This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/N7ax4NHfdEnoomaYviGT7ZjPtXU.roa File: N7ax4NHfdEnoomaYviGT7ZjPtXU.roa (raw, json) Hash identifier: psD+3SCxgwLTyZrF0izMcXY3kYv7ppA53aHy+BOaM8A= Subject key identifier: 37:B6:B1:E0:D1:DF:74:49:E8:A2:66:98:BE:21:93:ED:98:CF:B5:75 Certificate issuer: /CN=190ec7aab20fc4c801c67963e59e4f93600e401d Certificate serial: 019B7FF23BAE7F235FF0AB0E539B0C59AD10 Authority key identifier: 19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/N7ax4NHfdEnoomaYviGT7ZjPtXU.roa Signing time: Fri 02 Jan 2026 18:22:20 +0000 ROA not before: Fri 02 Jan 2026 18:22:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20847 IP address blocks: 31.7.0.0/22 maxlen: 24 31.7.4.0/22 maxlen: 24 185.144.224.0/23 maxlen: 24 2a03:9700::/33 maxlen: 33 2a03:9700:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:3b:ae:7f:23:5f:f0:ab:0e:53:9b:0c:59:ad:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=190ec7aab20fc4c801c67963e59e4f93600e401d Validity Not Before: Jan 2 18:22:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37b6b1e0d1df7449e8a26698be2193ed98cfb575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9b:a6:54:20:d9:c9:22:54:84:69:c8:19:bd: cd:f2:35:71:3a:99:35:54:9a:6e:d4:4e:9e:04:2b: db:3d:f5:95:a6:2e:31:de:82:94:1e:5e:45:d9:69: 61:ab:84:54:fb:1b:80:51:2e:3f:9c:8a:ee:32:cf: d3:73:0e:ec:fe:8a:56:88:4c:56:5b:df:3b:08:ba: ad:5e:51:b3:f8:a6:f3:ad:25:93:60:0c:ae:9e:2f: e6:fe:4a:ee:8c:03:37:2a:08:4a:d0:ad:53:34:6d: 2a:24:f1:53:39:e7:ba:37:bc:f3:d7:22:c9:d5:e2: de:8e:96:5a:7c:66:67:f9:7b:2e:7b:44:50:38:99: b8:f3:65:e2:f7:73:3e:20:75:b0:0b:96:c9:ef:21: 17:19:b1:41:cb:a2:31:6d:7c:90:19:97:f6:76:94: 56:8d:3a:bc:fa:3b:6d:7e:1b:d2:fc:30:20:c8:04: e0:be:e3:10:97:54:e4:17:fd:07:de:1f:64:c5:cb: e6:b0:fd:66:7d:fd:d6:5c:93:9e:cb:8b:51:3b:ba: e9:dd:a2:92:fe:38:02:77:b9:cb:1b:af:ab:88:e5: 68:d7:96:0c:90:e1:f5:42:ca:28:dc:a7:11:e8:b8: 84:a1:e9:83:dd:8f:f6:69:ee:b6:99:50:5c:c5:e8: 67:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B6:B1:E0:D1:DF:74:49:E8:A2:66:98:BE:21:93:ED:98:CF:B5:75 X509v3 Authority Key Identifier: keyid:19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/N7ax4NHfdEnoomaYviGT7ZjPtXU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.7.0.0/21 185.144.224.0/23 IPv6: 2a03:9700::/32 Signature Algorithm: sha256WithRSAEncryption a6:fa:50:89:00:f2:aa:c3:9d:8e:ed:91:bb:84:84:57:cd:b5: 5b:52:ac:a2:e5:49:65:a3:fc:24:79:14:37:4c:4d:2a:b5:59: 25:b7:95:26:6b:2e:20:79:2b:18:30:34:2c:14:8e:3c:a5:7c: e2:99:b1:c6:67:56:7e:a3:e9:0d:8c:ba:1f:1a:bc:14:ed:56: 90:fe:94:d6:24:4d:34:60:31:82:02:6a:c5:98:53:e3:a6:f4: b6:62:2d:56:3f:17:bc:b0:0b:62:74:36:80:8c:d5:32:ea:23: 9e:17:c8:68:04:4a:d6:07:75:e7:01:5d:da:c0:27:97:f4:d0: d0:d5:b4:41:de:06:56:cc:28:5d:f9:c6:ea:97:67:67:14:9d: 9a:b4:f8:0c:13:ef:38:66:6c:75:eb:0e:a9:7a:32:07:44:d9: 41:62:7c:e9:ab:de:d6:99:88:64:10:2d:08:6a:0f:9e:b2:e9: 10:0d:b1:4f:70:a8:30:5c:0c:5d:7b:a1:39:13:dd:49:b6:8f: b6:1d:85:34:b5:c1:54:94:fe:dd:02:d2:2f:ad:53:e6:2c:95: 76:0a:58:f2:d5:83:ad:d9:f0:63:d7:49:a3:6e:fc:62:58:0e: 95:b3:7a:db:8c:25:9c:c2:4a:ed:61:61:0f:e8:24:ac:19:b7: ba:b3:38:7b -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/8juufyNf8KsOU5sMWa0QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MGVjN2FhYjIwZmM0YzgwMWM2Nzk2M2U1OWU0ZjkzNjAw ZTQwMWQwHhcNMjYwMTAyMTgyMjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2I2YjFlMGQxZGY3NDQ5ZThhMjY2OThiZTIxOTNlZDk4Y2ZiNTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpumVCDZySJUhGnIGb3N8jVxOpk1 VJpu1E6eBCvbPfWVpi4x3oKUHl5F2Wlhq4RU+xuAUS4/nIruMs/Tcw7s/opWiExW W987CLqtXlGz+KbzrSWTYAyuni/m/krujAM3KghK0K1TNG0qJPFTOee6N7zz1yLJ 1eLejpZafGZn+Xsue0RQOJm482Xi93M+IHWwC5bJ7yEXGbFBy6IxbXyQGZf2dpRW jTq8+jttfhvS/DAgyATgvuMQl1TkF/0H3h9kxcvmsP1mff3WXJOey4tRO7rp3aKS /jgCd7nLG6+riOVo15YMkOH1Qsoo3KcR6LiEoemD3Y/2ae62mVBcxehnaQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDe2seDR33RJ6KJmmL4hk+2Yz7V1MB8GA1UdIwQY MBaAFBkOx6qyD8TIAcZ5Y+WeT5NgDkAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1E3SHFySVB4TWdCeG5sajVaNVBrMkFPUUIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iYTNiNjktNjVlNS00OThlLWJhMDgt ZGFiOWI0ODNjMTIzLzEvTjdheDROSGZkRW5vb21hWXZpR1Q3WmpQdFhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9iYTNiNjktNjVlNS00OThlLWJhMDgtZGFiOWI0ODNjMTIz LzEvR1E3SHFySVB4TWdCeG5sajVaNVBrMkFPUUIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDHwcAAwQB uZDgMA0EAgACMAcDBQAqA5cAMA0GCSqGSIb3DQEBCwUAA4IBAQCm+lCJAPKqw52O 7ZG7hIRXzbVbUqyi5Ullo/wkeRQ3TE0qtVklt5Umay4geSsYMDQsFI48pXzimbHG Z1Z+o+kNjLofGrwU7VaQ/pTWJE00YDGCAmrFmFPjpvS2Yi1WPxe8sAtidDaAjNUy 6iOeF8hoBErWB3XnAV3awCeX9NDQ1bRB3gZWzChd+cbql2dnFJ2atPgME+84Zmx1 6w6pejIHRNlBYnzpq97WmYhkEC0Iag+esukQDbFPcKgwXAxde6E5E91Jto+2HYU0 tcFUlP7dAtIvrVPmLJV2Cljy1YOt2fBj10mjbvxiWA6Vs3rbjCWcwkrtYWEP6CSs Gbe6szh7 -----END CERTIFICATE-----Generated at Mon Jan 26 08:58:36 2026 by rpki-client