This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7Uny24EKSpjdct0050ysde-JZ8w.roa File: 7Uny24EKSpjdct0050ysde-JZ8w.roa (raw, json) Hash identifier: iNqN1nbINxO/0aDgAxmoZgrgWWc20bk38ykpsNBi7ao= Subject key identifier: ED:49:F2:DB:81:0A:4A:98:DD:72:DD:34:E7:4C:AC:75:EF:89:67:CC Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A30CB26290885F5D2C7A545506AFB1 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7Uny24EKSpjdct0050ysde-JZ8w.roa Signing time: Thu 01 Jan 2026 08:18:30 +0000 ROA not before: Thu 01 Jan 2026 08:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57634 IP address blocks: 31.13.192.0/24 maxlen: 24 31.13.199.0/24 maxlen: 24 31.13.209.0/24 maxlen: 24 85.217.168.0/23 maxlen: 23 87.120.67.0/24 maxlen: 24 87.120.156.0/23 maxlen: 23 93.123.9.0/24 maxlen: 24 94.156.0.0/23 maxlen: 23 94.156.7.0/24 maxlen: 24 94.156.76.0/24 maxlen: 24 94.156.171.0/24 maxlen: 24 212.73.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:0c:b2:62:90:88:5f:5d:2c:7a:54:55:06:af:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed49f2db810a4a98dd72dd34e74cac75ef8967cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:33:2c:fe:38:9e:53:7f:3e:42:9a:4f:b4:03: b3:c9:35:15:1f:35:c2:bb:57:99:44:ee:c8:47:e1: 6e:14:70:5c:20:53:cf:f0:58:f3:f3:27:bd:e3:70: 5d:65:69:14:35:07:51:26:90:ac:d5:56:19:8e:07: 0e:4d:bf:36:80:ec:f4:1e:94:54:ed:0c:94:2c:7f: fc:89:d1:25:7c:07:ae:a3:70:23:da:f6:07:90:f4: ec:e6:6a:56:a1:a1:8d:60:b6:24:0a:26:49:6e:83: 64:73:40:61:8b:de:71:5d:08:0a:1a:5d:eb:2c:3f: 36:5f:63:20:bb:52:fe:e3:63:93:2c:29:55:cf:aa: 39:3c:e3:28:1c:9b:26:04:e8:63:f1:d2:39:d3:87: 5c:12:64:16:59:01:33:28:6b:f3:35:d2:28:8f:8f: 40:c4:49:3e:cc:98:5e:bc:50:d4:2d:24:64:1e:77: 15:4e:a6:18:d9:6b:2a:09:c5:37:43:f0:8d:fa:33: d8:36:06:6b:cd:7b:72:84:23:d8:fc:de:c5:31:20: 95:62:cd:ff:7e:60:98:8b:6d:06:07:10:a9:e8:49: 1f:08:1e:25:f4:cd:05:6d:8e:50:b9:6f:69:10:66: 51:77:d0:3b:44:45:b6:6f:cf:77:d4:2d:a4:6d:4c: cc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:49:F2:DB:81:0A:4A:98:DD:72:DD:34:E7:4C:AC:75:EF:89:67:CC X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7Uny24EKSpjdct0050ysde-JZ8w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.13.192.0/24 31.13.199.0/24 31.13.209.0/24 85.217.168.0/23 87.120.67.0/24 87.120.156.0/23 93.123.9.0/24 94.156.0.0/23 94.156.7.0/24 94.156.76.0/24 94.156.171.0/24 212.73.151.0/24 Signature Algorithm: sha256WithRSAEncryption af:fc:a0:6b:56:ef:02:67:88:07:4a:17:96:0f:64:da:68:7c: 24:0b:d1:e8:e6:31:a6:e5:3c:55:e8:0b:5f:d7:af:03:ad:03: db:c4:19:46:c8:59:7a:86:79:68:25:27:51:2a:72:2f:92:00: 18:6d:2f:23:82:a9:ec:e7:e0:c2:3c:49:ab:5f:3a:d9:ad:b2: 84:1a:09:6a:21:70:d9:3e:b2:2d:25:f3:55:5e:91:22:71:04: 8f:04:c4:3d:54:18:4a:fc:41:5d:b7:2b:13:62:7a:a6:7e:3c: 86:97:4d:55:4b:23:59:43:83:1c:40:c2:1b:c6:b9:fa:c8:bd: 01:17:d5:ba:0f:6e:53:14:e5:44:6b:c7:35:1f:ac:19:d3:64: 1b:ff:6d:db:55:2a:4d:ad:c1:3d:ea:92:71:33:bd:a2:24:c9: 24:e4:79:15:a0:4f:33:e1:7a:62:71:21:2b:27:65:5f:46:99: 04:8f:89:95:f3:5f:56:cc:ae:af:f7:eb:6f:e5:38:05:c5:3b: 6d:0d:ca:62:1c:d5:55:04:17:2d:bb:b1:68:3d:1f:56:43:07: f5:0e:68:32:92:dc:04:ab:bd:6c:87:8a:cb:db:c5:34:fd:b2: 2a:4e:cc:d4:fb:69:67:87:cf:3d:6f:33:ed:67:7a:70:23:35: 73:cd:2d:c0 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt4owyyYpCIX10selRVBq+xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDQ5ZjJkYjgxMGE0YTk4ZGQ3MmRkMzRlNzRjYWM3NWVmODk2N2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjMs/jieU38+QppPtAOzyTUVHzXC u1eZRO7IR+FuFHBcIFPP8Fjz8ye943BdZWkUNQdRJpCs1VYZjgcOTb82gOz0HpRU 7QyULH/8idElfAeuo3Aj2vYHkPTs5mpWoaGNYLYkCiZJboNkc0Bhi95xXQgKGl3r LD82X2Mgu1L+42OTLClVz6o5POMoHJsmBOhj8dI504dcEmQWWQEzKGvzNdIoj49A xEk+zJhevFDULSRkHncVTqYY2WsqCcU3Q/CN+jPYNgZrzXtyhCPY/N7FMSCVYs3/ fmCYi20GBxCp6EkfCB4l9M0FbY5QuW9pEGZRd9A7REW2b8931C2kbUzMUwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFO1J8tuBCkqY3XLdNOdMrHXviWfMMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvN1VueTI0RUtTcGpkY3QwMDUweXNkZS1KWjh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAHw3AAwQA Hw3HAwQAHw3RAwQBVdmoAwQAV3hDAwQBV3icAwQAXXsJAwQBXpwAAwQAXpwHAwQA XpxMAwQAXpyrAwQA1EmXMA0GCSqGSIb3DQEBCwUAA4IBAQCv/KBrVu8CZ4gHSheW D2TaaHwkC9Ho5jGm5TxV6Atf168DrQPbxBlGyFl6hnloJSdRKnIvkgAYbS8jgqns 5+DCPEmrXzrZrbKEGglqIXDZPrItJfNVXpEicQSPBMQ9VBhK/EFdtysTYnqmfjyG l01VSyNZQ4McQMIbxrn6yL0BF9W6D25TFOVEa8c1H6wZ02Qb/23bVSpNrcE96pJx M72iJMkk5HkVoE8z4XpicSErJ2VfRpkEj4mV819WzK6v9+tv5TgFxTttDcpiHNVV BBctu7FoPR9WQwf1DmgyktwEq71sh4rL28U0/bIqTszU+2lnh889bzPtZ3pwIzVz zS3A -----END CERTIFICATE-----Generated at Fri Jan 2 12:06:12 2026 by rpki-client