This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/7BLFrUv-21NPi5YU_QcyTQXK6sE.roa File: 7BLFrUv-21NPi5YU_QcyTQXK6sE.roa (raw, json) Hash identifier: eZF7mM5D7X3yGSrbx54ZgMvJ5nO57jhcGZL0Higsrxw= Subject key identifier: EC:12:C5:AD:4B:FE:DB:53:4F:8B:96:14:FD:07:32:4D:05:CA:EA:C1 Certificate issuer: /CN=cd55b425fecf79f09e074b2d6f3a616c7b685700 Certificate serial: 019B7AC884A7FDE63897E25ECBCD41D9A466 Authority key identifier: CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/7BLFrUv-21NPi5YU_QcyTQXK6sE.roa Signing time: Thu 01 Jan 2026 18:18:40 +0000 ROA not before: Thu 01 Jan 2026 18:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39007 IP address blocks: 86.100.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.crl rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:84:a7:fd:e6:38:97:e2:5e:cb:cd:41:d9:a4:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd55b425fecf79f09e074b2d6f3a616c7b685700 Validity Not Before: Jan 1 18:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec12c5ad4bfedb534f8b9614fd07324d05caeac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a4:ab:67:76:3a:f2:d7:2f:89:05:98:d9:fa: ca:74:9b:e6:63:02:d4:ee:16:99:4a:40:f6:c7:7b: 5c:ef:31:72:34:59:77:94:92:6e:79:a1:7f:cb:6f: b7:c3:68:17:54:c1:b1:75:6b:3e:2a:40:8f:b9:9b: 14:35:e2:49:72:14:a0:e0:43:1d:69:f6:64:8b:21: a3:6d:9b:5b:96:21:c0:8c:db:5e:ca:04:ab:59:f1: 7c:ae:8c:90:87:bb:c5:72:f6:53:7e:b0:5d:d2:7b: fd:01:38:09:4d:62:9f:f0:c7:e6:f0:ec:74:1d:67: a0:f8:f9:52:0e:21:3e:31:d9:c0:20:d0:f7:a0:56: 8e:a1:06:ef:5f:a3:e4:c5:e3:53:f6:4a:3d:82:8c: 4a:5f:90:5d:c7:db:53:45:19:58:1a:af:5c:03:23: 64:2e:43:55:27:6a:c4:f5:a3:a3:4d:3d:67:ae:ab: 9e:2e:56:25:fb:e9:23:79:ad:9b:14:7b:8f:7a:f0: 7b:63:fa:85:52:83:d3:df:cb:6b:0b:fa:16:37:c8: c6:48:4f:05:8e:ab:06:57:bb:b8:ea:a5:82:e5:d9: b1:48:a9:29:ee:ce:5f:10:4d:08:3e:5f:62:0e:8d: 6d:07:80:83:57:28:11:9b:1a:ae:6e:ed:56:35:6e: 8c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:12:C5:AD:4B:FE:DB:53:4F:8B:96:14:FD:07:32:4D:05:CA:EA:C1 X509v3 Authority Key Identifier: keyid:CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/7BLFrUv-21NPi5YU_QcyTQXK6sE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.100.0.0/16 Signature Algorithm: sha256WithRSAEncryption 05:b0:d2:8c:c9:a3:61:ab:00:16:08:7b:3f:8b:9e:0e:20:15: 36:fe:63:27:79:49:71:e5:9f:55:c9:33:7f:a8:57:c8:f0:20: df:4b:17:81:0c:18:e7:22:ca:c7:42:5a:1e:b0:03:aa:78:0e: 0a:94:35:02:af:92:ae:5d:e4:4a:7a:70:21:18:f2:1d:98:2d: 0f:6b:46:1f:62:8e:e1:c3:3b:7e:b4:a8:01:44:ce:55:f4:93: 52:68:8e:be:8e:f5:57:fc:a3:a2:3e:45:5c:97:a8:22:a8:f2: 09:b4:4a:96:7e:cf:7c:56:c7:2a:0e:cc:74:6a:ee:53:ad:31: 2f:72:4f:fb:ed:cb:66:87:91:21:da:be:79:90:ea:a9:97:dc: 0b:00:fb:a1:c8:ba:dc:57:ed:50:99:3f:b2:94:93:ca:5c:2e: 1b:62:6f:fc:74:f2:51:d6:5e:23:bd:9b:f8:dd:19:32:6f:91: fb:04:fb:b0:e2:e3:c7:2d:67:a9:e4:4d:b8:36:e1:61:e5:f6: ee:e6:ed:56:90:88:ec:c9:bf:15:4e:1f:ff:ab:d8:33:1c:bb: a5:99:79:f9:17:ed:eb:cc:1e:d2:68:42:c3:63:b6:20:7b:b4: 42:b4:ff:c0:e6:d7:7c:01:41:bc:81:69:09:38:41:1e:b0:22: d2:25:e5:df -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt6yISn/eY4l+Jey81B2aRmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNTViNDI1ZmVjZjc5ZjA5ZTA3NGIyZDZmM2E2MTZjN2I2 ODU3MDAwHhcNMjYwMTAxMTgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzEyYzVhZDRiZmVkYjUzNGY4Yjk2MTRmZDA3MzI0ZDA1Y2FlYWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKSrZ3Y68tcviQWY2frKdJvmYwLU 7haZSkD2x3tc7zFyNFl3lJJueaF/y2+3w2gXVMGxdWs+KkCPuZsUNeJJchSg4EMd afZkiyGjbZtbliHAjNteygSrWfF8royQh7vFcvZTfrBd0nv9ATgJTWKf8Mfm8Ox0 HWeg+PlSDiE+MdnAIND3oFaOoQbvX6PkxeNT9ko9goxKX5Bdx9tTRRlYGq9cAyNk LkNVJ2rE9aOjTT1nrqueLlYl++kjea2bFHuPevB7Y/qFUoPT38trC/oWN8jGSE8F jqsGV7u46qWC5dmxSKkp7s5fEE0IPl9iDo1tB4CDVygRmxqubu1WNW6MKQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFOwSxa1L/ttTT4uWFP0HMk0FyurBMB8GA1UdIwQY MBaAFM1VtCX+z3nwngdLLW86YWx7aFcAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelZXMEpmN1BlZkNlQjBzdGJ6cGhiSHRvVndBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hMDU2MTctZTgwOC00YWVkLWJlMjYt Yjg3MjM1YjRkNzYzLzEvN0JMRnJVdi0yMU5QaTVZVV9RY3lUUVhLNnNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9hMDU2MTctZTgwOC00YWVkLWJlMjYtYjg3MjM1YjRkNzYz LzEvelZXMEpmN1BlZkNlQjBzdGJ6cGhiSHRvVndBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAVmQwDQYJ KoZIhvcNAQELBQADggEBAAWw0ozJo2GrABYIez+Lng4gFTb+Yyd5SXHln1XJM3+o V8jwIN9LF4EMGOciysdCWh6wA6p4DgqUNQKvkq5d5Ep6cCEY8h2YLQ9rRh9ijuHD O360qAFEzlX0k1Jojr6O9Vf8o6I+RVyXqCKo8gm0SpZ+z3xWxyoOzHRq7lOtMS9y T/vty2aHkSHavnmQ6qmX3AsA+6HIutxX7VCZP7KUk8pcLhtib/x08lHWXiO9m/jd GTJvkfsE+7Di48ctZ6nkTbg24WHl9u7m7VaQiOzJvxVOH/+r2DMcu6WZefkX7evM HtJoQsNjtiB7tEK0/8Dm13wBQbyBaQk4QR6wItIl5d8= -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:51 2026 by rpki-client