This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/U7NLBjLIe7mftXvsPSwZXkAwwaE.roa File: U7NLBjLIe7mftXvsPSwZXkAwwaE.roa (raw, json) Hash identifier: 8sR7xzbSE5cXBiqX03gC/TGFCoIN2L88Z57q6SjbtWI= Subject key identifier: 53:B3:4B:06:32:C8:7B:B9:9F:B5:7B:EC:3D:2C:19:5E:40:30:C1:A1 Certificate issuer: /CN=49596cecc21dd02677a727ef37f0689546ea5097 Certificate serial: 019BFB09E15B1162895B450208BCFEC5FFBA Authority key identifier: 49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/U7NLBjLIe7mftXvsPSwZXkAwwaE.roa Signing time: Mon 26 Jan 2026 16:01:27 +0000 ROA not before: Mon 26 Jan 2026 16:01:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5390 IP address blocks: 83.118.224.0/22 maxlen: 24 83.119.0.0/19 maxlen: 24 83.119.0.0/21 maxlen: 24 83.119.8.0/21 maxlen: 24 83.119.14.0/24 maxlen: 24 83.119.16.0/20 maxlen: 24 85.148.0.0/16 maxlen: 17 85.149.0.0/17 maxlen: 18 2a02:2500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:e1:5b:11:62:89:5b:45:02:08:bc:fe:c5:ff:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49596cecc21dd02677a727ef37f0689546ea5097 Validity Not Before: Jan 26 16:01:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53b34b0632c87bb99fb57bec3d2c195e4030c1a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:33:8d:fa:dc:98:0c:1c:84:0a:72:dd:10:fd: cc:c0:67:da:e5:97:d1:f3:28:39:7d:42:35:ce:1c: 22:d9:49:f4:c2:ea:50:cc:38:12:8f:6b:97:79:4e: 98:c6:76:4b:ee:ad:4e:6f:8c:f9:c1:a3:e5:d9:95: 36:b8:98:21:5e:d2:bf:32:b3:8b:d8:06:97:eb:5e: 9e:32:a0:b9:3f:b0:87:d1:f3:a5:bd:04:e2:ae:f9: 91:8d:a8:ae:84:48:69:52:c8:2c:19:ac:d6:ce:a8: 2a:2f:a9:62:56:fa:ba:a8:6b:b7:53:30:0f:13:08: 50:e5:59:b2:d7:f5:d5:3f:b1:1e:62:a2:7d:36:88: 39:76:55:0b:ba:bf:2c:c6:92:2f:4c:f1:8c:00:ff: 04:da:3c:30:fa:23:ad:dd:c1:66:1e:da:72:50:5e: 49:97:32:48:b3:97:7e:03:99:9e:c5:ca:d8:6a:aa: 84:ec:59:58:cd:0f:f0:f9:3c:7e:6a:3a:5e:70:2f: ce:d0:aa:6a:44:66:9e:f6:b6:39:b5:37:6f:a8:60: ba:33:3b:de:65:0e:27:de:6c:61:c3:84:35:b2:96: 56:18:3a:f3:9b:1c:7f:f8:d5:b0:41:c7:89:ab:39: db:e2:05:eb:e7:1b:20:2c:bb:38:83:3d:11:5d:c9: 27:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B3:4B:06:32:C8:7B:B9:9F:B5:7B:EC:3D:2C:19:5E:40:30:C1:A1 X509v3 Authority Key Identifier: keyid:49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/U7NLBjLIe7mftXvsPSwZXkAwwaE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.118.224.0/22 83.119.0.0/19 85.148.0.0-85.149.127.255 IPv6: 2a02:2500::/32 Signature Algorithm: sha256WithRSAEncryption a0:2f:38:6b:0e:fd:1d:82:ba:34:0c:8d:4e:2b:27:6c:54:01: a5:1a:3e:2f:8a:60:45:37:f7:99:a6:83:fa:f0:86:12:76:39: 2d:1f:fa:73:7e:db:ee:d0:d7:5e:8e:0c:b5:51:ce:ca:33:7b: 22:a3:69:39:cf:f9:95:d6:af:94:36:9d:6e:dd:ff:4d:71:ab: 0c:08:f4:cd:22:ad:eb:32:ce:66:75:0a:51:a8:d6:11:5a:bf: 8f:da:9c:94:8b:18:92:09:e0:13:dc:7c:8e:ea:19:47:bf:13: 20:1d:31:a6:b3:bf:f3:a9:7b:3b:a2:81:db:a1:41:58:7f:00: d1:7b:c4:69:fb:f7:2c:53:3b:86:55:23:7b:5c:a4:7b:e1:80: ed:66:c1:95:47:f5:9d:71:2c:4e:3d:81:dd:58:b5:19:53:60: 58:4d:96:fc:dd:f4:67:e9:3f:eb:3d:cd:0e:f9:49:c7:24:56: 69:72:14:72:14:0e:59:0c:e4:6f:15:41:57:b5:bf:60:c0:8e: b2:d1:52:e6:26:73:f5:70:a3:15:71:a8:31:fe:b9:b4:3e:1d: 24:7f:f4:15:3d:08:4c:79:1b:a1:13:2d:ae:f8:e3:42:4d:7e: 3e:d5:24:06:55:db:33:ba:58:26:5e:9a:94:82:77:78:80:56: 5b:a3:ac:63 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZv7CeFbEWKJW0UCCLz+xf+6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NTk2Y2VjYzIxZGQwMjY3N2E3MjdlZjM3ZjA2ODk1NDZl YTUwOTcwHhcNMjYwMTI2MTYwMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2IzNGIwNjMyYzg3YmI5OWZiNTdiZWMzZDJjMTk1ZTQwMzBjMWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDON+tyYDByECnLdEP3MwGfa5ZfR 8yg5fUI1zhwi2Un0wupQzDgSj2uXeU6YxnZL7q1Ob4z5waPl2ZU2uJghXtK/MrOL 2AaX616eMqC5P7CH0fOlvQTirvmRjaiuhEhpUsgsGazWzqgqL6liVvq6qGu3UzAP EwhQ5Vmy1/XVP7EeYqJ9Nog5dlULur8sxpIvTPGMAP8E2jww+iOt3cFmHtpyUF5J lzJIs5d+A5mexcrYaqqE7FlYzQ/w+Tx+ajpecC/O0KpqRGae9rY5tTdvqGC6Mzve ZQ4n3mxhw4Q1spZWGDrzmxx/+NWwQceJqznb4gXr5xsgLLs4gz0RXcknSQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFFOzSwYyyHu5n7V77D0sGV5AMMGhMB8GA1UdIwQY MBaAFElZbOzCHdAmd6cn7zfwaJVG6lCXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1ZsczdNSWQwQ1ozcHlmdk5fQm9sVWJxVUpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lN2JkMDEtNDMyZi00YmY5LTgwYzUt ODk3ZDAwOTc3ZmYyLzEvVTdOTEJqTEllN21mdFh2c1BTd1pYa0F3d2FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9lN2JkMDEtNDMyZi00YmY5LTgwYzUtODk3ZDAwOTc3ZmYy LzEvU1ZsczdNSWQwQ1ozcHlmdk5fQm9sVWJxVUpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAfBAIAATAZAwQCU3bgAwQF U3cAMAsDAwJVlAMEB1WVADANBAIAAjAHAwUAKgIlADANBgkqhkiG9w0BAQsFAAOC AQEAoC84aw79HYK6NAyNTisnbFQBpRo+L4pgRTf3maaD+vCGEnY5LR/6c37b7tDX Xo4MtVHOyjN7IqNpOc/5ldavlDadbt3/TXGrDAj0zSKt6zLOZnUKUajWEVq/j9qc lIsYkgngE9x8juoZR78TIB0xprO/86l7O6KB26FBWH8A0XvEafv3LFM7hlUje1yk e+GA7WbBlUf1nXEsTj2B3Vi1GVNgWE2W/N30Z+k/6z3NDvlJxyRWaXIUchQOWQzk bxVBV7W/YMCOstFS5iZz9XCjFXGoMf65tD4dJH/0FT0ITHkboRMtrvjjQk1+PtUk BlXbM7pYJl6alIJ3eIBWW6OsYw== -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:35 2026 by rpki-client