This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/s7qOGCNt1YlavyCtrINDfG5Iclo.roa File: s7qOGCNt1YlavyCtrINDfG5Iclo.roa (raw, json) Hash identifier: dkfi/hWY26Eq50poHDL/01Ci/Ijw2YceFre97ktTfrE= Subject key identifier: B3:BA:8E:18:23:6D:D5:89:5A:BF:20:AD:AC:83:43:7C:6E:48:72:5A Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Certificate serial: 019B7BA3C9A46454D86DC5A94A48AF4C3F6D Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/s7qOGCNt1YlavyCtrINDfG5Iclo.roa Signing time: Thu 01 Jan 2026 22:18:10 +0000 ROA not before: Thu 01 Jan 2026 22:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206757 IP address blocks: 82.144.12.0/25 maxlen: 25 83.175.221.128/25 maxlen: 25 83.175.230.0/24 maxlen: 24 213.171.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c9:a4:64:54:d8:6d:c5:a9:4a:48:af:4c:3f:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Validity Not Before: Jan 1 22:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3ba8e18236dd5895abf20adac83437c6e48725a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:46:c3:f1:e9:5e:56:80:9d:12:30:27:41:34: 24:57:cc:ee:e2:a6:5b:7a:1e:9b:f6:5c:61:50:21: a7:e7:cf:59:c6:a5:1b:31:2f:8a:34:e2:9b:81:2a: 25:d6:11:ae:bd:2b:0d:3e:37:da:4c:8b:d5:5e:b6: 5f:31:bf:37:04:80:22:83:b5:02:21:3e:de:da:e2: b5:a3:a0:26:fb:a5:6c:12:fb:54:f4:1c:c7:53:46: b6:bd:d2:c0:f2:b9:0d:c5:f4:9b:ba:cb:fa:23:3f: 2d:ac:0f:06:f5:5d:93:a4:fd:af:e0:3f:d6:81:61: 58:e2:e8:61:00:24:a2:9d:6f:93:be:11:50:01:5f: 00:74:e6:38:87:ce:72:e5:2f:4d:ab:28:00:cf:02: c7:1e:c5:29:c9:b9:80:1c:1e:e6:ba:cb:64:10:04: 5d:3d:de:5c:2c:c6:5c:1c:10:16:e8:6a:55:6a:11: a0:cf:07:35:34:e8:1d:1b:a3:fb:45:26:1c:7b:c4: 4a:37:33:e6:48:b9:3d:e3:76:65:c3:c6:d6:fd:13: 7c:7d:88:3b:83:90:ff:23:05:f3:00:b2:6f:ed:d3: fc:df:7b:d9:13:c3:02:09:1e:e4:32:9a:c0:26:87: 8d:62:56:a8:f5:48:dc:41:5a:f4:80:53:74:02:24: b6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:BA:8E:18:23:6D:D5:89:5A:BF:20:AD:AC:83:43:7C:6E:48:72:5A X509v3 Authority Key Identifier: keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/s7qOGCNt1YlavyCtrINDfG5Iclo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.144.12.0/25 83.175.221.128/25 83.175.230.0/24 213.171.230.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:9a:d3:62:b1:bc:07:fd:92:f7:7c:02:0c:ff:d1:3c:1c:38: a3:61:a6:ca:7c:c6:c6:ec:07:22:ce:16:4a:1f:06:32:bb:29: 4d:85:6b:44:c8:9e:9d:f8:8e:c5:6e:25:ea:eb:ae:95:88:cf: f6:7d:d5:86:50:b4:58:55:fb:38:f0:ff:2f:c1:f9:55:30:d7: 8f:48:67:56:29:e3:a2:52:dc:8b:9d:8a:37:b1:7a:54:37:5e: 1b:36:b7:dd:d5:86:51:d9:32:be:3b:7f:23:28:55:33:01:c9: af:ab:ce:9e:16:57:93:0b:5f:31:6c:98:92:c5:5d:1c:b8:c0: 95:fe:94:af:9f:e2:e0:02:59:59:3e:9a:c0:15:a8:94:c0:51: 4f:4a:00:d2:eb:cd:f0:0c:35:3b:a1:5a:33:5c:9d:14:35:53: 7b:42:e4:55:5a:90:f8:b9:d9:cd:98:08:4a:91:71:5f:bb:2d: 33:b6:1a:49:5b:b8:69:19:53:2c:96:0b:b1:ca:a7:d0:e1:69: 33:29:f1:c6:93:cb:f9:00:53:93:00:02:32:dc:0a:35:7a:d5: 30:71:09:5c:5f:be:7b:4b:f5:25:d3:79:b4:9f:3d:f5:e3:4c: f6:c6:16:54:cb:85:df:a0:0a:1d:54:99:61:f6:33:c0:42:1e: 06:bd:cb:c6 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt7o8mkZFTYbcWpSkivTD9tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTM5YjBjZWQzOGQ3NWNjNjNlZDUwZDZlNWNlNzJiYmI1 YjRiMTAwHhcNMjYwMTAxMjIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2JhOGUxODIzNmRkNTg5NWFiZjIwYWRhYzgzNDM3YzZlNDg3MjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEbD8eleVoCdEjAnQTQkV8zu4qZb eh6b9lxhUCGn589ZxqUbMS+KNOKbgSol1hGuvSsNPjfaTIvVXrZfMb83BIAig7UC IT7e2uK1o6Am+6VsEvtU9BzHU0a2vdLA8rkNxfSbusv6Iz8trA8G9V2TpP2v4D/W gWFY4uhhACSinW+TvhFQAV8AdOY4h85y5S9NqygAzwLHHsUpybmAHB7mustkEARd Pd5cLMZcHBAW6GpVahGgzwc1NOgdG6P7RSYce8RKNzPmSLk943Zlw8bW/RN8fYg7 g5D/IwXzALJv7dP833vZE8MCCR7kMprAJoeNYlao9UjcQVr0gFN0AiS2hQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFLO6jhgjbdWJWr8grayDQ3xuSHJaMB8GA1UdIwQY MBaAFFqTmwztONdcxj7VDW5c5yu7W0sQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgt ZDYwYjNiNmNjYTZlLzEvczdxT0dDTnQxWWxhdnlDdHJJTkRmRzVJY2xvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgtZDYwYjNiNmNjYTZl LzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwUHUpAMAAMF B1Ov3YADBABTr+YDBADVq+YwDQYJKoZIhvcNAQELBQADggEBAGya02KxvAf9kvd8 Agz/0TwcOKNhpsp8xsbsByLOFkofBjK7KU2Fa0TInp34jsVuJerrrpWIz/Z91YZQ tFhV+zjw/y/B+VUw149IZ1Yp46JS3IudijexelQ3Xhs2t93VhlHZMr47fyMoVTMB ya+rzp4WV5MLXzFsmJLFXRy4wJX+lK+f4uACWVk+msAVqJTAUU9KANLrzfAMNTuh WjNcnRQ1U3tC5FVakPi52c2YCEqRcV+7LTO2GklbuGkZUyyWC7HKp9DhaTMp8caT y/kAU5MAAjLcCjV61TBxCVxfvntL9SXTebSfPfXjTPbGFlTLhd+gCh1UmWH2M8BC Hga9y8Y= -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:37 2026 by rpki-client