This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/T7EjLOUNjE599ece2DV4T26b9xY.roa File: T7EjLOUNjE599ece2DV4T26b9xY.roa (raw, json) Hash identifier: fsf0dRPygHs9hSe02Kw5kkb/kNnztp8TK8bBIMk8jhU= Subject key identifier: 4F:B1:23:2C:E5:0D:8C:4E:7D:F5:E7:1E:D8:35:78:4F:6E:9B:F7:16 Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019B7A5B64EC439640EE740935467EAF2CF5 Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/T7EjLOUNjE599ece2DV4T26b9xY.roa Signing time: Thu 01 Jan 2026 16:19:28 +0000 ROA not before: Thu 01 Jan 2026 16:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214721 IP address blocks: 81.163.128.0/20 maxlen: 24 81.163.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:64:ec:43:96:40:ee:74:09:35:46:7e:af:2c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Jan 1 16:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fb1232ce50d8c4e7df5e71ed835784f6e9bf716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:79:ae:c1:46:59:56:37:4c:a5:73:da:f7:6a: 0a:09:de:1e:a9:17:30:d8:4e:60:a9:c2:b4:82:b8: 51:72:33:b5:d7:fb:05:ae:0a:7b:c8:ac:cb:a2:50: 50:7c:69:80:82:90:1e:79:09:e3:01:e0:0c:23:d6: 0e:6b:ad:ec:2c:32:c2:2c:0e:55:26:ea:63:20:a9: 76:c0:1c:7c:0d:df:b3:47:0f:3b:83:5e:a2:85:f8: 2c:df:2f:68:8f:07:ea:d7:7a:ef:fc:18:4c:82:a7: b6:fa:2b:0b:b3:5c:54:73:33:08:f1:bf:5a:bd:49: 51:99:e2:97:e2:a0:ad:6a:ba:7f:17:d0:86:ac:16: 15:2a:eb:56:44:29:52:71:3b:c7:2a:af:14:f8:2d: ba:94:15:ff:50:24:1d:4f:91:41:54:13:9a:66:5f: 3b:26:2b:13:96:fe:8e:90:14:86:d6:83:a4:22:cd: af:00:71:02:77:de:e0:88:88:95:58:18:d2:7b:7b: 14:a0:66:65:96:df:d8:3e:70:96:d0:b1:b7:ee:9f: 5f:23:9d:0d:d4:8d:74:b2:20:9f:a7:9a:75:56:c5: c6:de:ea:e1:b5:b9:cb:fb:eb:5a:17:59:16:18:30: cd:de:c0:16:e4:08:43:1b:a0:ab:51:08:1a:ba:43: 9b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B1:23:2C:E5:0D:8C:4E:7D:F5:E7:1E:D8:35:78:4F:6E:9B:F7:16 X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/T7EjLOUNjE599ece2DV4T26b9xY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.163.128.0/19 Signature Algorithm: sha256WithRSAEncryption 2c:d9:28:47:5a:83:77:c1:c6:5f:89:4a:62:0b:27:87:46:f5: 92:c2:36:01:43:a7:16:e2:f0:0c:95:b4:f0:be:fd:ad:9a:38: 9f:e8:5d:b1:53:bf:a7:90:7d:ea:07:c8:29:29:f6:23:80:22: e8:0c:5a:13:e5:db:cf:31:09:b3:5a:e9:fb:07:b3:d3:07:b7: 1a:b9:f7:c0:3d:3c:81:26:b6:c5:ad:8d:97:e5:58:5e:88:d3: ed:5d:c9:69:53:a6:8e:31:38:0f:5a:48:d5:ed:98:48:ef:1a: 2a:3a:b2:f3:69:b4:75:15:ab:dd:34:0d:a4:ee:ee:d4:29:17: 0b:3a:cc:4a:7a:bd:f6:37:a5:32:f5:f0:31:a8:c5:78:69:d6: 2b:ef:69:68:8d:06:0e:d3:08:63:ab:ef:c6:ac:cb:a5:51:8c: b1:3f:1b:99:9d:03:a2:41:ee:c4:6d:45:a1:b8:59:00:19:26: 18:24:8c:8c:c2:19:f1:ff:2d:cd:7a:bb:bc:60:6e:ec:5a:0a: 53:89:c3:7f:8d:d7:c0:40:dc:9e:5d:f4:14:65:f5:14:37:1a: 39:53:4c:b3:52:7c:17:d9:3c:b5:9f:69:69:5f:da:5d:9d:cd: 19:9c:36:3e:6e:a4:6a:87:69:b6:c5:72:ba:58:8b:43:67:cd: 8d:79:73:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W2TsQ5ZA7nQJNUZ+ryz1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjYwMTAxMTYxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmIxMjMyY2U1MGQ4YzRlN2RmNWU3MWVkODM1Nzg0ZjZlOWJmNzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznmuwUZZVjdMpXPa92oKCd4eqRcw 2E5gqcK0grhRcjO11/sFrgp7yKzLolBQfGmAgpAeeQnjAeAMI9YOa63sLDLCLA5V JupjIKl2wBx8Dd+zRw87g16ihfgs3y9ojwfq13rv/BhMgqe2+isLs1xUczMI8b9a vUlRmeKX4qCtarp/F9CGrBYVKutWRClScTvHKq8U+C26lBX/UCQdT5FBVBOaZl87 JisTlv6OkBSG1oOkIs2vAHECd97giIiVWBjSe3sUoGZllt/YPnCW0LG37p9fI50N 1I10siCfp5p1VsXG3urhtbnL++taF1kWGDDN3sAW5AhDG6CrUQgaukObzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE+xIyzlDYxOffXnHtg1eE9um/cWMB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvVDdFakxPVU5qRTU5OWVjZTJEVjRUMjZiOXhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFUaOAMA0G CSqGSIb3DQEBCwUAA4IBAQAs2ShHWoN3wcZfiUpiCyeHRvWSwjYBQ6cW4vAMlbTw vv2tmjif6F2xU7+nkH3qB8gpKfYjgCLoDFoT5dvPMQmzWun7B7PTB7cauffAPTyB JrbFrY2X5VheiNPtXclpU6aOMTgPWkjV7ZhI7xoqOrLzabR1FavdNA2k7u7UKRcL OsxKer32N6Uy9fAxqMV4adYr72lojQYO0whjq+/GrMulUYyxPxuZnQOiQe7EbUWh uFkAGSYYJIyMwhnx/y3Neru8YG7sWgpTicN/jdfAQNyeXfQUZfUUNxo5U0yzUnwX 2Ty1n2lpX9pdnc0ZnDY+bqRqh2m2xXK6WItDZ82NeXOf -----END CERTIFICATE-----Generated at Mon Jan 26 04:55:33 2026 by rpki-client