This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/7S2s5NvMEWjMmdP4tHVPuR44TrM.roa File: 7S2s5NvMEWjMmdP4tHVPuR44TrM.roa (raw, json) Hash identifier: tQYbzfuvYbUtsAHpJGcR8MOd0wYit8Udr+nLe5FW+kY= Subject key identifier: ED:2D:AC:E4:DB:CC:11:68:CC:99:D3:F8:B4:75:4F:B9:1E:38:4E:B3 Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4 Certificate serial: 019B79ED5CFD4BEADE3996DFC0B1A7372452 Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/7S2s5NvMEWjMmdP4tHVPuR44TrM.roa Signing time: Thu 01 Jan 2026 14:19:17 +0000 ROA not before: Thu 01 Jan 2026 14:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59796 IP address blocks: 5.252.32.0/24 maxlen: 24 5.252.33.0/24 maxlen: 24 5.252.34.0/24 maxlen: 24 5.252.35.0/24 maxlen: 24 160.79.120.0/24 maxlen: 24 160.79.121.0/24 maxlen: 24 160.79.122.0/24 maxlen: 24 160.79.123.0/24 maxlen: 24 185.121.240.0/22 maxlen: 22 185.121.240.0/24 maxlen: 24 185.121.241.0/24 maxlen: 24 185.121.242.0/24 maxlen: 24 185.121.243.0/24 maxlen: 24 2a06:a180:10::/48 maxlen: 48 2a06:a180:1f::/48 maxlen: 48 2a06:a180:30::/48 maxlen: 48 2a06:a180:40::/48 maxlen: 48 2a06:a180:50::/48 maxlen: 48 2a06:a180:5f::/48 maxlen: 48 2a06:a180:60::/48 maxlen: 48 2a06:a180:70::/48 maxlen: 48 2a06:a180:80::/48 maxlen: 48 2a06:a180:a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5c:fd:4b:ea:de:39:96:df:c0:b1:a7:37:24:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4 Validity Not Before: Jan 1 14:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed2dace4dbcc1168cc99d3f8b4754fb91e384eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2d:da:f7:14:e3:92:c2:82:c1:01:ed:9f:e9: 47:f8:b9:0e:8f:7e:fe:a9:9a:93:6e:81:01:95:85: 44:a2:d6:26:12:4d:45:44:4e:2f:1a:b3:0b:c9:89: e5:c2:2a:14:5e:d4:8d:52:fd:8d:ad:1f:97:95:b4: 6a:a9:b5:e2:6d:dc:94:6d:b1:8b:1a:1d:66:9f:46: 65:c9:df:65:f2:8f:5e:39:d9:60:46:1c:08:8b:8e: 96:24:39:07:cf:a2:a2:c9:eb:bd:9b:3f:18:6c:35: 8e:eb:c0:04:af:94:88:4a:84:3b:2f:98:ce:69:c3: a3:9a:dd:42:bc:e0:ac:bf:68:2b:af:a7:ac:70:39: 2f:e2:c9:a6:94:64:93:35:28:3b:3d:95:fe:2f:ee: e0:5f:28:33:58:d7:f5:d1:8f:7a:e0:43:72:5e:e8: 90:2e:11:50:33:2e:50:0a:2b:8d:9d:b5:7a:1a:99: 52:b7:65:bf:36:6f:6f:94:e6:59:2c:2e:43:7c:27: 32:90:75:7a:fa:e6:ec:63:fc:ae:29:8e:8f:ff:ce: 51:51:60:9e:42:1b:1c:6b:07:0a:01:f3:05:c4:fc: 4c:0e:87:03:e3:8a:bb:8e:a5:60:67:75:f5:a0:8c: 3d:8d:3a:94:89:a9:4a:b3:e9:9d:7c:79:69:44:d7: 23:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2D:AC:E4:DB:CC:11:68:CC:99:D3:F8:B4:75:4F:B9:1E:38:4E:B3 X509v3 Authority Key Identifier: keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/7S2s5NvMEWjMmdP4tHVPuR44TrM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.32.0/22 160.79.120.0/22 185.121.240.0/22 IPv6: 2a06:a180:10::/48 2a06:a180:1f::/48 2a06:a180:30::/48 2a06:a180:40::/48 2a06:a180:50::/48 2a06:a180:5f::-2a06:a180:60:ffff:ffff:ffff:ffff:ffff 2a06:a180:70::/48 2a06:a180:80::/48 2a06:a180:a0::/48 Signature Algorithm: sha256WithRSAEncryption 27:16:4f:af:a5:8b:09:de:f1:92:0d:f1:01:df:49:b8:9a:81: d6:4b:43:0b:fc:1d:02:22:88:49:94:47:13:ec:c5:92:e5:aa: 89:15:b9:cb:4b:2c:14:03:47:be:84:f4:a8:b7:55:e0:23:5f: 56:1c:dd:cf:24:d2:a3:bf:43:d0:be:55:bf:9f:2d:2d:a9:af: c9:6a:ba:6f:f6:7e:86:5e:1e:82:6d:24:83:f5:6b:b4:94:37: db:cc:a5:9a:8b:ca:37:43:21:c4:dd:39:ae:65:79:9f:49:0d: 73:39:12:44:5b:f4:29:42:53:cf:b5:31:a6:e0:31:00:72:68: 52:33:c8:a6:79:ea:ad:fe:f5:4c:ab:ef:a0:4a:a3:41:4a:8b: 41:8e:13:e3:00:2b:32:e7:4a:70:bd:7d:da:60:1a:c3:0e:98: bf:ad:e4:9a:ae:84:db:da:8e:00:43:ee:48:e4:e6:a9:db:e4: 22:80:f9:60:04:02:ba:f6:25:c3:85:dc:51:02:72:21:81:ca: 48:08:c2:cb:54:ef:fc:11:30:4b:55:3d:13:29:d5:fe:cb:75: 25:68:33:5b:ea:f3:cd:de:a5:e3:52:dd:a3:32:5c:af:98:bb: fd:f5:f3:d9:0e:21:a9:ea:f4:37:ea:d4:65:18:da:47:e1:ce: 83:81:af:1d -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgISAZt57Vz9S+reOZbfwLGnNyRSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjZiMWVmNzQxMDA3MmNlOTZlODJkNzU4MWJlNDM2ZTYz OWE3YzQwHhcNMjYwMTAxMTQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDJkYWNlNGRiY2MxMTY4Y2M5OWQzZjhiNDc1NGZiOTFlMzg0ZWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC3a9xTjksKCwQHtn+lH+LkOj37+ qZqTboEBlYVEotYmEk1FRE4vGrMLyYnlwioUXtSNUv2NrR+XlbRqqbXibdyUbbGL Gh1mn0Zlyd9l8o9eOdlgRhwIi46WJDkHz6Kiyeu9mz8YbDWO68AEr5SISoQ7L5jO acOjmt1CvOCsv2grr6escDkv4smmlGSTNSg7PZX+L+7gXygzWNf10Y964ENyXuiQ LhFQMy5QCiuNnbV6GplSt2W/Nm9vlOZZLC5DfCcykHV6+ubsY/yuKY6P/85RUWCe QhscawcKAfMFxPxMDocD44q7jqVgZ3X1oIw9jTqUialKs+mdfHlpRNcj+wIDAQAB o4ICezCCAncwHQYDVR0OBBYEFO0trOTbzBFozJnT+LR1T7keOE6zMB8GA1UdIwQY MBaAFH4mse90EAcs6W6C11gb5DbmOafEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYt OGMzMmMzNTFlZTcwLzEvN1MyczVOdk1FV2pNbWRQNHRIVlB1UjQ0VHJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYtOGMzMmMzNTFlZTcw LzEvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MBgEAgABMBIDBAIF/CAD BAKgT3gDBAK5efAwYgQCAAIwXAMHACoGoYAAEAMHACoGoYAAHwMHACoGoYAAMAMH ACoGoYAAQAMHACoGoYAAUDASAwcAKgahgABfAwcAKgahgABgAwcAKgahgABwAwcA KgahgACAAwcAKgahgACgMA0GCSqGSIb3DQEBCwUAA4IBAQAnFk+vpYsJ3vGSDfEB 30m4moHWS0ML/B0CIohJlEcT7MWS5aqJFbnLSywUA0e+hPSot1XgI19WHN3PJNKj v0PQvlW/ny0tqa/Jarpv9n6GXh6CbSSD9Wu0lDfbzKWai8o3QyHE3TmuZXmfSQ1z ORJEW/QpQlPPtTGm4DEAcmhSM8imeeqt/vVMq++gSqNBSotBjhPjACsy50pwvX3a YBrDDpi/reSaroTb2o4AQ+5I5Oap2+QigPlgBAK69iXDhdxRAnIhgcpICMLLVO/8 ETBLVT0TKdX+y3UlaDNb6vPN3qXjUt2jMlyvmLv99fPZDiGp6vQ36tRlGNpH4c6D ga8d -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:08 2026 by rpki-client