This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/7nHuEYfzq0sxBotIwOTKnrsuqJc.roa File: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (raw, json) Hash identifier: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ= Subject key identifier: EE:71:EE:11:87:F3:AB:4B:31:06:8B:48:C0:E4:CA:9E:BB:2E:A8:97 Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b Certificate serial: 019B7A5AFEEABAD84C46BC6CAD83956217CD Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/7nHuEYfzq0sxBotIwOTKnrsuqJc.roa Signing time: Thu 01 Jan 2026 16:19:02 +0000 ROA not before: Thu 01 Jan 2026 16:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56876 IP address blocks: 81.31.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:fe:ea:ba:d8:4c:46:bc:6c:ad:83:95:62:17:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b Validity Not Before: Jan 1 16:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee71ee1187f3ab4b31068b48c0e4ca9ebb2ea897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1f:71:4f:b3:0f:49:c9:14:62:cd:7d:cc:62: 1d:f8:c7:49:37:27:8a:5f:ef:ef:11:b6:b6:84:51: 90:40:44:e8:c4:5f:78:4f:10:06:7d:65:d8:a3:25: 73:2f:e2:b0:b7:c6:35:f6:18:bf:48:6f:5d:37:77: c4:75:4f:02:6a:f8:27:c1:6f:6c:f5:a5:2a:2c:3c: a1:1a:46:0b:bb:a4:a9:da:f0:96:ca:47:b3:7a:c4: 41:af:1b:7e:9e:11:d9:35:f1:f4:3e:38:44:83:77: 39:25:5d:a0:91:03:33:c6:4e:c8:e8:c4:f3:c5:4e: 5b:0e:c0:aa:a3:c7:27:d9:1e:bc:e3:99:55:f8:c5: 54:bf:6d:e8:c2:53:d4:2d:5d:ed:27:b8:b1:fd:d9: b2:f7:9c:18:70:52:b7:b8:8f:1d:bb:23:2e:52:dc: e8:c7:8a:b5:78:01:27:5c:14:b3:b9:46:56:75:6d: f0:89:cc:70:26:a1:e9:56:8b:b3:3d:7a:8e:98:f4: ac:6b:5a:07:7a:35:04:e4:72:74:7c:19:ff:8e:5a: 8c:31:73:b5:31:1f:49:ca:31:1b:96:e2:59:f0:c1: 01:85:36:c2:8b:33:9f:1c:76:b8:4d:ab:e0:d7:75: eb:95:8e:23:03:fc:5e:4d:3f:70:b0:cb:11:0b:b5: a2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:71:EE:11:87:F3:AB:4B:31:06:8B:48:C0:E4:CA:9E:BB:2E:A8:97 X509v3 Authority Key Identifier: keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/7nHuEYfzq0sxBotIwOTKnrsuqJc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.31.252.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:06:60:28:c5:42:3b:62:df:af:a7:25:8d:c6:38:b7:ff:70: 2d:16:7f:1b:8b:45:94:0a:02:86:93:e5:37:99:2b:8b:b5:b7: 88:88:9e:9e:4c:b3:9a:03:85:ff:eb:ec:a4:29:13:49:8e:c7: 36:8d:b1:a9:93:6e:2b:f0:4c:29:22:ce:2b:c4:84:d9:1a:2c: 54:6f:9f:3a:75:93:28:d1:07:bd:1c:a4:43:16:4e:32:ce:14: 08:2a:87:fb:09:de:6d:56:31:87:06:75:f4:32:80:41:d5:c4: b1:b2:72:17:25:da:64:83:e8:6a:4f:30:52:31:42:20:90:65: 1b:64:c1:c0:ba:a0:c8:6b:05:e3:11:84:e9:a9:5a:8a:e0:aa: 47:20:9c:83:ea:ff:6e:cc:c3:9a:a1:66:14:c0:04:90:61:22: 2b:a9:f9:7f:67:81:7f:e5:9c:c6:df:87:b0:c8:10:07:5f:05: 20:b5:69:7e:eb:81:8c:0f:e1:e1:eb:83:22:84:e2:e6:1f:2a: fd:a4:6f:65:47:9f:10:57:41:18:36:2a:95:53:6a:62:47:a7: a7:3c:cc:5b:2e:d1:b8:2f:1f:17:45:5d:1a:fb:7d:75:d2:b9: 28:9f:1e:bf:8f:b1:a1:75:1a:93:62:55:28:97:0c:87:c9:5c: b9:57:ea:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wv7quthMRrxsrYOVYhfNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy YjE4MWIwHhcNMjYwMTAxMTYxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTcxZWUxMTg3ZjNhYjRiMzEwNjhiNDhjMGU0Y2E5ZWJiMmVhODk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzB9xT7MPSckUYs19zGId+MdJNyeK X+/vEba2hFGQQEToxF94TxAGfWXYoyVzL+Kwt8Y19hi/SG9dN3fEdU8CavgnwW9s 9aUqLDyhGkYLu6Sp2vCWykezesRBrxt+nhHZNfH0PjhEg3c5JV2gkQMzxk7I6MTz xU5bDsCqo8cn2R6845lV+MVUv23owlPULV3tJ7ix/dmy95wYcFK3uI8duyMuUtzo x4q1eAEnXBSzuUZWdW3wicxwJqHpVouzPXqOmPSsa1oHejUE5HJ0fBn/jlqMMXO1 MR9JyjEbluJZ8MEBhTbCizOfHHa4Tavg13XrlY4jA/xeTT9wsMsRC7WiiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO5x7hGH86tLMQaLSMDkyp67LqiXMB8GA1UdIwQY MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct YWE4NTllMTkyYjE2LzEvN25IdUVZZnpxMHN4Qm90SXdPVEtucnN1cUpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2 LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUR/8MA0G CSqGSIb3DQEBCwUAA4IBAQCaBmAoxUI7Yt+vpyWNxji3/3AtFn8bi0WUCgKGk+U3 mSuLtbeIiJ6eTLOaA4X/6+ykKRNJjsc2jbGpk24r8EwpIs4rxITZGixUb586dZMo 0Qe9HKRDFk4yzhQIKof7Cd5tVjGHBnX0MoBB1cSxsnIXJdpkg+hqTzBSMUIgkGUb ZMHAuqDIawXjEYTpqVqK4KpHIJyD6v9uzMOaoWYUwASQYSIrqfl/Z4F/5ZzG34ew yBAHXwUgtWl+64GMD+Hh64MihOLmHyr9pG9lR58QV0EYNiqVU2piR6enPMxbLtG4 Lx8XRV0a+3110rkonx6/j7GhdRqTYlUolwyHyVy5V+pE -----END CERTIFICATE-----Generated at Thu Jan 8 16:20:42 2026 by rpki-client