This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/ip7XsN0-IlSnuEP_E--FUjD8qf0.roa File: ip7XsN0-IlSnuEP_E--FUjD8qf0.roa (raw, json) Hash identifier: CO94Nw8OySvoAWy5RjY0I0/eplwWsGb3UO5iKzV120U= Subject key identifier: 8A:9E:D7:B0:DD:3E:22:54:A7:B8:43:FF:13:EF:85:52:30:FC:A9:FD Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Certificate serial: 019B7758BA44770F556F6A097F7134C054AF Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/ip7XsN0-IlSnuEP_E--FUjD8qf0.roa Signing time: Thu 01 Jan 2026 02:17:42 +0000 ROA not before: Thu 01 Jan 2026 02:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58325 IP address blocks: 46.231.167.0/24 maxlen: 24 69.5.172.0/24 maxlen: 24 93.118.40.0/22 maxlen: 24 94.177.17.0/24 maxlen: 24 2a01:4020:40::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ba:44:77:0f:55:6f:6a:09:7f:71:34:c0:54:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Validity Not Before: Jan 1 02:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a9ed7b0dd3e2254a7b843ff13ef855230fca9fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:10:30:ea:f6:0a:87:f1:e2:56:b6:d6:eb:58: 6d:95:98:48:25:12:9d:79:ea:0b:80:f0:82:6f:ac: 95:c8:ca:23:73:74:5a:7e:f6:0b:a1:bd:7b:d0:8e: 76:df:a3:2b:62:10:46:ef:b9:33:8e:33:9e:8a:b4: f1:c7:fd:e9:48:33:16:d7:0e:c3:84:98:d9:3b:b5: 04:e5:20:22:37:dc:d1:42:a1:d6:1c:6d:de:17:c3: 06:ea:52:a0:13:83:7e:9a:a4:68:62:88:34:de:98: 24:24:d7:49:02:9e:08:44:53:75:21:ad:91:72:ea: 85:19:05:e7:07:6c:25:0c:c3:d1:40:d3:e7:a9:73: f0:ab:6e:4c:6f:01:c7:ac:ef:5d:eb:d4:42:22:b9: 52:65:18:cf:a6:1e:54:0d:47:96:d2:60:6f:d6:6f: ab:48:b2:00:4e:87:fe:a3:5d:6c:36:d2:11:ab:92: 02:1d:c6:a6:53:b4:04:23:0b:cf:c9:0d:2d:13:9a: 90:65:a9:a5:40:46:d6:3a:bf:91:12:25:c0:bf:1c: c5:28:35:3a:79:31:74:26:49:5f:6f:68:c9:69:b1: 5e:fe:de:d6:d6:20:83:2b:5f:d4:aa:10:79:27:e6: 9e:5c:c5:20:a3:bc:b5:96:0f:76:0c:df:43:2c:a4: 54:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9E:D7:B0:DD:3E:22:54:A7:B8:43:FF:13:EF:85:52:30:FC:A9:FD X509v3 Authority Key Identifier: keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/ip7XsN0-IlSnuEP_E--FUjD8qf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.231.167.0/24 69.5.172.0/24 93.118.40.0/22 94.177.17.0/24 IPv6: 2a01:4020:40::/44 Signature Algorithm: sha256WithRSAEncryption da:a5:28:50:27:91:18:26:66:d7:6a:31:cd:32:16:17:f8:16: a9:97:fe:fa:9f:2d:c8:5e:6f:26:8d:2a:71:1f:c2:4b:a1:0e: 03:06:70:2e:a3:54:6a:2a:5a:bb:e0:ed:09:cc:a4:e1:73:bc: 9d:b2:68:75:88:bb:bf:5d:2c:8f:91:90:24:1b:eb:4d:8f:e7: 6e:a3:b5:a3:66:9d:ab:52:a4:52:5c:65:7e:7a:6b:c8:b3:89: aa:20:1d:4b:98:0d:b7:56:0c:b4:be:90:22:02:58:cf:ea:06: 82:38:01:ec:a2:c1:5e:b6:49:33:62:4f:fe:47:44:7c:16:fc: aa:66:fc:26:30:a1:16:52:9e:42:d3:f3:6c:19:bd:d9:63:a1: 83:b8:8a:58:73:6e:12:21:53:28:54:c2:7d:22:da:90:8d:f9: a8:3f:4a:62:d9:18:4e:09:af:f0:b1:6c:f1:37:38:74:f6:32: 6b:6d:e2:63:16:b1:a2:90:64:00:fe:1b:c0:4c:5c:fb:33:9d: 20:67:c8:c6:8d:35:33:32:b1:f2:9e:69:13:66:ed:7d:24:27: ab:b7:95:61:19:73:f9:74:49:6c:69:98:6f:b6:5e:2a:2f:56: 65:69:e4:c6:e2:e7:87:ef:83:50:17:83:e1:84:a9:0f:26:12: ac:4e:76:25 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt3WLpEdw9Vb2oJf3E0wFSvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4 M2FjOTcwHhcNMjYwMTAxMDIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTllZDdiMGRkM2UyMjU0YTdiODQzZmYxM2VmODU1MjMwZmNhOWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhAw6vYKh/HiVrbW61htlZhIJRKd eeoLgPCCb6yVyMojc3RafvYLob170I5236MrYhBG77kzjjOeirTxx/3pSDMW1w7D hJjZO7UE5SAiN9zRQqHWHG3eF8MG6lKgE4N+mqRoYog03pgkJNdJAp4IRFN1Ia2R cuqFGQXnB2wlDMPRQNPnqXPwq25MbwHHrO9d69RCIrlSZRjPph5UDUeW0mBv1m+r SLIATof+o11sNtIRq5ICHcamU7QEIwvPyQ0tE5qQZamlQEbWOr+REiXAvxzFKDU6 eTF0Jklfb2jJabFe/t7W1iCDK1/UqhB5J+aeXMUgo7y1lg92DN9DLKRUxQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFIqe17DdPiJUp7hD/xPvhVIw/Kn9MB8GA1UdIwQY MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt N2UwNWFiNDFiNmU0LzEvaXA3WHNOMC1JbFNudUVQX0UtLUZVakQ4cWYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0 LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQALuenAwQA RQWsAwQCXXYoAwQAXrERMA8EAgACMAkDBwQqAUAgAEAwDQYJKoZIhvcNAQELBQAD ggEBANqlKFAnkRgmZtdqMc0yFhf4FqmX/vqfLchebyaNKnEfwkuhDgMGcC6jVGoq Wrvg7QnMpOFzvJ2yaHWIu79dLI+RkCQb602P526jtaNmnatSpFJcZX56a8iziaog HUuYDbdWDLS+kCICWM/qBoI4AeyiwV62STNiT/5HRHwW/Kpm/CYwoRZSnkLT82wZ vdljoYO4ilhzbhIhUyhUwn0i2pCN+ag/SmLZGE4Jr/CxbPE3OHT2Mmtt4mMWsaKQ ZAD+G8BMXPsznSBnyMaNNTMysfKeaRNm7X0kJ6u3lWEZc/l0SWxpmG+2XiovVmVp 5Mbi54fvg1AXg+GEqQ8mEqxOdiU= -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:37 2026 by rpki-client