This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/d7CeX97gO-ipX3QBzFbXz8P0wTI.roa File: d7CeX97gO-ipX3QBzFbXz8P0wTI.roa (raw, json) Hash identifier: Qut1PV0++44yG4RR3eDPMqfYLiMgZvD3UqCPDmMsQWc= Subject key identifier: 77:B0:9E:5F:DE:E0:3B:E8:A9:5F:74:01:CC:56:D7:CF:C3:F4:C1:32 Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019 Certificate serial: 019B7FF21254CC334471D28DEC5EC8B1936B Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/d7CeX97gO-ipX3QBzFbXz8P0wTI.roa Signing time: Fri 02 Jan 2026 18:22:09 +0000 ROA not before: Fri 02 Jan 2026 18:22:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205889 IP address blocks: 185.203.52.0/24 maxlen: 24 185.203.53.0/24 maxlen: 24 185.203.54.0/24 maxlen: 24 185.203.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:12:54:cc:33:44:71:d2:8d:ec:5e:c8:b1:93:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019 Validity Not Before: Jan 2 18:22:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77b09e5fdee03be8a95f7401cc56d7cfc3f4c132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:91:9c:b8:33:b9:43:8a:8b:98:ae:00:71:e8: 78:5d:1a:91:f2:21:f4:1d:26:65:2e:45:65:d0:53: 0c:0f:91:37:90:fd:12:59:29:c0:6b:ef:59:68:57: 78:06:49:aa:ac:8f:5b:1b:a6:6a:4f:7a:ab:70:5f: 1f:2f:fb:5a:7c:ad:8e:89:4f:1a:b2:36:5c:c8:05: bf:07:0f:e7:8a:8a:83:d3:96:62:ed:3c:91:d1:4c: c8:0d:41:2a:4c:26:b1:d9:e9:c1:ba:e0:20:5d:c0: 5d:19:6c:12:ac:76:31:e1:a4:65:1a:f5:d4:19:ab: 86:59:2f:1f:ca:6c:bd:d3:a0:28:b8:59:eb:90:14: a3:f5:b8:04:cb:5c:1e:4b:ea:1c:2c:ef:63:d2:6b: e6:52:6e:d9:dc:82:39:d8:66:24:b5:9c:07:18:00: 24:3e:4f:d8:25:ac:ee:8c:e3:34:88:ee:6c:78:b3: ff:00:5f:10:3c:7a:1d:31:b6:ba:1b:17:37:ad:fb: 2b:0f:21:0b:1e:c9:0e:c1:19:5f:16:d4:90:ee:fe: c9:e1:fe:f0:3c:a7:99:59:a3:b4:08:e9:49:a5:8c: c2:4e:83:ff:4b:52:fb:f2:b6:ed:76:36:d6:4b:be: 50:8c:08:71:19:b7:fa:b3:64:0b:99:ff:27:96:b7: a6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B0:9E:5F:DE:E0:3B:E8:A9:5F:74:01:CC:56:D7:CF:C3:F4:C1:32 X509v3 Authority Key Identifier: keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/d7CeX97gO-ipX3QBzFbXz8P0wTI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.203.52.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:cb:fd:38:59:a7:be:b7:e3:b5:5e:16:9b:83:ad:18:23:68: eb:56:ac:86:8f:1f:d8:fa:6b:ed:6d:f3:c6:10:34:20:87:44: aa:1f:4e:0c:02:3b:4a:a7:f5:dc:84:e3:84:63:fa:1b:75:a5: 17:e8:3a:c5:6e:ec:9e:f4:5f:86:b6:b4:09:d4:76:40:67:94: a7:b6:61:75:42:78:73:75:c1:bb:ee:a0:95:73:aa:35:71:b9: 73:a6:80:37:9f:af:7a:b5:e8:0c:ac:3b:1f:51:81:8a:b1:fc: 4c:96:a5:ce:96:83:b7:09:57:f7:56:4f:0e:a3:4b:14:8a:6d: 68:6d:c2:d2:34:ba:e1:68:93:bb:ed:8d:af:74:e7:24:30:7d: e0:f3:2a:00:60:03:4a:42:61:25:2f:a4:20:55:ec:bd:fe:71: 4a:0e:d1:08:3a:ae:ab:b6:2a:3b:71:e5:ae:c8:ff:85:50:ed: 5d:3f:6f:16:9d:39:d5:75:6e:26:c2:cc:24:95:21:0a:b5:13: 43:21:00:8b:cf:16:fc:ab:86:b2:e3:f2:a7:03:ba:d2:1e:e1: e3:b9:aa:ce:51:c7:3e:20:65:3d:98:7b:42:16:ac:03:92:f9: 7d:98:e6:e1:b9:8a:b0:f0:15:8b:d0:b8:84:71:01:26:5e:b0: e1:85:df:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8hJUzDNEcdKN7F7IsZNrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOTdhMzExN2NhMWMxZDYyOTJhZTUyOTExYjRmMGNhNGY4 ZTkwMTkwHhcNMjYwMTAyMTgyMjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2IwOWU1ZmRlZTAzYmU4YTk1Zjc0MDFjYzU2ZDdjZmMzZjRjMTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpGcuDO5Q4qLmK4Aceh4XRqR8iH0 HSZlLkVl0FMMD5E3kP0SWSnAa+9ZaFd4BkmqrI9bG6ZqT3qrcF8fL/tafK2OiU8a sjZcyAW/Bw/nioqD05Zi7TyR0UzIDUEqTCax2enBuuAgXcBdGWwSrHYx4aRlGvXU GauGWS8fymy906AouFnrkBSj9bgEy1weS+ocLO9j0mvmUm7Z3II52GYktZwHGAAk Pk/YJazujOM0iO5seLP/AF8QPHodMba6Gxc3rfsrDyELHskOwRlfFtSQ7v7J4f7w PKeZWaO0COlJpYzCToP/S1L78rbtdjbWS75QjAhxGbf6s2QLmf8nlremsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHewnl/e4DvoqV90AcxW18/D9MEyMB8GA1UdIwQY MBaAFCCXoxF8ocHWKSrlKRG08MpPjpAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUplakVYeWh3ZFlwS3VVcEViVHd5ay1Pa0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83ZjlhNGYtZTdlMy00OTczLWIwMzkt NzU1ZTNiOTZkNWVkLzEvZDdDZVg5N2dPLWlwWDNRQnpGYlh6OFAwd1RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC83ZjlhNGYtZTdlMy00OTczLWIwMzktNzU1ZTNiOTZkNWVk LzEvSUplakVYeWh3ZFlwS3VVcEViVHd5ay1Pa0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucs0MA0G CSqGSIb3DQEBCwUAA4IBAQBNy/04Wae+t+O1Xhabg60YI2jrVqyGjx/Y+mvtbfPG EDQgh0SqH04MAjtKp/XchOOEY/obdaUX6DrFbuye9F+GtrQJ1HZAZ5SntmF1Qnhz dcG77qCVc6o1cblzpoA3n696tegMrDsfUYGKsfxMlqXOloO3CVf3Vk8Oo0sUim1o bcLSNLrhaJO77Y2vdOckMH3g8yoAYANKQmElL6QgVey9/nFKDtEIOq6rtio7ceWu yP+FUO1dP28WnTnVdW4mwswklSEKtRNDIQCLzxb8q4ay4/KnA7rSHuHjuarOUcc+ IGU9mHtCFqwDkvl9mObhuYqw8BWL0LiEcQEmXrDhhd9x -----END CERTIFICATE-----Generated at Mon Jan 26 14:52:22 2026 by rpki-client