This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/7kCTcBBf9Y2mZp4MQo4FaThhaw4.roa File: 7kCTcBBf9Y2mZp4MQo4FaThhaw4.roa (raw, json) Hash identifier: 4G5b5APOZBeeZ1ZvQcD3v0tSN26DXUsz89KNzub4qWo= Subject key identifier: EE:40:93:70:10:5F:F5:8D:A6:66:9E:0C:42:8E:05:69:38:61:6B:0E Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714 Certificate serial: 019B7D5B8CC9E1C0365BC806D4183F1C1501 Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/7kCTcBBf9Y2mZp4MQo4FaThhaw4.roa Signing time: Fri 02 Jan 2026 06:18:30 +0000 ROA not before: Fri 02 Jan 2026 06:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29535 IP address blocks: 79.191.255.0/24 maxlen: 24 80.51.76.0/24 maxlen: 24 80.51.253.0/24 maxlen: 24 80.54.110.0/23 maxlen: 24 83.2.0.0/20 maxlen: 20 83.2.8.0/22 maxlen: 22 83.2.56.0/22 maxlen: 22 178.42.9.0/24 maxlen: 24 178.42.22.0/24 maxlen: 24 193.110.120.0/22 maxlen: 22 195.149.235.0/24 maxlen: 24 195.149.236.0/22 maxlen: 22 212.160.212.0/24 maxlen: 24 212.244.33.0/24 maxlen: 24 213.25.41.0/24 maxlen: 24 213.25.164.0/24 maxlen: 24 2001:7f8:27::/48 maxlen: 48 2a01:1101:5::/48 maxlen: 48 2a01:11f0::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:8c:c9:e1:c0:36:5b:c8:06:d4:18:3f:1c:15:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714 Validity Not Before: Jan 2 06:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee409370105ff58da6669e0c428e056938616b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cb:06:6b:1c:7f:67:4e:dd:21:21:42:66:cf: 6f:da:ee:d3:7d:dd:5d:4f:02:08:65:6b:72:27:12: 20:4b:4f:3f:05:1f:19:04:96:00:03:72:3f:49:ed: 27:12:ec:79:b3:be:5e:ac:d4:dd:b3:9b:44:bf:d7: 1d:57:26:c7:33:85:25:a0:02:03:88:d5:92:6e:de: 15:9e:64:7a:dd:d1:b1:7b:60:ba:b5:3b:59:35:f6: a3:15:6e:f1:e3:80:e0:b1:0e:3a:72:ec:18:d1:dd: c7:71:32:0c:8e:10:28:26:4e:d4:cb:1c:eb:30:c8: 83:8d:55:80:d7:4d:5c:e5:d2:2e:1d:d0:2d:37:81: a3:90:54:35:7d:e8:f2:b2:79:2d:4b:ea:ba:63:06: f2:8f:e4:11:9b:7b:a4:68:56:f5:b4:e9:da:04:15: 47:6a:7e:04:30:66:48:05:01:4a:f0:2e:11:03:f2: 12:3d:ed:06:e4:a6:c0:32:86:cf:56:62:8d:71:dd: e3:99:e2:1c:78:41:e3:09:9f:ff:cb:41:d9:8c:cf: 70:18:c0:b8:e0:b1:96:eb:a5:7c:d5:52:6f:6d:8a: cb:31:d0:d0:fa:56:dc:4f:97:2c:d4:56:b4:61:e4: 4e:09:ee:90:a2:5a:2f:84:cd:24:51:a0:7c:8f:77: a7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:40:93:70:10:5F:F5:8D:A6:66:9E:0C:42:8E:05:69:38:61:6B:0E X509v3 Authority Key Identifier: keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/7kCTcBBf9Y2mZp4MQo4FaThhaw4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.191.255.0/24 80.51.76.0/24 80.51.253.0/24 80.54.110.0/23 83.2.0.0/20 83.2.56.0/22 178.42.9.0/24 178.42.22.0/24 193.110.120.0/22 195.149.235.0-195.149.239.255 212.160.212.0/24 212.244.33.0/24 213.25.41.0/24 213.25.164.0/24 IPv6: 2001:7f8:27::/48 2a01:1101:5::/48 2a01:11f0::/28 Signature Algorithm: sha256WithRSAEncryption 31:98:59:ef:99:d2:56:1f:44:13:56:6f:d0:63:4d:26:ce:dc: 8c:4a:cf:20:6b:58:b1:51:93:e7:92:30:3a:ac:40:c8:c6:4f: 27:f2:48:1e:41:7f:a6:5a:36:f2:35:bc:9e:d3:85:a8:65:04: 2d:9f:78:a3:23:aa:ce:31:8e:4c:57:26:9e:e4:6d:9c:13:14: ec:ef:d0:c2:78:c6:4e:8f:43:26:dc:2b:51:ea:3c:a1:05:ae: c9:2c:a4:19:4b:2a:45:a8:3f:97:9c:d5:94:a8:c7:46:f1:5e: 31:29:b9:2e:28:28:fe:99:c1:25:f2:a3:6b:68:8e:b0:48:7d: 1e:d4:9a:bb:2f:00:05:a4:f3:dc:c5:4f:f8:02:6b:01:8b:ce: 31:8f:c3:2c:44:05:69:08:4a:72:2b:8f:05:e6:95:fc:b1:b9: 3c:63:66:7d:c8:69:b2:0a:45:2d:f9:15:87:20:06:8f:2d:5a: 2e:e6:23:55:23:72:49:97:46:e0:03:96:87:6e:c4:4c:8b:04: 0e:19:0e:c0:94:2f:19:e9:88:1c:92:04:3e:80:01:05:32:24: 0d:1d:70:44:b8:12:a4:e2:79:79:4d:fe:6b:b2:9c:3c:e5:00: 13:a5:d9:28:83:61:c4:3d:97:95:cc:d6:e2:56:c4:db:14:b1: 08:13:87:d2 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt9W4zJ4cA2W8gG1Bg/HBUBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlY2Y1MzAwN2M3OWNjNWUyZjJkNzM1NmJhOTEyMWE3OGMw Yzc3MTQwHhcNMjYwMTAyMDYxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTQwOTM3MDEwNWZmNThkYTY2NjllMGM0MjhlMDU2OTM4NjE2YjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyssGaxx/Z07dISFCZs9v2u7Tfd1d TwIIZWtyJxIgS08/BR8ZBJYAA3I/Se0nEux5s75erNTds5tEv9cdVybHM4UloAID iNWSbt4VnmR63dGxe2C6tTtZNfajFW7x44DgsQ46cuwY0d3HcTIMjhAoJk7Uyxzr MMiDjVWA101c5dIuHdAtN4GjkFQ1fejysnktS+q6Ywbyj+QRm3ukaFb1tOnaBBVH an4EMGZIBQFK8C4RA/ISPe0G5KbAMobPVmKNcd3jmeIceEHjCZ//y0HZjM9wGMC4 4LGW66V81VJvbYrLMdDQ+lbcT5cs1Fa0YeROCe6QolovhM0kUaB8j3eneQIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFO5Ak3AQX/WNpmaeDEKOBWk4YWsOMB8GA1UdIwQY MBaAFE7PUwB8ecxeLy1zVrqRIaeMDHcUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82NDhjNzUtMmJlOC00YmZkLWExYjEt Y2I4YjNhMDk0MjA5LzEvN2tDVGNCQmY5WTJtWnA0TVFvNEZhVGhoYXc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi82NDhjNzUtMmJlOC00YmZkLWExYjEtY2I4YjNhMDk0MjA5 LzEvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTBiBAIAATBcAwQAT7// AwQAUDNMAwQAUDP9AwQBUDZuAwQEUwIAAwQCUwI4AwQAsioJAwQAsioWAwQCwW54 MAwDBADDlesDBATDleADBADUoNQDBADU9CEDBADVGSkDBADVGaQwHwQCAAIwGQMH ACABB/gAJwMHACoBEQEABQMFBCoBEfAwDQYJKoZIhvcNAQELBQADggEBADGYWe+Z 0lYfRBNWb9BjTSbO3IxKzyBrWLFRk+eSMDqsQMjGTyfySB5Bf6ZaNvI1vJ7Thahl BC2feKMjqs4xjkxXJp7kbZwTFOzv0MJ4xk6PQybcK1HqPKEFrskspBlLKkWoP5ec 1ZSox0bxXjEpuS4oKP6ZwSXyo2tojrBIfR7UmrsvAAWk89zFT/gCawGLzjGPwyxE BWkISnIrjwXmlfyxuTxjZn3IabIKRS35FYcgBo8tWi7mI1UjckmXRuADloduxEyL BA4ZDsCULxnpiBySBD6AAQUyJA0dcES4EqTieXlN/muynDzlABOl2SiDYcQ9l5XM 1uJWxNsUsQgTh9I= -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:53 2026 by rpki-client