This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/7osNxsXaNZ0atgy1tSk-ErRImNA.roa File: 7osNxsXaNZ0atgy1tSk-ErRImNA.roa (raw, json) Hash identifier: 8e7o+cChykZO+0/seKW+tQ6gNasSXCuNcM9hirx8EvE= Subject key identifier: EE:8B:0D:C6:C5:DA:35:9D:1A:B6:0C:B5:B5:29:3E:12:B4:48:98:D0 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019B9C9478561757B2761D7A31A6FA0DC8F8 Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/7osNxsXaNZ0atgy1tSk-ErRImNA.roa Signing time: Thu 08 Jan 2026 07:48:54 +0000 ROA not before: Thu 08 Jan 2026 07:48:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 94.74.147.0/24 maxlen: 24 94.74.157.0/24 maxlen: 24 94.74.158.0/24 maxlen: 24 94.74.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9c:94:78:56:17:57:b2:76:1d:7a:31:a6:fa:0d:c8:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Jan 8 07:48:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee8b0dc6c5da359d1ab60cb5b5293e12b44898d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b4:54:da:f0:40:0a:63:72:1a:3d:e9:45:43: 62:cd:d2:ee:76:62:d2:09:57:4f:65:fe:aa:2b:ee: 4c:10:a1:d0:f2:f2:3e:f7:75:53:cc:c4:65:10:aa: 33:aa:da:52:cd:f1:53:b1:e9:8b:de:11:94:c6:6c: fc:f9:60:eb:b8:eb:ca:94:92:37:b1:2f:f7:7e:ba: 68:e5:35:bd:01:9c:38:79:a7:b6:58:04:cb:62:9a: 0f:f6:09:2b:24:bf:57:2d:ce:0c:05:81:09:0e:24: 70:5c:7e:2d:83:94:b3:a0:46:39:b3:53:2c:f7:9e: df:f8:be:72:14:8f:22:18:2b:8b:1b:55:58:a0:8f: 42:99:45:c0:76:08:db:7f:9c:dc:dd:46:9b:0d:26: 2a:24:d3:74:18:96:70:a2:a1:ce:a6:e8:f0:10:ed: b2:86:5b:f9:fa:97:79:8e:46:96:11:79:c9:80:e5: bc:1b:50:97:96:e4:dc:5f:51:47:18:67:7b:c4:35: 2d:88:0a:a4:92:a8:ab:51:01:36:a4:a8:9d:89:00: aa:ca:c5:be:55:f7:d1:fe:76:bb:b2:25:04:2d:8a: 1e:35:59:53:1c:91:a4:9d:1a:e7:2d:99:d9:3d:d6: 05:50:14:95:3d:45:fa:d4:9e:90:17:87:51:43:9e: a0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8B:0D:C6:C5:DA:35:9D:1A:B6:0C:B5:B5:29:3E:12:B4:48:98:D0 X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/7osNxsXaNZ0atgy1tSk-ErRImNA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.74.147.0/24 94.74.157.0-94.74.158.255 94.74.164.0/24 Signature Algorithm: sha256WithRSAEncryption 24:3a:42:b9:d9:31:21:7f:b8:e9:15:c2:2a:8b:00:08:38:8d: 5a:d4:e2:86:7e:5a:43:c0:75:84:c6:41:e2:61:58:ee:ab:70: 19:83:91:73:f2:7c:4b:d9:b5:0c:cd:b9:44:8f:65:55:56:ae: 21:24:27:01:c2:3d:5e:fd:79:d4:7c:94:90:3c:05:7f:69:23: dd:e8:56:a6:8c:f9:f1:f0:4d:9d:92:b9:d0:37:22:f5:7f:cd: a5:d4:1a:f7:bf:f6:8e:fb:f8:a9:69:9f:31:93:a8:f2:12:a3: fd:d1:9c:84:dc:e0:76:47:9e:4a:32:52:83:ce:05:5e:8d:a9: ad:9a:2b:c2:c2:55:77:fd:79:73:1f:ef:dd:c7:65:11:c5:a1: d5:14:86:4d:8c:b3:bb:17:35:12:aa:b4:c6:2e:aa:ff:37:79: a6:92:69:28:54:41:86:fd:17:73:23:28:25:77:db:61:b7:68: 73:dc:3c:78:6a:8d:4d:f2:f5:e8:b6:6b:3b:4d:32:ed:f9:67: 2a:d4:cf:a7:08:b5:21:05:85:6b:2e:7d:34:34:db:55:88:38: c2:6b:b1:8a:fe:e2:dc:cf:94:a1:ea:67:69:a4:36:f9:34:64: e3:46:28:93:8c:d1:b5:e7:e8:fb:a3:f3:07:92:68:ca:7b:77: 43:03:cf:51 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZuclHhWF1eydh16Mab6Dcj4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjYwMTA4MDc0ODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZThiMGRjNmM1ZGEzNTlkMWFiNjBjYjViNTI5M2UxMmI0NDg5OGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubRU2vBACmNyGj3pRUNizdLudmLS CVdPZf6qK+5MEKHQ8vI+93VTzMRlEKozqtpSzfFTsemL3hGUxmz8+WDruOvKlJI3 sS/3frpo5TW9AZw4eae2WATLYpoP9gkrJL9XLc4MBYEJDiRwXH4tg5SzoEY5s1Ms 957f+L5yFI8iGCuLG1VYoI9CmUXAdgjbf5zc3UabDSYqJNN0GJZwoqHOpujwEO2y hlv5+pd5jkaWEXnJgOW8G1CXluTcX1FHGGd7xDUtiAqkkqirUQE2pKidiQCqysW+ VffR/na7siUELYoeNVlTHJGknRrnLZnZPdYFUBSVPUX61J6QF4dRQ56gYwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFO6LDcbF2jWdGrYMtbUpPhK0SJjQMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvN29zTnhzWGFOWjBhdGd5MXRTay1FclJJbU5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAXkqTMAwD BABeSp0DBABeSp4DBABeSqQwDQYJKoZIhvcNAQELBQADggEBACQ6QrnZMSF/uOkV wiqLAAg4jVrU4oZ+WkPAdYTGQeJhWO6rcBmDkXPyfEvZtQzNuUSPZVVWriEkJwHC PV79edR8lJA8BX9pI93oVqaM+fHwTZ2SudA3IvV/zaXUGve/9o77+KlpnzGTqPIS o/3RnITc4HZHnkoyUoPOBV6Nqa2aK8LCVXf9eXMf793HZRHFodUUhk2Ms7sXNRKq tMYuqv83eaaSaShUQYb9F3MjKCV322G3aHPcPHhqjU3y9ei2aztNMu35ZyrUz6cI tSEFhWsufTQ021WIOMJrsYr+4tzPlKHqZ2mkNvk0ZONGKJOM0bXn6Puj8weSaMp7 d0MDz1E= -----END CERTIFICATE-----Generated at Wed Jan 21 22:55:10 2026 by rpki-client