This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/e8VFBmIKoirMo9GQsY0TjoYVOaQ.roa File: e8VFBmIKoirMo9GQsY0TjoYVOaQ.roa (raw, json) Hash identifier: GwJtd77us9EwOJjzXsDviq2QYdc35X858cXyCikITTk= Subject key identifier: 7B:C5:45:06:62:0A:A2:2A:CC:A3:D1:90:B1:8D:13:8E:86:15:39:A4 Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1 Certificate serial: 019BA33D2EADDAA5CEF7751B739AAAC51750 Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/e8VFBmIKoirMo9GQsY0TjoYVOaQ.roa Signing time: Fri 09 Jan 2026 14:50:54 +0000 ROA not before: Fri 09 Jan 2026 14:50:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56740 IP address blocks: 87.252.234.0/24 maxlen: 24 87.252.237.0/24 maxlen: 24 87.252.238.0/24 maxlen: 24 91.149.155.0/24 maxlen: 24 91.149.167.0/24 maxlen: 24 91.149.178.0/24 maxlen: 24 93.125.18.0/24 maxlen: 24 93.125.60.0/23 maxlen: 23 93.125.114.0/24 maxlen: 24 178.172.164.0/24 maxlen: 24 178.172.165.0/24 maxlen: 24 178.172.212.0/24 maxlen: 24 178.172.220.0/24 maxlen: 24 178.172.247.0/24 maxlen: 24 178.172.251.0/24 maxlen: 24 178.172.252.0/24 maxlen: 24 178.172.255.0/24 maxlen: 24 213.184.236.0/24 maxlen: 24 213.184.240.0/24 maxlen: 24 217.21.44.0/24 maxlen: 24 217.21.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:3d:2e:ad:da:a5:ce:f7:75:1b:73:9a:aa:c5:17:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1 Validity Not Before: Jan 9 14:50:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7bc54506620aa22acca3d190b18d138e861539a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:68:f8:e4:ec:51:43:27:b7:95:01:be:a7:cf: aa:e8:0b:b1:8e:dc:e3:e5:82:b9:20:b0:46:06:55: d5:22:c6:a7:25:77:66:8d:9e:3e:89:4e:ad:1a:c8: 45:f4:47:96:c4:a8:04:60:3e:c8:93:ab:40:b1:66: d2:ed:a5:16:97:68:0d:39:1a:ac:8f:d1:5e:ed:ce: 2c:4d:b2:e4:48:32:ac:df:b8:d8:3a:8e:6e:8c:4c: bf:f1:15:7c:26:0d:d9:ee:b7:e0:e7:db:ff:17:02: ca:d1:4f:fd:3e:93:2e:30:45:d5:88:ff:03:54:54: d4:56:8e:89:42:e7:95:7c:c2:16:7b:28:91:37:a6: c7:0f:5a:17:f9:f8:1e:1f:8d:fc:54:51:a0:01:a0: 82:87:5f:3f:3b:59:a5:09:67:c5:0b:d4:f8:1c:c5: e0:61:eb:ee:10:be:32:3c:91:4f:bb:ca:a2:ef:38: 89:62:57:da:c8:a0:b7:03:52:02:74:b6:33:72:fe: 3e:e3:76:e5:05:ce:f3:65:12:20:49:65:a2:a8:9d: 04:85:09:84:4c:eb:d9:66:9f:55:0f:88:45:21:22: 88:f4:f2:a5:00:da:be:cd:c8:62:6b:1e:d4:a9:01: 79:b9:b3:e6:98:ea:bc:0e:bb:a7:70:58:c6:ec:cb: e9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C5:45:06:62:0A:A2:2A:CC:A3:D1:90:B1:8D:13:8E:86:15:39:A4 X509v3 Authority Key Identifier: keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/e8VFBmIKoirMo9GQsY0TjoYVOaQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.252.234.0/24 87.252.237.0-87.252.238.255 91.149.155.0/24 91.149.167.0/24 91.149.178.0/24 93.125.18.0/24 93.125.60.0/23 93.125.114.0/24 178.172.164.0/23 178.172.212.0/24 178.172.220.0/24 178.172.247.0/24 178.172.251.0-178.172.252.255 178.172.255.0/24 213.184.236.0/24 213.184.240.0/24 217.21.44.0/24 217.21.52.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:6f:9a:5f:ce:6a:19:81:2c:bc:be:02:07:72:2c:92:3b:4b: 42:a4:53:7d:a9:c1:a5:fe:07:55:81:ac:e9:26:28:a2:a0:46: af:20:c0:e6:01:3a:a0:d6:d7:db:11:eb:0a:18:67:f4:a2:f1: da:15:e6:e0:9b:1b:0e:de:80:f5:69:56:fa:f6:95:8e:bf:18: 96:04:cb:03:d5:5c:a8:04:23:30:16:7f:56:06:cb:df:09:58: b5:68:3c:5a:12:f8:ab:a7:1e:78:ba:5b:69:f9:cb:40:ed:6f: 62:c6:9c:71:49:ee:6f:1b:3f:2b:c2:1a:fa:55:b4:89:2a:c4: 54:11:d6:03:e8:2a:e9:03:0b:87:1a:3d:72:3c:e8:d5:fc:98: cf:03:ac:68:bb:47:75:33:6f:12:be:22:f9:bc:6e:d2:40:12: 25:e2:ae:cc:d5:2a:4f:87:e7:64:0d:64:68:28:47:3c:e3:87: c2:27:2e:dc:94:5e:9f:09:65:85:54:4a:c9:4e:20:20:89:ff: 7c:20:45:e5:41:b5:0e:58:8e:f6:ec:d9:7c:7f:86:61:13:f2: 24:bd:33:e3:47:dd:07:1a:ba:be:04:59:67:04:f4:a5:12:b1: ee:9e:25:84:20:91:58:07:fd:ad:0f:75:b7:48:f3:5e:b3:56: 29:d3:9c:26 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZujPS6t2qXO93Ubc5qqxRdQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj ZmViYzEwHhcNMjYwMTA5MTQ1MDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmM1NDUwNjYyMGFhMjJhY2NhM2QxOTBiMThkMTM4ZTg2MTUzOWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWj45OxRQye3lQG+p8+q6Auxjtzj 5YK5ILBGBlXVIsanJXdmjZ4+iU6tGshF9EeWxKgEYD7Ik6tAsWbS7aUWl2gNORqs j9Fe7c4sTbLkSDKs37jYOo5ujEy/8RV8Jg3Z7rfg59v/FwLK0U/9PpMuMEXViP8D VFTUVo6JQueVfMIWeyiRN6bHD1oX+fgeH438VFGgAaCCh18/O1mlCWfFC9T4HMXg YevuEL4yPJFPu8qi7ziJYlfayKC3A1ICdLYzcv4+43blBc7zZRIgSWWiqJ0EhQmE TOvZZp9VD4hFISKI9PKlANq+zchiax7UqQF5ubPmmOq8DruncFjG7MvpfQIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFHvFRQZiCqIqzKPRkLGNE46GFTmkMB8GA1UdIwQY MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct YWFiMGU0MTRjYzYzLzEvZThWRkJtSUtvaXJNbzlHUXNZMFRqb1lWT2FRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTctYWFiMGU0MTRjYzYz LzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTCBggQCAAEwfAMEAFf8 6jAMAwQAV/ztAwQAV/zuAwQAW5WbAwQAW5WnAwQAW5WyAwQAXX0SAwQBXX08AwQA XX1yAwQBsqykAwQAsqzUAwQAsqzcAwQAsqz3MAwDBACyrPsDBACyrPwDBACyrP8D BADVuOwDBADVuPADBADZFSwDBADZFTQwDQYJKoZIhvcNAQELBQADggEBADxvml/O ahmBLLy+AgdyLJI7S0KkU32pwaX+B1WBrOkmKKKgRq8gwOYBOqDW19sR6woYZ/Si 8doV5uCbGw7egPVpVvr2lY6/GJYEywPVXKgEIzAWf1YGy98JWLVoPFoS+KunHni6 W2n5y0Dtb2LGnHFJ7m8bPyvCGvpVtIkqxFQR1gPoKukDC4caPXI86NX8mM8DrGi7 R3UzbxK+Ivm8btJAEiXirszVKk+H52QNZGgoRzzjh8InLtyUXp8JZYVUSslOICCJ /3wgReVBtQ5Yjvbs2Xx/hmET8iS9M+NH3Qcaur4EWWcE9KUSse6eJYQgkVgH/a0P dbdI816zVinTnCY= -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:34 2026 by rpki-client