This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/7lREXn6K5l-DbJ8mjZvq6RJ1uEk.roa File: 7lREXn6K5l-DbJ8mjZvq6RJ1uEk.roa (raw, json) Hash identifier: 3nD474BFUX8wCCyCzrtNJIx6J0yUBUFRCHlh3/kVZac= Subject key identifier: EE:54:44:5E:7E:8A:E6:5F:83:6C:9F:26:8D:9B:EA:E9:12:75:B8:49 Certificate issuer: /CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675 Certificate serial: 019B7F15AF1E25D7BEAD8FA8F6977B165E0B Authority key identifier: 52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/7lREXn6K5l-DbJ8mjZvq6RJ1uEk.roa Signing time: Fri 02 Jan 2026 14:21:26 +0000 ROA not before: Fri 02 Jan 2026 14:21:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57954 IP address blocks: 192.162.19.0/24 maxlen: 24 193.105.210.0/24 maxlen: 24 194.1.159.0/24 maxlen: 24 2001:678:41c::/48 maxlen: 48 2001:67c:13a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:af:1e:25:d7:be:ad:8f:a8:f6:97:7b:16:5e:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675 Validity Not Before: Jan 2 14:21:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee54445e7e8ae65f836c9f268d9beae91275b849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:40:51:f5:ef:bb:37:0f:62:dd:45:66:6e:0e: ca:75:b7:a0:e2:52:85:de:88:3a:7c:e9:60:c1:81: a7:8c:18:8c:55:7c:c0:a3:77:83:11:ba:20:7e:75: 13:32:73:32:16:b2:af:f7:86:ab:49:70:cd:65:a3: 1d:47:0d:84:68:a5:2a:32:5e:47:e5:af:a8:31:79: e8:39:b8:d8:55:6c:3c:c0:ae:0c:66:a7:b5:2a:a2: 91:c9:d7:fb:5b:fd:0e:5b:a2:08:3d:b1:44:f2:9c: 92:4f:7a:f7:e0:93:e7:ee:3f:98:98:40:16:eb:79: fb:3a:4a:25:2a:d1:ba:f8:91:77:45:79:51:62:f4: 9b:4a:81:ef:f2:a1:9e:1d:2b:53:9d:9c:96:8d:56: 21:3e:69:a8:b1:38:13:78:cc:3e:f5:58:53:d0:65: c4:b0:00:e0:99:71:bd:d8:08:89:37:8c:6f:19:ca: 30:87:56:67:1b:45:e8:af:84:f3:d5:aa:e5:cc:a5: 57:3a:43:08:a8:60:86:1d:19:9d:ad:71:dd:5d:fc: 74:46:ac:7b:11:4e:f0:0d:0c:0f:ba:b7:0e:a0:31: 2f:37:3a:30:f3:8d:43:33:41:be:b6:97:b0:e7:e0: 65:9d:75:b1:ce:b2:ef:31:e5:b3:6c:ac:13:aa:de: 4b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:54:44:5E:7E:8A:E6:5F:83:6C:9F:26:8D:9B:EA:E9:12:75:B8:49 X509v3 Authority Key Identifier: keyid:52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/7lREXn6K5l-DbJ8mjZvq6RJ1uEk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.162.19.0/24 193.105.210.0/24 194.1.159.0/24 IPv6: 2001:678:41c::/48 2001:67c:13a0::/48 Signature Algorithm: sha256WithRSAEncryption 25:15:10:5b:4f:59:70:3b:af:49:f4:e4:77:67:ad:bf:f9:a1: 49:50:4f:dd:38:f0:34:43:13:d3:a0:45:86:4a:fb:2a:46:cd: 36:d7:f8:c5:4d:cd:65:72:6f:d2:b4:34:de:a5:97:b5:21:f8: ba:7f:34:2c:17:f1:a8:6a:18:7c:67:3d:d3:88:45:3d:fe:48: 2f:62:91:31:c4:1c:65:ec:75:70:a2:79:34:12:00:0e:00:3f: f1:e8:d2:46:98:e9:61:69:7a:65:c0:68:ac:d1:92:f0:8f:c7: 60:83:2f:9e:1d:88:68:f7:d0:d5:dc:5c:96:43:05:65:5a:40: bf:39:cc:5e:07:ba:d9:e8:2f:59:93:14:f7:2f:b5:9b:1d:54: 8e:3d:ce:e1:29:16:d0:4a:b6:06:1e:b4:bf:21:b9:98:ad:25: c3:4f:39:1b:b3:d3:88:97:63:11:2d:7a:0e:8d:bb:52:ed:f6: 1b:67:39:6f:fc:eb:4f:e5:33:3b:80:21:84:b7:73:3a:88:fc: 16:ed:d2:1a:6e:be:04:c6:53:bd:9b:d0:8e:ca:36:58:4b:31: a9:a2:64:35:07:ec:22:22:72:67:76:af:17:19:50:6b:bd:03: a2:0b:cd:d1:4a:c2:6f:7a:5e:cf:d0:81:85:49:aa:e6:bb:b9: 48:06:dd:73 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt/Fa8eJde+rY+o9pd7Fl4LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYmYyMWVlYjM2NDE0YjMyODBlNmMzM2IwYjU3Mjk2Yjhm NmI2NzUwHhcNMjYwMTAyMTQyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTU0NDQ1ZTdlOGFlNjVmODM2YzlmMjY4ZDliZWFlOTEyNzViODQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10BR9e+7Nw9i3UVmbg7Kdbeg4lKF 3og6fOlgwYGnjBiMVXzAo3eDEbogfnUTMnMyFrKv94arSXDNZaMdRw2EaKUqMl5H 5a+oMXnoObjYVWw8wK4MZqe1KqKRydf7W/0OW6IIPbFE8pyST3r34JPn7j+YmEAW 63n7OkolKtG6+JF3RXlRYvSbSoHv8qGeHStTnZyWjVYhPmmosTgTeMw+9VhT0GXE sADgmXG92AiJN4xvGcowh1ZnG0Xor4Tz1arlzKVXOkMIqGCGHRmdrXHdXfx0Rqx7 EU7wDQwPurcOoDEvNzow841DM0G+tpew5+BlnXWxzrLvMeWzbKwTqt5LJQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFO5URF5+iuZfg2yfJo2b6ukSdbhJMB8GA1UdIwQY MBaAFFK/Ie6zZBSzKA5sM7C1cpa49rZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXI4aDdyTmtGTE1vRG13enNMVnlscmoydG5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wNTk1NDMtNjllNC00OGY2LWExNzUt YWM5NmY2YWFiNDk0LzEvN2xSRVhuNks1bC1EYko4bWpadnE2UkoxdUVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wNTk1NDMtNjllNC00OGY2LWExNzUtYWM5NmY2YWFiNDk0 LzEvVXI4aDdyTmtGTE1vRG13enNMVnlscmoydG5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIAATASAwQAwKITAwQA wWnSAwQAwgGfMBgEAgACMBIDBwAgAQZ4BBwDBwAgAQZ8E6AwDQYJKoZIhvcNAQEL BQADggEBACUVEFtPWXA7r0n05Hdnrb/5oUlQT9048DRDE9OgRYZK+ypGzTbX+MVN zWVyb9K0NN6ll7Uh+Lp/NCwX8ahqGHxnPdOIRT3+SC9ikTHEHGXsdXCieTQSAA4A P/Ho0kaY6WFpemXAaKzRkvCPx2CDL54diGj30NXcXJZDBWVaQL85zF4HutnoL1mT FPcvtZsdVI49zuEpFtBKtgYetL8huZitJcNPORuz04iXYxEteg6Nu1Lt9htnOW/8 60/lMzuAIYS3czqI/Bbt0hpuvgTGU72b0I7KNlhLMamiZDUH7CIicmd2rxcZUGu9 A6ILzdFKwm96Xs/QgYVJqua7uUgG3XM= -----END CERTIFICATE-----Generated at Mon Feb 9 20:03:26 2026 by rpki-client