This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/_P7kKTbSEU-aiYdKPx9wBrkOJ5c.roa File: _P7kKTbSEU-aiYdKPx9wBrkOJ5c.roa (raw, json) Hash identifier: MW65Dn0eFAX19iKJgUun/m1uBHtvmTEtZysAWWeJlcI= Subject key identifier: FC:FE:E4:29:36:D2:11:4F:9A:89:87:4A:3F:1F:70:06:B9:0E:27:97 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37B201BA08895E2AC41AC5C7B71A24 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/_P7kKTbSEU-aiYdKPx9wBrkOJ5c.roa Signing time: Fri 02 Jan 2026 10:18:57 +0000 ROA not before: Fri 02 Jan 2026 10:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 147.90.176.0/20 maxlen: 20 147.90.192.0/20 maxlen: 20 2a04:30c0::/32 maxlen: 32 2a06:25c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:b2:01:ba:08:89:5e:2a:c4:1a:c5:c7:b7:1a:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcfee42936d2114f9a89874a3f1f7006b90e2797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2d:a1:1f:b4:33:67:37:bc:5f:1a:82:8b:59: 6c:f0:68:de:0a:66:9d:ae:ed:5c:68:0c:ab:42:0c: 4f:53:7f:a2:ab:ac:1c:24:2c:af:4f:a3:c4:e3:d4: c9:c7:55:cd:b7:c5:b8:ec:2b:e9:95:d2:90:d0:ce: 11:41:77:80:fd:85:2b:c6:dc:23:dc:33:6c:c6:ef: 99:33:dd:5c:fe:fc:48:c1:31:cd:45:50:5a:d0:7d: d4:be:4d:74:c0:b2:50:14:c1:06:c9:8d:27:2e:f4: 8d:e6:3c:2d:7e:2d:85:6d:af:c9:b2:09:4f:11:4a: 23:d7:8f:c5:c0:db:82:99:9b:cc:4b:eb:2c:62:62: 64:23:6d:a4:cc:13:7f:61:6e:46:92:f9:68:dd:23: 2b:8f:99:11:5e:65:d5:82:93:3c:6f:50:9c:44:93: c3:9e:a0:6d:c8:83:33:e6:12:92:7f:d0:fa:85:0c: 9b:02:bc:8f:25:ff:d8:00:23:25:8e:00:31:e7:5a: 50:ad:c4:b3:31:15:08:d5:eb:4a:7e:3b:bd:54:13: 7a:0a:67:90:02:88:62:78:c2:d3:5b:3b:e6:0b:56: 50:1b:d7:e7:16:0e:42:d4:1c:3e:0f:43:5c:fa:5c: 6d:69:a2:3f:5c:a1:ba:0c:36:44:13:b4:33:30:fb: 4f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FE:E4:29:36:D2:11:4F:9A:89:87:4A:3F:1F:70:06:B9:0E:27:97 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/_P7kKTbSEU-aiYdKPx9wBrkOJ5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.90.176.0-147.90.207.255 IPv6: 2a04:30c0::/32 2a06:25c0::/32 Signature Algorithm: sha256WithRSAEncryption e5:15:51:0d:76:76:71:9c:f3:a6:d2:0f:0c:95:91:4f:9c:0e: f2:78:ab:f1:61:e0:df:da:e8:af:21:4a:eb:0d:13:f7:25:d0: 52:8c:6a:4c:f4:6f:02:38:d2:90:b9:98:7f:57:25:1d:a8:c4: 34:b9:30:8a:e8:25:29:a1:5c:c7:48:c4:3a:d2:58:6b:0c:87: 74:32:92:15:14:c6:81:72:82:e2:7d:6a:02:61:b3:40:64:45: 90:5b:7e:8f:00:03:a3:16:03:26:2c:6c:e9:bb:d6:a0:fb:e4: 94:81:f7:d3:9f:4d:74:88:4d:06:b1:01:a4:c7:07:83:c0:7c: ba:83:16:8c:3f:02:21:ef:15:03:23:ac:50:af:97:98:ae:2a: b9:e4:4f:08:cd:c5:c4:73:9e:47:f9:3d:d2:3a:c6:90:7c:4f: 2b:6d:3f:cc:8c:d2:31:6f:45:73:88:5c:0c:7d:9f:2d:d6:ba: 4a:f6:44:39:c7:7b:b6:01:cd:04:30:7c:13:1b:50:4f:77:b8: 10:8f:a2:3a:1b:22:f2:61:e1:aa:80:91:4b:9c:cb:48:62:9b: 3a:ca:29:de:e4:16:97:73:82:d2:80:bb:b9:c2:02:cf:16:da: 7a:b8:90:6b:f0:27:23:cf:f1:b1:31:d6:12:9a:6c:3d:9c:41: aa:93:80:3e -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt+N7IBugiJXirEGsXHtxokMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2ZlZTQyOTM2ZDIxMTRmOWE4OTg3NGEzZjFmNzAwNmI5MGUyNzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy2hH7QzZze8XxqCi1ls8GjeCmad ru1caAyrQgxPU3+iq6wcJCyvT6PE49TJx1XNt8W47CvpldKQ0M4RQXeA/YUrxtwj 3DNsxu+ZM91c/vxIwTHNRVBa0H3Uvk10wLJQFMEGyY0nLvSN5jwtfi2Fba/JsglP EUoj14/FwNuCmZvMS+ssYmJkI22kzBN/YW5Gkvlo3SMrj5kRXmXVgpM8b1CcRJPD nqBtyIMz5hKSf9D6hQybAryPJf/YACMljgAx51pQrcSzMRUI1etKfju9VBN6CmeQ AohieMLTWzvmC1ZQG9fnFg5C1Bw+D0Nc+lxtaaI/XKG6DDZEE7QzMPtPqwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFPz+5Ck20hFPmomHSj8fcAa5DieXMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvX1A3a0tUYlNFVS1haVlkS1B4OXdCcmtPSjVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAUBAIAATAOMAwDBASTWrAD BASTWsAwFAQCAAIwDgMFACoEMMADBQAqBiXAMA0GCSqGSIb3DQEBCwUAA4IBAQDl FVENdnZxnPOm0g8MlZFPnA7yeKvxYeDf2uivIUrrDRP3JdBSjGpM9G8CONKQuZh/ VyUdqMQ0uTCK6CUpoVzHSMQ60lhrDId0MpIVFMaBcoLifWoCYbNAZEWQW36PAAOj FgMmLGzpu9ag++SUgffTn010iE0GsQGkxweDwHy6gxaMPwIh7xUDI6xQr5eYriq5 5E8IzcXEc55H+T3SOsaQfE8rbT/MjNIxb0VziFwMfZ8t1rpK9kQ5x3u2Ac0EMHwT G1BPd7gQj6I6GyLyYeGqgJFLnMtIYps6yine5BaXc4LSgLu5wgLPFtp6uJBr8Ccj z/GxMdYSmmw9nEGqk4A+ -----END CERTIFICATE-----Generated at Fri Jan 23 04:39:01 2026 by rpki-client