This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/7voYUgkjFihA0QU0bV3omvGyHqw.roa File: 7voYUgkjFihA0QU0bV3omvGyHqw.roa (raw, json) Hash identifier: N4bs00Gm4oNROYTHYQDxPpDqNFjvEVfDH94iRyE3UGY= Subject key identifier: EE:FA:18:52:09:23:16:28:40:D1:05:34:6D:5D:E8:9A:F1:B2:1E:AC Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C7FFFFF21BC1D4A172818D9625B9408 Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/7voYUgkjFihA0QU0bV3omvGyHqw.roa Signing time: Fri 02 Jan 2026 02:18:41 +0000 ROA not before: Fri 02 Jan 2026 02:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2287 IP address blocks: 90.84.138.0/24 maxlen: 24 90.84.139.0/24 maxlen: 24 90.84.157.0/24 maxlen: 24 90.84.158.0/24 maxlen: 24 90.84.166.0/24 maxlen: 24 90.84.167.0/24 maxlen: 24 2a01:ceff::/48 maxlen: 48 2a01:ceff:1::/48 maxlen: 48 2a01:ceff:2::/48 maxlen: 48 2a01:ceff:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:ff:ff:21:bc:1d:4a:17:28:18:d9:62:5b:94:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eefa18520923162840d105346d5de89af1b21eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:64:0c:20:f5:b7:b4:78:89:5e:a8:4c:e8:fc: 92:1b:b5:bb:b2:97:57:3b:04:97:10:ed:82:99:9c: ca:91:9a:d8:29:e4:85:fc:91:82:15:79:34:b3:eb: 5a:88:02:30:d1:ae:de:f9:69:cf:b8:89:be:f9:64: 9a:34:8f:5d:15:12:02:58:74:d3:2a:3d:dd:75:7f: dc:07:83:aa:5a:5c:d8:c1:ea:e2:1a:3d:5a:63:ca: e7:27:15:03:49:87:80:65:67:5e:fa:5e:52:12:5e: 4d:a2:5f:de:83:6a:1d:35:da:46:65:e5:a1:65:f3: 45:8b:c8:52:4e:0a:c0:c6:33:e7:96:f1:95:79:32: f2:92:87:3c:54:73:d1:66:fe:81:90:35:36:c7:2c: dc:78:62:f0:11:15:43:ac:19:06:b3:5a:b8:7d:55: 4e:33:7a:ef:7e:a5:e7:dc:cb:92:d3:77:a0:4c:24: 30:ff:99:48:de:81:18:2a:ac:68:cb:d0:1c:fd:40: 85:69:fb:05:77:42:4b:98:33:d4:c6:21:d2:28:96: e4:05:ba:96:8f:fd:d8:2c:68:be:fa:30:07:0d:2a: 0a:8a:4b:6d:2c:42:37:13:be:06:04:96:9f:ba:9d: 64:16:8b:56:ee:ca:25:b8:64:46:1c:d5:8f:74:1a: d0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FA:18:52:09:23:16:28:40:D1:05:34:6D:5D:E8:9A:F1:B2:1E:AC X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/7voYUgkjFihA0QU0bV3omvGyHqw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 90.84.138.0/23 90.84.157.0-90.84.158.255 90.84.166.0/23 IPv6: 2a01:ceff::/46 Signature Algorithm: sha256WithRSAEncryption 14:39:8f:2a:4b:d9:a6:1c:2b:25:31:0f:53:43:d2:65:9d:9d: 5d:15:97:b0:4e:a7:0c:7f:7a:54:47:13:5a:c8:97:58:4e:a9: a0:b0:87:cd:34:33:2b:4b:91:5d:43:59:1f:23:ee:4b:27:47: c7:6e:7d:f2:db:0c:fd:01:02:7a:c2:e8:af:0b:2c:b8:0c:94: bd:34:b2:b9:5a:f6:6f:8d:96:3b:16:78:e4:f3:92:77:f5:b8: d9:b1:73:a8:ee:81:47:bf:3c:f1:0e:58:1f:e2:26:17:27:23: 79:26:8a:6d:11:47:ca:60:96:40:37:83:6e:91:b3:0a:69:c5: 56:fb:93:f7:2f:e3:35:ac:03:ce:f0:23:0f:65:33:e8:71:85: 3a:8e:51:81:d9:a2:40:0e:3e:dd:0a:44:30:af:bc:bf:2d:c5: 96:58:5f:4f:91:4e:ae:c1:9a:60:88:82:0f:26:68:8c:2c:fb: 4d:97:f0:08:83:3e:52:c4:e3:43:90:f4:7b:ef:10:45:99:3a: 73:c8:a6:3b:75:53:67:b0:23:39:28:75:7a:b1:57:5b:22:53: 12:8f:d7:7a:b6:d9:bd:75:d4:e3:e6:5a:36:06:55:25:2b:90: 7a:35:ab:14:e9:e9:ae:89:32:fe:24:51:25:88:0d:87:e1:f8: 2c:c5:34:48 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt8f///IbwdShcoGNliW5QIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWZhMTg1MjA5MjMxNjI4NDBkMTA1MzQ2ZDVkZTg5YWYxYjIxZWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmQMIPW3tHiJXqhM6PySG7W7spdX OwSXEO2CmZzKkZrYKeSF/JGCFXk0s+taiAIw0a7e+WnPuIm++WSaNI9dFRICWHTT Kj3ddX/cB4OqWlzYweriGj1aY8rnJxUDSYeAZWde+l5SEl5Nol/eg2odNdpGZeWh ZfNFi8hSTgrAxjPnlvGVeTLykoc8VHPRZv6BkDU2xyzceGLwERVDrBkGs1q4fVVO M3rvfqXn3MuS03egTCQw/5lI3oEYKqxoy9Ac/UCFafsFd0JLmDPUxiHSKJbkBbqW j/3YLGi++jAHDSoKikttLEI3E74GBJafup1kFotW7soluGRGHNWPdBrQawIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFO76GFIJIxYoQNEFNG1d6Jrxsh6sMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvN3ZvWVVna2pGaWhBMFFVMGJWM29tdkd5SHF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAgBAIAATAaAwQBWlSKMAwD BABaVJ0DBABaVJ4DBAFaVKYwDwQCAAIwCQMHAioBzv8AADANBgkqhkiG9w0BAQsF AAOCAQEAFDmPKkvZphwrJTEPU0PSZZ2dXRWXsE6nDH96VEcTWsiXWE6poLCHzTQz K0uRXUNZHyPuSydHx2598tsM/QECesLorwssuAyUvTSyuVr2b42WOxZ45POSd/W4 2bFzqO6BR7888Q5YH+ImFycjeSaKbRFHymCWQDeDbpGzCmnFVvuT9y/jNawDzvAj D2Uz6HGFOo5RgdmiQA4+3QpEMK+8vy3FllhfT5FOrsGaYIiCDyZojCz7TZfwCIM+ UsTjQ5D0e+8QRZk6c8imO3VTZ7AjOSh1erFXWyJTEo/XerbZvXXU4+ZaNgZVJSuQ ejWrFOnproky/iRRJYgNh+H4LMU0SA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:01:23 2026 by rpki-client