This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/s7ALXCsQ6iydnmcMndLJwyBEVrA.roa File: s7ALXCsQ6iydnmcMndLJwyBEVrA.roa (raw, json) Hash identifier: 2KKTFrZRTTsfpxmpCTn5aGO1P1QcLn41Vrt2Tl7hzrU= Subject key identifier: B3:B0:0B:5C:2B:10:EA:2C:9D:9E:67:0C:9D:D2:C9:C3:20:44:56:B0 Certificate issuer: /CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece Certificate serial: 019B7FF20D9C9E099641B4AE57076F4C77C1 Authority key identifier: 73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/s7ALXCsQ6iydnmcMndLJwyBEVrA.roa Signing time: Fri 02 Jan 2026 18:22:08 +0000 ROA not before: Fri 02 Jan 2026 18:22:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50599 IP address blocks: 91.224.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:0d:9c:9e:09:96:41:b4:ae:57:07:6f:4c:77:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece Validity Not Before: Jan 2 18:22:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3b00b5c2b10ea2c9d9e670c9dd2c9c3204456b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:dc:31:38:4b:8d:45:53:95:21:24:9f:58:bd: e0:e0:cc:67:2f:19:a8:67:b6:b6:8e:14:50:c4:63: 46:ec:fc:6a:77:d2:73:5b:72:01:f9:6c:7a:71:94: 80:8f:f9:02:5a:ee:fe:51:a2:38:cb:c5:1a:e4:94: c2:dc:9e:e6:87:41:f9:c7:02:72:c9:0a:a2:cd:5f: 5d:93:4c:ef:e3:32:07:75:4f:df:55:57:b9:18:03: 33:02:b6:a6:10:ae:ce:0c:69:39:56:df:1a:87:4a: a0:e6:27:c5:fb:1f:ea:57:31:20:c1:bf:2f:f3:a9: 4c:fe:48:c6:1f:34:8f:80:06:17:8d:52:f6:88:37: cc:e5:8d:47:ad:10:54:40:05:53:a4:da:a1:ca:a1: 72:73:f8:58:f3:17:22:b3:57:7d:09:42:70:d3:70: 8d:40:d0:0b:b0:09:da:fc:52:5a:65:4a:f9:16:7d: 9f:f0:49:5f:cf:24:8a:be:62:8a:90:0b:13:83:a0: 2b:cb:64:79:86:26:22:49:ad:11:d1:2f:2d:60:bb: 8d:7a:9d:e6:c1:c7:29:e0:1b:e9:3a:c9:7a:46:2f: 95:14:9e:10:24:56:df:1e:4b:50:76:a6:31:1f:9d: 3d:14:9c:0e:73:9e:16:24:cd:c0:e3:86:2e:0d:1d: 73:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B0:0B:5C:2B:10:EA:2C:9D:9E:67:0C:9D:D2:C9:C3:20:44:56:B0 X509v3 Authority Key Identifier: keyid:73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/s7ALXCsQ6iydnmcMndLJwyBEVrA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.60.0/23 Signature Algorithm: sha256WithRSAEncryption 64:2f:c8:96:a3:f1:1e:c9:09:c9:35:dc:a7:d6:27:2e:2e:64: 6b:32:16:97:ba:b9:a1:5e:cc:5b:96:84:70:a6:9c:83:b6:0e: 02:db:63:be:7b:e6:4e:57:fb:d3:fb:d5:35:8e:ad:04:5b:10: 5f:df:14:e0:4c:7e:bb:29:b6:4e:4c:c8:79:76:44:f4:55:a7: 2a:dd:aa:22:02:e1:bf:e0:71:9d:ab:f2:1d:19:95:51:a5:54: eb:c3:ac:5a:04:01:c0:ec:36:55:94:67:cf:e6:d8:74:5c:61: 69:3c:0f:bc:89:f2:55:77:ed:26:50:9a:31:e3:da:25:cf:db: 72:23:d0:63:19:3c:5e:41:af:00:4b:a0:1e:16:11:d4:3e:e0: f0:f5:86:3a:98:60:66:c8:e2:b6:81:09:a5:04:bc:67:8e:6d: fc:3a:0d:00:25:30:de:4e:6d:f9:c3:9d:95:0f:2d:ce:1c:f0: a1:83:db:bd:0d:3d:dc:29:5e:30:3c:bc:4a:33:c4:66:3c:58: 97:03:cb:0a:1c:31:fd:5e:c8:c1:5c:0d:62:e3:df:81:f5:93: 19:2e:8c:23:a6:2b:91:21:28:44:35:11:df:94:50:90:ce:1c: 05:aa:6e:f4:cc:ee:22:c2:8d:e9:5d:5c:61:91:cf:00:55:49: 90:5c:41:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8g2cngmWQbSuVwdvTHfBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYmJjMjEzYzZmOTBiZDhmMDA3MTM5ZWFlNmZlMGNhZmE0 MzVlY2UwHhcNMjYwMTAyMTgyMjA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2IwMGI1YzJiMTBlYTJjOWQ5ZTY3MGM5ZGQyYzljMzIwNDQ1NmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9wxOEuNRVOVISSfWL3g4MxnLxmo Z7a2jhRQxGNG7Pxqd9JzW3IB+Wx6cZSAj/kCWu7+UaI4y8Ua5JTC3J7mh0H5xwJy yQqizV9dk0zv4zIHdU/fVVe5GAMzAramEK7ODGk5Vt8ah0qg5ifF+x/qVzEgwb8v 86lM/kjGHzSPgAYXjVL2iDfM5Y1HrRBUQAVTpNqhyqFyc/hY8xcis1d9CUJw03CN QNALsAna/FJaZUr5Fn2f8ElfzySKvmKKkAsTg6Ary2R5hiYiSa0R0S8tYLuNep3m wccp4BvpOsl6Ri+VFJ4QJFbfHktQdqYxH509FJwOc54WJM3A44YuDR1zrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLOwC1wrEOosnZ5nDJ3SycMgRFawMB8GA1UdIwQY MBaAFHO7whPG+QvY8AcTnq5v4Mr6Q17OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzd2Q0U4YjVDOWp3QnhPZXJtX2d5dnBEWHM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83YTE2MGUtYTU2ZC00MWM4LTg5MzAt OTU4MTdlZTk0NGNlLzEvczdBTFhDc1E2aXlkbm1jTW5kTEp3eUJFVnJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83YTE2MGUtYTU2ZC00MWM4LTg5MzAtOTU4MTdlZTk0NGNl LzEvYzd2Q0U4YjVDOWp3QnhPZXJtX2d5dnBEWHM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+A8MA0G CSqGSIb3DQEBCwUAA4IBAQBkL8iWo/EeyQnJNdyn1icuLmRrMhaXurmhXsxbloRw ppyDtg4C22O+e+ZOV/vT+9U1jq0EWxBf3xTgTH67KbZOTMh5dkT0Vacq3aoiAuG/ 4HGdq/IdGZVRpVTrw6xaBAHA7DZVlGfP5th0XGFpPA+8ifJVd+0mUJox49olz9ty I9BjGTxeQa8AS6AeFhHUPuDw9YY6mGBmyOK2gQmlBLxnjm38Og0AJTDeTm35w52V Dy3OHPChg9u9DT3cKV4wPLxKM8RmPFiXA8sKHDH9XsjBXA1i49+B9ZMZLowjpiuR IShENRHflFCQzhwFqm70zO4iwo3pXVxhkc8AVUmQXEHQ -----END CERTIFICATE-----Generated at Mon Jan 26 11:06:02 2026 by rpki-client