This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/7H4eovIj7ri5a4YGeazmMZD4xU0.roa File: 7H4eovIj7ri5a4YGeazmMZD4xU0.roa (raw, json) Hash identifier: VG6bKSTJ2U4Zytr4AzXi09offh8427MPVKqZ8LWMbF8= Subject key identifier: EC:7E:1E:A2:F2:23:EE:B8:B9:6B:86:06:79:AC:E6:31:90:F8:C5:4D Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87 Certificate serial: 019B77588C95617105807B35709C6846B9CD Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/7H4eovIj7ri5a4YGeazmMZD4xU0.roa Signing time: Thu 01 Jan 2026 02:17:30 +0000 ROA not before: Thu 01 Jan 2026 02:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197628 IP address blocks: 185.92.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:8c:95:61:71:05:80:7b:35:70:9c:68:46:b9:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87 Validity Not Before: Jan 1 02:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec7e1ea2f223eeb8b96b860679ace63190f8c54d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fb:ad:19:f9:ad:46:aa:44:ba:9d:2b:23:a4: 9c:9a:2b:9a:4a:2e:f0:59:dc:ca:1e:a1:94:a9:7a: be:af:31:e5:cf:db:39:2b:97:b0:56:10:08:b7:73: 9f:17:c4:fb:89:f2:91:fc:87:2f:a1:17:80:89:e7: bc:65:a2:b8:48:5b:0d:92:8a:1a:34:67:3e:f1:67: 5e:2f:32:2c:fd:31:25:b8:37:e0:99:47:82:28:ae: 90:fb:6c:cd:ad:dd:95:02:c4:61:77:6c:ec:f4:4a: 93:14:0f:b9:13:40:73:54:53:b8:c4:a9:74:aa:65: 01:09:6f:76:8b:b1:7b:68:31:c7:10:e5:ab:db:0c: a0:64:72:5f:5f:72:ac:a1:a7:c4:47:29:42:a2:b2: 75:1c:d8:03:fd:fd:ba:0f:7c:8b:d4:b7:18:9a:a3: bc:12:6b:d2:a8:79:f4:83:14:c1:ba:4e:d6:57:be: f8:01:80:18:71:b2:4b:72:50:72:d3:cd:00:c6:d8: cf:72:7d:74:e1:75:52:9d:05:d6:a1:80:77:5f:19: 49:21:a1:9e:d5:6a:04:b0:bb:74:28:11:93:ad:7f: dc:1b:5c:c8:86:94:32:51:21:ee:fe:6e:78:07:01: 2d:57:cb:de:88:97:fe:00:67:d8:40:80:05:90:67: 71:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:7E:1E:A2:F2:23:EE:B8:B9:6B:86:06:79:AC:E6:31:90:F8:C5:4D X509v3 Authority Key Identifier: keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/7H4eovIj7ri5a4YGeazmMZD4xU0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.92.144.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:02:21:29:d0:19:2c:96:5c:79:52:6c:fc:d1:6c:d5:2d:b0: 8e:11:69:26:d5:5e:a2:97:26:88:9e:e4:5a:88:e0:3b:22:86: e9:8d:20:40:82:9b:1c:19:58:ca:17:63:93:3f:c4:a9:0d:bb: 1a:37:8f:96:68:c9:61:bd:83:d4:7b:b7:6c:3c:46:98:d4:ff: 83:a3:9e:eb:2a:83:3a:b4:fb:f1:7d:79:56:20:63:59:d8:c1: 11:6a:24:a5:70:59:6a:55:12:dc:11:4c:ab:f5:b9:c5:5c:50: 0f:dd:3a:da:7b:82:fa:75:10:15:d7:a2:3d:b4:e2:5a:9e:0b: 43:c5:51:0b:cd:bc:1d:34:0d:f9:67:39:bc:ed:05:9f:69:64: ad:88:57:16:e8:aa:58:94:f0:ef:25:b5:5a:a7:06:db:5e:a2: 1f:c7:d7:7f:b1:ea:4f:f5:f1:87:bf:e7:dd:77:14:4e:3f:0b: 49:df:6a:b5:f2:04:a8:4c:70:b7:fd:11:ef:37:89:d6:49:3d: 96:b3:76:ff:f5:16:d1:3a:07:65:25:56:38:49:9d:a0:5c:a3: 00:b5:33:46:f2:6d:e2:7b:54:40:c3:c4:99:cb:a6:f4:42:1f: c0:7b:8f:e5:2e:ad:1d:9d:9e:0b:54:42:5e:73:24:00:27:7c: 37:14:cf:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WIyVYXEFgHs1cJxoRrnNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwOGUyMzhlMzBkY2I3NTk3NTlmYjhhMzk0ZDllMjExYTI4 YjlkODcwHhcNMjYwMTAxMDIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzdlMWVhMmYyMjNlZWI4Yjk2Yjg2MDY3OWFjZTYzMTkwZjhjNTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvutGfmtRqpEup0rI6ScmiuaSi7w WdzKHqGUqXq+rzHlz9s5K5ewVhAIt3OfF8T7ifKR/IcvoReAiee8ZaK4SFsNkooa NGc+8WdeLzIs/TEluDfgmUeCKK6Q+2zNrd2VAsRhd2zs9EqTFA+5E0BzVFO4xKl0 qmUBCW92i7F7aDHHEOWr2wygZHJfX3KsoafERylCorJ1HNgD/f26D3yL1LcYmqO8 EmvSqHn0gxTBuk7WV774AYAYcbJLclBy080AxtjPcn104XVSnQXWoYB3XxlJIaGe 1WoEsLt0KBGTrX/cG1zIhpQyUSHu/m54BwEtV8veiJf+AGfYQIAFkGdxYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOx+HqLyI+64uWuGBnms5jGQ+MVNMB8GA1UdIwQY MBaAFICOI44w3LdZdZ+4o5TZ4hGii52HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDkt Y2Q5NzQwNDI2NDlmLzEvN0g0ZW92SWo3cmk1YTRZR2Vhem1NWkQ0eFUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDktY2Q5NzQwNDI2NDlm LzEvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVyQMA0G CSqGSIb3DQEBCwUAA4IBAQBqAiEp0Bksllx5Umz80WzVLbCOEWkm1V6ilyaInuRa iOA7IobpjSBAgpscGVjKF2OTP8SpDbsaN4+WaMlhvYPUe7dsPEaY1P+Do57rKoM6 tPvxfXlWIGNZ2MERaiSlcFlqVRLcEUyr9bnFXFAP3Trae4L6dRAV16I9tOJangtD xVELzbwdNA35Zzm87QWfaWStiFcW6KpYlPDvJbVapwbbXqIfx9d/sepP9fGHv+fd dxROPwtJ32q18gSoTHC3/RHvN4nWST2Ws3b/9RbROgdlJVY4SZ2gXKMAtTNG8m3i e1RAw8SZy6b0Qh/Ae4/lLq0dnZ4LVEJecyQAJ3w3FM/T -----END CERTIFICATE-----Generated at Mon Jan 26 04:55:25 2026 by rpki-client