This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/7iD4K1gccNErcwUL56fdA_X6dFo.roa File: 7iD4K1gccNErcwUL56fdA_X6dFo.roa (raw, json) Hash identifier: im8taFI4fIVJ8hCEmSfog0Wq6myLmqj/L7AJRggXUII= Subject key identifier: EE:20:F8:2B:58:1C:70:D1:2B:73:05:0B:E7:A7:DD:03:F5:FA:74:5A Certificate issuer: /CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330 Certificate serial: 019B79ECEC2C53D039D69D8C33187461F77F Authority key identifier: 5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/7iD4K1gccNErcwUL56fdA_X6dFo.roa Signing time: Thu 01 Jan 2026 14:18:48 +0000 ROA not before: Thu 01 Jan 2026 14:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9208 IP address blocks: 185.205.232.0/22 maxlen: 24 212.166.0.0/18 maxlen: 24 2a01:5a00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ec:2c:53:d0:39:d6:9d:8c:33:18:74:61:f7:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330 Validity Not Before: Jan 1 14:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee20f82b581c70d12b73050be7a7dd03f5fa745a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:93:29:11:25:d8:6d:47:58:f5:4b:45:ac:bc: 47:b3:0a:d5:a7:1b:f8:14:40:92:01:de:bf:76:9a: 4d:a4:09:03:f6:e5:d3:1e:81:15:f9:4b:85:2d:c1: 88:1a:df:b4:28:28:0c:22:06:33:2c:b7:52:d6:51: 14:52:f7:8e:2e:cc:58:77:11:6f:3b:71:df:06:96: d5:f9:b5:3a:82:ae:9c:a3:15:c1:ce:c2:e5:22:68: 40:d0:25:cb:e1:cd:74:94:8a:89:64:03:e1:c6:9f: 14:1a:19:63:d6:cc:00:5d:c5:a1:77:54:94:1d:ca: f4:aa:6b:16:29:a1:46:ee:a3:a1:6c:b1:6a:b4:fb: eb:32:be:6c:aa:ff:a3:48:ea:65:a1:16:ca:a7:1c: a7:b1:aa:9d:60:58:39:f5:43:02:cc:68:c1:8d:11: 25:df:13:39:2c:d4:15:d8:d1:d8:ca:17:1b:2f:74: 45:d4:ff:69:b0:51:8e:6f:89:b1:d4:03:f0:a0:e3: d0:e0:e0:46:bb:89:55:74:6f:9c:9c:80:13:10:41: be:12:7d:d2:55:77:dc:a7:ff:cd:9f:9a:10:21:77: 24:7c:45:58:d3:c7:d0:1c:5e:19:e3:c0:52:60:90: 6c:bf:c6:62:5a:30:a1:41:43:a2:e3:53:b0:b3:13: c8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:20:F8:2B:58:1C:70:D1:2B:73:05:0B:E7:A7:DD:03:F5:FA:74:5A X509v3 Authority Key Identifier: keyid:5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/7iD4K1gccNErcwUL56fdA_X6dFo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.205.232.0/22 212.166.0.0/18 IPv6: 2a01:5a00::/32 Signature Algorithm: sha256WithRSAEncryption 42:30:d2:26:f8:f1:4e:e0:07:93:9d:e6:14:f8:e5:fb:16:5f: a6:2f:e6:13:ad:7e:9a:b7:11:0b:e2:60:26:96:96:9d:57:b9: 0f:81:9e:3e:80:04:f4:32:43:0f:1f:1c:2d:d3:a5:5c:0b:f7: 41:3e:d0:48:4b:f1:a6:c4:75:0a:d7:da:bf:35:f7:c5:53:6c: 3c:c2:9a:4b:59:ef:01:c9:2c:f1:f7:ce:33:a4:89:97:98:74: 8c:b4:28:2f:dc:36:0e:d9:c4:08:5f:69:c4:5c:33:fa:fa:dc: 78:46:6d:55:56:73:65:9d:37:cc:26:0e:e4:db:e4:9b:ac:52: cb:16:60:a9:6f:f8:84:94:3e:7b:ae:03:33:d3:06:57:7a:7c: 7a:37:58:2b:f6:54:2d:64:50:ad:95:62:3b:06:a9:0d:e5:d0: 69:d2:42:99:47:e0:8c:1b:3c:c8:91:54:ac:66:dc:0e:6b:e6: 48:40:d7:db:f5:87:2a:77:9d:58:13:28:ff:d1:7f:d2:3a:26: 08:f8:53:e4:61:81:55:33:ea:b5:c2:db:32:06:08:46:50:8b: 17:0a:e5:5e:9b:8a:da:f7:fd:02:c0:69:1f:65:4d:9c:f6:4d: f9:72:0c:84:04:92:b6:cb:89:d7:ef:a0:dc:00:f3:8b:24:46: c6:b1:e2:d0 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57OwsU9A51p2MMxh0Yfd/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlN2ZkOTU4NmY5Y2NiMGZiNDQ4N2IyMDhjZGY0Njc1ZTVi YmYzMzAwHhcNMjYwMTAxMTQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTIwZjgyYjU4MWM3MGQxMmI3MzA1MGJlN2E3ZGQwM2Y1ZmE3NDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJMpESXYbUdY9UtFrLxHswrVpxv4 FECSAd6/dppNpAkD9uXTHoEV+UuFLcGIGt+0KCgMIgYzLLdS1lEUUveOLsxYdxFv O3HfBpbV+bU6gq6coxXBzsLlImhA0CXL4c10lIqJZAPhxp8UGhlj1swAXcWhd1SU Hcr0qmsWKaFG7qOhbLFqtPvrMr5sqv+jSOploRbKpxynsaqdYFg59UMCzGjBjREl 3xM5LNQV2NHYyhcbL3RF1P9psFGOb4mx1APwoOPQ4OBGu4lVdG+cnIATEEG+En3S VXfcp//Nn5oQIXckfEVY08fQHF4Z48BSYJBsv8ZiWjChQUOi41OwsxPI+wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFO4g+CtYHHDRK3MFC+en3QP1+nRaMB8GA1UdIwQY MBaAFF5/2VhvnMsPtEh7IIzfRnXlu/MwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG5fWldHLWN5dy0wU0hzZ2pOOUdkZVc3OHpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8xNWU1M2QtNzBiMC00MjY4LTkxMjQt NGIwMWQ2M2U3OTVjLzEvN2lENEsxZ2NjTkVyY3dVTDU2ZmRBX1g2ZEZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8xNWU1M2QtNzBiMC00MjY4LTkxMjQtNGIwMWQ2M2U3OTVj LzEvWG5fWldHLWN5dy0wU0hzZ2pOOUdkZVc3OHpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuc3oAwQG 1KYAMA0EAgACMAcDBQAqAVoAMA0GCSqGSIb3DQEBCwUAA4IBAQBCMNIm+PFO4AeT neYU+OX7Fl+mL+YTrX6atxEL4mAmlpadV7kPgZ4+gAT0MkMPHxwt06VcC/dBPtBI S/GmxHUK19q/NffFU2w8wppLWe8BySzx984zpImXmHSMtCgv3DYO2cQIX2nEXDP6 +tx4Rm1VVnNlnTfMJg7k2+SbrFLLFmCpb/iElD57rgMz0wZXenx6N1gr9lQtZFCt lWI7BqkN5dBp0kKZR+CMGzzIkVSsZtwOa+ZIQNfb9Ycqd51YEyj/0X/SOiYI+FPk YYFVM+q1wtsyBghGUIsXCuVem4ra9/0CwGkfZU2c9k35cgyEBJK2y4nX76DcAPOL JEbGseLQ -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:34 2026 by rpki-client