This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/7GPQiM-NSCN0IKS3EvUobFWxoQA.roa File: 7GPQiM-NSCN0IKS3EvUobFWxoQA.roa (raw, json) Hash identifier: 7dtHC7Mnvkkb8AgUUUurd/t0bz1H27GfzCT6M/2rTgM= Subject key identifier: EC:63:D0:88:CF:8D:48:23:74:20:A4:B7:12:F5:28:6C:55:B1:A1:00 Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F845C9D16B92D8D2B889A5F08DC1816 Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/7GPQiM-NSCN0IKS3EvUobFWxoQA.roa Signing time: Fri 02 Jan 2026 16:22:19 +0000 ROA not before: Fri 02 Jan 2026 16:22:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12978 IP address blocks: 85.153.160.0/24 maxlen: 24 85.153.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:5c:9d:16:b9:2d:8d:2b:88:9a:5f:08:dc:18:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec63d088cf8d48237420a4b712f5286c55b1a100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ba:7f:97:b9:23:98:d3:03:75:d5:01:f5:f4: 46:2f:d1:86:82:43:cc:81:7f:5a:1c:bc:dd:0b:e3: 43:e1:e3:24:6f:7d:88:f3:4e:44:e4:59:b6:5d:d7: 6d:cc:46:bd:71:3f:d6:c2:2d:9d:98:4f:ee:c2:24: 9d:9a:54:db:60:1e:5b:28:ed:4f:bf:b6:b5:08:6d: f7:f7:4a:ac:e0:79:72:4e:f2:46:7d:77:36:5c:c4: 1f:7b:fa:e4:f6:23:71:c6:3a:6a:25:bd:cb:ab:12: 70:11:9f:88:c1:89:1d:6b:65:a3:c5:38:a0:fe:9c: 46:0f:5b:46:07:d2:c8:e5:c9:7c:2b:71:aa:3a:8f: 34:4b:34:6d:1b:cd:fa:0d:a1:19:3e:13:f6:b9:00: 38:76:05:4d:77:27:61:8c:41:d1:cf:23:a9:c3:19: 92:c7:d2:9a:49:5e:50:57:35:8f:f0:46:36:db:4c: 47:08:92:a3:74:eb:28:cf:c3:27:56:dd:bf:58:58: ef:c9:5a:67:27:39:08:65:8c:37:c6:69:c0:2b:8f: 65:eb:7b:cf:0d:c5:2f:c3:bf:76:b7:ac:f4:0a:8a: 7f:ac:2f:39:03:97:5a:17:f0:91:9e:0b:ce:4c:db: b1:fa:e5:38:23:7c:3e:5d:c5:ee:88:b7:c3:28:05: 8c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:63:D0:88:CF:8D:48:23:74:20:A4:B7:12:F5:28:6C:55:B1:A1:00 X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/7GPQiM-NSCN0IKS3EvUobFWxoQA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.153.160.0/24 85.153.198.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:36:04:48:1d:1f:73:83:d3:8c:66:9e:b4:3b:11:27:92:10: 9e:07:fa:d5:bf:79:2a:0d:62:4e:18:25:56:29:6e:f9:17:f2: 36:fb:75:55:6b:53:e4:d6:d7:91:1c:85:57:a3:48:e4:46:72: 30:88:b1:e9:8a:18:a0:81:41:79:e1:b6:78:37:80:3a:23:9b: 19:c8:f9:f4:87:3b:94:15:d9:42:c4:86:9b:d9:9c:2f:5f:d3: c8:75:45:94:5c:20:fa:c6:2e:da:41:40:14:f6:c1:19:04:bb: a8:ce:2f:6d:9c:83:a5:60:5a:53:c5:f8:8d:e3:e8:86:e3:46: 8a:e9:66:0c:91:e8:fb:a9:80:ea:84:20:76:fd:4d:0e:c4:95: 96:da:db:d0:97:34:44:b5:d3:10:6e:60:92:49:c2:51:32:77: 09:8b:f7:a6:e1:af:5b:1a:bf:e3:14:ac:52:f6:d0:db:ad:d9: d6:af:7d:15:e2:60:2f:e8:dc:31:0a:01:18:e5:6a:1d:3e:a5: a5:44:48:03:15:43:dd:41:3c:fd:70:85:29:d7:7c:62:9c:3e: 58:bf:cc:5a:7e:a6:be:ea:64:55:5c:a0:34:d4:ae:a5:f3:dc: 8a:42:ad:04:31:00:04:99:96:c7:4d:e2:fe:1d:c2:bc:26:0a: c4:93:24:66 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hFydFrktjSuIml8I3BgWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzYzZDA4OGNmOGQ0ODIzNzQyMGE0YjcxMmY1Mjg2YzU1YjFhMTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrp/l7kjmNMDddUB9fRGL9GGgkPM gX9aHLzdC+ND4eMkb32I805E5Fm2XddtzEa9cT/Wwi2dmE/uwiSdmlTbYB5bKO1P v7a1CG3390qs4HlyTvJGfXc2XMQfe/rk9iNxxjpqJb3LqxJwEZ+IwYkda2WjxTig /pxGD1tGB9LI5cl8K3GqOo80SzRtG836DaEZPhP2uQA4dgVNdydhjEHRzyOpwxmS x9KaSV5QVzWP8EY220xHCJKjdOsoz8MnVt2/WFjvyVpnJzkIZYw3xmnAK49l63vP DcUvw792t6z0Cop/rC85A5daF/CRngvOTNux+uU4I3w+XcXuiLfDKAWMFQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOxj0IjPjUgjdCCktxL1KGxVsaEAMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvN0dQUWlNLU5TQ04wSUtTM0V2VW9iRld4b1FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVZmgAwQA VZnGMA0GCSqGSIb3DQEBCwUAA4IBAQAONgRIHR9zg9OMZp60OxEnkhCeB/rVv3kq DWJOGCVWKW75F/I2+3VVa1Pk1teRHIVXo0jkRnIwiLHpihiggUF54bZ4N4A6I5sZ yPn0hzuUFdlCxIab2ZwvX9PIdUWUXCD6xi7aQUAU9sEZBLuozi9tnIOlYFpTxfiN 4+iG40aK6WYMkej7qYDqhCB2/U0OxJWW2tvQlzREtdMQbmCSScJRMncJi/em4a9b Gr/jFKxS9tDbrdnWr30V4mAv6NwxCgEY5WodPqWlREgDFUPdQTz9cIUp13xinD5Y v8xafqa+6mRVXKA01K6l89yKQq0EMQAEmZbHTeL+HcK8JgrEkyRm -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:49 2026 by rpki-client