This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/7urEzTsKBLxb5onYBj-aFpyop_U.roa File: 7urEzTsKBLxb5onYBj-aFpyop_U.roa (raw, json) Hash identifier: gb459gbapFxHlbK0J2K7Bvt5uguuHwVrigvvlQxP67E= Subject key identifier: EE:EA:C4:CD:3B:0A:04:BC:5B:E6:89:D8:06:3F:9A:16:9C:A8:A7:F5 Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Certificate serial: 019B7F13B77B7C62B543EB6A391820ED2141 Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/7urEzTsKBLxb5onYBj-aFpyop_U.roa Signing time: Fri 02 Jan 2026 14:19:17 +0000 ROA not before: Fri 02 Jan 2026 14:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33993 IP address blocks: 45.67.230.0/24 maxlen: 24 94.131.113.0/24 maxlen: 24 94.131.121.0/24 maxlen: 24 103.113.68.0/24 maxlen: 24 185.234.59.0/24 maxlen: 24 185.235.242.0/24 maxlen: 24 185.250.149.0/24 maxlen: 24 2a09:7c47::/32 maxlen: 32 2a14:3880::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:b7:7b:7c:62:b5:43:eb:6a:39:18:20:ed:21:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Validity Not Before: Jan 2 14:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eeeac4cd3b0a04bc5be689d8063f9a169ca8a7f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:35:41:c5:11:24:44:84:8c:cb:cf:cf:54:aa: 5c:53:16:41:76:fb:a1:ed:0c:c0:89:e1:e3:59:22: fa:b4:fd:e0:8e:e1:f0:47:20:2a:f5:de:1e:9d:d3: 06:97:2c:59:88:ae:00:22:13:1b:81:8e:10:17:7f: c2:f4:a2:cc:88:ce:d6:16:62:39:1b:89:9e:8e:49: 95:1e:85:5d:9d:33:18:0e:88:73:c5:9d:12:b6:1d: 20:c6:57:00:d7:f2:b2:1c:d1:a3:24:74:44:32:14: ad:fd:52:77:fb:2a:48:7e:e1:77:57:42:9c:4c:29: 45:52:9b:8b:a5:1c:80:9a:03:ab:d6:a1:04:3d:3f: d6:8e:8a:d4:f9:3b:be:52:2f:c9:6d:d3:15:d7:05: 5c:c5:6f:4b:8f:f8:7e:b0:a8:c2:f3:c8:88:ba:a8: 2f:29:29:84:ea:37:08:c7:4f:b7:9f:d1:b4:56:9b: 18:4f:c9:3f:2d:90:04:62:e6:9f:3c:a9:e4:31:9b: e9:d2:6f:de:14:63:a5:04:54:2b:92:99:f7:58:c3: a0:f2:23:d3:dc:7d:ad:19:35:17:be:91:c2:c8:9a: 9c:61:24:1a:af:ac:09:5b:dd:4c:22:46:d7:20:ab: 36:ad:8a:80:9c:bc:ff:1e:d2:94:5e:16:8e:a1:60: 43:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:EA:C4:CD:3B:0A:04:BC:5B:E6:89:D8:06:3F:9A:16:9C:A8:A7:F5 X509v3 Authority Key Identifier: keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/7urEzTsKBLxb5onYBj-aFpyop_U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.230.0/24 94.131.113.0/24 94.131.121.0/24 103.113.68.0/24 185.234.59.0/24 185.235.242.0/24 185.250.149.0/24 IPv6: 2a09:7c47::/32 2a14:3880::/32 Signature Algorithm: sha256WithRSAEncryption 44:cd:0a:26:ef:26:29:fe:ab:91:f8:5b:89:ce:a0:61:01:7f: be:1a:9a:1f:8d:c7:2f:72:df:66:8c:10:b5:4e:4b:4d:ab:4a: 57:a6:19:b4:2e:40:b3:17:6e:64:27:2f:43:f7:e2:2c:61:6a: 7b:42:15:26:a8:a5:d7:3d:02:3d:b5:5a:a5:21:d6:74:16:67: 20:09:31:73:26:f5:ca:99:45:60:f2:34:95:df:4f:db:af:8e: c5:52:d5:ec:cf:8c:cb:1f:21:03:51:90:27:a7:e6:e5:ba:f6: b0:ce:42:68:dd:70:0d:9c:06:d5:5f:a0:30:9d:59:f8:f3:c5: f6:e1:3d:03:c3:fd:75:f7:f0:c7:a9:6f:41:89:4a:91:60:0b: 51:c3:81:fc:b9:93:74:2a:e0:81:f6:4d:11:fb:4b:59:e6:37: b9:a5:83:34:96:f0:bd:24:d8:0d:36:e7:11:87:3f:14:1e:a2: da:c1:6c:9d:9c:e7:d0:7d:42:e1:47:35:87:b3:d5:7c:24:81: 50:f7:1a:25:9d:0b:91:d3:30:13:2f:29:6a:48:6c:5c:05:d1: 6b:5d:b5:43:c6:67:d6:dd:fa:5b:0e:90:d8:3c:2b:2a:b4:b9: 52:70:ed:20:1e:cd:d3:d9:6b:c2:7c:bf:97:d4:85:e6:9c:1a: 63:88:c0:49 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt/E7d7fGK1Q+tqORgg7SFBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiODMwNjMwZjIzYjA3MGEyYjdiZGY1MjlmNzM5NDhjOTdl YWNkNDAwHhcNMjYwMTAyMTQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWVhYzRjZDNiMGEwNGJjNWJlNjg5ZDgwNjNmOWExNjljYThhN2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTVBxREkRISMy8/PVKpcUxZBdvuh 7QzAieHjWSL6tP3gjuHwRyAq9d4endMGlyxZiK4AIhMbgY4QF3/C9KLMiM7WFmI5 G4mejkmVHoVdnTMYDohzxZ0Sth0gxlcA1/KyHNGjJHREMhSt/VJ3+ypIfuF3V0Kc TClFUpuLpRyAmgOr1qEEPT/WjorU+Tu+Ui/JbdMV1wVcxW9Lj/h+sKjC88iIuqgv KSmE6jcIx0+3n9G0VpsYT8k/LZAEYuafPKnkMZvp0m/eFGOlBFQrkpn3WMOg8iPT 3H2tGTUXvpHCyJqcYSQar6wJW91MIkbXIKs2rYqAnLz/HtKUXhaOoWBDywIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFO7qxM07CgS8W+aJ2AY/mhacqKf1MB8GA1UdIwQY MBaAFLuDBjDyOwcKK3vfUp9zlIyX6s1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMt MTE5ZWZjYmIyMDIzLzEvN3VyRXpUc0tCTHhiNW9uWUJqLWFGcHlvcF9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMtMTE5ZWZjYmIyMDIz LzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAwBAIAATAqAwQALUPmAwQA XoNxAwQAXoN5AwQAZ3FEAwQAueo7AwQAuevyAwQAufqVMBQEAgACMA4DBQAqCXxH AwUAKhQ4gDANBgkqhkiG9w0BAQsFAAOCAQEARM0KJu8mKf6rkfhbic6gYQF/vhqa H43HL3LfZowQtU5LTatKV6YZtC5AsxduZCcvQ/fiLGFqe0IVJqil1z0CPbVapSHW dBZnIAkxcyb1yplFYPI0ld9P26+OxVLV7M+Myx8hA1GQJ6fm5br2sM5CaN1wDZwG 1V+gMJ1Z+PPF9uE9A8P9dffwx6lvQYlKkWALUcOB/LmTdCrggfZNEftLWeY3uaWD NJbwvSTYDTbnEYc/FB6i2sFsnZzn0H1C4Uc1h7PVfCSBUPcaJZ0LkdMwEy8pakhs XAXRa121Q8Zn1t36Ww6Q2DwrKrS5UnDtIB7N09lrwny/l9SF5pwaY4jASQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:02:36 2026 by rpki-client