This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/7WrVoWRcLHU2Bsy4ilW5Cx0arVE.roa File: 7WrVoWRcLHU2Bsy4ilW5Cx0arVE.roa (raw, json) Hash identifier: /TUreq9BRtjv30vH+llUuJBYCO9XE8y+WYf/yceedfM= Subject key identifier: ED:6A:D5:A1:64:5C:2C:75:36:06:CC:B8:8A:55:B9:0B:1D:1A:AD:51 Certificate issuer: /CN=d6923df4dae91950cf00d235fe39e00eea3816d2 Certificate serial: 019B7A5ADF02E87673B4A88D80DFAE53A417 Authority key identifier: D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/7WrVoWRcLHU2Bsy4ilW5Cx0arVE.roa Signing time: Thu 01 Jan 2026 16:18:54 +0000 ROA not before: Thu 01 Jan 2026 16:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15614 IP address blocks: 31.41.200.0/21 maxlen: 21 78.110.208.0/20 maxlen: 20 178.209.128.0/19 maxlen: 19 185.24.20.0/22 maxlen: 22 193.8.86.0/23 maxlen: 23 213.168.176.0/20 maxlen: 20 2a02:13b8::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:df:02:e8:76:73:b4:a8:8d:80:df:ae:53:a4:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6923df4dae91950cf00d235fe39e00eea3816d2 Validity Not Before: Jan 1 16:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed6ad5a1645c2c753606ccb88a55b90b1d1aad51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cd:75:d6:32:f1:a1:ac:8b:2e:b6:56:56:60: bb:24:2b:44:f7:99:ae:f7:04:d5:40:de:9f:4c:01: 7d:90:ce:68:d4:c9:ba:cd:1b:68:f7:c3:48:1b:00: 8a:18:04:2b:73:a7:c4:11:e4:47:a1:ac:91:39:19: 55:6b:df:85:90:47:9d:17:65:2d:04:68:41:fe:58: 7d:79:ab:27:6e:0b:b1:6c:ea:09:32:fc:60:cf:2f: a1:49:1d:11:39:68:fd:18:86:44:10:b7:0d:5f:d3: a1:a1:42:de:e8:38:e9:5d:c5:b1:46:f7:96:4f:be: 6c:a0:c2:ca:64:b8:7a:6d:54:25:2c:d7:cf:6f:87: 27:32:27:bd:3d:f5:d9:3b:dc:fc:17:76:f6:f0:7c: 2b:5d:86:7d:69:2e:77:a0:c6:95:71:ba:b7:08:3d: f6:43:d1:26:bc:39:c5:f1:71:b0:12:7d:36:8a:41: 10:7a:53:8e:c4:8d:4a:cd:c9:6e:68:be:4b:98:a9: 67:01:dd:81:95:a7:a9:d5:f9:1b:e0:46:4b:e6:0c: a5:36:40:ec:3d:97:ce:03:39:3e:94:b9:3d:ba:ad: a9:58:ac:f4:99:a3:48:d2:58:69:9f:d9:3a:78:b1: 34:26:6d:44:84:db:60:d0:72:cb:64:29:93:5d:15: 84:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:6A:D5:A1:64:5C:2C:75:36:06:CC:B8:8A:55:B9:0B:1D:1A:AD:51 X509v3 Authority Key Identifier: keyid:D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/7WrVoWRcLHU2Bsy4ilW5Cx0arVE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.41.200.0/21 78.110.208.0/20 178.209.128.0/19 185.24.20.0/22 193.8.86.0/23 213.168.176.0/20 IPv6: 2a02:13b8::/29 Signature Algorithm: sha256WithRSAEncryption 78:69:58:8e:a7:70:71:de:d6:b8:35:0e:4d:12:f9:cf:76:80: a7:ae:ae:0b:a7:50:01:5c:89:a4:5a:72:bd:b8:1b:d3:f5:7c: c7:66:1a:36:6a:ed:d6:34:24:5a:c6:9b:b6:73:85:ac:6b:76: e4:86:7f:41:9c:40:ff:a8:76:a4:b9:10:73:a6:26:3b:02:df: 86:f4:ec:58:03:d3:3b:62:bf:53:3b:f5:63:94:cc:a7:7b:af: ab:6c:10:1c:bd:b3:ab:5f:5e:69:cc:10:63:b7:8f:38:5d:43: 1c:b8:93:a7:4b:0e:3f:3a:44:cf:52:f3:01:ce:23:2a:0d:f8: 73:1a:95:66:7f:aa:11:6b:93:6e:fc:45:83:14:a7:86:58:aa: 16:f9:45:9c:3d:02:f1:e0:dc:b1:28:a8:24:86:86:22:49:d9: d7:4d:98:e3:17:95:00:a2:53:9a:d0:ee:81:61:f1:32:43:15: 75:c7:c8:a9:6d:7f:d8:c1:e6:9d:0d:7d:e1:33:25:ad:e0:df: 16:cf:c6:88:23:f9:0f:5b:aa:04:3e:86:00:14:4c:6d:11:2b: 63:67:da:d5:58:0f:10:ee:b2:5a:40:4b:67:e6:71:d8:53:ea: ff:94:3e:13:44:ec:65:d3:60:b4:ed:7e:ba:43:fb:a7:6e:c4: e5:44:3a:c5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt6Wt8C6HZztKiNgN+uU6QXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2OTIzZGY0ZGFlOTE5NTBjZjAwZDIzNWZlMzllMDBlZWEz ODE2ZDIwHhcNMjYwMTAxMTYxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDZhZDVhMTY0NWMyYzc1MzYwNmNjYjg4YTU1YjkwYjFkMWFhZDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM111jLxoayLLrZWVmC7JCtE95mu 9wTVQN6fTAF9kM5o1Mm6zRto98NIGwCKGAQrc6fEEeRHoayRORlVa9+FkEedF2Ut BGhB/lh9easnbguxbOoJMvxgzy+hSR0ROWj9GIZEELcNX9OhoULe6DjpXcWxRveW T75soMLKZLh6bVQlLNfPb4cnMie9PfXZO9z8F3b28HwrXYZ9aS53oMaVcbq3CD32 Q9EmvDnF8XGwEn02ikEQelOOxI1KzcluaL5LmKlnAd2Blaep1fkb4EZL5gylNkDs PZfOAzk+lLk9uq2pWKz0maNI0lhpn9k6eLE0Jm1EhNtg0HLLZCmTXRWEYwIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFO1q1aFkXCx1NgbMuIpVuQsdGq1RMB8GA1UdIwQY MBaAFNaSPfTa6RlQzwDSNf454A7qOBbSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXBJOTlOcnBHVkRQQU5JMV9qbmdEdW80RnRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zMjY4MGQtMDNkOS00YWZhLTk0MTYt OGQ2ZmMwMTA1MjNkLzEvN1dyVm9XUmNMSFUyQnN5NGlsVzVDeDBhclZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zMjY4MGQtMDNkOS00YWZhLTk0MTYtOGQ2ZmMwMTA1MjNk LzEvMXBJOTlOcnBHVkRQQU5JMV9qbmdEdW80RnRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDHynIAwQE Tm7QAwQFstGAAwQCuRgUAwQBwQhWAwQE1aiwMA0EAgACMAcDBQMqAhO4MA0GCSqG SIb3DQEBCwUAA4IBAQB4aViOp3Bx3ta4NQ5NEvnPdoCnrq4Lp1ABXImkWnK9uBvT 9XzHZho2au3WNCRaxpu2c4Wsa3bkhn9BnED/qHakuRBzpiY7At+G9OxYA9M7Yr9T O/VjlMyne6+rbBAcvbOrX15pzBBjt484XUMcuJOnSw4/OkTPUvMBziMqDfhzGpVm f6oRa5Nu/EWDFKeGWKoW+UWcPQLx4NyxKKgkhoYiSdnXTZjjF5UAolOa0O6BYfEy QxV1x8ipbX/YweadDX3hMyWt4N8Wz8aII/kPW6oEPoYAFExtEStjZ9rVWA8Q7rJa QEtn5nHYU+r/lD4TROxl02C07X66Q/unbsTlRDrF -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:37 2026 by rpki-client