This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/7sBhsS3IKRcr33_U1JkKDJW68us.roa File: 7sBhsS3IKRcr33_U1JkKDJW68us.roa (raw, json) Hash identifier: xY1ESwAhrRBt+0rhE/M4HExjqsDPer8OP3/L1PBN508= Subject key identifier: EE:C0:61:B1:2D:C8:29:17:2B:DF:7F:D4:D4:99:0A:0C:95:BA:F2:EB Certificate issuer: /CN=66feef09c450990af34779ce701be6cd54b3d924 Certificate serial: 019B7BA529DAD8AB1995ECC5456AD3E09C21 Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/7sBhsS3IKRcr33_U1JkKDJW68us.roa Signing time: Thu 01 Jan 2026 22:19:40 +0000 ROA not before: Thu 01 Jan 2026 22:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201532 IP address blocks: 83.168.92.0/24 maxlen: 24 2a01:96e0:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:29:da:d8:ab:19:95:ec:c5:45:6a:d3:e0:9c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924 Validity Not Before: Jan 1 22:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eec061b12dc829172bdf7fd4d4990a0c95baf2eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:94:94:a1:aa:52:62:25:7b:80:90:63:a9:30: 87:0c:8e:44:e8:6f:46:63:4b:02:94:ba:13:89:6d: 1e:c0:6d:59:5c:eb:3b:92:99:18:48:84:62:60:4e: 78:3b:08:b3:63:68:93:6e:2c:4b:d9:98:f9:5b:67: 81:21:7f:b9:b2:6f:aa:49:00:4e:68:ec:ab:31:09: cf:c7:7e:71:80:58:bd:00:d1:70:81:03:71:af:35: 68:ea:24:8b:01:9c:6b:67:26:f9:4a:d0:f7:ab:b5: 5e:7e:7a:25:bf:88:6c:4b:ea:d0:26:89:25:d0:9b: 45:52:9f:72:6a:3f:56:8a:4e:aa:9a:43:ed:ed:3c: 76:97:ee:77:4f:6b:4f:d1:f2:8a:a3:bf:d7:2a:21: aa:10:0e:41:10:f7:3b:e4:98:f7:90:7f:5c:c4:91: f4:fc:17:1e:96:1f:77:c9:8d:3b:66:28:26:97:58: 26:15:a7:94:ca:b9:11:b0:d1:ac:c5:d3:75:c3:b9: 65:00:59:f3:a7:31:2b:c0:c1:a9:0c:52:de:92:ca: 3f:2d:10:ab:ac:77:2b:db:47:05:a8:da:e9:0c:b9: e6:b7:12:5b:22:db:1e:69:5b:4b:06:a3:2f:83:99: 19:dc:d0:c6:f9:70:b7:24:14:dd:6d:68:45:15:64: c1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C0:61:B1:2D:C8:29:17:2B:DF:7F:D4:D4:99:0A:0C:95:BA:F2:EB X509v3 Authority Key Identifier: keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/7sBhsS3IKRcr33_U1JkKDJW68us.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.168.92.0/24 IPv6: 2a01:96e0:3::/48 Signature Algorithm: sha256WithRSAEncryption 6d:f2:0c:8b:54:e0:59:f6:43:f3:00:89:5e:6e:ca:69:52:70: 11:ed:5c:d9:da:69:d8:76:9e:56:c8:de:1e:4c:d9:23:ba:08: d2:c2:c3:93:40:e1:cd:d7:19:d0:0c:ba:a4:b4:d6:3e:34:a1: 87:d6:09:5a:a5:e5:43:25:95:f8:34:23:e4:bd:bb:c8:54:97: cc:b3:2e:67:01:dc:15:08:43:26:8e:6c:23:9f:85:1f:8f:1c: 55:39:ba:85:a7:2a:46:d0:a0:32:fd:02:fe:94:1c:3c:c8:52: 05:d0:6e:1e:b3:49:64:7b:55:71:3b:10:d2:77:d0:00:bd:9d: bf:64:da:e8:62:12:60:e0:03:37:ff:a9:3b:57:2f:37:af:73: 20:d9:be:f5:d4:11:1e:08:67:0a:4b:88:1f:35:59:cf:24:f0: bd:28:36:ff:c8:cb:de:91:9a:b5:64:b9:a6:8e:a8:b2:b6:59: d2:01:f0:6e:aa:22:32:c7:69:f9:c7:56:df:5f:3c:59:e9:eb: f3:c3:00:27:61:91:7b:94:34:8e:d7:2a:7b:23:fb:05:20:cd: af:dc:29:b7:2c:c5:5c:8b:d5:d7:47:e1:7a:49:a6:72:be:02: 69:3b:64:bc:1c:f2:f1:57:ed:ae:dd:ac:41:0f:f8:77:8e:51: a4:ad:e6:69 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7pSna2KsZlezFRWrT4JwhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZmVlZjA5YzQ1MDk5MGFmMzQ3NzljZTcwMWJlNmNkNTRi M2Q5MjQwHhcNMjYwMTAxMjIxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWMwNjFiMTJkYzgyOTE3MmJkZjdmZDRkNDk5MGEwYzk1YmFmMmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpSUoapSYiV7gJBjqTCHDI5E6G9G Y0sClLoTiW0ewG1ZXOs7kpkYSIRiYE54OwizY2iTbixL2Zj5W2eBIX+5sm+qSQBO aOyrMQnPx35xgFi9ANFwgQNxrzVo6iSLAZxrZyb5StD3q7Vefnolv4hsS+rQJokl 0JtFUp9yaj9Wik6qmkPt7Tx2l+53T2tP0fKKo7/XKiGqEA5BEPc75Jj3kH9cxJH0 /Bcelh93yY07Zigml1gmFaeUyrkRsNGsxdN1w7llAFnzpzErwMGpDFLekso/LRCr rHcr20cFqNrpDLnmtxJbItseaVtLBqMvg5kZ3NDG+XC3JBTdbWhFFWTBLwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFO7AYbEtyCkXK99/1NSZCgyVuvLrMB8GA1UdIwQY MBaAFGb+7wnEUJkK80d5znAb5s1Us9kkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnY3dkNjUlFtUXJ6UjNuT2NCdm16VlN6MlNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hMTU5N2ItNmVmMi00NDMwLWFhNTYt ODI0NTFmMzNmNGNhLzEvN3NCaHNTM0lLUmNyMzNfVTFKa0tESlc2OHVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9hMTU5N2ItNmVmMi00NDMwLWFhNTYtODI0NTFmMzNmNGNh LzEvWnY3dkNjUlFtUXJ6UjNuT2NCdm16VlN6MlNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAU6hcMA8E AgACMAkDBwAqAZbgAAMwDQYJKoZIhvcNAQELBQADggEBAG3yDItU4Fn2Q/MAiV5u ymlScBHtXNnaadh2nlbI3h5M2SO6CNLCw5NA4c3XGdAMuqS01j40oYfWCVql5UMl lfg0I+S9u8hUl8yzLmcB3BUIQyaObCOfhR+PHFU5uoWnKkbQoDL9Av6UHDzIUgXQ bh6zSWR7VXE7ENJ30AC9nb9k2uhiEmDgAzf/qTtXLzevcyDZvvXUER4IZwpLiB81 Wc8k8L0oNv/Iy96RmrVkuaaOqLK2WdIB8G6qIjLHafnHVt9fPFnp6/PDACdhkXuU NI7XKnsj+wUgza/cKbcsxVyL1ddH4XpJpnK+Amk7ZLwc8vFX7a7drEEP+HeOUaSt 5mk= -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:45 2026 by rpki-client