This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7LE1DEYT1ICWfMHoKNZXPCeUJQo.roa File: 7LE1DEYT1ICWfMHoKNZXPCeUJQo.roa (raw, json) Hash identifier: 6GDVwV7rQonMcBZu/ABynfjZj1iMGkNFh4pVQikYnrw= Subject key identifier: EC:B1:35:0C:46:13:D4:80:96:7C:C1:E8:28:D6:57:3C:27:94:25:0A Certificate issuer: /CN=ec5fdf6a51b98091e9ec7bdfaf483ec7743a5a25 Certificate serial: 019B7CEDC564E828385C0F3C74F080CFA7BD Authority key identifier: EC:5F:DF:6A:51:B9:80:91:E9:EC:7B:DF:AF:48:3E:C7:74:3A:5A:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7LE1DEYT1ICWfMHoKNZXPCeUJQo.roa Signing time: Fri 02 Jan 2026 04:18:35 +0000 ROA not before: Fri 02 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51586 IP address blocks: 185.216.220.0/22 maxlen: 24 2a0b:bdc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c5:64:e8:28:38:5c:0f:3c:74:f0:80:cf:a7:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec5fdf6a51b98091e9ec7bdfaf483ec7743a5a25 Validity Not Before: Jan 2 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ecb1350c4613d480967cc1e828d6573c2794250a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:81:43:56:d2:08:71:56:8f:9d:39:a2:49:81: 9d:5e:c1:e8:ed:31:95:13:53:a3:fc:9b:bf:23:bd: b0:52:2d:40:b7:dd:e0:22:5e:ed:0a:52:8d:60:18: 7c:1a:73:48:96:af:a8:7b:12:ce:73:08:19:7d:68: f9:ae:d5:fb:6d:8b:b1:92:f9:bd:1d:2f:18:6f:59: 32:87:47:f3:89:64:58:f4:3d:1b:fc:8c:2e:60:3c: 18:ef:de:54:a1:21:f2:90:10:54:69:a8:a7:98:80: 8f:ca:29:a8:50:1b:6f:da:0d:56:df:aa:85:f5:47: c2:dd:5c:5c:61:97:f6:c0:fb:36:90:08:c8:f0:f4: dd:ad:12:f0:f2:b3:97:6d:bc:6d:ec:de:30:35:d1: d9:ec:b6:c5:3a:5f:11:61:f5:c2:66:99:1e:88:97: e6:b2:4b:05:9b:22:6a:45:8f:4c:52:4e:ae:3e:4d: 92:5f:a2:9f:86:a3:f2:49:db:cd:6e:d1:b2:92:76: 03:75:6c:e8:43:67:0e:f5:6e:09:9b:41:a6:2b:33: 65:71:65:55:96:13:9c:c6:49:57:c9:7f:2b:9b:e2: a2:b4:65:c9:16:2d:6a:3b:aa:b0:6b:60:0b:9e:10: 06:a7:a4:0e:ba:6a:b6:f1:a7:5a:73:84:ac:c7:d8: 38:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B1:35:0C:46:13:D4:80:96:7C:C1:E8:28:D6:57:3C:27:94:25:0A X509v3 Authority Key Identifier: keyid:EC:5F:DF:6A:51:B9:80:91:E9:EC:7B:DF:AF:48:3E:C7:74:3A:5A:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7LE1DEYT1ICWfMHoKNZXPCeUJQo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.216.220.0/22 IPv6: 2a0b:bdc0::/32 Signature Algorithm: sha256WithRSAEncryption 44:ff:b8:c7:14:11:96:3c:0c:66:9c:f1:30:be:aa:fe:6f:03: db:03:ce:e9:f6:53:ba:8f:26:4c:1c:35:47:a8:91:56:51:db: 03:d1:27:6f:8f:8f:8a:ef:1c:ef:ad:d5:fc:31:6d:a4:d7:4f: 7e:f4:ef:20:94:5f:f3:53:c1:58:ab:68:38:0b:37:f7:8f:54: ff:15:c6:d5:04:df:4e:69:e8:d0:b0:f4:ee:79:0a:7f:5d:41: 22:90:8a:c0:1a:9e:7a:60:fd:a2:f2:56:67:c1:5c:e8:a7:45: 25:8c:bb:5f:b8:f5:1e:53:88:e7:b7:28:1f:f0:8b:04:ab:cd: 93:71:9f:d8:6e:fa:bd:fe:1a:92:f5:2a:27:5d:0c:29:bb:4b: 31:fc:8c:7c:03:e1:1b:3e:52:26:ab:7f:ea:03:65:ad:c2:59: fd:40:c3:ca:6d:1c:16:43:59:74:c2:a9:e9:ff:50:a3:b2:e2: ae:ca:89:27:c5:03:a1:fd:1f:46:44:e5:56:54:0d:80:a9:6a: 3f:f0:02:ee:22:bc:bd:c8:ee:67:ca:d9:92:b9:81:09:c4:18: a7:8f:fb:6b:75:7d:47:21:04:cd:7f:c7:d6:a7:94:ad:6d:47: 23:66:df:6b:c9:ae:0a:0c:f5:3d:51:fe:84:dd:71:14:6a:34: 0c:12:49:5b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87cVk6Cg4XA88dPCAz6e9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNWZkZjZhNTFiOTgwOTFlOWVjN2JkZmFmNDgzZWM3NzQz YTVhMjUwHhcNMjYwMTAyMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2IxMzUwYzQ2MTNkNDgwOTY3Y2MxZTgyOGQ2NTczYzI3OTQyNTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YFDVtIIcVaPnTmiSYGdXsHo7TGV E1Oj/Ju/I72wUi1At93gIl7tClKNYBh8GnNIlq+oexLOcwgZfWj5rtX7bYuxkvm9 HS8Yb1kyh0fziWRY9D0b/IwuYDwY795UoSHykBBUaainmICPyimoUBtv2g1W36qF 9UfC3VxcYZf2wPs2kAjI8PTdrRLw8rOXbbxt7N4wNdHZ7LbFOl8RYfXCZpkeiJfm sksFmyJqRY9MUk6uPk2SX6KfhqPySdvNbtGyknYDdWzoQ2cO9W4Jm0GmKzNlcWVV lhOcxklXyX8rm+KitGXJFi1qO6qwa2ALnhAGp6QOumq28adac4Ssx9g4uwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOyxNQxGE9SAlnzB6CjWVzwnlCUKMB8GA1UdIwQY MBaAFOxf32pRuYCR6ex7369IPsd0OlolMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0ZfZmFsRzVnSkhwN0h2ZnIwZy14M1E2V2lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lNmE1NTQtZDk3NC00Mzc3LWJlY2Mt Y2JmMzQzZGViN2JjLzEvN0xFMURFWVQxSUNXZk1Ib0tOWlhQQ2VVSlFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9lNmE1NTQtZDk3NC00Mzc3LWJlY2MtY2JmMzQzZGViN2Jj LzEvN0ZfZmFsRzVnSkhwN0h2ZnIwZy14M1E2V2lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudjcMA0E AgACMAcDBQAqC73AMA0GCSqGSIb3DQEBCwUAA4IBAQBE/7jHFBGWPAxmnPEwvqr+ bwPbA87p9lO6jyZMHDVHqJFWUdsD0Sdvj4+K7xzvrdX8MW2k109+9O8glF/zU8FY q2g4Czf3j1T/FcbVBN9OaejQsPTueQp/XUEikIrAGp56YP2i8lZnwVzop0UljLtf uPUeU4jntygf8IsEq82TcZ/Ybvq9/hqS9SonXQwpu0sx/Ix8A+EbPlImq3/qA2Wt wln9QMPKbRwWQ1l0wqnp/1CjsuKuyoknxQOh/R9GROVWVA2AqWo/8ALuIry9yO5n ytmSuYEJxBinj/trdX1HIQTNf8fWp5StbUcjZt9rya4KDPU9Uf6E3XEUajQMEklb -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:49 2026 by rpki-client