This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/7vuFGqZCxLzD91LmtcVrwRVipP0.roa File: 7vuFGqZCxLzD91LmtcVrwRVipP0.roa (raw, json) Hash identifier: exBwARjGLtxZJRWm9krMbKUblEEFQ4G0buGpMyQ+bjU= Subject key identifier: EE:FB:85:1A:A6:42:C4:BC:C3:F7:52:E6:B5:C5:6B:C1:15:62:A4:FD Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0 Certificate serial: 019B797F02BF30FD5DD68349B367F56EDA82 Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/7vuFGqZCxLzD91LmtcVrwRVipP0.roa Signing time: Thu 01 Jan 2026 12:18:45 +0000 ROA not before: Thu 01 Jan 2026 12:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48847 IP address blocks: 109.233.16.0/21 maxlen: 21 109.233.16.0/24 maxlen: 24 109.233.17.0/24 maxlen: 24 109.233.17.192/26 maxlen: 26 109.233.18.0/24 maxlen: 24 109.233.19.0/24 maxlen: 24 109.233.19.56/29 maxlen: 29 109.233.19.128/25 maxlen: 25 109.233.19.128/30 maxlen: 30 109.233.20.0/24 maxlen: 24 109.233.20.196/30 maxlen: 30 109.233.21.0/24 maxlen: 24 109.233.21.92/30 maxlen: 30 109.233.21.100/30 maxlen: 30 109.233.22.0/24 maxlen: 24 109.233.22.200/30 maxlen: 30 109.233.23.0/24 maxlen: 24 109.233.23.0/30 maxlen: 30 109.233.23.152/29 maxlen: 29 185.12.220.0/22 maxlen: 22 185.12.221.0/24 maxlen: 24 185.12.221.152/29 maxlen: 29 185.12.222.0/24 maxlen: 24 185.12.223.0/24 maxlen: 24 2a03:6900::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:02:bf:30:fd:5d:d6:83:49:b3:67:f5:6e:da:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0 Validity Not Before: Jan 1 12:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eefb851aa642c4bcc3f752e6b5c56bc11562a4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:20:f4:eb:d2:eb:41:71:c0:9c:ce:8b:97:d6: 14:c3:30:18:a8:70:42:9f:ed:45:4b:46:84:a0:38: eb:a9:27:bb:9c:33:95:a9:44:cf:2b:7c:7a:6e:fc: 86:9b:29:75:10:63:db:7b:39:5a:f0:85:d8:05:22: 1d:63:50:72:2f:c8:2f:d5:f6:63:27:a4:86:21:fc: 75:3f:87:5a:c3:e3:d8:56:d9:a9:8a:5a:21:c4:d5: da:3b:dc:1d:0a:62:4e:3a:b5:6f:e9:af:e8:76:1a: 34:41:83:d9:8a:7f:c5:d8:80:46:af:fc:a6:90:b2: 25:dc:c8:0f:a1:e8:6f:14:a6:fc:b7:38:ec:b5:54: 8f:f8:b2:d4:ea:ce:56:ec:56:ed:d4:99:78:e4:c5: 7f:dc:22:07:57:74:30:16:60:29:13:eb:b8:22:15: 05:4a:09:5e:43:0e:3e:38:f5:f7:9a:62:8b:b2:60: 01:73:a8:19:1a:9d:d1:75:a3:2d:32:0f:2f:6d:ef: 5e:8e:bc:fb:7f:c8:39:f1:8b:3e:2e:a7:0d:be:3e: 44:c8:ce:4a:b6:b5:19:fb:c1:4c:50:b6:de:ff:0f: 64:b7:87:27:1f:23:23:08:d3:40:2e:c8:d0:dc:cd: 8f:fd:d6:f3:73:4a:ff:eb:6a:f0:c7:48:3c:fa:f8: ad:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FB:85:1A:A6:42:C4:BC:C3:F7:52:E6:B5:C5:6B:C1:15:62:A4:FD X509v3 Authority Key Identifier: keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/7vuFGqZCxLzD91LmtcVrwRVipP0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.233.16.0/21 185.12.220.0/22 IPv6: 2a03:6900::/32 Signature Algorithm: sha256WithRSAEncryption 3c:5e:0f:08:b8:e8:06:5d:b5:fb:b7:aa:8f:30:39:e8:0d:29: b7:03:19:52:96:d5:31:4e:b2:24:bc:df:85:39:c1:00:bf:51: e6:cb:dd:5e:f8:fd:af:05:8f:d0:a2:eb:96:35:81:b8:ce:a0: b9:e1:b9:93:ad:f5:a7:b0:0b:83:4b:ff:52:99:57:fb:70:67: 80:a5:1b:a2:3e:7e:f3:80:38:77:7b:a1:dc:a7:d7:c6:13:3e: 48:13:b9:86:cb:06:ce:ae:0a:77:4c:c2:6a:d3:35:12:55:c4: 63:23:e7:53:7d:76:ce:64:c2:30:5b:27:40:6f:89:3c:3a:49: a1:17:7a:eb:e7:f3:ae:1e:f2:85:13:d0:21:6b:1c:3b:d6:c9: 93:f7:98:40:c5:fb:8e:34:df:6c:dd:95:8b:1d:f2:e1:ca:f7: 2f:97:57:b3:40:b1:05:6f:fd:f4:d6:9a:90:73:c3:a3:2d:9c: 98:d0:2d:a7:a5:89:8c:68:32:51:a3:8b:3b:99:69:70:30:ee: 0c:93:70:41:58:9a:e9:39:82:73:54:38:81:1a:17:3b:7e:4d: 38:dd:f9:f2:2a:70:8c:09:50:5a:dc:97:a8:88:01:08:9d:57: af:19:fb:8c:0b:1c:76:8f:fc:e2:ba:c2:46:eb:cc:0f:74:42: 9c:c5:ce:63 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5fwK/MP1d1oNJs2f1btqCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwOGZiYTUyNjM1MTliN2MzYTIxNTVjNjk4NzgyMTc3NzZk ZWZiYTAwHhcNMjYwMTAxMTIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWZiODUxYWE2NDJjNGJjYzNmNzUyZTZiNWM1NmJjMTE1NjJhNGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSD069LrQXHAnM6Ll9YUwzAYqHBC n+1FS0aEoDjrqSe7nDOVqUTPK3x6bvyGmyl1EGPbezla8IXYBSIdY1ByL8gv1fZj J6SGIfx1P4daw+PYVtmpilohxNXaO9wdCmJOOrVv6a/odho0QYPZin/F2IBGr/ym kLIl3MgPoehvFKb8tzjstVSP+LLU6s5W7Fbt1Jl45MV/3CIHV3QwFmApE+u4IhUF SgleQw4+OPX3mmKLsmABc6gZGp3RdaMtMg8vbe9ejrz7f8g58Ys+LqcNvj5EyM5K trUZ+8FMULbe/w9kt4cnHyMjCNNALsjQ3M2P/dbzc0r/62rwx0g8+vitLQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFO77hRqmQsS8w/dS5rXFa8EVYqT9MB8GA1UdIwQY MBaAFPCPulJjUZt8OiFVxph4IXd23vugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEktNlVtTlJtM3c2SVZYR21IZ2hkM2JlLTZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xYmIxYTItNjc2My00YjI0LWFkODgt MDY0MTNjZWVmY2UwLzEvN3Z1RkdxWkN4THpEOTFMbXRjVnJ3UlZpcFAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8xYmIxYTItNjc2My00YjI0LWFkODgtMDY0MTNjZWVmY2Uw LzEvOEktNlVtTlJtM3c2SVZYR21IZ2hkM2JlLTZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDbekQAwQC uQzcMA0EAgACMAcDBQAqA2kAMA0GCSqGSIb3DQEBCwUAA4IBAQA8Xg8IuOgGXbX7 t6qPMDnoDSm3AxlSltUxTrIkvN+FOcEAv1Hmy91e+P2vBY/QouuWNYG4zqC54bmT rfWnsAuDS/9SmVf7cGeApRuiPn7zgDh3e6Hcp9fGEz5IE7mGywbOrgp3TMJq0zUS VcRjI+dTfXbOZMIwWydAb4k8OkmhF3rr5/OuHvKFE9Ahaxw71smT95hAxfuONN9s 3ZWLHfLhyvcvl1ezQLEFb/301pqQc8OjLZyY0C2npYmMaDJRo4s7mWlwMO4Mk3BB WJrpOYJzVDiBGhc7fk043fnyKnCMCVBa3JeoiAEInVevGfuMCxx2j/ziusJG68wP dEKcxc5j -----END CERTIFICATE-----Generated at Mon Jan 26 07:40:13 2026 by rpki-client