This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/4x7xlJ5CE-omlog4WhPFe7KxM00.roa File: 4x7xlJ5CE-omlog4WhPFe7KxM00.roa (raw, json) Hash identifier: LciNIRkwNsiYAIZC8rdzz4Vux1Yp3/vzbTcM2IDIO58= Subject key identifier: E3:1E:F1:94:9E:42:13:EA:26:96:88:38:5A:13:C5:7B:B2:B1:33:4D Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B35810F25694CFDB931265FE9AA547E Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/4x7xlJ5CE-omlog4WhPFe7KxM00.roa Signing time: Thu 01 Jan 2026 20:17:42 +0000 ROA not before: Thu 01 Jan 2026 20:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59532 IP address blocks: 81.181.251.0/24 maxlen: 24 85.121.207.0/24 maxlen: 24 85.122.80.0/24 maxlen: 24 217.156.121.0/24 maxlen: 24 217.156.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:81:0f:25:69:4c:fd:b9:31:26:5f:e9:aa:54:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e31ef1949e4213ea269688385a13c57bb2b1334d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f3:c5:19:de:00:e5:9b:4f:ba:c4:40:c8:a0: 81:d8:ea:42:b9:31:9a:f7:b4:36:c1:27:94:ba:ac: 7b:04:d0:ae:b2:47:89:0a:e9:51:3e:c4:ec:d3:a9: 20:68:bf:07:31:05:87:e6:bf:5b:07:9c:49:4b:f6: d1:1f:0b:42:88:3f:e7:09:76:b2:98:14:dc:cf:50: 30:53:24:3b:17:94:31:18:a3:bc:73:ef:a8:4d:96: c7:04:92:ee:85:1b:53:44:57:fc:b7:1a:04:97:29: 2c:42:32:0c:1a:92:f9:57:16:54:6c:78:65:ad:77: 78:c7:db:25:79:99:c2:22:81:b6:c7:9a:30:2f:c7: b6:7a:d9:db:11:41:2d:07:44:22:8c:0c:b6:25:e2: aa:ed:d1:74:a7:23:f6:d8:26:54:67:23:06:66:80: 64:c7:83:11:01:c1:ac:7c:60:df:60:3f:9f:50:1e: 95:92:60:fe:4b:ff:d4:8f:bc:40:d1:4b:07:28:75: 5c:89:97:35:b5:ab:60:9f:a1:5f:20:2a:8f:15:86: ca:aa:e2:26:6a:40:5f:ed:0c:a7:d4:53:3f:50:22: 43:b2:dc:fb:c9:1d:eb:21:24:80:46:e0:01:61:c1: 65:24:66:07:c5:ea:e3:dd:df:28:c0:a8:a6:21:30: 23:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1E:F1:94:9E:42:13:EA:26:96:88:38:5A:13:C5:7B:B2:B1:33:4D X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/4x7xlJ5CE-omlog4WhPFe7KxM00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.181.251.0/24 85.121.207.0/24 85.122.80.0/24 217.156.121.0/24 217.156.126.0/24 Signature Algorithm: sha256WithRSAEncryption 86:c8:61:c5:da:49:30:e0:b7:34:f7:dd:6c:a8:55:f0:4d:bf: bd:cc:8d:3c:49:34:dc:35:0c:b8:d2:a9:9a:e0:c0:5b:1e:23: 1f:6a:8a:c4:f6:f3:2f:1a:96:16:51:bb:83:c3:c8:9c:6b:57: ed:4c:36:54:0f:18:b3:e1:6b:10:43:c2:f0:55:ac:a6:03:39: 38:bf:6b:c8:cd:ab:41:cf:a6:f4:1b:3e:bc:2c:81:23:7d:8d: 2a:1b:5c:08:7a:53:ed:72:31:08:55:fe:09:42:b0:cf:98:03: af:ca:08:e0:e0:52:11:f8:6d:10:ea:62:ce:47:95:48:ca:13: 68:7a:2d:6c:8d:15:a2:c2:0b:47:ff:d9:93:a4:64:89:ac:10: 43:56:e9:3b:80:f7:bd:c0:fb:5a:5d:82:b5:3c:78:4d:da:8d: 96:de:cd:8b:1d:d8:19:86:68:e9:70:c6:58:12:e0:ea:c4:55: 85:38:25:a3:6f:52:cb:a3:e5:3e:67:cd:79:06:31:0d:55:89: d4:1a:0f:31:d0:ef:fc:01:be:e0:7a:33:e4:22:67:f3:a7:0b: 40:27:20:f2:be:aa:5d:16:c0:cb:21:27:b4:b0:fb:fd:40:47: 73:15:c2:c5:f5:30:fe:00:bb:4a:94:03:d4:e7:30:a1:44:88: ef:f8:67:b5 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt7NYEPJWlM/bkxJl/pqlR+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzFlZjE5NDllNDIxM2VhMjY5Njg4Mzg1YTEzYzU3YmIyYjEzMzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvPFGd4A5ZtPusRAyKCB2OpCuTGa 97Q2wSeUuqx7BNCuskeJCulRPsTs06kgaL8HMQWH5r9bB5xJS/bRHwtCiD/nCXay mBTcz1AwUyQ7F5QxGKO8c++oTZbHBJLuhRtTRFf8txoElyksQjIMGpL5VxZUbHhl rXd4x9sleZnCIoG2x5owL8e2etnbEUEtB0QijAy2JeKq7dF0pyP22CZUZyMGZoBk x4MRAcGsfGDfYD+fUB6VkmD+S//Uj7xA0UsHKHVciZc1tatgn6FfICqPFYbKquIm akBf7Qyn1FM/UCJDstz7yR3rISSARuABYcFlJGYHxerj3d8owKimITAjAQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFOMe8ZSeQhPqJpaIOFoTxXuysTNNMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvNHg3eGxKNUNFLW9tbG9nNFdoUEZlN0t4TTAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAUbX7AwQA VXnPAwQAVXpQAwQA2Zx5AwQA2Zx+MA0GCSqGSIb3DQEBCwUAA4IBAQCGyGHF2kkw 4Lc0991sqFXwTb+9zI08STTcNQy40qma4MBbHiMfaorE9vMvGpYWUbuDw8ica1ft TDZUDxiz4WsQQ8LwVaymAzk4v2vIzatBz6b0Gz68LIEjfY0qG1wIelPtcjEIVf4J QrDPmAOvygjg4FIR+G0Q6mLOR5VIyhNoei1sjRWiwgtH/9mTpGSJrBBDVuk7gPe9 wPtaXYK1PHhN2o2W3s2LHdgZhmjpcMZYEuDqxFWFOCWjb1LLo+U+Z815BjENVYnU Gg8x0O/8Ab7gejPkImfzpwtAJyDyvqpdFsDLISe0sPv9QEdzFcLF9TD+ALtKlAPU 5zChRIjv+Ge1 -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:04 2026 by rpki-client