This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/7gKbnCeEeFU9kgMWCw85IQnBGJs.roa File: 7gKbnCeEeFU9kgMWCw85IQnBGJs.roa (raw, json) Hash identifier: BEos/oIubVJfuhxS0jxVgCoi+2xWKG0c7X3weGq3uEE= Subject key identifier: EE:02:9B:9C:27:84:78:55:3D:92:03:16:0B:0F:39:21:09:C1:18:9B Certificate issuer: /CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae Certificate serial: 019B7F151492A641795407F664B82A042C41 Authority key identifier: DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/7gKbnCeEeFU9kgMWCw85IQnBGJs.roa Signing time: Fri 02 Jan 2026 14:20:46 +0000 ROA not before: Fri 02 Jan 2026 14:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57866 IP address blocks: 45.149.8.0/22 maxlen: 22 185.21.48.0/24 maxlen: 24 185.242.64.0/22 maxlen: 22 2a0c:c080::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:14:92:a6:41:79:54:07:f6:64:b8:2a:04:2c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae Validity Not Before: Jan 2 14:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee029b9c278478553d9203160b0f392109c1189b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:30:1c:f9:99:db:5a:3c:83:8b:9d:4c:22:bf: 79:96:ee:94:7e:2b:ae:b7:21:aa:bc:5b:31:46:be: 6b:61:96:aa:8c:1c:e8:fc:70:40:6c:8e:57:05:18: b1:86:80:1d:6d:52:36:83:27:68:46:25:3b:e1:ae: 9c:81:08:e5:0b:ef:a6:47:51:e8:9a:a5:2c:99:55: c7:a6:f5:57:7b:5e:7d:16:16:0f:e9:82:d7:cd:6d: bf:25:82:7a:67:2a:6d:ae:be:46:23:9a:33:e1:f6: a1:e2:74:89:d5:e1:9c:ec:b2:a3:8f:46:e2:c4:35: 9c:f0:90:dd:24:b3:f4:a9:d6:8d:39:7e:b7:d8:bd: 33:3e:03:1f:0f:0d:b7:7b:b8:e6:f4:3b:28:1a:d4: 5a:36:8f:a7:94:62:7f:e0:33:51:3a:a5:41:cf:46: 67:7b:89:c0:8a:26:39:18:26:de:19:04:7a:ce:d5: 4a:f0:91:c7:90:22:05:40:0f:5d:49:be:d7:a6:b5: 4e:e8:4b:c7:14:71:24:f7:91:37:0c:95:ce:45:38: 6b:d8:a2:89:52:3c:d3:3b:6a:b4:65:2d:81:41:34: 2b:4e:ef:2b:bc:df:42:78:1c:bc:34:71:0c:c2:a5: c8:87:62:a2:ec:d1:a3:76:7d:90:89:ed:46:7c:e3: d9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:02:9B:9C:27:84:78:55:3D:92:03:16:0B:0F:39:21:09:C1:18:9B X509v3 Authority Key Identifier: keyid:DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/7gKbnCeEeFU9kgMWCw85IQnBGJs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.8.0/22 185.21.48.0/24 185.242.64.0/22 IPv6: 2a0c:c080::/29 Signature Algorithm: sha256WithRSAEncryption 59:c3:45:61:60:be:e6:c9:7b:af:2f:52:aa:14:f8:ae:4c:31: f4:cb:53:d4:d1:64:e1:c7:1e:e0:4e:f4:1c:ca:2e:f5:97:74: 1a:1a:c3:51:6e:a4:d5:24:8f:7c:67:73:38:2b:b8:aa:2e:a1: 4f:22:60:a2:a6:08:d2:5b:63:7b:a4:ba:24:b8:55:a9:3c:22: 58:bc:55:55:23:c9:92:bd:1f:8a:b5:1a:7d:47:6f:70:fb:00: b7:8b:fd:50:16:e6:3c:5d:ec:87:26:ed:03:dc:b0:a7:cf:16: d7:19:ff:83:9b:21:1e:ee:bc:e9:70:4f:ae:14:12:42:42:d7: 5e:64:e4:11:cd:00:6b:c4:5c:c6:6a:a9:ee:71:8b:81:1c:e5: 25:53:42:a2:c7:05:bd:48:b0:db:ba:6d:c8:76:14:e8:30:81: 72:f1:df:c7:df:5e:93:20:b8:60:85:3b:7f:4c:b1:f3:6e:bf: a3:26:50:e2:e0:32:10:fd:4d:04:36:51:44:43:ee:d2:9b:48: 09:4a:59:ed:77:a5:3f:d7:31:cf:54:48:57:d1:21:b0:0b:fc: e0:ef:28:dd:77:98:ec:e6:a5:c0:e5:85:0a:0e:3b:ad:e4:7b: fc:84:be:fa:40:72:64:27:31:b8:c4:ff:0b:40:43:36:52:6a: 66:2f:1a:af -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/FRSSpkF5VAf2ZLgqBCxBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWQyY2ZiZGI5ZDU4ZDU3NDBmZjM3NWEzMTViMzgyNTQ0 YTk0YWUwHhcNMjYwMTAyMTQyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTAyOWI5YzI3ODQ3ODU1M2Q5MjAzMTYwYjBmMzkyMTA5YzExODliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDAc+ZnbWjyDi51MIr95lu6Ufiuu tyGqvFsxRr5rYZaqjBzo/HBAbI5XBRixhoAdbVI2gydoRiU74a6cgQjlC++mR1Ho mqUsmVXHpvVXe159FhYP6YLXzW2/JYJ6Zyptrr5GI5oz4fah4nSJ1eGc7LKjj0bi xDWc8JDdJLP0qdaNOX632L0zPgMfDw23e7jm9DsoGtRaNo+nlGJ/4DNROqVBz0Zn e4nAiiY5GCbeGQR6ztVK8JHHkCIFQA9dSb7XprVO6EvHFHEk95E3DJXORThr2KKJ UjzTO2q0ZS2BQTQrTu8rvN9CeBy8NHEMwqXIh2Ki7NGjdn2Qie1GfOPZhwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFO4Cm5wnhHhVPZIDFgsPOSEJwRibMB8GA1UdIwQY MBaAFNxdLPvbnVjVdA/zdaMVs4JUSpSuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Ywcy05dWRXTlYwRF9OMW94V3pnbFJLbEs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wYjk5ZDktNWFlOS00YWE2LWEyZmMt MTg0MjM0OGY1YzZjLzEvN2dLYm5DZUVlRlU5a2dNV0N3ODVJUW5CR0pzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8wYjk5ZDktNWFlOS00YWE2LWEyZmMtMTg0MjM0OGY1YzZj LzEvM0Ywcy05dWRXTlYwRF9OMW94V3pnbFJLbEs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLZUIAwQA uRUwAwQCufJAMA0EAgACMAcDBQMqDMCAMA0GCSqGSIb3DQEBCwUAA4IBAQBZw0Vh YL7myXuvL1KqFPiuTDH0y1PU0WThxx7gTvQcyi71l3QaGsNRbqTVJI98Z3M4K7iq LqFPImCipgjSW2N7pLokuFWpPCJYvFVVI8mSvR+KtRp9R29w+wC3i/1QFuY8XeyH Ju0D3LCnzxbXGf+DmyEe7rzpcE+uFBJCQtdeZOQRzQBrxFzGaqnucYuBHOUlU0Ki xwW9SLDbum3IdhToMIFy8d/H316TILhghTt/TLHzbr+jJlDi4DIQ/U0ENlFEQ+7S m0gJSlntd6U/1zHPVEhX0SGwC/zg7yjdd5js5qXA5YUKDjut5Hv8hL76QHJkJzG4 xP8LQEM2UmpmLxqv -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:04 2026 by rpki-client