This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/7IUGFEJ0NMO3LBeeCKH1Tv3swxk.roa File: 7IUGFEJ0NMO3LBeeCKH1Tv3swxk.roa (raw, json) Hash identifier: JKdsp8foAu6n1QdpyLE7/kBA3hQmLd7CFwAOCgEIHwU= Subject key identifier: EC:85:06:14:42:74:34:C3:B7:2C:17:9E:08:A1:F5:4E:FD:EC:C3:19 Certificate issuer: /CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da Certificate serial: 019B7C1326832015FDAA2D9752265CB567EA Authority key identifier: 33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/7IUGFEJ0NMO3LBeeCKH1Tv3swxk.roa Signing time: Fri 02 Jan 2026 00:19:48 +0000 ROA not before: Fri 02 Jan 2026 00:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29644 IP address blocks: 185.150.220.0/24 maxlen: 24 185.150.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:26:83:20:15:fd:aa:2d:97:52:26:5c:b5:67:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da Validity Not Before: Jan 2 00:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec850614427434c3b72c179e08a1f54efdecc319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:be:b4:ff:b0:2d:16:72:9a:8e:91:2c:50:a1: 47:8b:20:d7:7f:bb:9b:12:04:93:df:54:ed:6a:3e: ab:b3:0c:12:3a:56:b7:b4:c9:93:c8:7c:79:d8:53: d2:17:4a:73:6c:76:c3:88:69:a8:d1:f9:e7:d3:9f: c3:c2:e8:e7:25:00:68:77:e2:30:5b:c8:71:f2:99: 74:5b:b4:b6:3d:f6:ad:40:a7:1f:8d:4b:9a:ea:d6: 9e:42:b7:96:34:9f:8f:92:7e:17:55:37:e1:76:03: f1:0d:e3:aa:0d:f9:60:a8:fa:b1:c4:18:f7:ff:30: 81:e1:a3:f8:78:95:51:56:3d:53:df:6c:e5:2c:3f: fd:86:d4:02:87:a6:eb:67:6a:68:30:bd:a1:72:b5: 8c:ac:4e:b9:65:85:74:81:9b:20:75:00:91:9a:1c: 28:6b:20:9b:7a:51:2f:e9:88:6b:80:88:5b:d0:eb: 61:45:b6:f7:76:a6:4e:46:45:9a:73:2b:3f:98:3d: 54:77:c9:61:99:fd:16:7d:4b:46:84:d3:ec:d0:4e: fe:ce:ca:10:a1:0d:95:eb:4a:dd:b4:c2:5e:59:c3: 76:f3:51:0c:95:3e:0b:20:f5:40:50:7b:1f:ff:d1: d8:c7:42:fa:28:d8:12:31:42:50:d2:b1:b5:28:8b: c5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:85:06:14:42:74:34:C3:B7:2C:17:9E:08:A1:F5:4E:FD:EC:C3:19 X509v3 Authority Key Identifier: keyid:33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/7IUGFEJ0NMO3LBeeCKH1Tv3swxk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.220.0/23 Signature Algorithm: sha256WithRSAEncryption 53:48:3d:9d:0f:bd:95:a8:6f:f6:d0:4b:ae:ce:1a:29:5a:ba: d7:46:36:a9:fa:59:1a:f6:24:17:c4:a4:66:e2:e6:aa:2f:a2: ab:8d:a3:29:ef:c8:68:dd:35:41:e8:f9:ca:a1:95:0e:98:bb: d0:a1:dd:fc:44:0b:78:f0:ba:65:9f:1b:ca:c7:0a:7f:5c:e4: fb:8f:59:6c:4e:f6:1e:a9:34:22:4d:73:52:2f:0b:cd:41:4d: b5:bd:e8:40:b0:c8:d2:a4:25:ff:39:b1:ca:59:de:8b:69:29: a5:c4:d0:69:28:19:f6:65:78:76:e8:ed:19:f0:0a:28:22:87: b1:5a:9b:b5:72:a8:fc:49:91:d1:5b:89:ec:4b:cc:e9:84:6d: dd:68:16:21:8c:c5:82:6e:50:4b:00:1e:e2:8e:60:f9:18:ac: 24:90:10:45:5e:cd:b6:d2:c2:9d:c6:c2:08:d7:18:72:1c:26: 26:4d:f1:39:9a:bc:e1:81:05:cc:a2:f1:d0:ea:78:a7:93:1b: 4e:3b:fd:e7:86:ca:92:0b:09:59:88:12:03:f0:d0:a5:6c:d5: a4:61:d8:79:1f:b6:9b:fd:ab:b7:71:b1:dd:93:20:22:0d:88: 2f:9e:dc:42:7b:cf:0f:5b:69:47:55:79:f6:d6:59:6d:64:fe: 4b:67:55:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EyaDIBX9qi2XUiZctWfqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNWMzMzM2ZTJjZTNiZDc1YWIyOWNlODFlNTRmZjgxZWM1 NmYxZGEwHhcNMjYwMTAyMDAxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzg1MDYxNDQyNzQzNGMzYjcyYzE3OWUwOGExZjU0ZWZkZWNjMzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw760/7AtFnKajpEsUKFHiyDXf7ub EgST31Ttaj6rswwSOla3tMmTyHx52FPSF0pzbHbDiGmo0fnn05/DwujnJQBod+Iw W8hx8pl0W7S2PfatQKcfjUua6taeQreWNJ+Pkn4XVTfhdgPxDeOqDflgqPqxxBj3 /zCB4aP4eJVRVj1T32zlLD/9htQCh6brZ2poML2hcrWMrE65ZYV0gZsgdQCRmhwo ayCbelEv6YhrgIhb0OthRbb3dqZORkWacys/mD1Ud8lhmf0WfUtGhNPs0E7+zsoQ oQ2V60rdtMJeWcN281EMlT4LIPVAUHsf/9HYx0L6KNgSMUJQ0rG1KIvFvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOyFBhRCdDTDtywXngih9U797MMZMB8GA1UdIwQY MBaAFDNcMzbizjvXWrKc6B5U/4HsVvHaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTF3ek51TE9POWRhc3B6b0hsVF9nZXhXOGRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My82ZWQyMGUtMjE1OS00N2Q1LTliMWQt NDFkNTA5ZjhiMTU1LzEvN0lVR0ZFSjBOTU8zTEJlZUNLSDFUdjNzd3hrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My82ZWQyMGUtMjE1OS00N2Q1LTliMWQtNDFkNTA5ZjhiMTU1 LzEvTTF3ek51TE9POWRhc3B6b0hsVF9nZXhXOGRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuZbcMA0G CSqGSIb3DQEBCwUAA4IBAQBTSD2dD72VqG/20EuuzhopWrrXRjap+lka9iQXxKRm 4uaqL6KrjaMp78ho3TVB6PnKoZUOmLvQod38RAt48LplnxvKxwp/XOT7j1lsTvYe qTQiTXNSLwvNQU21vehAsMjSpCX/ObHKWd6LaSmlxNBpKBn2ZXh26O0Z8AooIoex Wpu1cqj8SZHRW4nsS8zphG3daBYhjMWCblBLAB7ijmD5GKwkkBBFXs220sKdxsII 1xhyHCYmTfE5mrzhgQXMovHQ6ninkxtOO/3nhsqSCwlZiBID8NClbNWkYdh5H7ab /au3cbHdkyAiDYgvntxCe88PW2lHVXn21lltZP5LZ1V7 -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:25 2026 by rpki-client