This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/7bWHpI5hLkVOOVMwaLDHOJjE-AQ.roa File: 7bWHpI5hLkVOOVMwaLDHOJjE-AQ.roa (raw, json) Hash identifier: OG4wWGCUVxMVLCl+iWc5JLI3OgOP6z2IIPVQAsdzDqI= Subject key identifier: ED:B5:87:A4:8E:61:2E:45:4E:39:53:30:68:B0:C7:38:98:C4:F8:04 Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019B7910E9F118873772CD651D0569BE25DD Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/7bWHpI5hLkVOOVMwaLDHOJjE-AQ.roa Signing time: Thu 01 Jan 2026 10:18:30 +0000 ROA not before: Thu 01 Jan 2026 10:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47687 IP address blocks: 185.225.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e9:f1:18:87:37:72:cd:65:1d:05:69:be:25:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Jan 1 10:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edb587a48e612e454e39533068b0c73898c4f804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a9:e9:e4:88:30:54:1b:70:1f:31:c9:cd:8d: 78:4e:09:7d:ff:91:f7:9c:2a:de:c9:c9:25:94:cd: 02:43:e5:4e:75:4c:55:a7:9e:07:e2:d3:e4:9e:4a: 16:84:8c:1a:de:13:d9:85:fd:63:5e:fd:36:e4:69: 9a:1b:4a:75:82:e5:73:dd:15:c6:dc:ce:9d:45:45: 6d:ab:e1:a0:1a:ec:5c:3d:16:5c:7b:0e:ac:b2:02: 8c:64:a0:0c:e7:51:1f:6c:ae:e2:af:51:e7:92:dc: b3:be:37:ea:83:94:4d:6a:08:cf:8f:8e:51:f9:d7: 0b:d0:90:39:23:13:6d:ae:71:61:74:a5:83:50:d3: 80:a6:87:98:c8:f7:6b:79:ac:0b:53:03:5d:ca:e6: de:dc:f0:b5:e8:93:c2:ff:eb:4b:19:29:64:41:54: b4:ea:da:6f:66:a7:d1:5c:d4:fc:e1:9e:45:43:c8: 95:1c:1b:1c:ff:13:52:3a:a2:98:12:ed:d3:cf:b4: 6e:1f:d8:01:e6:e3:15:2f:5b:10:35:cb:41:35:63: a1:a9:64:2a:2b:0b:b3:cc:52:dd:24:f8:5e:1b:ff: a3:49:39:d2:59:21:e2:a8:98:ce:2a:85:6f:06:c0: eb:5d:18:b4:64:01:df:7b:59:22:ca:fa:3e:bf:f8: 69:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B5:87:A4:8E:61:2E:45:4E:39:53:30:68:B0:C7:38:98:C4:F8:04 X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/7bWHpI5hLkVOOVMwaLDHOJjE-AQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.207.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:25:84:ed:87:06:64:49:58:2a:bd:45:8e:a0:3a:ea:c4:e8: 88:89:10:66:b3:25:ed:40:4a:77:f6:73:58:be:0b:27:84:b9: 0e:28:43:fb:c9:10:95:6d:22:b0:61:54:d5:3c:d5:0d:46:86: f5:cc:87:52:c5:f3:b3:ce:8c:01:48:fe:f1:dc:d6:57:08:bb: fa:63:2a:d3:8d:da:1a:6a:9b:46:6f:b6:d4:2c:2b:c2:cc:a4: 0b:f4:24:c5:59:47:30:f2:b9:bb:92:cf:18:e6:81:cf:df:ae: 4e:c0:8b:16:c5:f7:99:72:7a:ad:05:7c:9d:e6:52:34:e4:5c: c7:64:55:4a:36:01:2a:84:3c:6a:54:39:2b:ff:a2:64:bd:81: 32:51:95:8d:c7:b0:c9:92:ad:5d:bc:c8:d4:73:48:d1:49:60: 8d:aa:10:34:6a:68:8e:fe:e6:4a:66:ea:1e:05:12:38:63:f3: 97:74:d4:b4:d6:61:0f:36:f7:1f:de:c6:af:cd:59:8a:e5:02: 35:e8:fd:b5:75:0b:9c:3c:4b:1e:04:0b:3f:3f:f1:ec:8e:8c: 26:86:e7:95:8c:1a:66:cf:35:bf:1e:79:48:2a:13:19:34:70: d9:d2:cf:59:d0:9d:e1:c3:30:c5:b5:20:6c:33:d4:0d:a6:c9: f5:04:a6:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EOnxGIc3cs1lHQVpviXdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwMTAxMTAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGI1ODdhNDhlNjEyZTQ1NGUzOTUzMzA2OGIwYzczODk4YzRmODA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6np5IgwVBtwHzHJzY14Tgl9/5H3 nCreyckllM0CQ+VOdUxVp54H4tPknkoWhIwa3hPZhf1jXv025GmaG0p1guVz3RXG 3M6dRUVtq+GgGuxcPRZcew6ssgKMZKAM51EfbK7ir1Hnktyzvjfqg5RNagjPj45R +dcL0JA5IxNtrnFhdKWDUNOApoeYyPdreawLUwNdyube3PC16JPC/+tLGSlkQVS0 6tpvZqfRXNT84Z5FQ8iVHBsc/xNSOqKYEu3Tz7RuH9gB5uMVL1sQNctBNWOhqWQq KwuzzFLdJPheG/+jSTnSWSHiqJjOKoVvBsDrXRi0ZAHfe1kiyvo+v/hptQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO21h6SOYS5FTjlTMGiwxziYxPgEMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEvN2JXSHBJNWhMa1ZPT1ZNd2FMREhPSmpFLUFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueHPMA0G CSqGSIb3DQEBCwUAA4IBAQB+JYTthwZkSVgqvUWOoDrqxOiIiRBmsyXtQEp39nNY vgsnhLkOKEP7yRCVbSKwYVTVPNUNRob1zIdSxfOzzowBSP7x3NZXCLv6YyrTjdoa aptGb7bULCvCzKQL9CTFWUcw8rm7ks8Y5oHP365OwIsWxfeZcnqtBXyd5lI05FzH ZFVKNgEqhDxqVDkr/6JkvYEyUZWNx7DJkq1dvMjUc0jRSWCNqhA0amiO/uZKZuoe BRI4Y/OXdNS01mEPNvcf3savzVmK5QI16P21dQucPEseBAs/P/HsjowmhueVjBpm zzW/HnlIKhMZNHDZ0s9Z0J3hwzDFtSBsM9QNpsn1BKbA -----END CERTIFICATE-----Generated at Sun Jan 25 15:01:32 2026 by rpki-client