This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/f7kvzs2-zb2KOzlFjVCuZ2HegcA.roa File: f7kvzs2-zb2KOzlFjVCuZ2HegcA.roa (raw, json) Hash identifier: TQasGYVjwG88rEbuO7YJL0ynVBS+O5FZb9ZMc3XfwoE= Subject key identifier: 7F:B9:2F:CE:CD:BE:CD:BD:8A:3B:39:45:8D:50:AE:67:61:DE:81:C0 Certificate issuer: /CN=57c0bd9f8331ea8438fd2a2f671b71af4a2dec17 Certificate serial: 019BE4E639EF19D5BE3D96396404423B9EE2 Authority key identifier: 57:C0:BD:9F:83:31:EA:84:38:FD:2A:2F:67:1B:71:AF:4A:2D:EC:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/f7kvzs2-zb2KOzlFjVCuZ2HegcA.roa Signing time: Thu 22 Jan 2026 08:50:51 +0000 ROA not before: Thu 22 Jan 2026 08:50:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3232 IP address blocks: 185.83.85.0/24 maxlen: 24 193.17.43.0/24 maxlen: 24 193.105.132.0/24 maxlen: 24 194.165.45.0/24 maxlen: 24 194.165.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.crl rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft rsync://rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e4:e6:39:ef:19:d5:be:3d:96:39:64:04:42:3b:9e:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c0bd9f8331ea8438fd2a2f671b71af4a2dec17 Validity Not Before: Jan 22 08:50:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fb92fcecdbecdbd8a3b39458d50ae6761de81c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:42:a1:63:83:36:8f:19:17:0d:06:bb:22:fc: b9:f5:f1:4e:69:c1:ed:95:0c:ae:e9:40:05:6f:00: b1:36:32:a8:6c:00:c3:c6:9d:8c:bc:97:e2:73:cb: 35:0a:05:ae:94:76:43:3b:19:5b:72:49:46:d4:4b: 25:7f:e9:41:7f:4f:cc:14:ad:5c:95:f4:e3:93:84: 03:13:4b:39:90:94:e7:ff:68:50:b6:c8:3f:21:b8: c3:7b:6e:3a:a2:50:06:cb:a1:f3:3b:c2:97:ff:a8: 93:c2:fa:9d:96:0c:f0:9c:2a:f7:f1:55:a2:04:54: 90:59:48:65:dd:cd:5f:ba:47:c7:4a:67:24:dc:b8: 68:f2:df:c9:22:39:48:fc:0c:22:78:80:d4:be:8d: 06:84:96:7e:09:c9:61:bc:bd:6c:dd:6f:fe:17:7c: eb:74:e7:7b:35:77:0d:49:b9:cf:7f:ae:85:66:51: e0:1b:fe:13:fb:2c:18:b8:a8:f0:0b:6d:0a:31:ab: fe:5a:f0:91:fd:19:d6:8e:ed:01:3d:e2:2a:51:83: f6:61:82:20:99:af:56:26:36:b3:e3:04:3d:f0:73: 0d:31:6a:26:16:fb:36:20:03:b9:b9:36:52:46:7b: 5c:05:91:d6:e7:c7:70:61:cb:b6:0f:fd:f2:d6:91: e6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B9:2F:CE:CD:BE:CD:BD:8A:3B:39:45:8D:50:AE:67:61:DE:81:C0 X509v3 Authority Key Identifier: keyid:57:C0:BD:9F:83:31:EA:84:38:FD:2A:2F:67:1B:71:AF:4A:2D:EC:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/f7kvzs2-zb2KOzlFjVCuZ2HegcA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.83.85.0/24 193.17.43.0/24 193.105.132.0/24 194.165.45.0/24 194.165.53.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:37:21:01:68:48:e3:2f:5b:16:c0:00:4a:7e:5a:e3:07:d8: 8f:53:82:2e:9e:d8:56:02:60:a3:23:35:28:a2:d2:44:1b:c4: 6e:f0:b1:12:6a:07:25:ea:aa:08:be:3f:34:48:c4:d6:00:11: 9e:76:06:79:1f:10:92:41:f9:c4:83:70:e5:5a:e8:4b:b0:97: 62:79:7a:e8:7c:7b:a2:cf:94:b7:51:ab:22:d6:4a:50:28:5f: 24:ef:d2:32:58:a6:61:6b:65:b9:7a:8b:52:4c:f2:59:66:29: 71:e0:0d:65:f5:e6:d2:f8:d0:32:a5:18:f3:38:83:66:ca:40: 43:5a:02:6a:98:ee:27:90:bc:ce:e6:7b:df:5e:3b:3c:35:c2: 9b:a4:70:50:b6:a8:c1:5b:3d:34:68:23:a4:30:a9:40:6d:49: 68:e2:b0:a0:16:7e:6f:98:4b:54:fc:3c:ba:0b:74:0e:67:6e: ce:e2:21:3f:18:a1:fc:2b:05:fb:7e:b2:a2:03:58:34:02:cc: d1:5b:c9:e0:3f:6f:a2:42:0d:21:fa:b2:d4:71:18:60:ea:61: 4b:5a:66:0d:a8:7b:ca:99:d4:23:7d:a7:86:9b:93:a0:43:a6: 35:20:84:5e:17:df:55:f7:61:6c:58:6d:df:91:4e:a6:80:10: 19:63:90:ed -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZvk5jnvGdW+PZY5ZARCO57iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzBiZDlmODMzMWVhODQzOGZkMmEyZjY3MWI3MWFmNGEy ZGVjMTcwHhcNMjYwMTIyMDg1MDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmI5MmZjZWNkYmVjZGJkOGEzYjM5NDU4ZDUwYWU2NzYxZGU4MWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkKhY4M2jxkXDQa7Ivy59fFOacHt lQyu6UAFbwCxNjKobADDxp2MvJfic8s1CgWulHZDOxlbcklG1Eslf+lBf0/MFK1c lfTjk4QDE0s5kJTn/2hQtsg/IbjDe246olAGy6HzO8KX/6iTwvqdlgzwnCr38VWi BFSQWUhl3c1fukfHSmck3Lho8t/JIjlI/AwieIDUvo0GhJZ+CclhvL1s3W/+F3zr dOd7NXcNSbnPf66FZlHgG/4T+ywYuKjwC20KMav+WvCR/RnWju0BPeIqUYP2YYIg ma9WJjaz4wQ98HMNMWomFvs2IAO5uTZSRntcBZHW58dwYcu2D/3y1pHmhQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFH+5L87Nvs29ijs5RY1Qrmdh3oHAMB8GA1UdIwQY MBaAFFfAvZ+DMeqEOP0qL2cbca9KLewXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhDOW40TXg2b1E0X1Nvdlp4dHhyMG90N0JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kNWU5ZjYtM2Y2ZC00Njk0LTg5Yjgt YTA5M2QxMDA4NzRjLzEvZjdrdnpzMi16YjJLT3psRmpWQ3VaMkhlZ2NBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9kNWU5ZjYtM2Y2ZC00Njk0LTg5YjgtYTA5M2QxMDA4NzRj LzEvVjhDOW40TXg2b1E0X1Nvdlp4dHhyMG90N0JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAuVNVAwQA wRErAwQAwWmEAwQAwqUtAwQAwqU1MA0GCSqGSIb3DQEBCwUAA4IBAQALNyEBaEjj L1sWwABKflrjB9iPU4IunthWAmCjIzUootJEG8Ru8LESagcl6qoIvj80SMTWABGe dgZ5HxCSQfnEg3DlWuhLsJdieXrofHuiz5S3Uasi1kpQKF8k79IyWKZha2W5eotS TPJZZilx4A1l9ebS+NAypRjzOINmykBDWgJqmO4nkLzO5nvfXjs8NcKbpHBQtqjB Wz00aCOkMKlAbUlo4rCgFn5vmEtU/Dy6C3QOZ27O4iE/GKH8KwX7frKiA1g0AszR W8ngP2+iQg0h+rLUcRhg6mFLWmYNqHvKmdQjfaeGm5OgQ6Y1IIReF99V92FsWG3f kU6mgBAZY5Dt -----END CERTIFICATE-----Generated at Mon Jan 26 16:23:17 2026 by rpki-client