This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/7wQkjJzOFmhj4SlVLo-x26w_WTc.roa File: 7wQkjJzOFmhj4SlVLo-x26w_WTc.roa (raw, json) Hash identifier: uBOYkM28EcQ5gB0Rh8GkUGQb+Ga2UZ8JgAHYGzfSXXI= Subject key identifier: EF:04:24:8C:9C:CE:16:68:63:E1:29:55:2E:8F:B1:DB:AC:3F:59:37 Certificate issuer: /CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216 Certificate serial: 019B7C111DCD0113BAB06657392C81D62A69 Authority key identifier: C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/7wQkjJzOFmhj4SlVLo-x26w_WTc.roa Signing time: Fri 02 Jan 2026 00:17:34 +0000 ROA not before: Fri 02 Jan 2026 00:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41477 IP address blocks: 91.215.164.0/22 maxlen: 23 91.215.165.0/24 maxlen: 24 91.215.166.0/24 maxlen: 24 91.215.167.0/24 maxlen: 24 185.34.164.0/22 maxlen: 23 185.34.165.0/24 maxlen: 24 185.34.166.0/24 maxlen: 24 185.34.167.0/24 maxlen: 24 2a00:c520::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:1d:cd:01:13:ba:b0:66:57:39:2c:81:d6:2a:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216 Validity Not Before: Jan 2 00:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef04248c9cce166863e129552e8fb1dbac3f5937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d9:13:ef:43:70:83:8a:df:95:57:35:3e:fe: dc:20:48:b4:e5:ae:8b:19:13:9e:c5:b3:7d:62:c8: bc:fc:65:eb:df:a6:06:37:32:bd:37:03:6c:47:ce: 2d:ce:ac:b5:97:c3:93:19:87:62:53:23:02:20:95: db:67:db:1d:1b:e3:4d:7f:fc:13:f3:e8:40:b4:fe: d1:0b:98:39:42:71:5a:01:60:3d:fc:94:65:1a:14: 25:69:0b:39:68:d0:16:cf:35:ba:80:5e:f0:94:36: 7f:58:45:ee:5d:ff:3a:cf:b1:0e:30:a0:c9:5c:3c: d1:75:76:11:d6:83:4b:4b:00:11:de:7d:35:89:e0: fc:9a:27:8d:14:1f:01:b0:a0:a8:3e:b2:db:f2:3d: 76:64:75:5f:02:de:bc:71:96:11:a7:48:c0:71:18: 87:ac:f5:26:5a:ba:89:3b:d9:c6:46:1d:36:48:fa: a7:7e:9e:fe:4d:84:78:cf:aa:dd:41:63:50:64:8b: 2f:1d:d0:4c:dc:d1:64:70:f7:3a:d7:d1:26:21:be: 3d:e9:2b:ad:ca:4f:8f:0e:0a:62:72:22:26:1e:32: ed:78:2d:ea:04:d0:81:a4:d6:60:9a:f1:3c:e8:46: 30:ac:65:47:22:ec:d9:f0:e8:37:5d:05:43:32:5d: cc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:04:24:8C:9C:CE:16:68:63:E1:29:55:2E:8F:B1:DB:AC:3F:59:37 X509v3 Authority Key Identifier: keyid:C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/7wQkjJzOFmhj4SlVLo-x26w_WTc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.215.164.0/22 185.34.164.0/22 IPv6: 2a00:c520::/32 Signature Algorithm: sha256WithRSAEncryption 08:8f:20:f5:f4:cc:05:79:eb:cd:aa:da:b9:25:ea:bb:75:8f: fd:b7:88:da:55:fa:7d:55:91:78:5e:00:4d:cb:c5:ec:d5:9c: 53:b4:d6:a6:f9:84:08:4e:c9:f1:db:e3:2d:bb:b8:85:bb:45: f4:3f:ce:37:3f:c5:c1:6c:a3:5b:7d:1f:37:8a:60:3f:5a:5f: 2e:b5:5c:ea:72:28:97:e0:44:0c:99:7e:9e:9f:38:95:98:a1: 41:2a:c5:4d:ae:f2:09:d1:7a:76:15:bc:1e:6e:af:18:22:f8: 3a:22:64:bb:32:90:62:74:60:da:c3:2b:47:01:49:a5:82:9b: 98:3d:a3:c1:91:89:81:67:ad:77:0c:d3:35:e1:73:26:e0:cf: ee:88:e9:a8:68:d0:36:44:92:7e:30:65:a6:16:4b:22:8f:83: ee:de:8c:a1:ac:cf:a6:74:12:dd:6a:b7:09:34:fa:88:cc:ae: f7:f6:9f:0f:9d:d2:f0:38:a3:fd:dc:4d:06:be:67:ea:81:56: b5:8e:f7:0a:89:24:e2:82:d0:c1:dd:7f:9a:0b:09:92:67:07: c0:29:95:e1:13:1f:df:5a:e2:a3:a9:9d:c0:c7:df:77:83:6b: 2d:77:9e:e7:22:0f:c2:10:1c:8b:bf:60:0c:e8:9f:65:ec:f7: fe:35:8a:a7 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8ER3NARO6sGZXOSyB1ippMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NTc5OWZmNDMzNWI3YjFhZTcxODhlZGZhNTNmZDdlMjEz ZWIyMTYwHhcNMjYwMTAyMDAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjA0MjQ4YzljY2UxNjY4NjNlMTI5NTUyZThmYjFkYmFjM2Y1OTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdkT70Nwg4rflVc1Pv7cIEi05a6L GROexbN9Ysi8/GXr36YGNzK9NwNsR84tzqy1l8OTGYdiUyMCIJXbZ9sdG+NNf/wT 8+hAtP7RC5g5QnFaAWA9/JRlGhQlaQs5aNAWzzW6gF7wlDZ/WEXuXf86z7EOMKDJ XDzRdXYR1oNLSwAR3n01ieD8mieNFB8BsKCoPrLb8j12ZHVfAt68cZYRp0jAcRiH rPUmWrqJO9nGRh02SPqnfp7+TYR4z6rdQWNQZIsvHdBM3NFkcPc619EmIb496Sut yk+PDgpiciImHjLteC3qBNCBpNZgmvE86EYwrGVHIuzZ8Og3XQVDMl3M9QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFO8EJIyczhZoY+EpVS6PsdusP1k3MB8GA1UdIwQY MBaAFMdXmf9DNbexrnGI7fpT/X4hPrIWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDFlWl8wTTF0N0d1Y1lqdC1sUDlmaUUtc2hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xZTRjMDMtZjYxOS00N2EzLTgxYmQt MzZlZjdhZWViZTNiLzEvN3dRa2pKek9GbWhqNFNsVkxvLXgyNndfV1RjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xZTRjMDMtZjYxOS00N2EzLTgxYmQtMzZlZjdhZWViZTNi LzEveDFlWl8wTTF0N0d1Y1lqdC1sUDlmaUUtc2hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCW9ekAwQC uSKkMA0EAgACMAcDBQAqAMUgMA0GCSqGSIb3DQEBCwUAA4IBAQAIjyD19MwFeevN qtq5Jeq7dY/9t4jaVfp9VZF4XgBNy8Xs1ZxTtNam+YQITsnx2+Mtu7iFu0X0P843 P8XBbKNbfR83imA/Wl8utVzqciiX4EQMmX6enziVmKFBKsVNrvIJ0Xp2Fbwebq8Y Ivg6ImS7MpBidGDawytHAUmlgpuYPaPBkYmBZ613DNM14XMm4M/uiOmoaNA2RJJ+ MGWmFksij4Pu3oyhrM+mdBLdarcJNPqIzK739p8PndLwOKP93E0GvmfqgVa1jvcK iSTigtDB3X+aCwmSZwfAKZXhEx/fWuKjqZ3Ax993g2std57nIg/CEByLv2AM6J9l 7Pf+NYqn -----END CERTIFICATE-----Generated at Sun Jan 11 23:38:35 2026 by rpki-client