This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/enrj7Rmn-Rbin2HO4jtah8-M3bU.roa File: enrj7Rmn-Rbin2HO4jtah8-M3bU.roa (raw, json) Hash identifier: NrW7rDMpz8LFJnfE1GrWjyKulkBnQDA8wPMx4nsv1l4= Subject key identifier: 7A:7A:E3:ED:19:A7:F9:16:E2:9F:61:CE:E2:3B:5A:87:CF:8C:DD:B5 Certificate issuer: /CN=64f873adb6a1f3e81b3343c74998947526c43dcf Certificate serial: 019B78A33D485330B59AA44524C28B6D397F Authority key identifier: 64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/enrj7Rmn-Rbin2HO4jtah8-M3bU.roa Signing time: Thu 01 Jan 2026 08:18:42 +0000 ROA not before: Thu 01 Jan 2026 08:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29014 IP address blocks: 91.198.224.0/24 maxlen: 24 194.37.255.0/24 maxlen: 24 194.145.224.0/24 maxlen: 24 195.190.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3d:48:53:30:b5:9a:a4:45:24:c2:8b:6d:39:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64f873adb6a1f3e81b3343c74998947526c43dcf Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a7ae3ed19a7f916e29f61cee23b5a87cf8cddb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c2:38:07:ec:44:a7:c4:79:5f:5d:80:9c:b8: af:b4:a4:a7:e4:73:a8:48:48:23:85:82:54:a6:d0: dd:a7:bc:2b:24:a2:42:ea:d6:fc:ed:93:3f:49:58: 87:e3:13:ab:cc:e9:62:a1:1f:b9:5f:9e:7f:93:4c: d5:34:1c:80:27:7b:b9:35:89:40:68:df:24:58:88: 17:14:72:2a:01:95:db:57:af:c6:e5:1e:af:53:c7: 19:db:7d:f2:a7:f3:9b:97:02:20:7a:4e:99:f1:91: 4a:34:1a:ca:e2:e6:af:cd:9e:23:db:a4:23:2f:cf: 10:e0:59:be:5c:10:ae:7e:34:3e:df:73:8f:3d:e8: eb:74:56:b0:2a:9e:af:4d:e0:31:c9:0d:8a:f9:a4: a2:8f:b6:8b:b9:a6:d6:6d:20:03:8f:10:75:b7:59: 4a:c0:c2:9f:f8:a9:11:e3:00:ec:80:09:c4:61:8d: 0d:ce:81:36:9c:d9:da:fa:b8:17:f1:75:fd:2a:49: 41:5b:be:e0:63:15:07:23:60:d0:8a:8b:1e:a5:22: 94:e7:2a:7d:cf:48:cc:44:46:ad:d8:16:76:e8:6f: 3b:08:a4:91:2c:df:db:29:f4:ff:12:c8:85:84:14: cc:08:b1:2a:7b:a7:9b:fe:a3:88:91:8d:76:77:d0: 1b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7A:E3:ED:19:A7:F9:16:E2:9F:61:CE:E2:3B:5A:87:CF:8C:DD:B5 X509v3 Authority Key Identifier: keyid:64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/enrj7Rmn-Rbin2HO4jtah8-M3bU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.224.0/24 194.37.255.0/24 194.145.224.0/24 195.190.135.0/24 Signature Algorithm: sha256WithRSAEncryption cc:cf:f6:6a:a2:73:1f:7e:2f:df:ef:fb:cf:84:d5:84:34:5c: b7:51:57:6d:ac:57:0c:e1:2d:00:d7:ca:91:f7:b6:bc:7f:6b: de:f8:c5:04:26:4a:74:04:c4:61:24:ff:10:06:11:57:0a:df: b2:3c:b0:85:40:95:44:b3:5e:07:7e:64:80:6c:9b:1e:3e:ae: 7b:d7:e6:3a:ab:c3:e1:db:5f:25:f2:4f:8a:9e:28:0d:6f:e9: c9:68:a3:65:e4:be:fb:9a:65:34:d1:3c:1c:f4:24:79:a4:ac: 5e:b6:7b:83:41:c1:04:c5:4d:67:5d:eb:5e:87:a1:72:9a:fb: 5a:af:b2:36:38:aa:94:b3:67:c7:15:40:64:58:e3:41:74:66: 3c:71:03:d5:1e:18:a7:72:f3:4b:bf:93:06:b8:86:22:37:9d: 71:84:a0:fd:95:d9:da:78:ce:c8:af:bd:a0:f4:52:18:29:de: 4e:02:78:33:ad:f7:ed:7d:bb:48:9e:cb:1c:72:04:a4:20:f7: 43:91:9b:b6:fb:bf:d3:c6:c8:89:5d:81:9f:83:06:6d:84:62: fb:67:c3:5f:5c:82:e6:d6:00:cf:9b:28:cc:f8:8d:83:d4:da: 7f:f6:54:16:99:63:ee:8f:3d:36:a2:94:e6:5e:c9:69:41:e8: 4e:8e:18:e9 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4oz1IUzC1mqRFJMKLbTl/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0Zjg3M2FkYjZhMWYzZTgxYjMzNDNjNzQ5OTg5NDc1MjZj NDNkY2YwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTdhZTNlZDE5YTdmOTE2ZTI5ZjYxY2VlMjNiNWE4N2NmOGNkZGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cI4B+xEp8R5X12AnLivtKSn5HOo SEgjhYJUptDdp7wrJKJC6tb87ZM/SViH4xOrzOlioR+5X55/k0zVNByAJ3u5NYlA aN8kWIgXFHIqAZXbV6/G5R6vU8cZ233yp/OblwIgek6Z8ZFKNBrK4uavzZ4j26Qj L88Q4Fm+XBCufjQ+33OPPejrdFawKp6vTeAxyQ2K+aSij7aLuabWbSADjxB1t1lK wMKf+KkR4wDsgAnEYY0NzoE2nNna+rgX8XX9KklBW77gYxUHI2DQiosepSKU5yp9 z0jMREat2BZ26G87CKSRLN/bKfT/EsiFhBTMCLEqe6eb/qOIkY12d9AbEwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHp64+0Zp/kW4p9hzuI7WofPjN21MB8GA1UdIwQY MBaAFGT4c622ofPoGzNDx0mYlHUmxD3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlBoenJiYWg4LWdiTTBQSFNaaVVkU2JFUGM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9iOWU0YzQtYTNkYy00NmU4LWFhM2Ut Mzk3ZjM2YzkxOTgyLzEvZW5yajdSbW4tUmJpbjJITzRqdGFoOC1NM2JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9iOWU0YzQtYTNkYy00NmU4LWFhM2UtMzk3ZjM2YzkxOTgy LzEvWlBoenJiYWg4LWdiTTBQSFNaaVVkU2JFUGM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW8bgAwQA wiX/AwQAwpHgAwQAw76HMA0GCSqGSIb3DQEBCwUAA4IBAQDMz/ZqonMffi/f7/vP hNWENFy3UVdtrFcM4S0A18qR97a8f2ve+MUEJkp0BMRhJP8QBhFXCt+yPLCFQJVE s14HfmSAbJsePq571+Y6q8Ph218l8k+KnigNb+nJaKNl5L77mmU00Twc9CR5pKxe tnuDQcEExU1nXeteh6Fymvtar7I2OKqUs2fHFUBkWONBdGY8cQPVHhincvNLv5MG uIYiN51xhKD9ldnaeM7Ir72g9FIYKd5OAngzrfftfbtInssccgSkIPdDkZu2+7/T xsiJXYGfgwZthGL7Z8NfXILm1gDPmyjM+I2D1Np/9lQWmWPujz02opTmXslpQehO jhjp -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:12 2026 by rpki-client