This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/7Ayvp-uW9lsYoBe5C_qqBYeOBrw.roa File: 7Ayvp-uW9lsYoBe5C_qqBYeOBrw.roa (raw, json) Hash identifier: UXGDJSJK/leXOeQ1B1NAMR6HAmddT8uVGYrWzmhj2oE= Subject key identifier: EC:0C:AF:A7:EB:96:F6:5B:18:A0:17:B9:0B:FA:AA:05:87:8E:06:BC Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 019B7DCB3FDA29152A4C1FC242A144A6F8B3 Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/7Ayvp-uW9lsYoBe5C_qqBYeOBrw.roa Signing time: Fri 02 Jan 2026 08:20:30 +0000 ROA not before: Fri 02 Jan 2026 08:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47596 IP address blocks: 185.120.56.0/24 maxlen: 24 185.120.57.0/24 maxlen: 24 185.120.58.0/24 maxlen: 24 212.22.77.0/24 maxlen: 24 2a06:c3c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:3f:da:29:15:2a:4c:1f:c2:42:a1:44:a6:f8:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Jan 2 08:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec0cafa7eb96f65b18a017b90bfaaa05878e06bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:18:f3:8c:17:c3:61:5f:79:5f:b6:38:71:72: aa:0c:aa:f8:cf:21:26:b4:a0:7a:ce:0f:d1:33:5b: 9e:a2:71:cc:10:d6:40:f0:1e:2c:a9:d9:1e:8a:41: 5a:7a:6c:90:c3:8a:7d:46:7c:1b:a5:b9:d2:79:c7: 0a:15:94:f1:26:ab:2e:ea:b5:72:fd:bc:a6:f5:9e: 20:00:de:49:79:9f:48:22:41:f4:8e:79:8f:a3:f5: ef:e9:79:6c:09:57:64:83:06:27:67:d8:45:5d:85: 75:bf:7f:01:3a:d7:71:d0:0c:50:99:3b:82:0b:54: 39:c6:d5:ce:99:87:35:a3:6c:e6:0b:b6:37:63:3d: 91:ec:a8:f1:35:84:94:e2:77:9b:f8:28:b3:23:9c: 64:fc:9c:c0:dc:e2:ca:e0:8b:8a:a4:71:77:ef:3f: 3f:09:82:22:26:30:52:c1:fe:7b:91:cc:39:a8:7a: d3:3d:c3:3e:6c:62:30:b9:ce:39:e9:5d:bc:55:68: e9:89:60:d0:8d:7f:24:54:11:4a:e9:4f:15:6d:7a: a4:8b:8f:e0:0d:91:0d:1c:99:b7:9e:d1:b4:9b:24: 2e:62:b7:b0:20:8e:08:d6:21:3f:28:3a:b0:c0:2d: d8:de:83:36:bb:23:17:fc:6e:4a:95:8f:dc:95:39: 48:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0C:AF:A7:EB:96:F6:5B:18:A0:17:B9:0B:FA:AA:05:87:8E:06:BC X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/7Ayvp-uW9lsYoBe5C_qqBYeOBrw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.120.56.0-185.120.58.255 212.22.77.0/24 IPv6: 2a06:c3c0:1::/48 Signature Algorithm: sha256WithRSAEncryption 9b:90:63:29:f8:35:37:55:33:e0:11:e3:e7:7b:3d:34:1d:3c: 0e:cc:68:8d:a7:8a:e1:fc:42:dc:1f:55:b0:fa:93:48:f8:34: 81:10:84:fb:5e:09:c1:2e:83:6e:e8:15:88:a2:fe:1b:2d:bc: d3:1b:10:51:26:83:3d:73:40:f3:65:2e:89:57:cf:87:47:e5: 9f:55:45:d6:c8:23:de:22:83:fe:c1:3e:f3:a3:79:a6:74:b1: 24:f2:9a:0a:e2:71:05:b3:c1:11:e4:4d:13:3a:96:f2:fc:74: c2:06:0b:55:89:be:e2:67:64:a6:ac:e0:b1:9f:76:9b:90:3a: 55:6c:96:cc:df:71:0e:82:75:0e:4d:74:c7:62:90:f0:cf:1b: 8e:0e:f3:fd:ed:a0:3f:cf:1c:d3:dc:6d:2b:a6:58:5e:2f:15: 3a:1c:b3:68:7c:3f:05:69:89:04:aa:24:4c:c6:e8:3d:d9:01: cf:34:a6:5d:d3:61:49:d8:fc:9f:18:ae:59:a1:7e:96:45:da: dc:2c:cc:87:5a:07:68:4c:f2:4a:f1:a1:1a:9a:10:10:ef:51: 8d:2e:1c:3b:71:a7:fc:41:c6:3f:f8:b8:74:83:e7:21:6e:eb: 19:86:f9:3c:15:07:4d:84:4f:bd:93:ed:4f:50:12:30:b0:78: 74:a7:c1:16 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt9yz/aKRUqTB/CQqFEpvizMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjYwMTAyMDgyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzBjYWZhN2ViOTZmNjViMThhMDE3YjkwYmZhYWEwNTg3OGUwNmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRjzjBfDYV95X7Y4cXKqDKr4zyEm tKB6zg/RM1ueonHMENZA8B4sqdkeikFaemyQw4p9RnwbpbnSeccKFZTxJqsu6rVy /bym9Z4gAN5JeZ9IIkH0jnmPo/Xv6XlsCVdkgwYnZ9hFXYV1v38BOtdx0AxQmTuC C1Q5xtXOmYc1o2zmC7Y3Yz2R7KjxNYSU4neb+CizI5xk/JzA3OLK4IuKpHF37z8/ CYIiJjBSwf57kcw5qHrTPcM+bGIwuc456V28VWjpiWDQjX8kVBFK6U8VbXqki4/g DZENHJm3ntG0myQuYrewII4I1iE/KDqwwC3Y3oM2uyMX/G5KlY/clTlINwIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFOwMr6frlvZbGKAXuQv6qgWHjga8MB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvN0F5dnAtdVc5bHNZb0JlNUNfcXFCWWVPQnJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUMAwDBAO5eDgD BAC5eDoDBADUFk0wDwQCAAIwCQMHACoGw8AAATANBgkqhkiG9w0BAQsFAAOCAQEA m5BjKfg1N1Uz4BHj53s9NB08DsxojaeK4fxC3B9VsPqTSPg0gRCE+14JwS6DbugV iKL+Gy280xsQUSaDPXNA82UuiVfPh0fln1VF1sgj3iKD/sE+86N5pnSxJPKaCuJx BbPBEeRNEzqW8vx0wgYLVYm+4mdkpqzgsZ92m5A6VWyWzN9xDoJ1Dk10x2KQ8M8b jg7z/e2gP88c09xtK6ZYXi8VOhyzaHw/BWmJBKokTMboPdkBzzSmXdNhSdj8nxiu WaF+lkXa3CzMh1oHaEzySvGhGpoQEO9RjS4cO3Gn/EHGP/i4dIPnIW7rGYb5PBUH TYRPvZPtT1ASMLB4dKfBFg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:00 2026 by rpki-client