This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/B7UyS94iVj1DJiAES7AGdZBkhvU.roa File: B7UyS94iVj1DJiAES7AGdZBkhvU.roa (raw, json) Hash identifier: LvNOB6rKBIqz8zy85DW3nACAYVwrAZC+twiA7P7L6S8= Subject key identifier: 07:B5:32:4B:DE:22:56:3D:43:26:20:04:4B:B0:06:75:90:64:86:F5 Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f Certificate serial: 019B7AC89F64B020499788B14EE830AC083A Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/B7UyS94iVj1DJiAES7AGdZBkhvU.roa Signing time: Thu 01 Jan 2026 18:18:46 +0000 ROA not before: Thu 01 Jan 2026 18:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206998 IP address blocks: 185.221.85.0/24 maxlen: 24 185.221.86.0/24 maxlen: 24 212.32.4.0/24 maxlen: 24 212.32.5.0/24 maxlen: 24 2a0d:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:9f:64:b0:20:49:97:88:b1:4e:e8:30:ac:08:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f Validity Not Before: Jan 1 18:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07b5324bde22563d432620044bb00675906486f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3f:96:33:3e:22:3f:f8:69:3b:66:25:ae:4e: a9:66:b9:30:f1:c8:5a:7e:d7:67:d3:a9:c5:9a:6a: e2:58:92:b2:80:58:e3:e7:cb:d3:7a:11:59:b9:2c: 99:8e:65:6d:c9:7f:7d:8f:7a:a9:96:3b:f0:57:62: a5:c4:49:d5:9e:de:66:34:9c:9b:17:45:0b:f6:7c: 3a:c9:c9:e6:5b:71:b6:41:98:a3:16:46:1c:ce:e9: 65:17:c9:79:65:11:bd:e3:5c:c9:3b:36:b6:06:8c: fe:28:43:2f:e2:ac:36:e5:31:99:47:a3:3d:89:e6: d9:65:87:4e:ca:b6:6d:89:70:03:d0:dc:8b:7e:90: 45:44:b3:b1:6b:f5:8b:20:02:51:96:44:53:0c:f6: 49:83:63:c2:c4:3e:22:07:6d:21:77:c6:62:a6:b3: 27:00:d9:29:10:0f:24:8c:33:a0:dc:a9:98:81:82: 52:fa:57:71:82:1f:c2:68:fe:8b:94:e2:39:55:51: 9b:0d:86:5e:25:fe:85:f8:92:d5:06:b6:8c:38:0b: dc:cd:82:3a:80:b1:e6:81:3d:ab:20:44:0a:5b:d1: 01:f5:66:6c:d4:9e:d5:be:d5:63:51:d5:12:a8:0c: 78:bb:a4:66:c8:fb:d3:6d:e0:b2:0d:1b:6e:52:7d: 1a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B5:32:4B:DE:22:56:3D:43:26:20:04:4B:B0:06:75:90:64:86:F5 X509v3 Authority Key Identifier: keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/B7UyS94iVj1DJiAES7AGdZBkhvU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.221.85.0-185.221.86.255 212.32.4.0/23 IPv6: 2a0d:8000::/48 Signature Algorithm: sha256WithRSAEncryption ad:71:60:48:50:7d:0c:f1:cc:60:b3:9a:98:a4:dc:58:a7:5d: c7:c4:f3:72:8e:93:58:df:66:58:ad:53:44:9e:32:d7:a9:ea: 34:9d:95:2b:a2:24:0a:50:19:7b:2e:96:8b:b0:05:fa:4f:9d: 1d:19:3c:d2:fc:be:6a:4c:d2:31:f2:73:5c:1f:ca:58:91:b6: 01:96:27:d1:04:ee:fd:4f:e3:b1:70:f7:32:de:50:a2:62:37: 3a:6b:f2:c5:1f:50:74:46:83:9e:2c:26:fa:96:92:1e:3d:52: 7d:02:48:70:ca:27:7e:68:1c:bc:3d:69:81:00:96:f2:a6:04: 3a:7d:97:5e:07:6b:fb:2d:2e:9d:da:2d:0b:81:40:12:3f:99: 21:87:cd:ac:ba:89:fb:dc:61:b0:18:f6:ae:c0:85:8b:63:9a: 89:6b:ff:c5:f8:49:8d:09:53:50:54:2c:47:59:03:7d:9e:14: 84:f1:dc:32:9e:25:b4:23:4e:65:22:77:cf:1c:e5:03:31:01: 64:8c:14:10:ac:6f:3d:21:aa:8e:85:31:7c:34:81:50:f3:1e: b0:e6:ae:ff:bd:41:45:ed:6f:6d:3b:20:51:5e:21:15:84:b6: 40:7f:0a:56:9a:60:e8:a2:19:a6:d3:7b:e8:46:b1:1a:d9:d6: 24:e4:d1:5f -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt6yJ9ksCBJl4ixTugwrAg6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMTZjNzY1OWFmMWQ1NmJjNzE4ZmFmNjE0ZjA5Mjc1OGY1 ZWRjN2YwHhcNMjYwMTAxMTgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2I1MzI0YmRlMjI1NjNkNDMyNjIwMDQ0YmIwMDY3NTkwNjQ4NmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj+WMz4iP/hpO2Ylrk6pZrkw8cha ftdn06nFmmriWJKygFjj58vTehFZuSyZjmVtyX99j3qpljvwV2KlxEnVnt5mNJyb F0UL9nw6ycnmW3G2QZijFkYczullF8l5ZRG941zJOza2Boz+KEMv4qw25TGZR6M9 iebZZYdOyrZtiXAD0NyLfpBFRLOxa/WLIAJRlkRTDPZJg2PCxD4iB20hd8ZiprMn ANkpEA8kjDOg3KmYgYJS+ldxgh/CaP6LlOI5VVGbDYZeJf6F+JLVBraMOAvczYI6 gLHmgT2rIEQKW9EB9WZs1J7VvtVjUdUSqAx4u6RmyPvTbeCyDRtuUn0aYQIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFAe1MkveIlY9QyYgBEuwBnWQZIb1MB8GA1UdIwQY MBaAFKMWx2Wa8dVrxxj69hTwknWPXtx/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUt MzY4N2M4MThlZGU1LzEvQjdVeVM5NGlWajFESmlBRVM3QUdkWkJraHZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUtMzY4N2M4MThlZGU1 LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUMAwDBAC53VUD BAC53VYDBAHUIAQwDwQCAAIwCQMHACoNgAAAADANBgkqhkiG9w0BAQsFAAOCAQEA rXFgSFB9DPHMYLOamKTcWKddx8Tzco6TWN9mWK1TRJ4y16nqNJ2VK6IkClAZey6W i7AF+k+dHRk80vy+akzSMfJzXB/KWJG2AZYn0QTu/U/jsXD3Mt5QomI3OmvyxR9Q dEaDniwm+paSHj1SfQJIcMonfmgcvD1pgQCW8qYEOn2XXgdr+y0undotC4FAEj+Z IYfNrLqJ+9xhsBj2rsCFi2OaiWv/xfhJjQlTUFQsR1kDfZ4UhPHcMp4ltCNOZSJ3 zxzlAzEBZIwUEKxvPSGqjoUxfDSBUPMesOau/71BRe1vbTsgUV4hFYS2QH8KVppg 6KIZptN76EaxGtnWJOTRXw== -----END CERTIFICATE-----Generated at Sun Jan 25 10:27:14 2026 by rpki-client