This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/m7kIh8Z3m5sUP7M-wKSvhAuoCII.roa File: m7kIh8Z3m5sUP7M-wKSvhAuoCII.roa (raw, json) Hash identifier: RVNHVX31tSGpQABOxa6EqSIdwiAZEEfgy9G0c8Rv6CQ= Subject key identifier: 9B:B9:08:87:C6:77:9B:9B:14:3F:B3:3E:C0:A4:AF:84:0B:A8:08:82 Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Certificate serial: 019B78350192D95568753C833C8C350F2C55 Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/m7kIh8Z3m5sUP7M-wKSvhAuoCII.roa Signing time: Thu 01 Jan 2026 06:18:18 +0000 ROA not before: Thu 01 Jan 2026 06:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29509 IP address blocks: 80.250.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 21:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:01:92:d9:55:68:75:3c:83:3c:8c:35:0f:2c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Validity Not Before: Jan 1 06:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bb90887c6779b9b143fb33ec0a4af840ba80882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ac:c2:f9:ed:25:70:53:6f:83:b6:af:44:e8: 85:6b:04:d9:43:25:7d:5e:da:5e:f3:ee:bd:83:19: 89:b8:c9:c6:e1:0c:72:f2:23:60:14:36:f7:53:57: 96:ed:f0:58:7e:1a:db:39:98:42:d6:04:cb:af:e9: d3:1c:24:78:f2:ad:f8:7b:5e:2b:92:e9:27:93:4c: cf:b1:c3:08:ba:88:67:61:db:e0:05:e6:bf:68:2c: ed:ff:d2:69:f0:b1:7b:8d:7b:99:e7:f6:28:d1:e2: 3e:4b:2d:cb:6d:b2:0c:0f:c4:00:4d:b9:47:2e:41: 8b:be:31:c2:c4:d2:04:be:00:f5:cb:17:ef:ad:ac: 39:62:8d:b6:bf:30:0b:13:0d:57:a4:fc:2c:51:8c: bf:25:d2:b6:e5:56:21:0a:20:e8:d3:47:11:dd:54: c5:8b:4f:51:56:90:8f:51:ae:cd:26:3f:d9:28:a3: bf:b5:ca:4a:73:06:b4:1f:40:be:f3:9a:6e:13:61: 4e:8c:0a:b3:fe:03:63:43:59:68:52:06:69:71:94: a5:20:38:3e:28:6d:4a:ea:99:5d:7a:b4:08:9b:48: b1:d1:96:ef:b3:43:1f:83:c0:58:8e:83:c5:c7:19: c0:d0:ba:16:10:71:a5:f0:95:f8:f9:b7:6d:7d:23: 93:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B9:08:87:C6:77:9B:9B:14:3F:B3:3E:C0:A4:AF:84:0B:A8:08:82 X509v3 Authority Key Identifier: keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/m7kIh8Z3m5sUP7M-wKSvhAuoCII.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.250.87.0/24 Signature Algorithm: sha256WithRSAEncryption 84:66:34:ab:35:a5:34:ef:8b:6f:a6:4d:de:66:96:f4:ac:a1: 5b:30:fd:92:00:24:52:03:0d:c6:1e:50:f5:e1:34:8f:11:9f: 19:d4:ea:ad:7f:e7:f0:30:a5:bd:c4:9a:a9:fc:2e:eb:cd:99: b2:f3:66:7c:30:3e:45:a7:fe:3c:5b:5c:d2:2a:54:c0:79:2c: 58:bd:f2:98:99:7c:ae:fd:be:1a:bd:0e:a1:b8:fb:39:12:b6: fa:32:24:af:24:3b:39:78:2e:2a:b1:75:ba:54:86:41:ca:67: 31:8c:2a:4a:cc:18:c9:c2:1c:ca:17:05:fe:e1:c5:c3:eb:b1: c1:56:60:3e:f0:a3:cb:68:40:f7:b7:b3:d3:b0:bd:05:a5:3e: fd:93:d0:ad:58:43:b3:d8:76:fc:bd:91:d4:83:ea:04:87:c4: ab:9e:1d:26:ff:b7:bc:1a:d4:13:ea:07:75:90:ce:35:cd:78: ff:29:d3:f7:05:5b:58:de:f7:e0:70:4d:ce:8e:74:bb:95:e2: f3:04:28:fd:10:ab:a4:c4:28:34:c1:cb:1f:75:bb:bc:63:ee: ba:b0:fc:75:ec:b7:a7:29:05:fa:1e:37:a5:df:8b:57:3b:20: 38:a3:e2:c6:a5:f3:47:48:9d:f8:1a:a0:42:d9:f7:10:95:8e: 75:20:ba:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NQGS2VVodTyDPIw1DyxVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi Y2ZhNjEwHhcNMjYwMTAxMDYxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmI5MDg4N2M2Nzc5YjliMTQzZmIzM2VjMGE0YWY4NDBiYTgwODgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwazC+e0lcFNvg7avROiFawTZQyV9 Xtpe8+69gxmJuMnG4Qxy8iNgFDb3U1eW7fBYfhrbOZhC1gTLr+nTHCR48q34e14r kuknk0zPscMIuohnYdvgBea/aCzt/9Jp8LF7jXuZ5/Yo0eI+Sy3LbbIMD8QATblH LkGLvjHCxNIEvgD1yxfvraw5Yo22vzALEw1XpPwsUYy/JdK25VYhCiDo00cR3VTF i09RVpCPUa7NJj/ZKKO/tcpKcwa0H0C+85puE2FOjAqz/gNjQ1loUgZpcZSlIDg+ KG1K6plderQIm0ix0Zbvs0Mfg8BYjoPFxxnA0LoWEHGl8JX4+bdtfSOTzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJu5CIfGd5ubFD+zPsCkr4QLqAiCMB8GA1UdIwQY MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt ZGU0YWNmNDQ3ZmFlLzEvbTdrSWg4WjNtNXNVUDdNLXdLU3ZoQXVvQ0lJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPpXMA0G CSqGSIb3DQEBCwUAA4IBAQCEZjSrNaU074tvpk3eZpb0rKFbMP2SACRSAw3GHlD1 4TSPEZ8Z1Oqtf+fwMKW9xJqp/C7rzZmy82Z8MD5Fp/48W1zSKlTAeSxYvfKYmXyu /b4avQ6huPs5Erb6MiSvJDs5eC4qsXW6VIZBymcxjCpKzBjJwhzKFwX+4cXD67HB VmA+8KPLaED3t7PTsL0FpT79k9CtWEOz2Hb8vZHUg+oEh8Srnh0m/7e8GtQT6gd1 kM41zXj/KdP3BVtY3vfgcE3OjnS7leLzBCj9EKukxCg0wcsfdbu8Y+66sPx17Len KQX6Hjel34tXOyA4o+LGpfNHSJ34GqBC2fcQlY51ILpI -----END CERTIFICATE-----Generated at Wed Jan 7 07:19:47 2026 by rpki-client