This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7yhfPzNY8OQNJEZL3EtGWSZV1rg.roa File: 7yhfPzNY8OQNJEZL3EtGWSZV1rg.roa (raw, json) Hash identifier: If0UxveT6+LP8wfF2xbqQUDTYGHcKWjP9MhjBN/iwbo= Subject key identifier: EF:28:5F:3F:33:58:F0:E4:0D:24:46:4B:DC:4B:46:59:26:55:D6:B8 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2EA86CAC59E9B9CA16FAE7C5C50D1 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7yhfPzNY8OQNJEZL3EtGWSZV1rg.roa Signing time: Thu 01 Jan 2026 08:18:21 +0000 ROA not before: Thu 01 Jan 2026 08:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29066 IP address blocks: 5.253.66.0/23 maxlen: 23 88.218.76.0/22 maxlen: 24 92.119.124.0/22 maxlen: 24 93.123.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ea:86:ca:c5:9e:9b:9c:a1:6f:ae:7c:5c:50:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef285f3f3358f0e40d24464bdc4b46592655d6b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:30:57:e6:1d:48:62:8b:e1:f7:47:f3:70:c8: 2c:a6:37:5b:24:60:c3:fd:92:17:b0:9f:16:d5:68: 0d:bd:1f:85:f8:26:9a:3d:74:31:3c:99:26:81:77: d0:c0:bf:3a:2f:b0:2f:a1:79:97:8b:e6:49:ea:b4: 86:08:ea:9d:07:0c:dd:de:fa:41:29:dc:ac:3a:72: 68:5d:81:11:4f:07:f8:f0:4b:03:1a:a6:ea:6c:a6: fd:fa:bd:a5:93:f5:2b:a4:28:63:10:17:53:87:8c: 32:5e:b9:ab:c2:17:74:eb:2b:f6:52:f6:a2:30:93: 10:e6:9a:da:71:36:2b:4f:68:7b:43:b8:8b:d0:00: bb:81:ce:09:23:20:b3:e0:eb:83:95:a6:a3:b9:84: 0b:9b:d3:c1:ba:6e:b7:99:df:4b:bb:b9:aa:75:ef: 73:b4:56:18:e2:c8:6a:4a:4f:d7:3e:f8:cc:64:bf: 75:e5:2e:49:c6:51:5a:60:d8:0d:42:bb:6f:1f:d0: 30:52:77:ea:6e:8e:14:e4:b9:96:4f:94:ef:63:93: bd:e8:f3:49:e4:13:49:55:ce:a8:64:af:e3:e2:22: 0e:5d:00:a4:f4:74:02:22:eb:92:70:1b:c6:3d:2d: cb:fc:37:98:39:4a:6b:80:99:9e:82:1a:fc:4a:8e: ff:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:28:5F:3F:33:58:F0:E4:0D:24:46:4B:DC:4B:46:59:26:55:D6:B8 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7yhfPzNY8OQNJEZL3EtGWSZV1rg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.66.0/23 88.218.76.0/22 92.119.124.0/22 93.123.100.0/23 Signature Algorithm: sha256WithRSAEncryption 62:f1:4f:cc:8e:e8:c1:f0:7d:92:0f:78:96:b2:32:b1:67:27: 7d:1f:68:2c:98:4f:46:6d:51:89:ee:c9:7d:4b:58:69:dd:6c: 02:21:be:58:cd:82:2b:4c:5d:40:56:d1:f2:e7:2d:d1:09:cb: 21:b5:09:46:af:17:9c:30:00:32:1c:46:c8:b4:9b:3e:4c:bd: 6a:75:5c:0d:99:a3:4d:78:4d:0b:e3:23:d9:b1:71:81:1e:1e: b9:cb:9e:57:51:64:e4:9e:9d:1f:70:b7:89:f7:7d:b4:b8:ee: 0a:1a:e8:86:38:7c:44:66:63:fc:ba:4b:45:95:a0:3e:c7:c0: ff:e7:e8:79:7e:01:19:b8:cf:ac:17:1a:87:6b:72:91:57:3c: 5b:20:b6:f8:43:52:e0:81:6e:62:39:fb:70:63:f1:40:8b:29: 72:2e:43:48:d5:cb:95:78:8a:a1:51:58:6e:ec:3c:be:da:82: 3f:dc:40:95:49:ee:2e:cb:03:37:e7:d2:d7:6b:b5:25:ac:d9: a2:0e:15:90:af:de:48:99:c8:26:ae:18:e1:4b:8a:61:be:cc: fd:d9:1a:5d:29:02:98:5a:a3:8b:5a:28:7a:5e:97:38:5f:b3: 5e:c4:fd:e8:1f:ff:48:57:a3:ba:86:8c:e9:f3:39:a8:65:2c: 24:9f:9a:81 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4ouqGysWem5yhb658XFDRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjI4NWYzZjMzNThmMGU0MGQyNDQ2NGJkYzRiNDY1OTI2NTVkNmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zBX5h1IYovh90fzcMgspjdbJGDD /ZIXsJ8W1WgNvR+F+CaaPXQxPJkmgXfQwL86L7AvoXmXi+ZJ6rSGCOqdBwzd3vpB KdysOnJoXYERTwf48EsDGqbqbKb9+r2lk/UrpChjEBdTh4wyXrmrwhd06yv2Uvai MJMQ5pracTYrT2h7Q7iL0AC7gc4JIyCz4OuDlaajuYQLm9PBum63md9Lu7mqde9z tFYY4shqSk/XPvjMZL915S5JxlFaYNgNQrtvH9AwUnfqbo4U5LmWT5TvY5O96PNJ 5BNJVc6oZK/j4iIOXQCk9HQCIuuScBvGPS3L/DeYOUprgJmeghr8So7/GwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFO8oXz8zWPDkDSRGS9xLRlkmVda4MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvN3loZlB6Tlk4T1FOSkVaTDNFdEdXU1pWMXJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBBf1CAwQC WNpMAwQCXHd8AwQBXXtkMA0GCSqGSIb3DQEBCwUAA4IBAQBi8U/MjujB8H2SD3iW sjKxZyd9H2gsmE9GbVGJ7sl9S1hp3WwCIb5YzYIrTF1AVtHy5y3RCcshtQlGrxec MAAyHEbItJs+TL1qdVwNmaNNeE0L4yPZsXGBHh65y55XUWTknp0fcLeJ9320uO4K GuiGOHxEZmP8uktFlaA+x8D/5+h5fgEZuM+sFxqHa3KRVzxbILb4Q1LggW5iOftw Y/FAiylyLkNI1cuVeIqhUVhu7Dy+2oI/3ECVSe4uywM359LXa7UlrNmiDhWQr95I mcgmrhjhS4phvsz92RpdKQKYWqOLWih6Xpc4X7NexP3oH/9IV6O6hozp8zmoZSwk n5qB -----END CERTIFICATE-----Generated at Fri Jan 2 12:08:24 2026 by rpki-client