4a:90:33:31:96:d3:a5:ac:8a:89:90:56: a4:1a:9f:f0:50:e2:a5:2c:e0:da:77:a1:e5:f6:b1: ba:82:6b:73:cd:d9:85:3b:33:b5:fd:4b:fb:35:84: 61:1e:c8:62:4c:db:fb:cc:d9:03:75:52:f5:2d:2d: 1a:87:3a:b5:80:25:b1:70:88:b3:26:7d:fc:0f:76: ea:e5:6f:8a:7e:7d:85:04:6f:36:12:a0:03:eb:fc: 09:0a:fd:52:b3:b6:3e:07:fc:fb:43:03:a1:bc:b5: 47:97:a0:a9:87:0e:7c:a8:0e:e3:6c:a4:55:06:7e: b0:f7:9e:da:e2:35:8d:93:13:24:56:18:f8:5d:02: e8:93:52:15:4a:6e:25:2a:82:a5:72:ff:e2:e6:a8: 41:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C7:B9:59:72:62:C7:A6:E1:98:96:9C:50:0B:A6:AE:69:72:4A:09 X509v3 Authority Key Identifier: keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/7Me5WXJix6bhmJacUAumrmlySgk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.102.0.0/16 149.126.48.0/21 162.23.0.0/16 193.5.216.0/21 IPv6: 2a07:2900::/32 Signature Algorithm: sha256WithRSAEncryption 88:41:06:e1:61:ca:bd:5d:26:d0:b9:56:b2:e6:58:c6:30:8e: 44:b4:84:d6:34:04:64:b3:b5:23:78:ca:b3:2e:78:2d:b0:22: 7b:98:fd:c5:6a:63:69:89:2c:50:81:c4:b0:59:83:36:38:36: 08:a3:b4:ad:5d:af:da:ae:d4:ed:e1:ed:ae:a0:30:59:fe:72: e0:bd:3c:9d:d5:7a:1c:7e:ef:e1:8b:f7:69:f2:ea:f8:b3:46: b4:59:c0:6e:95:c8:98:76:6e:ad:33:c1:54:23:99:45:ec:74: 04:68:e8:c8:e2:fc:48:d8:9c:cf:12:41:04:25:25:38:46:d4: c3:fb:e9:77:7f:c6:c1:92:1c:7d:1a:4b:e3:bf:38:1a:8b:4a: 32:a4:9b:46:f6:67:e9:a9:b1:dc:6d:08:ad:d6:b8:82:09:b4: 05:9a:7e:a9:79:ae:ad:2e:ae:21:bb:c7:ed:bd:77:cb:f3:f8: 22:7f:1c:4c:9a:b5:64:1d:c7:7c:15:d9:63:80:09:62:6f:6e: 36:65:cd:b8:da:73:f4:04:f3:22:56:fb:a3:6f:36:5b:16:c9: df:b2:7c:14:a4:10:ed:74:0d:94:6a:b7:33:14:aa:01:b6:a1: b7:33:f1:32:fe:ec:55:c8:af:18:00:33:5f:3b:87:d8:46:e3: b6:62:4a:18 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt5EMrDXudZCibAA8wJ08hmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw OTliYjgwHhcNMjYwMTAxMTAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2M3Yjk1OTcyNjJjN2E2ZTE5ODk2OWM1MDBiYTZhZTY5NzI0YTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli6ihX/lPioxy5cZwc2ktzFtWSYQ 2tXYBCbqO/RK9gQmdSXlfFJbxFV8o26SlqXubEHmT+Tx+x7zcWnRqphPzwxf9yk6 Iwgp0NHdtx9/hKWypNIxAHxZzgjHoOdAh8l0PAQLtXsTKAAeLApKkDMxltOlrIqJ kFakGp/wUOKlLODad6Hl9rG6gmtzzdmFOzO1/Uv7NYRhHshiTNv7zNkDdVL1LS0a hzq1gCWxcIizJn38D3bq5W+Kfn2FBG82EqAD6/wJCv1Ss7Y+B/z7QwOhvLVHl6Cp hw58qA7jbKRVBn6w957a4jWNkxMkVhj4XQLok1IVSm4lKoKlcv/i5qhBMwIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFOzHuVlyYsem4ZiWnFALpq5pckoJMB8GA1UdIwQY MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt ODhkMmRmMTBkMTViLzEvN01lNVdYSml4NmJobUphY1VBdW1ybWx5U2drLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAcBAIAATAWAwMAg2YDBAOV fjADAwCiFwMEA8EF2DANBAIAAjAHAwUAKgcpADANBgkqhkiG9w0BAQsFAAOCAQEA iEEG4WHKvV0m0LlWsuZYxjCORLSE1jQEZLO1I3jKsy54LbAie5j9xWpjaYksUIHE sFmDNjg2CKO0rV2v2q7U7eHtrqAwWf5y4L08ndV6HH7v4Yv3afLq+LNGtFnAbpXI mHZurTPBVCOZRex0BGjoyOL8SNiczxJBBCUlOEbUw/vpd3/GwZIcfRpL4784GotK MqSbRvZn6amx3G0Irda4ggm0BZp+qXmurS6uIbvH7b13y/P4In8cTJq1ZB3HfBXZ Y4AJYm9uNmXNuNpz9ATzIlb7o282WxbJ37J8FKQQ7XQNlGq3MxSqAbahtzPxMv7s VcivGAAzXzuH2EbjtmJKGA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:41:29 2026 by rpki-client