This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/7_n1YNS1aUe0Bo_pCtHt0pUhIqw.roa File: 7_n1YNS1aUe0Bo_pCtHt0pUhIqw.roa (raw, json) Hash identifier: xzYsTyhKWQal1xfqWksT1weyCxFWFp7bUNSd2LqW3lA= Subject key identifier: EF:F9:F5:60:D4:B5:69:47:B4:06:8F:E9:0A:D1:ED:D2:95:21:22:AC Certificate issuer: /CN=5e3a62f1347c1742e5b6e3740244d398b53a513c Certificate serial: 019B7F80E9ECD527B84A4A7F05535894F099 Authority key identifier: 5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/7_n1YNS1aUe0Bo_pCtHt0pUhIqw.roa Signing time: Fri 02 Jan 2026 16:18:33 +0000 ROA not before: Fri 02 Jan 2026 16:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31463 IP address blocks: 91.232.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:e9:ec:d5:27:b8:4a:4a:7f:05:53:58:94:f0:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3a62f1347c1742e5b6e3740244d398b53a513c Validity Not Before: Jan 2 16:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eff9f560d4b56947b4068fe90ad1edd2952122ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cc:4f:65:b4:7a:75:c2:f8:7a:f3:de:b2:8c: 39:35:0b:c6:41:09:96:6f:f4:5f:03:b3:3f:c8:d5: c9:f8:07:1a:5a:cc:36:9e:f2:12:f7:3e:b0:12:91: 69:19:c6:32:f2:ef:bb:bb:9c:4d:3d:0f:6a:d2:b0: c2:a3:88:92:8d:05:aa:6d:dc:64:05:1e:e2:b1:f5: fb:ed:0e:3f:81:92:86:60:38:7d:6f:a3:f0:3e:11: 43:e8:30:2d:6a:d5:c9:c5:5f:aa:23:8e:90:2b:48: 9f:a1:ad:c3:79:38:fe:88:bc:72:c6:6d:9b:6f:e5: 03:c7:2a:44:c2:a3:83:a9:b5:f1:18:9c:0f:4a:25: 36:f5:38:55:41:3d:fc:12:b4:a9:57:7b:b3:f8:7c: 28:5a:ad:8c:f4:42:8f:52:89:99:f1:37:0d:f0:d5: 85:f4:d0:ab:0f:06:12:18:8a:b1:83:90:8f:e4:0d: 2d:96:c3:1d:7d:12:5d:c6:64:ec:61:d8:08:a0:52: bd:f0:de:7d:ac:73:4d:c8:8d:cf:dd:ed:d5:54:fa: 38:c6:2b:ce:66:64:57:42:41:e7:c0:2e:70:fe:bb: be:3e:7f:a2:b1:97:1e:a1:bf:7e:b1:cf:3e:14:4a: f6:4a:f7:ea:bc:8e:1b:5b:44:e5:e8:24:3a:8b:c2: c8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F9:F5:60:D4:B5:69:47:B4:06:8F:E9:0A:D1:ED:D2:95:21:22:AC X509v3 Authority Key Identifier: keyid:5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/7_n1YNS1aUe0Bo_pCtHt0pUhIqw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.104.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:30:9d:f1:c9:11:3c:38:01:12:80:b2:47:79:49:72:f9:b0: f1:74:61:36:54:0d:ce:ae:90:fe:e0:3a:c2:8a:bc:98:df:88: 8e:5e:5d:da:8b:e3:78:7a:56:49:d5:4c:34:73:e3:c9:93:0f: 12:ad:a6:ba:bd:d4:07:e9:ac:d1:4a:d6:90:50:07:e1:e4:ad: dd:c9:b5:b7:64:c7:98:ba:2d:2a:3d:f0:36:9c:80:41:46:01: 39:f0:6a:d3:c1:e6:4f:87:6b:a8:ff:80:03:3b:4e:3b:db:9b: 57:58:dd:85:3d:ba:17:4b:d3:f5:87:04:8e:37:08:6a:b5:44: fa:c4:0f:38:b8:c8:c1:5e:f7:26:13:b8:f2:07:56:7c:78:4f: 2d:1c:76:c1:79:bd:2a:bc:2d:29:bf:39:5b:a8:4c:85:f0:93: a6:2a:73:32:38:af:47:d2:13:3f:dd:b7:ca:7c:41:a9:41:04: a0:3f:ae:1b:bc:81:38:d8:ed:93:6f:91:29:11:92:4c:c3:b2: da:55:89:97:06:c7:37:d5:11:23:5a:04:25:82:21:20:54:99: 15:54:de:84:e6:97:94:71:c7:53:03:1d:c5:cf:95:e7:ab:37: 12:af:35:d5:ae:b8:6a:4f:28:ef:57:2e:60:35:29:25:22:e3: 3c:89:bd:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gOns1Se4Skp/BVNYlPCZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlM2E2MmYxMzQ3YzE3NDJlNWI2ZTM3NDAyNDRkMzk4YjUz YTUxM2MwHhcNMjYwMTAyMTYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmY5ZjU2MGQ0YjU2OTQ3YjQwNjhmZTkwYWQxZWRkMjk1MjEyMmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMxPZbR6dcL4evPesow5NQvGQQmW b/RfA7M/yNXJ+AcaWsw2nvIS9z6wEpFpGcYy8u+7u5xNPQ9q0rDCo4iSjQWqbdxk BR7isfX77Q4/gZKGYDh9b6PwPhFD6DAtatXJxV+qI46QK0ifoa3DeTj+iLxyxm2b b+UDxypEwqODqbXxGJwPSiU29ThVQT38ErSpV3uz+HwoWq2M9EKPUomZ8TcN8NWF 9NCrDwYSGIqxg5CP5A0tlsMdfRJdxmTsYdgIoFK98N59rHNNyI3P3e3VVPo4xivO ZmRXQkHnwC5w/ru+Pn+isZceob9+sc8+FEr2SvfqvI4bW0Tl6CQ6i8LIBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO/59WDUtWlHtAaP6QrR7dKVISKsMB8GA1UdIwQY MBaAFF46YvE0fBdC5bbjdAJE05i1OlE8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGpwaThUUjhGMExsdHVOMEFrVFRtTFU2VVR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80MjVjYzEtNTAxNC00OTc5LTg0ZWIt MDI1NTQwYWZmMTVkLzEvN19uMVlOUzFhVWUwQm9fcEN0SHQwcFVoSXF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS80MjVjYzEtNTAxNC00OTc5LTg0ZWItMDI1NTQwYWZmMTVk LzEvWGpwaThUUjhGMExsdHVOMEFrVFRtTFU2VVR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+hoMA0G CSqGSIb3DQEBCwUAA4IBAQCaMJ3xyRE8OAESgLJHeUly+bDxdGE2VA3OrpD+4DrC iryY34iOXl3ai+N4elZJ1Uw0c+PJkw8Sraa6vdQH6azRStaQUAfh5K3dybW3ZMeY ui0qPfA2nIBBRgE58GrTweZPh2uo/4ADO04725tXWN2FPboXS9P1hwSONwhqtUT6 xA84uMjBXvcmE7jyB1Z8eE8tHHbBeb0qvC0pvzlbqEyF8JOmKnMyOK9H0hM/3bfK fEGpQQSgP64bvIE42O2Tb5EpEZJMw7LaVYmXBsc31REjWgQlgiEgVJkVVN6E5peU ccdTAx3Fz5XnqzcSrzXVrrhqTyjvVy5gNSklIuM8ib2x -----END CERTIFICATE-----Generated at Mon Jan 26 09:25:41 2026 by rpki-client