This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/X7SJ-tuGT6CZvw5JBh3MHnc1EYY.roa File: X7SJ-tuGT6CZvw5JBh3MHnc1EYY.roa (raw, json) Hash identifier: i+mpRdglZ70i0C2ly6g5oeIRvSCbIDXK88WXjPxQYSE= Subject key identifier: 5F:B4:89:FA:DB:86:4F:A0:99:BF:0E:49:06:1D:CC:1E:77:35:11:86 Certificate issuer: /CN=bc063d650534aa9f06931fd8ed6e0bb276ebd3bf Certificate serial: 019B77C755A8AC22CB167D51B60A1D671013 Authority key identifier: BC:06:3D:65:05:34:AA:9F:06:93:1F:D8:ED:6E:0B:B2:76:EB:D3:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/X7SJ-tuGT6CZvw5JBh3MHnc1EYY.roa Signing time: Thu 01 Jan 2026 04:18:30 +0000 ROA not before: Thu 01 Jan 2026 04:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35349 IP address blocks: 185.239.248.0/22 maxlen: 22 2a0c:6780::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.crl rsync://rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.mft rsync://rpki.ripe.net/repository/DEFAULT/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:55:a8:ac:22:cb:16:7d:51:b6:0a:1d:67:10:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc063d650534aa9f06931fd8ed6e0bb276ebd3bf Validity Not Before: Jan 1 04:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fb489fadb864fa099bf0e49061dcc1e77351186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f4:23:89:71:22:af:6b:f0:df:3b:e5:50:8e: 00:f8:5b:42:97:f3:c1:5d:de:43:67:b7:f6:ca:ce: 9c:07:09:e7:43:3e:c0:f3:f8:3a:37:8c:9b:fe:36: 2e:ff:db:93:ca:42:32:c8:54:be:6b:99:ec:15:fd: 96:c5:75:03:45:1c:95:26:88:23:7e:a3:cc:a1:ab: 38:1a:4b:70:a2:5b:f8:86:56:1d:b6:6d:ee:1b:b7: b2:39:a0:a6:98:06:3b:b7:2b:27:3e:1f:c2:3a:86: d8:39:d6:8a:57:8a:d9:d2:34:e0:be:da:d4:8b:68: 53:1c:56:5b:fc:25:ed:71:39:dc:8b:62:8f:e2:1a: be:2e:fa:00:64:45:ec:7b:52:5d:f9:d4:1c:14:aa: 0d:07:a0:74:46:9f:b0:74:cc:82:f0:ab:48:d5:d3: 09:d4:43:b7:5c:cc:74:c1:65:17:61:76:c3:b4:63: 6e:da:5a:76:9b:af:55:a6:95:e6:90:45:d5:83:ec: 08:8a:5e:a6:14:f1:bc:66:6e:e4:e2:06:b5:0e:14: 0b:32:17:2e:9d:3f:ce:24:92:a1:c8:2c:23:54:05: f9:b2:de:ff:81:27:b3:38:18:3a:ab:16:61:c4:95: bc:11:66:c2:69:65:81:d2:d0:28:29:dd:3e:80:f0: eb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B4:89:FA:DB:86:4F:A0:99:BF:0E:49:06:1D:CC:1E:77:35:11:86 X509v3 Authority Key Identifier: keyid:BC:06:3D:65:05:34:AA:9F:06:93:1F:D8:ED:6E:0B:B2:76:EB:D3:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/X7SJ-tuGT6CZvw5JBh3MHnc1EYY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.239.248.0/22 IPv6: 2a0c:6780::/29 Signature Algorithm: sha256WithRSAEncryption 1e:8d:f0:11:25:ca:09:b4:04:c2:4b:62:3e:ae:f5:77:b5:96: aa:4a:e2:e3:dc:89:74:af:81:f0:23:f2:3e:a5:e9:d1:3c:b6: c7:78:86:6e:05:79:da:6a:6a:03:2c:61:2f:be:f3:02:b9:97: 20:45:17:9d:8e:7a:b6:56:af:d5:52:a9:ec:28:67:76:ec:a7: 29:20:94:da:f3:e0:2c:06:bc:94:88:9d:a7:44:69:30:32:35: f0:94:4d:4a:78:ee:e4:57:1c:ce:77:a4:b7:60:f7:bb:34:32: 99:f3:d4:f6:3b:d9:6f:fd:eb:2a:15:f5:64:25:11:ec:1c:2c: 83:32:19:24:08:9f:86:01:0f:a6:04:1e:99:42:a8:2a:d0:ca: 17:be:d8:70:7b:1f:15:36:71:bd:f2:98:0f:03:73:8d:db:9c: 28:1b:4f:27:ee:37:65:10:13:60:83:c0:04:65:dd:29:58:90: e0:4b:b1:68:80:b1:65:a4:03:47:f6:99:8f:a3:91:6c:62:6a: ab:32:87:e7:d3:90:9c:7e:32:49:99:27:78:76:de:28:e4:54: b0:26:34:6a:a5:c1:e6:61:e8:6d:05:24:8d:e3:f5:5c:a2:44: d8:bd:6a:e4:dd:94:63:c9:5f:8d:de:0f:03:b2:c4:6b:d9:3a: f2:91:6f:0b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3x1WorCLLFn1RtgodZxATMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMDYzZDY1MDUzNGFhOWYwNjkzMWZkOGVkNmUwYmIyNzZl YmQzYmYwHhcNMjYwMTAxMDQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmI0ODlmYWRiODY0ZmEwOTliZjBlNDkwNjFkY2MxZTc3MzUxMTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvQjiXEir2vw3zvlUI4A+FtCl/PB Xd5DZ7f2ys6cBwnnQz7A8/g6N4yb/jYu/9uTykIyyFS+a5nsFf2WxXUDRRyVJogj fqPMoas4Gktwolv4hlYdtm3uG7eyOaCmmAY7tysnPh/COobYOdaKV4rZ0jTgvtrU i2hTHFZb/CXtcTnci2KP4hq+LvoAZEXse1Jd+dQcFKoNB6B0Rp+wdMyC8KtI1dMJ 1EO3XMx0wWUXYXbDtGNu2lp2m69VppXmkEXVg+wIil6mFPG8Zm7k4ga1DhQLMhcu nT/OJJKhyCwjVAX5st7/gSezOBg6qxZhxJW8EWbCaWWB0tAoKd0+gPDrsQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFF+0ifrbhk+gmb8OSQYdzB53NRGGMB8GA1UdIwQY MBaAFLwGPWUFNKqfBpMf2O1uC7J269O/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkFZOVpRVTBxcDhHa3hfWTdXNExzbmJyMDc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8xNzk0ZTgtODk5OC00NTE0LWI3ZTEt MjE2ZDI4OWYxNzY0LzEvWDdTSi10dUdUNkNadnc1SkJoM01IbmMxRVlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8xNzk0ZTgtODk5OC00NTE0LWI3ZTEtMjE2ZDI4OWYxNzY0 LzEvdkFZOVpRVTBxcDhHa3hfWTdXNExzbmJyMDc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCue/4MA0E AgACMAcDBQMqDGeAMA0GCSqGSIb3DQEBCwUAA4IBAQAejfARJcoJtATCS2I+rvV3 tZaqSuLj3Il0r4HwI/I+penRPLbHeIZuBXnaamoDLGEvvvMCuZcgRRedjnq2Vq/V UqnsKGd27KcpIJTa8+AsBryUiJ2nRGkwMjXwlE1KeO7kVxzOd6S3YPe7NDKZ89T2 O9lv/esqFfVkJRHsHCyDMhkkCJ+GAQ+mBB6ZQqgq0MoXvthwex8VNnG98pgPA3ON 25woG08n7jdlEBNgg8AEZd0pWJDgS7FogLFlpANH9pmPo5FsYmqrMofn05CcfjJJ mSd4dt4o5FSwJjRqpcHmYehtBSSN4/VcokTYvWrk3ZRjyV+N3g8DssRr2TrykW8L -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:36 2026 by rpki-client