This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/7oSS-r2bMLw-tHLZnTLEn6ZKtA0.roa File: 7oSS-r2bMLw-tHLZnTLEn6ZKtA0.roa (raw, json) Hash identifier: sEaYDQdsiX4RB8VnPuUfSRtKLpLITXk4UddGS53dMkM= Subject key identifier: EE:84:92:FA:BD:9B:30:BC:3E:B4:72:D9:9D:32:C4:9F:A6:4A:B4:0D Certificate issuer: /CN=89acb8893e94180747eec1975ed5604c4ddbe0c5 Certificate serial: 019B7EA6B4CFD3F4A3DD451ED3FED023DB00 Authority key identifier: 89:AC:B8:89:3E:94:18:07:47:EE:C1:97:5E:D5:60:4C:4D:DB:E0:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/7oSS-r2bMLw-tHLZnTLEn6ZKtA0.roa Signing time: Fri 02 Jan 2026 12:20:12 +0000 ROA not before: Fri 02 Jan 2026 12:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60917 IP address blocks: 45.158.0.0/22 maxlen: 22 45.158.0.0/24 maxlen: 24 45.158.1.0/24 maxlen: 24 45.158.2.0/24 maxlen: 24 45.158.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.crl rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:b4:cf:d3:f4:a3:dd:45:1e:d3:fe:d0:23:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89acb8893e94180747eec1975ed5604c4ddbe0c5 Validity Not Before: Jan 2 12:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee8492fabd9b30bc3eb472d99d32c49fa64ab40d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:71:8f:9e:93:ee:49:83:d1:0f:1a:fb:36:42: 1b:93:2c:6f:15:e6:d3:40:34:19:b0:f1:d3:97:6c: 71:90:77:2a:d4:d4:c0:da:d4:46:c3:80:d6:9e:60: bf:01:be:fe:d8:98:55:06:68:73:8d:58:d0:ed:fc: f8:fb:58:4d:ef:a6:0c:28:b4:bd:c4:0f:75:6f:76: a2:eb:ea:41:3c:c5:d5:b3:63:5f:25:42:ff:2d:31: 83:9e:de:19:7d:10:69:76:a4:46:d0:e6:17:b3:ea: 8b:9d:14:cf:16:a7:d9:70:49:9b:92:5a:45:f1:1e: 1a:f1:36:fe:55:bc:c0:42:8f:22:46:1a:6d:8c:16: a6:e0:dc:45:fd:8d:42:52:b4:9c:37:30:9c:18:ab: 23:b9:9c:33:b6:54:09:52:e0:ea:3e:d6:f5:bf:8e: f0:b5:cd:c7:da:28:21:13:56:6e:c1:53:70:38:fc: 21:24:2a:bf:64:18:1d:46:01:c4:bd:d2:28:00:ce: 03:b7:a6:6e:b3:4a:2d:e0:b0:7a:ec:69:c4:22:83: b9:ad:b2:75:99:07:03:81:53:2f:15:a9:0d:d6:ae: 59:aa:cf:30:98:c1:78:c0:38:c2:6c:e5:b5:56:14: d0:7d:5c:73:6a:7a:49:3f:ea:59:cf:cb:01:d3:c4: 0a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:84:92:FA:BD:9B:30:BC:3E:B4:72:D9:9D:32:C4:9F:A6:4A:B4:0D X509v3 Authority Key Identifier: keyid:89:AC:B8:89:3E:94:18:07:47:EE:C1:97:5E:D5:60:4C:4D:DB:E0:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/7oSS-r2bMLw-tHLZnTLEn6ZKtA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.0.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:d0:17:47:6e:65:d0:cc:72:5b:81:b0:ba:72:89:32:b0:c4: 35:0f:05:5b:16:89:1b:eb:9b:28:67:a1:94:c2:e8:aa:6f:a3: 54:91:8e:df:ad:0f:12:d8:da:29:0b:59:d7:a1:da:10:7c:18: b0:f1:31:81:40:af:ba:93:d9:39:aa:fc:f3:7e:7b:ef:07:a4: 76:22:3e:87:48:39:1f:ad:7a:08:de:ca:60:65:6e:54:f8:fe: f2:ba:26:2b:73:f7:92:de:26:af:40:63:e9:a3:fc:66:04:bc: bd:f5:c1:92:4a:1a:a4:01:6f:8a:be:db:4c:9a:70:12:50:a0: 7a:5d:ad:93:6b:86:f3:21:7e:45:32:bd:bb:77:3b:7b:26:92: 76:e5:14:ec:ea:53:18:9e:de:1a:48:85:d6:f1:38:96:92:b6: a0:9d:20:db:42:1b:f3:a4:33:d6:85:04:a8:c4:df:7b:20:65: f0:ab:e1:c6:dd:e6:1a:aa:66:c6:6f:a3:f1:40:9c:d2:16:a6: 25:bd:0e:be:13:c4:e4:76:1f:f7:d3:74:10:b1:07:c5:9c:9e: b9:42:7f:be:5a:46:49:d2:db:10:af:94:0e:2f:3a:fa:27:c0: 59:42:bd:01:c1:ac:82:6f:c8:18:e3:f2:54:65:47:76:a9:48: 63:a6:73:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+prTP0/Sj3UUe0/7QI9sAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWNiODg5M2U5NDE4MDc0N2VlYzE5NzVlZDU2MDRjNGRk YmUwYzUwHhcNMjYwMTAyMTIyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTg0OTJmYWJkOWIzMGJjM2ViNDcyZDk5ZDMyYzQ5ZmE2NGFiNDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXGPnpPuSYPRDxr7NkIbkyxvFebT QDQZsPHTl2xxkHcq1NTA2tRGw4DWnmC/Ab7+2JhVBmhzjVjQ7fz4+1hN76YMKLS9 xA91b3ai6+pBPMXVs2NfJUL/LTGDnt4ZfRBpdqRG0OYXs+qLnRTPFqfZcEmbklpF 8R4a8Tb+VbzAQo8iRhptjBam4NxF/Y1CUrScNzCcGKsjuZwztlQJUuDqPtb1v47w tc3H2ighE1ZuwVNwOPwhJCq/ZBgdRgHEvdIoAM4Dt6Zus0ot4LB67GnEIoO5rbJ1 mQcDgVMvFakN1q5Zqs8wmMF4wDjCbOW1VhTQfVxzanpJP+pZz8sB08QKFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO6Ekvq9mzC8PrRy2Z0yxJ+mSrQNMB8GA1UdIwQY MBaAFImsuIk+lBgHR+7Bl17VYExN2+DFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWF5NGlUNlVHQWRIN3NHWFh0VmdURTNiNE1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wY2Q0YmUtMjQ3Zi00ZGUyLTkzOGMt ZjBjZDhiYjU1MmUwLzEvN29TUy1yMmJNTHctdEhMWm5UTEVuNlpLdEEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wY2Q0YmUtMjQ3Zi00ZGUyLTkzOGMtZjBjZDhiYjU1MmUw LzEvaWF5NGlUNlVHQWRIN3NHWFh0VmdURTNiNE1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZ4AMA0G CSqGSIb3DQEBCwUAA4IBAQCL0BdHbmXQzHJbgbC6cokysMQ1DwVbFokb65soZ6GU wuiqb6NUkY7frQ8S2NopC1nXodoQfBiw8TGBQK+6k9k5qvzzfnvvB6R2Ij6HSDkf rXoI3spgZW5U+P7yuiYrc/eS3iavQGPpo/xmBLy99cGSShqkAW+KvttMmnASUKB6 Xa2Ta4bzIX5FMr27dzt7JpJ25RTs6lMYnt4aSIXW8TiWkragnSDbQhvzpDPWhQSo xN97IGXwq+HG3eYaqmbGb6PxQJzSFqYlvQ6+E8Tkdh/303QQsQfFnJ65Qn++WkZJ 0tsQr5QOLzr6J8BZQr0BwayCb8gY4/JUZUd2qUhjpnM3 -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:02 2026 by rpki-client