This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/7RZneK1-WhczwVXQZA7asvVmG0o.roa File: 7RZneK1-WhczwVXQZA7asvVmG0o.roa (raw, json) Hash identifier: FToOU7r9z4r8w9cG4+WQTnBdMEmKBFJWnIOgnLoJvLs= Subject key identifier: ED:16:67:78:AD:7E:5A:17:33:C1:55:D0:64:0E:DA:B2:F5:66:1B:4A Certificate issuer: /CN=9e80702ee6a1dcbf3ae257a199415f59b8338ea4 Certificate serial: 019B7BA37D25D11A61F46E764EB05DFEA3F6 Authority key identifier: 9E:80:70:2E:E6:A1:DC:BF:3A:E2:57:A1:99:41:5F:59:B8:33:8E:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/7RZneK1-WhczwVXQZA7asvVmG0o.roa Signing time: Thu 01 Jan 2026 22:17:50 +0000 ROA not before: Thu 01 Jan 2026 22:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47548 IP address blocks: 5.149.176.0/20 maxlen: 20 5.149.176.0/24 maxlen: 24 5.149.177.0/24 maxlen: 24 5.149.178.0/24 maxlen: 24 5.149.179.0/24 maxlen: 24 5.149.180.0/24 maxlen: 24 5.149.181.0/24 maxlen: 24 5.149.182.0/24 maxlen: 24 5.149.183.0/24 maxlen: 24 5.149.184.0/24 maxlen: 24 5.149.185.0/24 maxlen: 24 5.149.186.0/24 maxlen: 24 5.149.187.0/24 maxlen: 24 5.149.188.0/23 maxlen: 23 5.149.190.0/23 maxlen: 23 185.216.36.0/22 maxlen: 22 185.216.36.0/24 maxlen: 24 185.216.37.0/24 maxlen: 24 185.216.38.0/24 maxlen: 24 185.216.39.0/24 maxlen: 24 2a00:b7c0::/32 maxlen: 32 2a00:b7c0:100::/40 maxlen: 40 2a00:b7c0:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:7d:25:d1:1a:61:f4:6e:76:4e:b0:5d:fe:a3:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e80702ee6a1dcbf3ae257a199415f59b8338ea4 Validity Not Before: Jan 1 22:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed166778ad7e5a1733c155d0640edab2f5661b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ad:01:c2:fd:2e:8d:17:c1:af:e1:ac:3f:fd: 41:35:b5:8f:32:db:03:11:4b:ee:c0:de:1a:6d:86: 0f:fb:19:ca:00:6f:e6:1b:cd:b2:ee:f4:26:d5:7a: 7a:33:e9:68:ea:ba:82:11:30:b4:e1:de:95:ee:7f: b2:e9:fe:a2:7a:8f:b3:da:a3:fb:29:8f:0c:b8:74: 1e:22:38:b2:d5:6f:a9:0d:be:9f:fd:ad:30:13:96: 45:7d:24:cf:48:c5:d3:24:87:21:93:55:f9:13:24: b5:3e:81:85:c9:c8:11:41:45:e8:6c:1c:ea:51:3c: 28:ad:5f:27:df:0b:a8:69:9a:70:6f:05:ec:19:6b: d6:2e:cd:41:61:49:4c:81:18:9a:b4:8f:97:00:1d: bd:e4:24:ef:ca:6c:43:d2:17:f8:e2:e0:d9:e0:d7: fe:27:b8:16:38:bd:14:53:2c:9e:0c:de:2d:30:f6: a9:a4:d3:a7:5d:7f:20:0b:3e:f3:38:fb:d6:68:f6: 05:f6:35:41:1e:66:57:04:d2:41:5c:d6:c3:d0:e2: 01:df:e8:94:18:ee:70:42:3a:29:40:36:48:76:93: b7:5d:22:93:e7:ec:b0:c6:c6:da:a8:11:31:18:8b: ac:d1:44:5f:b4:10:0a:eb:bf:35:7d:86:c2:0e:7c: de:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:16:67:78:AD:7E:5A:17:33:C1:55:D0:64:0E:DA:B2:F5:66:1B:4A X509v3 Authority Key Identifier: keyid:9E:80:70:2E:E6:A1:DC:BF:3A:E2:57:A1:99:41:5F:59:B8:33:8E:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/7RZneK1-WhczwVXQZA7asvVmG0o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.149.176.0/20 185.216.36.0/22 IPv6: 2a00:b7c0::/32 Signature Algorithm: sha256WithRSAEncryption 46:a9:cb:0f:ed:4c:44:be:57:de:78:82:f9:24:3b:a3:55:a3: d8:1b:c1:cc:c8:b0:db:3a:98:7b:81:02:a9:6e:95:40:99:8f: 99:65:41:2e:90:10:26:4a:18:b7:58:68:de:3c:0a:3d:d6:76: 2b:c8:ef:3c:e2:60:2d:c7:fe:62:93:90:0f:ca:cb:08:80:1a: 2b:ad:e6:da:7f:19:59:99:27:82:75:04:5e:32:ba:be:34:30: 7a:bc:57:55:32:e6:8a:d4:5d:60:56:64:61:b0:35:3d:39:6f: a4:95:35:20:b2:f2:14:c7:c4:95:ac:d7:b5:21:91:47:61:c8: 07:5a:9e:8c:ff:5a:33:e7:72:2e:9f:5d:2b:f9:d9:75:94:54: 39:9c:62:36:95:a1:c3:4e:d1:52:92:d7:ee:47:e1:78:66:6b: f3:2a:12:ab:95:56:4d:60:65:2d:e5:7d:e6:12:88:c4:8d:9c: 97:7a:79:be:7a:4c:63:1c:6c:c0:d5:53:3f:f2:d4:85:70:6c: b0:7e:84:af:90:31:aa:a4:d8:a7:5a:14:c3:eb:82:20:d0:7a: c1:11:47:57:7e:f1:fc:b3:9f:66:56:98:61:93:21:b9:50:d1: 9d:76:07:a4:ce:f2:6f:97:64:50:92:25:7b:c0:76:05:d0:ae: 98:94:a1:9a -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7o30l0Rph9G52TrBd/qP2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllODA3MDJlZTZhMWRjYmYzYWUyNTdhMTk5NDE1ZjU5Yjgz MzhlYTQwHhcNMjYwMTAxMjIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDE2Njc3OGFkN2U1YTE3MzNjMTU1ZDA2NDBlZGFiMmY1NjYxYjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt60Bwv0ujRfBr+GsP/1BNbWPMtsD EUvuwN4abYYP+xnKAG/mG82y7vQm1Xp6M+lo6rqCETC04d6V7n+y6f6ieo+z2qP7 KY8MuHQeIjiy1W+pDb6f/a0wE5ZFfSTPSMXTJIchk1X5EyS1PoGFycgRQUXobBzq UTworV8n3wuoaZpwbwXsGWvWLs1BYUlMgRiatI+XAB295CTvymxD0hf44uDZ4Nf+ J7gWOL0UUyyeDN4tMPappNOnXX8gCz7zOPvWaPYF9jVBHmZXBNJBXNbD0OIB3+iU GO5wQjopQDZIdpO3XSKT5+ywxsbaqBExGIus0URftBAK6781fYbCDnzegQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFO0WZ3itfloXM8FV0GQO2rL1ZhtKMB8GA1UdIwQY MBaAFJ6AcC7mody/OuJXoZlBX1m4M46kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm9Cd0x1YWgzTDg2NGxlaG1VRmZXYmd6anFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xYmRlMzktYjZkNS00NmVjLWE4MTMt MjZlZjk2NjQzZDg0LzEvN1JabmVLMS1XaGN6d1ZYUVpBN2FzdlZtRzBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xYmRlMzktYjZkNS00NmVjLWE4MTMtMjZlZjk2NjQzZDg0 LzEvbm9Cd0x1YWgzTDg2NGxlaG1VRmZXYmd6anFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEBZWwAwQC udgkMA0EAgACMAcDBQAqALfAMA0GCSqGSIb3DQEBCwUAA4IBAQBGqcsP7UxEvlfe eIL5JDujVaPYG8HMyLDbOph7gQKpbpVAmY+ZZUEukBAmShi3WGjePAo91nYryO88 4mAtx/5ik5APyssIgBorrebafxlZmSeCdQReMrq+NDB6vFdVMuaK1F1gVmRhsDU9 OW+klTUgsvIUx8SVrNe1IZFHYcgHWp6M/1oz53Iun10r+dl1lFQ5nGI2laHDTtFS ktfuR+F4ZmvzKhKrlVZNYGUt5X3mEojEjZyXenm+ekxjHGzA1VM/8tSFcGywfoSv kDGqpNinWhTD64Ig0HrBEUdXfvH8s59mVphhkyG5UNGddgekzvJvl2RQkiV7wHYF 0K6YlKGa -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:40 2026 by rpki-client