This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/7TJ8GqKMB7ONKpmIttAKlfVjIPI.roa File: 7TJ8GqKMB7ONKpmIttAKlfVjIPI.roa (raw, json) Hash identifier: YqU7Dk9vgRbL9GHaPYk9nyjuTWJnjnKlb/odLn25dDg= Subject key identifier: ED:32:7C:1A:A2:8C:07:B3:8D:2A:99:88:B6:D0:0A:95:F5:63:20:F2 Certificate issuer: /CN=89af8769339703da3b0cb5e831023d3bf63f022e Certificate serial: 019B7E38E93DC8E59E97A65C86B6616FCA0D Authority key identifier: 89:AF:87:69:33:97:03:DA:3B:0C:B5:E8:31:02:3D:3B:F6:3F:02:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/7TJ8GqKMB7ONKpmIttAKlfVjIPI.roa Signing time: Fri 02 Jan 2026 10:20:17 +0000 ROA not before: Fri 02 Jan 2026 10:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50661 IP address blocks: 109.197.96.0/21 maxlen: 22 109.207.144.0/20 maxlen: 21 185.167.32.0/22 maxlen: 23 192.166.32.0/22 maxlen: 22 195.191.180.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft rsync://rpki.ripe.net/repository/DEFAULT/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e9:3d:c8:e5:9e:97:a6:5c:86:b6:61:6f:ca:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89af8769339703da3b0cb5e831023d3bf63f022e Validity Not Before: Jan 2 10:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed327c1aa28c07b38d2a9988b6d00a95f56320f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7f:2e:ad:45:c3:e1:bc:9a:36:6b:c8:af:02: d6:33:af:e2:c0:0f:97:e0:5f:99:c8:b7:f6:e5:ba: a3:ad:11:3f:ff:ce:07:54:41:00:aa:c4:a2:9b:43: 7c:df:86:88:86:e3:69:c1:af:84:f6:18:b2:28:b0: 88:9b:f8:da:28:7d:ac:b8:c0:ff:93:9d:c9:1c:82: b4:b5:56:66:93:31:36:58:b3:39:8e:ee:f1:8b:9a: c1:4d:39:bc:99:31:2e:53:36:de:5e:15:15:fe:f3: 02:fb:97:c6:88:e6:52:a6:2a:71:7d:ab:17:7d:e0: 7f:28:38:71:b8:27:11:57:fd:5a:3b:c6:85:7e:3c: 03:61:12:a9:cc:6d:ee:fa:5b:c1:7c:d1:8e:46:3d: 75:49:4c:54:db:c3:07:31:d4:c9:48:ee:a1:cb:5e: f3:cf:23:cc:b6:6e:74:25:9a:79:cc:29:27:ea:4f: d1:74:68:e4:4b:30:1c:97:ef:36:c4:c8:88:64:7b: b8:b8:86:34:a7:ad:c5:0b:06:42:8a:e0:a9:3a:54: 9c:bd:94:3e:69:69:3e:9b:f9:d7:df:32:59:b5:e2: 6e:b9:bd:28:b0:7d:96:af:19:20:03:6f:4e:d1:fb: ca:10:61:12:bc:a9:7a:70:90:53:42:56:c4:10:f2: a6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:32:7C:1A:A2:8C:07:B3:8D:2A:99:88:B6:D0:0A:95:F5:63:20:F2 X509v3 Authority Key Identifier: keyid:89:AF:87:69:33:97:03:DA:3B:0C:B5:E8:31:02:3D:3B:F6:3F:02:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/7TJ8GqKMB7ONKpmIttAKlfVjIPI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.197.96.0/21 109.207.144.0/20 185.167.32.0/22 192.166.32.0/22 195.191.180.0/23 Signature Algorithm: sha256WithRSAEncryption 60:90:d4:b8:6a:3c:c2:3d:d3:6d:d7:dc:89:39:e6:ab:69:4f: 11:52:df:d4:4e:26:87:88:41:77:77:04:e9:31:20:2d:51:07: be:05:65:93:50:91:10:59:42:53:97:ad:9e:28:5f:70:16:d5: 3c:38:f0:7c:aa:56:60:3d:41:a7:f5:19:ab:6c:1e:6c:84:ce: c4:54:1c:63:2c:30:f8:ee:48:d7:56:e3:7a:ef:b6:ca:5a:3f: 99:82:bd:57:a1:71:6b:ea:45:b6:cc:d9:73:e9:f0:7a:0c:f4: 3b:d6:cc:5f:d0:3a:a8:5b:bc:69:93:73:f0:95:1d:a5:e4:26: 73:6f:73:c6:40:23:a0:77:93:29:46:4c:87:ac:82:53:76:9d: 7b:70:95:27:98:d3:5a:1b:83:c2:8f:c4:60:2f:68:03:93:b9: 3d:56:d5:2b:97:76:71:e5:ec:21:cd:9f:38:12:3a:36:31:af: 1e:79:bd:b6:ff:60:2d:47:8a:9f:c4:81:32:45:e6:f4:df:2c: 03:ca:11:19:45:9c:7f:87:a1:47:dc:a9:ed:1d:93:31:a6:62: 5f:8c:aa:65:72:fb:5c:bd:d2:3e:80:64:0e:2a:df:26:dd:98: cb:3d:c8:fb:a3:9a:11:e1:35:95:54:fd:b5:f1:70:67:65:16: 36:a7:97:96 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt+OOk9yOWel6ZchrZhb8oNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWY4NzY5MzM5NzAzZGEzYjBjYjVlODMxMDIzZDNiZjYz ZjAyMmUwHhcNMjYwMTAyMTAyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDMyN2MxYWEyOGMwN2IzOGQyYTk5ODhiNmQwMGE5NWY1NjMyMGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n8urUXD4byaNmvIrwLWM6/iwA+X 4F+ZyLf25bqjrRE//84HVEEAqsSim0N834aIhuNpwa+E9hiyKLCIm/jaKH2suMD/ k53JHIK0tVZmkzE2WLM5ju7xi5rBTTm8mTEuUzbeXhUV/vMC+5fGiOZSpipxfasX feB/KDhxuCcRV/1aO8aFfjwDYRKpzG3u+lvBfNGORj11SUxU28MHMdTJSO6hy17z zyPMtm50JZp5zCkn6k/RdGjkSzAcl+82xMiIZHu4uIY0p63FCwZCiuCpOlScvZQ+ aWk+m/nX3zJZteJuub0osH2WrxkgA29O0fvKEGESvKl6cJBTQlbEEPKmIwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFO0yfBqijAezjSqZiLbQCpX1YyDyMB8GA1UdIwQY MBaAFImvh2kzlwPaOwy16DECPTv2PwIuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWEtSGFUT1hBOW83RExYb01RSTlPX1lfQWk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81ZTgyZDYtYzYxMS00MGFkLTk1OGUt MzAxZTQ2NTRkZGY2LzEvN1RKOEdxS01CN09OS3BtSXR0QUtsZlZqSVBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC81ZTgyZDYtYzYxMS00MGFkLTk1OGUtMzAxZTQ2NTRkZGY2 LzEvaWEtSGFUT1hBOW83RExYb01RSTlPX1lfQWk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDbcVgAwQE bc+QAwQCuacgAwQCwKYgAwQBw7+0MA0GCSqGSIb3DQEBCwUAA4IBAQBgkNS4ajzC PdNt19yJOearaU8RUt/UTiaHiEF3dwTpMSAtUQe+BWWTUJEQWUJTl62eKF9wFtU8 OPB8qlZgPUGn9RmrbB5shM7EVBxjLDD47kjXVuN677bKWj+Zgr1XoXFr6kW2zNlz 6fB6DPQ71sxf0DqoW7xpk3PwlR2l5CZzb3PGQCOgd5MpRkyHrIJTdp17cJUnmNNa G4PCj8RgL2gDk7k9VtUrl3Zx5ewhzZ84Ejo2Ma8eeb22/2AtR4qfxIEyReb03ywD yhEZRZx/h6FH3KntHZMxpmJfjKplcvtcvdI+gGQOKt8m3ZjLPcj7o5oR4TWVVP21 8XBnZRY2p5eW -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:14 2026 by rpki-client