This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/7nMDcW2MBzGpfpdKdPDTB0QB3hU.roa File: 7nMDcW2MBzGpfpdKdPDTB0QB3hU.roa (raw, json) Hash identifier: en70sYlojLOJhZvnO4mg1gQMw5JWdqgwDgeNhf3auMU= Subject key identifier: EE:73:03:71:6D:8C:07:31:A9:7E:97:4A:74:F0:D3:07:44:01:DE:15 Certificate issuer: /CN=61a5d217759e861696fc77ed9aa63b94edb3be7d Certificate serial: 019B7BA4F3AE8C18943BC1AB90F0C513FC52 Authority key identifier: 61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/7nMDcW2MBzGpfpdKdPDTB0QB3hU.roa Signing time: Thu 01 Jan 2026 22:19:26 +0000 ROA not before: Thu 01 Jan 2026 22:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3356 IP address blocks: 185.27.249.0/24 maxlen: 24 185.27.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 07:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f3:ae:8c:18:94:3b:c1:ab:90:f0:c5:13:fc:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61a5d217759e861696fc77ed9aa63b94edb3be7d Validity Not Before: Jan 1 22:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee7303716d8c0731a97e974a74f0d3074401de15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:12:21:cf:30:77:37:6a:5a:af:9c:43:63:e6: bc:44:61:b3:91:08:5d:6a:ca:78:d7:5e:a1:e8:45: 60:64:3d:72:cf:00:7b:7d:7d:e6:2b:cc:5c:4c:20: de:43:6a:52:dc:99:3a:d3:b8:8c:b1:a9:9a:1a:72: 79:78:2b:3b:8c:7a:c6:08:b4:86:76:26:70:a2:9f: 66:a7:e6:0e:81:32:bd:5a:3c:6f:2b:a0:3b:3f:7a: c4:c8:ba:71:a9:a4:52:30:bb:de:9f:c4:71:40:8f: e3:ed:a6:b6:d3:8b:5a:68:aa:07:b3:b4:d2:75:a6: d4:84:95:05:ac:91:26:5b:40:88:f7:d1:e6:31:73: 6a:95:64:0a:3b:50:04:1b:41:18:f3:2e:ab:a0:3e: c4:df:73:9f:68:a3:b3:0e:6a:c2:3e:5c:ea:59:4f: c8:d8:fc:59:5a:46:99:e4:b3:30:fa:f4:53:a2:81: 4d:12:b9:f8:5e:d7:8f:8d:5f:e1:b7:e8:2b:da:be: cc:95:37:09:6e:aa:3a:ac:ac:e2:a8:a9:3f:77:fa: e1:2d:76:8f:3d:bf:09:32:9e:8d:8a:39:52:a4:40: f9:10:e4:56:43:a6:e2:44:18:f2:9c:1b:d6:d8:01: 66:85:d6:03:09:a3:33:7b:99:d1:49:f7:34:63:d0: 3e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:73:03:71:6D:8C:07:31:A9:7E:97:4A:74:F0:D3:07:44:01:DE:15 X509v3 Authority Key Identifier: keyid:61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/7nMDcW2MBzGpfpdKdPDTB0QB3hU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.27.249.0/24 185.27.251.0/24 Signature Algorithm: sha256WithRSAEncryption 51:c2:f6:33:85:45:96:1e:10:88:f2:3a:c4:1a:38:b9:b9:3c: f7:60:5b:0d:82:b7:48:45:f2:4c:0f:70:94:f4:b2:b5:06:85: e1:85:8b:97:ca:6d:ed:a6:b1:fe:a7:41:22:e5:98:19:12:d2: 36:c8:15:65:76:4d:a5:67:9f:10:0d:f0:98:4d:0d:35:5e:2e: 11:06:9d:3e:6d:2a:34:88:af:b9:2a:23:50:76:53:51:55:30: 0b:7c:bb:56:2c:8d:78:83:df:2a:8a:42:d1:a4:39:9e:2e:be: 15:c7:b4:2c:a7:90:12:2e:fe:e2:66:b4:9f:55:46:b9:ab:48: 4d:47:54:89:95:19:46:3b:5a:18:9b:3d:ef:ac:0c:5b:e8:9d: 0e:92:f1:d5:bb:c9:9c:ff:a7:8b:57:bd:08:f5:b3:30:c9:6e: 08:d5:21:6a:47:39:39:8f:63:93:b5:e3:b7:1c:39:a9:3b:7b: 58:75:28:3d:26:d6:6a:20:56:f3:db:ba:fd:a1:0d:94:88:fd: 57:42:aa:ae:ca:51:f7:8b:59:bf:4d:bc:f9:89:7c:e0:ae:42: 40:3b:fd:e0:0d:ea:71:c3:ed:de:d4:a8:da:28:9a:26:d2:63: 94:b1:d7:0a:79:5a:92:9e:56:30:16:46:d7:3d:d0:2c:90:8b: 42:ba:70:2c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pPOujBiUO8GrkPDFE/xSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYTVkMjE3NzU5ZTg2MTY5NmZjNzdlZDlhYTYzYjk0ZWRi M2JlN2QwHhcNMjYwMTAxMjIxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTczMDM3MTZkOGMwNzMxYTk3ZTk3NGE3NGYwZDMwNzQ0MDFkZTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRIhzzB3N2par5xDY+a8RGGzkQhd asp4116h6EVgZD1yzwB7fX3mK8xcTCDeQ2pS3Jk607iMsamaGnJ5eCs7jHrGCLSG diZwop9mp+YOgTK9WjxvK6A7P3rEyLpxqaRSMLven8RxQI/j7aa204taaKoHs7TS dabUhJUFrJEmW0CI99HmMXNqlWQKO1AEG0EY8y6roD7E33OfaKOzDmrCPlzqWU/I 2PxZWkaZ5LMw+vRTooFNErn4XtePjV/ht+gr2r7MlTcJbqo6rKziqKk/d/rhLXaP Pb8JMp6NijlSpED5EORWQ6biRBjynBvW2AFmhdYDCaMze5nRSfc0Y9A+zQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFO5zA3FtjAcxqX6XSnTw0wdEAd4VMB8GA1UdIwQY MBaAFGGl0hd1noYWlvx37ZqmO5Tts759MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWFYU0YzV2VoaGFXX0hmdG1xWTdsTzJ6dm4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83MmY2Y2YtOWJkNC00NjdhLWE5MmEt NWE2NGE1ZmM4YTY0LzEvN25NRGNXMk1CekdwZnBkS2RQRFRCMFFCM2hVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS83MmY2Y2YtOWJkNC00NjdhLWE5MmEtNWE2NGE1ZmM4YTY0 LzEvWWFYU0YzV2VoaGFXX0hmdG1xWTdsTzJ6dm4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuRv5AwQA uRv7MA0GCSqGSIb3DQEBCwUAA4IBAQBRwvYzhUWWHhCI8jrEGji5uTz3YFsNgrdI RfJMD3CU9LK1BoXhhYuXym3tprH+p0Ei5ZgZEtI2yBVldk2lZ58QDfCYTQ01Xi4R Bp0+bSo0iK+5KiNQdlNRVTALfLtWLI14g98qikLRpDmeLr4Vx7Qsp5ASLv7iZrSf VUa5q0hNR1SJlRlGO1oYmz3vrAxb6J0OkvHVu8mc/6eLV70I9bMwyW4I1SFqRzk5 j2OTteO3HDmpO3tYdSg9JtZqIFbz27r9oQ2UiP1XQqquylH3i1m/Tbz5iXzgrkJA O/3gDepxw+3e1KjaKJom0mOUsdcKeVqSnlYwFkbXPdAskItCunAs -----END CERTIFICATE-----Generated at Fri Jan 23 16:02:59 2026 by rpki-client