This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/7rKcQQXxl0Wqi99lSzLSIA_PGiE.roa File: 7rKcQQXxl0Wqi99lSzLSIA_PGiE.roa (raw, json) Hash identifier: 6yLayhUVccwVTayfXedjC+AWPa6ZfJFk+hN+rmaMZyA= Subject key identifier: EE:B2:9C:41:05:F1:97:45:AA:8B:DF:65:4B:32:D2:20:0F:CF:1A:21 Certificate issuer: /CN=9e9e6887ea7572a6411306c87b0cc089397a6354 Certificate serial: 019B7EA53D0A05393CC6F681BC14F3B96A30 Authority key identifier: 9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/7rKcQQXxl0Wqi99lSzLSIA_PGiE.roa Signing time: Fri 02 Jan 2026 12:18:36 +0000 ROA not before: Fri 02 Jan 2026 12:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213145 IP address blocks: 185.14.172.0/24 maxlen: 24 185.14.173.0/24 maxlen: 24 185.14.174.0/24 maxlen: 24 185.14.175.0/24 maxlen: 24 185.117.99.0/24 maxlen: 24 185.117.120.0/24 maxlen: 24 185.117.121.0/24 maxlen: 24 185.117.122.0/24 maxlen: 24 185.117.123.0/24 maxlen: 24 188.125.171.0/24 maxlen: 24 188.125.172.0/24 maxlen: 24 188.125.173.0/24 maxlen: 24 188.125.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:3d:0a:05:39:3c:c6:f6:81:bc:14:f3:b9:6a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e9e6887ea7572a6411306c87b0cc089397a6354 Validity Not Before: Jan 2 12:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eeb29c4105f19745aa8bdf654b32d2200fcf1a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:11:4e:94:ab:28:a7:ef:be:9b:a8:4c:9b:66: 60:a4:a2:f2:07:de:7b:58:61:76:82:0b:c6:b8:da: ee:a3:56:e2:82:56:92:0b:2b:23:c3:f8:d1:9c:77: 30:21:79:f9:28:f8:80:54:31:c5:14:e4:82:6e:96: 37:36:05:bc:09:75:2c:9a:ab:b4:79:7c:09:54:78: de:8b:00:33:7e:50:7d:93:f6:96:c2:83:42:4b:b1: 6d:45:21:61:66:8d:25:24:d4:27:c9:03:11:65:10: 55:b2:b9:1f:6b:7b:5d:96:b7:56:c2:17:ba:17:6a: 37:59:83:68:d4:eb:38:09:21:c0:3f:7d:e8:7d:f1: 4e:9d:cb:14:47:89:fe:6d:44:59:d7:1d:40:34:c5: 66:87:ca:9e:b6:df:f6:e5:95:d5:a5:90:93:4e:b1: da:d5:9d:1e:9a:0f:bf:7e:3c:a7:34:5f:2d:6a:70: c6:d5:ff:a4:8f:40:6e:4f:b0:e5:c0:71:37:7c:41: c6:29:09:dd:9b:97:c3:55:de:2d:dd:86:fd:b9:95: 50:49:53:cc:ba:61:93:a1:7f:d7:d1:63:31:14:2e: 7e:81:c9:82:bf:f1:57:e8:83:dc:f2:40:9c:d3:4c: 63:05:23:7f:50:58:d4:3c:b9:cb:99:7e:41:b2:8d: 9e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B2:9C:41:05:F1:97:45:AA:8B:DF:65:4B:32:D2:20:0F:CF:1A:21 X509v3 Authority Key Identifier: keyid:9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/7rKcQQXxl0Wqi99lSzLSIA_PGiE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.14.172.0/22 185.117.99.0/24 185.117.120.0/22 188.125.171.0-188.125.173.255 188.125.175.0/24 Signature Algorithm: sha256WithRSAEncryption 40:a2:b8:89:35:2b:54:9b:49:f9:46:30:54:b7:77:d7:88:53: 36:a4:40:08:f7:9a:30:a6:92:22:a8:f2:62:5c:15:ba:5d:ca: c7:6c:3a:e3:81:19:01:d6:8d:1c:6c:a1:fc:9f:7f:05:4d:bd: 6c:a0:53:51:7d:a9:aa:91:d6:c5:33:6d:be:ed:2f:b4:ab:71: 0b:7b:8e:25:0b:8c:1e:a2:4b:2d:a2:de:dd:7f:b1:5b:b0:93: 72:76:34:0c:52:56:29:ec:de:61:e1:9b:86:e5:ca:59:f2:21: 33:50:b7:78:52:31:f2:6c:c3:d3:27:ed:60:83:2f:87:33:35: 61:d9:af:b8:02:d9:d7:9a:62:a2:cc:fa:15:58:37:81:9e:cd: e8:9c:2b:5b:fc:b9:85:54:63:dd:22:68:df:a5:21:a9:65:0a: 11:f1:af:84:10:46:c0:a2:d2:6d:25:22:89:a3:d8:ea:49:f2: a8:95:09:d3:67:87:bf:9f:0e:0e:7b:51:da:78:5f:0b:e3:29: 1a:3d:af:21:10:9c:96:22:1c:17:a6:de:db:45:b9:68:03:d4: 97:aa:51:45:59:b5:4e:91:4c:d3:b3:16:0a:fe:7b:bb:b2:a3: c2:e9:f7:0c:5e:61:df:46:08:ad:62:b2:86:db:48:2c:8c:80: 34:11:c9:ae -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt+pT0KBTk8xvaBvBTzuWowMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOWU2ODg3ZWE3NTcyYTY0MTEzMDZjODdiMGNjMDg5Mzk3 YTYzNTQwHhcNMjYwMTAyMTIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWIyOWM0MTA1ZjE5NzQ1YWE4YmRmNjU0YjMyZDIyMDBmY2YxYTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxFOlKsop+++m6hMm2ZgpKLyB957 WGF2ggvGuNruo1biglaSCysjw/jRnHcwIXn5KPiAVDHFFOSCbpY3NgW8CXUsmqu0 eXwJVHjeiwAzflB9k/aWwoNCS7FtRSFhZo0lJNQnyQMRZRBVsrkfa3tdlrdWwhe6 F2o3WYNo1Os4CSHAP33offFOncsUR4n+bURZ1x1ANMVmh8qett/25ZXVpZCTTrHa 1Z0emg+/fjynNF8tanDG1f+kj0BuT7DlwHE3fEHGKQndm5fDVd4t3Yb9uZVQSVPM umGToX/X0WMxFC5+gcmCv/FX6IPc8kCc00xjBSN/UFjUPLnLmX5Bso2eAQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFO6ynEEF8ZdFqovfZUsy0iAPzxohMB8GA1UdIwQY MBaAFJ6eaIfqdXKmQRMGyHsMwIk5emNUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnA1b2gtcDFjcVpCRXdiSWV3ekFpVGw2WTFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9lMmFiYWQtNThmYS00Y2VkLTg2NTAt ZWM1MDhkZWM3NzkzLzEvN3JLY1FRWHhsMFdxaTk5bFN6TFNJQV9QR2lFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9lMmFiYWQtNThmYS00Y2VkLTg2NTAtZWM1MDhkZWM3Nzkz LzEvbnA1b2gtcDFjcVpCRXdiSWV3ekFpVGw2WTFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQCuQ6sAwQA uXVjAwQCuXV4MAwDBAC8fasDBAG8fawDBAC8fa8wDQYJKoZIhvcNAQELBQADggEB AECiuIk1K1SbSflGMFS3d9eIUzakQAj3mjCmkiKo8mJcFbpdysdsOuOBGQHWjRxs ofyffwVNvWygU1F9qaqR1sUzbb7tL7SrcQt7jiULjB6iSy2i3t1/sVuwk3J2NAxS Vins3mHhm4blylnyITNQt3hSMfJsw9Mn7WCDL4czNWHZr7gC2deaYqLM+hVYN4Ge zeicK1v8uYVUY90iaN+lIallChHxr4QQRsCi0m0lIomj2OpJ8qiVCdNnh7+fDg57 Udp4XwvjKRo9ryEQnJYiHBem3ttFuWgD1JeqUUVZtU6RTNOzFgr+e7uyo8Lp9wxe Yd9GCK1isobbSCyMgDQRya4= -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:53 2026 by rpki-client