This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/exjfT9uAFU7f_gIJUid1TXJtR8A.roa File: exjfT9uAFU7f_gIJUid1TXJtR8A.roa (raw, json) Hash identifier: 4rc5j3Of5lWDlFZbenegwws4HWNu69CTDYEmMKe9DAY= Subject key identifier: 7B:18:DF:4F:DB:80:15:4E:DF:FE:02:09:52:27:75:4D:72:6D:47:C0 Certificate issuer: /CN=320b24a740f2e61632050adc146c1ee6a3e686c5 Certificate serial: 019B7C1219603FE44F690EED57727686F616 Authority key identifier: 32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/exjfT9uAFU7f_gIJUid1TXJtR8A.roa Signing time: Fri 02 Jan 2026 00:18:39 +0000 ROA not before: Fri 02 Jan 2026 00:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24620 IP address blocks: 85.254.214.0/23 maxlen: 23 85.254.216.0/21 maxlen: 21 85.254.224.0/22 maxlen: 22 85.254.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:19:60:3f:e4:4f:69:0e:ed:57:72:76:86:f6:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=320b24a740f2e61632050adc146c1ee6a3e686c5 Validity Not Before: Jan 2 00:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b18df4fdb80154edffe02095227754d726d47c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:53:d8:2f:91:44:b8:a0:dc:3c:72:86:6e:ba: 02:f1:7d:db:32:69:18:5b:db:c7:a2:19:97:ea:60: 85:a0:d0:df:73:a6:95:ac:2b:81:01:ff:d9:5d:58: ec:53:1e:a3:f8:1e:f5:56:13:26:2d:aa:bf:c2:c8: e6:5e:2d:a8:74:f0:b2:4b:3d:8f:74:53:35:84:cf: 99:0b:14:3b:3a:a4:ea:7b:a7:07:b1:80:f3:32:69: 6c:3f:45:18:9b:df:c0:05:e8:3e:49:01:41:b1:51: 25:ca:27:20:32:07:8c:91:1d:72:3c:3d:96:4f:5c: 64:f3:73:e8:62:64:09:7f:73:d6:6c:39:61:14:1d: da:bc:c6:cd:cf:ae:ef:ad:be:ff:93:90:a7:06:44: ff:40:d9:13:27:44:9b:4b:41:ac:f8:f9:29:06:cf: 0c:ed:53:06:36:17:15:b0:5d:70:7c:df:fe:f4:4c: ef:f5:ec:b7:b2:d6:b1:84:b7:ab:a9:ba:0a:7b:58: 1d:1b:20:05:bd:87:36:79:85:8e:ed:b2:72:af:3f: 3e:bb:20:74:ce:8f:e7:eb:84:a2:42:bd:82:40:f8: 27:60:0e:ac:40:63:ea:82:b2:0d:95:eb:44:d4:8f: 00:33:36:ea:cc:3b:d2:17:9e:88:9f:ae:92:9a:74: 23:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:18:DF:4F:DB:80:15:4E:DF:FE:02:09:52:27:75:4D:72:6D:47:C0 X509v3 Authority Key Identifier: keyid:32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/exjfT9uAFU7f_gIJUid1TXJtR8A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.254.214.0-85.254.228.255 Signature Algorithm: sha256WithRSAEncryption 3b:8f:fa:4d:3c:2d:ef:8f:65:66:54:8f:f7:c6:ab:03:29:03: a8:24:33:40:a5:76:54:0f:83:e7:90:a8:81:08:b3:09:09:7e: b2:80:f8:52:e9:5a:31:4d:97:7a:20:1e:aa:e7:99:06:e6:1e: 78:3d:f5:ed:3a:0a:c7:d8:2b:ed:e5:3d:2e:ce:17:aa:25:13: bd:2e:38:eb:f0:af:48:a1:f2:17:4c:c8:b7:85:22:54:84:4a: be:43:d3:dd:d5:17:ba:a2:59:e3:b9:d5:5b:86:64:aa:45:ce: e6:48:20:19:25:cd:b5:b6:2d:d0:f4:e6:08:5e:f8:fb:af:c7: 60:6e:65:7f:60:1d:c2:4a:e8:3e:24:30:df:44:54:33:9e:7c: 31:44:6e:17:46:86:6d:2a:2d:c3:0c:43:49:19:75:af:12:10: f7:06:fa:6d:f0:76:3a:85:4d:72:92:09:a7:5b:49:fc:ca:30: b1:ac:fb:d6:6a:fa:1f:05:d6:0c:ed:f6:00:56:2f:de:27:5c: 26:b4:af:7b:84:e3:51:2a:47:6a:2c:c5:c7:90:88:ae:c1:0f: f3:09:6c:86:56:48:9d:f0:b9:f0:d2:10:01:b9:0e:f6:6a:4e: 1f:5f:f5:01:91:a3:30:c6:61:a4:e1:3a:07:50:36:b4:49:59: fb:34:f7:90 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8EhlgP+RPaQ7tV3J2hvYWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMGIyNGE3NDBmMmU2MTYzMjA1MGFkYzE0NmMxZWU2YTNl Njg2YzUwHhcNMjYwMTAyMDAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjE4ZGY0ZmRiODAxNTRlZGZmZTAyMDk1MjI3NzU0ZDcyNmQ0N2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31PYL5FEuKDcPHKGbroC8X3bMmkY W9vHohmX6mCFoNDfc6aVrCuBAf/ZXVjsUx6j+B71VhMmLaq/wsjmXi2odPCySz2P dFM1hM+ZCxQ7OqTqe6cHsYDzMmlsP0UYm9/ABeg+SQFBsVElyicgMgeMkR1yPD2W T1xk83PoYmQJf3PWbDlhFB3avMbNz67vrb7/k5CnBkT/QNkTJ0SbS0Gs+PkpBs8M 7VMGNhcVsF1wfN/+9Ezv9ey3staxhLerqboKe1gdGyAFvYc2eYWO7bJyrz8+uyB0 zo/n64SiQr2CQPgnYA6sQGPqgrINletE1I8AMzbqzDvSF56In66SmnQjnQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHsY30/bgBVO3/4CCVIndU1ybUfAMB8GA1UdIwQY MBaAFDILJKdA8uYWMgUK3BRsHuaj5obFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWdza3AwRHk1aFl5QlFyY0ZHd2U1cVBtaHNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85YzI3ZTQtZDdiMS00M2MxLWEzOGYt OTQ5MTRmNWRkYjNjLzEvZXhqZlQ5dUFGVTdmX2dJSlVpZDFUWEp0UjhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy85YzI3ZTQtZDdiMS00M2MxLWEzOGYtOTQ5MTRmNWRkYjNj LzEvTWdza3AwRHk1aFl5QlFyY0ZHd2U1cVBtaHNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFV/tYD BABV/uQwDQYJKoZIhvcNAQELBQADggEBADuP+k08Le+PZWZUj/fGqwMpA6gkM0Cl dlQPg+eQqIEIswkJfrKA+FLpWjFNl3ogHqrnmQbmHng99e06CsfYK+3lPS7OF6ol E70uOOvwr0ih8hdMyLeFIlSESr5D093VF7qiWeO51VuGZKpFzuZIIBklzbW2LdD0 5ghe+Puvx2BuZX9gHcJK6D4kMN9EVDOefDFEbhdGhm0qLcMMQ0kZda8SEPcG+m3w djqFTXKSCadbSfzKMLGs+9Zq+h8F1gzt9gBWL94nXCa0r3uE41EqR2osxceQiK7B D/MJbIZWSJ3wufDSEAG5DvZqTh9f9QGRozDGYaThOgdQNrRJWfs095A= -----END CERTIFICATE-----Generated at Tue Jan 20 06:05:27 2026 by rpki-client