This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/07XYxZm2jgrEmO1HuzMvRYzMMuA.roa File: 07XYxZm2jgrEmO1HuzMvRYzMMuA.roa (raw, json) Hash identifier: nY7m4KC7AI0Ecpy/qnFSivU7gbK1MuLa2jlBoOfj+EI= Subject key identifier: D3:B5:D8:C5:99:B6:8E:0A:C4:98:ED:47:BB:33:2F:45:8C:CC:32:E0 Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Certificate serial: 019B77C75C816BAAC10B7B1C2F09073BAAF9 Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/07XYxZm2jgrEmO1HuzMvRYzMMuA.roa Signing time: Thu 01 Jan 2026 04:18:32 +0000 ROA not before: Thu 01 Jan 2026 04:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49127 IP address blocks: 89.187.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 20:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5c:81:6b:aa:c1:0b:7b:1c:2f:09:07:3b:aa:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Validity Not Before: Jan 1 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3b5d8c599b68e0ac498ed47bb332f458ccc32e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6b:33:4e:0a:49:a1:dd:aa:fd:dd:ea:84:e0: 42:fc:0e:40:f5:f3:60:f3:6d:89:e2:b4:67:b8:94: 30:b2:27:09:fa:c9:b0:7b:9f:20:65:99:b6:b0:bb: c2:b1:bf:6a:8a:c5:83:ee:7d:6b:64:0d:04:f8:c7: fe:c8:5b:c8:f2:d6:f8:68:86:15:b7:8b:5b:fb:52: 94:4b:e2:42:65:2c:a9:3c:fc:70:25:d0:23:25:aa: 18:b5:cc:dc:be:15:fc:38:fe:ac:3b:1c:6e:58:ca: 23:24:ab:2f:b4:94:c3:3b:db:c4:8c:7f:11:53:7a: 15:74:c1:ec:11:73:8a:02:a3:ba:a9:e8:d3:f0:8f: c1:55:5d:25:39:b8:63:36:0f:90:c1:11:49:86:8a: 27:87:03:09:d3:6a:04:52:f4:f5:64:fd:29:4d:d8: 6c:04:ed:c8:eb:69:dd:d2:70:6b:59:c2:cd:83:e7: a6:ef:8d:14:30:50:ab:d7:ec:16:81:d4:b5:a9:3f: aa:40:38:d5:77:7c:24:16:45:3e:f8:da:1e:40:3c: 67:cd:88:bb:77:b0:59:de:6e:22:b6:da:7a:a8:e2: cc:2e:3c:e4:fb:6d:e7:13:1d:a9:39:78:48:18:4c: 28:0e:d3:3e:b2:d0:7d:40:87:5a:d8:77:76:8b:41: f5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B5:D8:C5:99:B6:8E:0A:C4:98:ED:47:BB:33:2F:45:8C:CC:32:E0 X509v3 Authority Key Identifier: keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/07XYxZm2jgrEmO1HuzMvRYzMMuA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.187.25.0/24 Signature Algorithm: sha256WithRSAEncryption b3:b1:39:c2:16:e3:2a:af:92:80:33:68:4d:de:bc:d1:38:ef: dd:50:4c:3f:a9:c9:5b:5e:d3:ed:63:ab:35:48:12:ff:d7:ab: 7d:c4:13:2e:06:4e:6e:3a:ea:9c:43:30:de:bc:5e:e6:3b:7e: 5e:c0:6f:4d:4f:af:e9:35:85:e2:ff:6e:5e:ea:04:e5:2a:14: ee:2f:ec:7e:fe:8b:04:96:14:a4:37:9d:ea:be:ba:be:56:64: b7:4e:15:91:d3:45:20:10:0b:39:d3:7a:1b:54:9d:88:b2:72: d1:52:0f:74:5d:48:89:19:b6:cf:47:b7:8e:76:48:d4:ed:d1: 8b:30:98:1d:07:f5:b0:f5:95:05:0b:8c:8e:0c:17:eb:d3:09: 01:b8:89:9b:bf:45:dc:9e:41:0e:65:3a:77:ec:d0:07:f5:93: 13:91:30:14:50:4f:94:30:8b:67:8a:94:0b:1f:10:b4:08:18: c5:b6:6d:2a:98:e2:17:6c:6d:e3:22:5f:ec:0d:ff:07:55:aa: 28:86:b8:cf:89:08:29:3f:c7:6c:ef:43:34:ca:e8:73:17:bf: 9c:52:13:4a:84:65:aa:7f:f5:d2:ba:54:8c:fa:5f:81:0f:2c: 77:6d:26:14:02:2e:6c:ab:25:13:14:8a:a6:e7:28:f0:95:97: 36:19:36:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x1yBa6rBC3scLwkHO6r5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw YmYwNTUwHhcNMjYwMTAxMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2I1ZDhjNTk5YjY4ZTBhYzQ5OGVkNDdiYjMzMmY0NThjY2MzMmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2szTgpJod2q/d3qhOBC/A5A9fNg 822J4rRnuJQwsicJ+smwe58gZZm2sLvCsb9qisWD7n1rZA0E+Mf+yFvI8tb4aIYV t4tb+1KUS+JCZSypPPxwJdAjJaoYtczcvhX8OP6sOxxuWMojJKsvtJTDO9vEjH8R U3oVdMHsEXOKAqO6qejT8I/BVV0lObhjNg+QwRFJhoonhwMJ02oEUvT1ZP0pTdhs BO3I62nd0nBrWcLNg+em740UMFCr1+wWgdS1qT+qQDjVd3wkFkU++NoeQDxnzYi7 d7BZ3m4ittp6qOLMLjzk+23nEx2pOXhIGEwoDtM+stB9QIda2Hd2i0H1JwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNO12MWZto4KxJjtR7szL0WMzDLgMB8GA1UdIwQY MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt NDVjZmM4NTdkZGRkLzEvMDdYWXhabTJqZ3JFbU8xSHV6TXZSWXpNTXVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbsZMA0G CSqGSIb3DQEBCwUAA4IBAQCzsTnCFuMqr5KAM2hN3rzROO/dUEw/qclbXtPtY6s1 SBL/16t9xBMuBk5uOuqcQzDevF7mO35ewG9NT6/pNYXi/25e6gTlKhTuL+x+/osE lhSkN53qvrq+VmS3ThWR00UgEAs503obVJ2IsnLRUg90XUiJGbbPR7eOdkjU7dGL MJgdB/Ww9ZUFC4yODBfr0wkBuImbv0XcnkEOZTp37NAH9ZMTkTAUUE+UMItnipQL HxC0CBjFtm0qmOIXbG3jIl/sDf8HVaoohrjPiQgpP8ds70M0yuhzF7+cUhNKhGWq f/XSulSM+l+BDyx3bSYUAi5sqyUTFIqm5yjwlZc2GTbW -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:43 2026 by rpki-client