This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7F9sU-OhajIa8knUsaqE0xCsjsA.roa File: 7F9sU-OhajIa8knUsaqE0xCsjsA.roa (raw, json) Hash identifier: fZEfwdYWvCXj/BHGL6C0MMgBV97S+C/orIYU5ct+0h4= Subject key identifier: EC:5F:6C:53:E3:A1:6A:32:1A:F2:49:D4:B1:AA:84:D3:10:AC:8E:C0 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BEFFCF750B188EB7C4B27FA092D8A4E16 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7F9sU-OhajIa8knUsaqE0xCsjsA.roa Signing time: Sat 24 Jan 2026 12:31:31 +0000 ROA not before: Sat 24 Jan 2026 12:31:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 37.202.194.0/24 maxlen: 24 151.241.207.0/24 maxlen: 24 151.243.7.0/24 maxlen: 24 151.243.197.0/24 maxlen: 24 151.243.228.0/24 maxlen: 24 151.243.231.0/24 maxlen: 24 151.244.54.0/24 maxlen: 24 151.244.167.0/24 maxlen: 24 151.244.180.0/24 maxlen: 24 151.244.224.0/24 maxlen: 24 151.244.235.0/24 maxlen: 24 151.245.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ef:fc:f7:50:b1:88:eb:7c:4b:27:fa:09:2d:8a:4e:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 24 12:31:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec5f6c53e3a16a321af249d4b1aa84d310ac8ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:17:0f:b6:42:80:f7:b1:0d:fd:32:d0:14:e4: 80:4e:70:35:76:10:19:ff:7b:fe:dd:c1:32:98:01: 1e:5e:0a:35:48:01:9e:f5:d9:6f:d1:87:02:c8:f4: b7:31:4b:13:45:da:7b:37:7a:62:61:96:6e:d7:6d: 73:ea:49:52:1a:f7:80:e0:57:cc:9b:3d:69:fd:df: 6e:27:9c:50:f0:9c:32:40:ae:15:aa:ce:2f:1e:8a: b6:33:46:84:05:68:70:49:d2:74:b2:57:e0:2c:8f: 83:ac:1a:8f:d0:b6:d0:ee:60:0d:c6:91:6a:15:00: 60:9b:bd:59:0c:8f:de:44:a9:bb:d4:d7:3b:c0:59: c5:12:90:89:79:10:47:9b:39:01:a4:11:f3:eb:17: 6a:da:4f:ec:65:1b:21:37:d2:ba:22:c6:79:4b:7c: 44:5b:37:a8:c4:05:f8:73:df:91:12:e6:7c:a6:e3: f8:c7:94:78:9a:9c:ac:83:9b:13:f7:d3:44:d1:db: 51:40:08:bb:26:18:6f:23:42:41:96:de:ea:dc:12: 36:19:6b:2c:fc:af:5e:7e:9e:80:13:ad:e5:ee:35: 6c:97:87:b3:1c:9c:0a:ff:fc:ea:b4:e6:be:32:99: a5:57:57:b7:7b:b5:ce:96:29:19:c4:03:b4:49:21: 67:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:5F:6C:53:E3:A1:6A:32:1A:F2:49:D4:B1:AA:84:D3:10:AC:8E:C0 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7F9sU-OhajIa8knUsaqE0xCsjsA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.194.0/24 151.241.207.0/24 151.243.7.0/24 151.243.197.0/24 151.243.228.0/24 151.243.231.0/24 151.244.54.0/24 151.244.167.0/24 151.244.180.0/24 151.244.224.0/24 151.244.235.0/24 151.245.119.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:d5:ee:d6:bd:2a:33:2c:79:f5:70:d3:42:f4:ff:12:fb:14: a8:df:29:9a:20:26:30:b4:f1:f6:c3:63:78:64:0c:c5:e0:11: 55:8a:35:a8:69:15:8d:46:88:97:59:1e:b6:12:0d:1b:98:fe: 92:9a:91:c7:44:c3:fd:28:ff:23:d1:77:83:f5:0d:df:08:47: 79:d1:dd:42:36:fa:a5:37:81:c3:29:8d:a5:95:eb:3c:b2:6e: 37:31:7f:f7:f6:2e:2e:b0:b1:e6:1d:60:c0:50:55:45:51:d0: 5a:c6:1c:83:e1:59:0c:af:60:94:5d:9d:22:15:75:d4:30:b4: fc:58:ad:5e:ec:fb:39:b9:5f:07:4b:4a:29:16:1a:81:45:57: 07:36:35:4d:f1:75:eb:76:49:85:5e:c9:1a:b6:b6:e3:ab:6f: 48:c0:6c:f1:8e:cf:d4:79:b1:d8:d9:a1:10:08:04:95:25:ae: b3:db:ed:c3:26:bf:7e:48:52:37:41:14:9a:c4:f8:68:f4:48: eb:1c:2d:62:d1:af:b0:37:63:d4:f9:9a:4b:69:d1:ea:ed:a7: ce:6e:c3:2b:85:f0:73:06:f4:ce:79:5f:7b:12:ef:4e:99:e8: 88:bc:f1:80:6c:60:eb:fb:bc:c9:11:3e:34:b9:7d:04:06:21: 4b:4c:c9:27 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZvv/PdQsYjrfEsn+gktik4WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTI0MTIzMTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzVmNmM1M2UzYTE2YTMyMWFmMjQ5ZDRiMWFhODRkMzEwYWM4ZWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BcPtkKA97EN/TLQFOSATnA1dhAZ /3v+3cEymAEeXgo1SAGe9dlv0YcCyPS3MUsTRdp7N3piYZZu121z6klSGveA4FfM mz1p/d9uJ5xQ8JwyQK4Vqs4vHoq2M0aEBWhwSdJ0slfgLI+DrBqP0LbQ7mANxpFq FQBgm71ZDI/eRKm71Nc7wFnFEpCJeRBHmzkBpBHz6xdq2k/sZRshN9K6IsZ5S3xE WzeoxAX4c9+REuZ8puP4x5R4mpysg5sT99NE0dtRQAi7JhhvI0JBlt7q3BI2GWss /K9efp6AE63l7jVsl4ezHJwK//zqtOa+MpmlV1e3e7XOlikZxAO0SSFnTQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOxfbFPjoWoyGvJJ1LGqhNMQrI7AMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvN0Y5c1UtT2hhaklhOGtuVXNhcUUweENzanNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAJcrCAwQA l/HPAwQAl/MHAwQAl/PFAwQAl/PkAwQAl/PnAwQAl/Q2AwQAl/SnAwQAl/S0AwQA l/TgAwQAl/TrAwQAl/V3MA0GCSqGSIb3DQEBCwUAA4IBAQAb1e7WvSozLHn1cNNC 9P8S+xSo3ymaICYwtPH2w2N4ZAzF4BFVijWoaRWNRoiXWR62Eg0bmP6SmpHHRMP9 KP8j0XeD9Q3fCEd50d1CNvqlN4HDKY2lles8sm43MX/39i4usLHmHWDAUFVFUdBa xhyD4VkMr2CUXZ0iFXXUMLT8WK1e7Ps5uV8HS0opFhqBRVcHNjVN8XXrdkmFXska trbjq29IwGzxjs/UebHY2aEQCASVJa6z2+3DJr9+SFI3QRSaxPho9EjrHC1i0a+w N2PU+ZpLadHq7afObsMrhfBzBvTOeV97Eu9OmeiIvPGAbGDr+7zJET40uX0EBiFL TMkn -----END CERTIFICATE-----Generated at Sun Jan 25 14:37:02 2026 by rpki-client