This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/7NGoj5cGztX58pAtipUcpmb4aIM.roa File: 7NGoj5cGztX58pAtipUcpmb4aIM.roa (raw, json) Hash identifier: vlOULZs24F/kcnILYjizoe3IHDjDEgukRjmyfRx6nIw= Subject key identifier: EC:D1:A8:8F:97:06:CE:D5:F9:F2:90:2D:8A:95:1C:A6:66:F8:68:83 Certificate issuer: /CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181 Certificate serial: 019B77C6A37519C587C3F6940E56FE823CAF Authority key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/7NGoj5cGztX58pAtipUcpmb4aIM.roa Signing time: Thu 01 Jan 2026 04:17:45 +0000 ROA not before: Thu 01 Jan 2026 04:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15426 IP address blocks: 89.255.17.0/24 maxlen: 24 185.157.60.0/24 maxlen: 24 185.157.61.0/24 maxlen: 24 185.157.62.0/24 maxlen: 24 185.157.63.0/24 maxlen: 24 217.67.239.0/24 maxlen: 24 2a03:1a00::/32 maxlen: 32 2a07:a380::/29 maxlen: 29 2a0a:1880::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a3:75:19:c5:87:c3:f6:94:0e:56:fe:82:3c:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181 Validity Not Before: Jan 1 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ecd1a88f9706ced5f9f2902d8a951ca666f86883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:3d:a0:61:3b:44:45:16:10:b1:43:5f:11:04: c0:eb:29:aa:6e:94:73:fb:06:45:d9:07:49:91:b4: 23:6c:b0:07:19:db:0c:d3:c2:33:60:45:5f:93:3b: a3:67:0c:bc:08:d5:ed:92:45:26:ec:cc:37:94:4c: 78:4d:26:11:5b:35:4d:32:ae:01:64:f1:71:e1:a2: f9:70:b0:52:82:30:60:fc:17:d8:44:e2:c9:08:e8: 0b:5f:cd:cc:75:e5:96:00:69:7b:cc:af:e4:cd:42: b3:d3:2d:2c:6b:76:7f:17:c7:9f:9f:b1:18:7b:6f: 52:8d:54:5c:16:a0:3b:59:8a:3e:c2:09:0b:eb:7b: 07:ef:89:f3:32:a0:99:b7:2f:f0:69:78:92:f2:74: fb:8c:4f:50:19:4e:4a:dd:59:f9:84:48:d4:9d:4e: 5f:c3:40:15:b1:cf:e5:69:f4:0b:45:68:a5:2c:ee: f1:65:55:70:9e:42:6a:1d:bb:a3:e1:72:7d:59:ab: 74:24:f1:26:2f:91:5c:31:96:f0:fa:a1:b9:24:97: 4a:c8:89:97:8e:98:e3:b1:88:d5:77:4d:b3:89:37: 70:51:e5:f0:4f:b5:af:6e:c7:60:47:3d:67:ce:0e: 50:68:8b:96:2e:cb:a0:38:b2:dc:ca:04:5d:3a:ba: f3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D1:A8:8F:97:06:CE:D5:F9:F2:90:2D:8A:95:1C:A6:66:F8:68:83 X509v3 Authority Key Identifier: keyid:55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/7NGoj5cGztX58pAtipUcpmb4aIM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.255.17.0/24 185.157.60.0/22 217.67.239.0/24 IPv6: 2a03:1a00::/32 2a07:a380::/29 2a0a:1880::/29 Signature Algorithm: sha256WithRSAEncryption 37:68:c8:54:8c:3b:0e:bb:cb:29:7a:37:ae:c7:f8:bf:51:e5: 9e:44:7a:8c:63:7b:c0:e4:b8:4c:a6:3d:50:ec:a0:de:58:5a: b0:f5:9e:29:c0:b1:c8:94:0a:0d:0f:52:3e:80:16:05:b5:28: ad:15:77:03:94:df:5e:94:11:9b:70:55:50:4d:e4:32:32:84: b0:8a:88:16:56:78:18:48:5e:d8:cb:25:b8:43:9e:9a:5f:21: a5:96:ce:c7:1a:67:82:de:68:45:9d:8c:e5:8b:71:5f:e9:a1: 60:ed:98:0a:69:7a:eb:99:8d:03:48:3a:0f:81:95:7b:f5:67: 70:6a:94:2d:fd:3c:6d:8a:03:14:e7:de:7c:59:7e:60:78:dd: 0a:82:ac:4c:ac:cf:7a:cc:53:77:30:8e:27:3e:6e:1d:06:b6: 0c:78:c4:91:71:3b:4d:6e:5b:60:78:cd:0f:fd:04:4d:5e:1f: 78:e7:7c:dd:e8:cc:a6:1e:f7:79:ea:57:aa:73:0a:3e:bb:85: 3d:c1:c4:cd:9e:bd:7f:f1:fb:4c:ab:71:07:e5:df:20:0a:0b: eb:f7:c4:8f:b1:f8:d9:1e:e1:6b:41:82:ff:4c:af:46:ed:34: 8d:85:3a:60:b6:fe:a6:de:09:24:50:cd:b3:7b:d3:aa:71:92: b1:e4:a9:5e -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt3xqN1GcWHw/aUDlb+gjyvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MmFkM2EwYjRiNzRlODVhZjU0ZjU4YWQ3NWEzMDI2Yjdk ZjcxODEwHhcNMjYwMTAxMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2QxYTg4Zjk3MDZjZWQ1ZjlmMjkwMmQ4YTk1MWNhNjY2Zjg2ODgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9D2gYTtERRYQsUNfEQTA6ymqbpRz +wZF2QdJkbQjbLAHGdsM08IzYEVfkzujZwy8CNXtkkUm7Mw3lEx4TSYRWzVNMq4B ZPFx4aL5cLBSgjBg/BfYROLJCOgLX83MdeWWAGl7zK/kzUKz0y0sa3Z/F8efn7EY e29SjVRcFqA7WYo+wgkL63sH74nzMqCZty/waXiS8nT7jE9QGU5K3Vn5hEjUnU5f w0AVsc/lafQLRWilLO7xZVVwnkJqHbuj4XJ9Wat0JPEmL5FcMZbw+qG5JJdKyImX jpjjsYjVd02ziTdwUeXwT7WvbsdgRz1nzg5QaIuWLsugOLLcygRdOrrzDQIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFOzRqI+XBs7V+fKQLYqVHKZm+GiDMB8GA1UdIwQY MBaAFFUq06C0t06Fr1T1itdaMCa333GBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlNyVG9MUzNUb1d2VlBXSzExb3dKcmZmY1lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8xNmZjZjEtNjQxMi00ZGIyLWIzYWUt NDlhM2M0OWYzOTNjLzEvN05Hb2o1Y0d6dFg1OHBBdGlwVWNwbWI0YUlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8xNmZjZjEtNjQxMi00ZGIyLWIzYWUtNDlhM2M0OWYzOTNj LzEvVlNyVG9MUzNUb1d2VlBXSzExb3dKcmZmY1lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAYBAIAATASAwQAWf8RAwQC uZ08AwQA2UPvMBsEAgACMBUDBQAqAxoAAwUDKgejgAMFAyoKGIAwDQYJKoZIhvcN AQELBQADggEBADdoyFSMOw67yyl6N67H+L9R5Z5Eeoxje8DkuEymPVDsoN5YWrD1 ninAsciUCg0PUj6AFgW1KK0VdwOU316UEZtwVVBN5DIyhLCKiBZWeBhIXtjLJbhD nppfIaWWzscaZ4LeaEWdjOWLcV/poWDtmAppeuuZjQNIOg+BlXv1Z3BqlC39PG2K AxTn3nxZfmB43QqCrEysz3rMU3cwjic+bh0Gtgx4xJFxO01uW2B4zQ/9BE1eH3jn fN3ozKYe93nqV6pzCj67hT3BxM2evX/x+0yrcQfl3yAKC+v3xI+x+Nke4WtBgv9M r0btNI2FOmC2/qbeCSRQzbN706pxkrHkqV4= -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:49 2026 by rpki-client