This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/x7LFS5UgrUJ14mlTCPnotTPf6hc.roa File: x7LFS5UgrUJ14mlTCPnotTPf6hc.roa (raw, json) Hash identifier: 6AjgB2F4VwsbK+XIA3o+kcHAJtFnsqariEYyVKqEcus= Subject key identifier: C7:B2:C5:4B:95:20:AD:42:75:E2:69:53:08:F9:E8:B5:33:DF:EA:17 Certificate issuer: /CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60 Certificate serial: 019B7BA4DC0135C0BB0D3D44F184DF9D2BF1 Authority key identifier: BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/x7LFS5UgrUJ14mlTCPnotTPf6hc.roa Signing time: Thu 01 Jan 2026 22:19:20 +0000 ROA not before: Thu 01 Jan 2026 22:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47692 IP address blocks: 194.146.184.0/24 maxlen: 24 194.146.185.0/24 maxlen: 24 194.146.186.0/24 maxlen: 24 194.146.187.0/24 maxlen: 24 2001:67c:2af4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:dc:01:35:c0:bb:0d:3d:44:f1:84:df:9d:2b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60 Validity Not Before: Jan 1 22:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7b2c54b9520ad4275e2695308f9e8b533dfea17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:90:16:39:d1:fe:fe:46:df:77:60:a5:79:eb: ce:4d:4a:52:8c:e5:f1:a7:7a:e2:bc:34:e9:9f:1e: a8:54:f0:02:1a:cb:1f:c6:bf:79:ff:83:87:16:7e: 94:71:6c:e7:d4:72:5f:2d:1a:96:ec:59:9f:f4:92: 78:fb:53:16:bb:29:5d:50:a4:71:90:ba:f9:b9:09: 1a:5b:f5:af:3b:eb:4c:b8:d2:68:b0:b5:6b:f5:c2: 9f:97:5b:63:7f:0c:d6:cf:ba:ef:9a:6d:b8:d9:75: 4b:a1:05:86:f6:1b:f2:30:29:a5:85:8e:6c:44:ab: 9c:af:79:91:32:5b:d2:fe:aa:88:66:82:2f:b9:c5: f1:89:cd:29:9f:6d:06:c1:d7:71:82:f7:7d:be:48: 60:d2:03:11:60:c0:1c:d6:a9:b7:e7:02:c7:e1:89: e7:f3:c3:a7:98:b0:69:64:ed:4c:10:df:e6:9e:64: e4:6d:61:73:a9:02:01:0e:9a:6b:27:c5:66:0e:92: 51:88:f4:f1:fc:1c:a2:03:a6:56:a5:cf:55:2b:ad: 3d:f5:3e:2c:a1:58:fb:3d:2e:de:bb:22:9a:fa:ff: 6d:44:69:34:8e:59:d8:76:aa:df:39:a9:3f:1c:f7: 45:4f:19:92:5d:1d:c2:7d:95:90:69:c4:00:db:9f: c6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B2:C5:4B:95:20:AD:42:75:E2:69:53:08:F9:E8:B5:33:DF:EA:17 X509v3 Authority Key Identifier: keyid:BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/x7LFS5UgrUJ14mlTCPnotTPf6hc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.146.184.0/22 IPv6: 2001:67c:2af4::/48 Signature Algorithm: sha256WithRSAEncryption eb:75:fb:a4:47:5d:2c:22:be:06:67:e8:19:c0:77:0a:42:68: 72:3f:7b:54:19:74:c8:7d:02:4a:d9:d3:6a:0b:76:a6:ff:4e: d2:51:00:f4:2e:b0:22:4f:e2:06:1b:72:9f:d8:26:70:d2:7a: b9:5f:39:dc:51:07:1a:32:2a:98:90:8b:33:67:af:7b:d9:ea: d7:f5:c4:b4:54:35:47:3a:fd:19:ed:96:8b:f0:5b:b1:57:1d: 6a:9d:5f:b5:e7:0b:ea:24:23:46:af:f4:db:aa:f5:58:6f:7c: f2:54:1b:ce:41:b1:60:51:e0:48:67:c3:a0:ed:d0:ee:7f:6b: b3:b0:73:92:e0:b3:d6:d3:76:0c:ff:6d:8e:96:f2:c7:b5:75: e6:7e:04:07:33:45:88:cb:1a:dd:9a:b8:bb:4f:73:8e:c8:4e: 97:8d:81:65:76:e9:2f:32:a1:06:32:bb:1b:f1:5c:84:3c:f9: 96:89:57:03:2e:9b:96:ea:94:40:0d:9e:69:2c:6a:1e:d6:65: d8:d2:47:44:7c:a9:9d:76:d6:cc:dc:0a:ec:91:3e:60:70:70: 3b:de:00:75:d0:6f:e4:dc:1d:de:d6:80:bf:f3:ab:c3:42:2f: 0e:f9:88:d4:af:85:e8:ee:ff:b5:4a:70:3f:8d:b2:44:03:9a: 3d:53:f3:2e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7pNwBNcC7DT1E8YTfnSvxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNTU3NzliYzhiMGJiZTVlNTdhMDc3NTViMTMyOGE1N2M5 Y2FkNjAwHhcNMjYwMTAxMjIxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2IyYzU0Yjk1MjBhZDQyNzVlMjY5NTMwOGY5ZThiNTMzZGZlYTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpAWOdH+/kbfd2CleevOTUpSjOXx p3rivDTpnx6oVPACGssfxr95/4OHFn6UcWzn1HJfLRqW7Fmf9JJ4+1MWuyldUKRx kLr5uQkaW/WvO+tMuNJosLVr9cKfl1tjfwzWz7rvmm242XVLoQWG9hvyMCmlhY5s RKucr3mRMlvS/qqIZoIvucXxic0pn20Gwddxgvd9vkhg0gMRYMAc1qm35wLH4Ynn 88OnmLBpZO1MEN/mnmTkbWFzqQIBDpprJ8VmDpJRiPTx/ByiA6ZWpc9VK6099T4s oVj7PS7euyKa+v9tRGk0jlnYdqrfOak/HPdFTxmSXR3CfZWQacQA25/GnwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMeyxUuVIK1CdeJpUwj56LUz3+oXMB8GA1UdIwQY MBaAFL5Vd5vIsLvl5XoHdVsTKKV8nK1gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmxWM204aXd1LVhsZWdkMVd4TW9wWHljcldBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80ZTBiYjQtZGNjMi00MTQwLWIyMGMt YjE4ZDllNzFjMTZhLzEveDdMRlM1VWdyVUoxNG1sVENQbm90VFBmNmhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80ZTBiYjQtZGNjMi00MTQwLWIyMGMtYjE4ZDllNzFjMTZh LzEvdmxWM204aXd1LVhsZWdkMVd4TW9wWHljcldBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwpK4MA8E AgACMAkDBwAgAQZ8KvQwDQYJKoZIhvcNAQELBQADggEBAOt1+6RHXSwivgZn6BnA dwpCaHI/e1QZdMh9AkrZ02oLdqb/TtJRAPQusCJP4gYbcp/YJnDSerlfOdxRBxoy KpiQizNnr3vZ6tf1xLRUNUc6/RntlovwW7FXHWqdX7XnC+okI0av9Nuq9VhvfPJU G85BsWBR4Ehnw6Dt0O5/a7Owc5Lgs9bTdgz/bY6W8se1deZ+BAczRYjLGt2auLtP c47ITpeNgWV26S8yoQYyuxvxXIQ8+ZaJVwMum5bqlEANnmksah7WZdjSR0R8qZ12 1szcCuyRPmBwcDveAHXQb+TcHd7WgL/zq8NCLw75iNSvheju/7VKcD+NskQDmj1T 8y4= -----END CERTIFICATE-----Generated at Sun Jan 25 16:10:22 2026 by rpki-client