This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/7zF9eGGNAAfvZXhKrfV2IrWDGzM.roa File: 7zF9eGGNAAfvZXhKrfV2IrWDGzM.roa (raw, json) Hash identifier: 7ShADED+6ABWdUZq+N0c2d9qFBvXvIfuwCNn0VPe6D8= Subject key identifier: EF:31:7D:78:61:8D:00:07:EF:65:78:4A:AD:F5:76:22:B5:83:1B:33 Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Certificate serial: 019B7DCA2BDA6B75CEF2F9D4F9397539F123 Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/7zF9eGGNAAfvZXhKrfV2IrWDGzM.roa Signing time: Fri 02 Jan 2026 08:19:19 +0000 ROA not before: Fri 02 Jan 2026 08:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34508 IP address blocks: 89.175.44.0/23 maxlen: 23 89.175.58.0/23 maxlen: 23 89.175.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:2b:da:6b:75:ce:f2:f9:d4:f9:39:75:39:f1:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Validity Not Before: Jan 2 08:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef317d78618d0007ef65784aadf57622b5831b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0f:19:4a:52:bc:a7:48:12:4f:bf:40:03:34: 65:34:93:af:af:67:b3:2b:d1:c2:ff:3a:1e:ad:e9: 9b:97:c0:2e:a9:79:15:92:27:1c:f1:64:eb:ca:de: c2:73:f3:6e:c9:43:bd:15:ad:b6:e5:bf:62:ad:f1: 9f:f9:69:af:c2:24:21:b0:f6:ce:01:7f:a8:5a:42: 96:2d:9c:73:c8:02:96:cf:c6:10:fa:21:f7:ff:81: 02:a2:db:ef:5c:c4:c8:5e:d0:b9:c4:4d:6e:35:14: dd:12:c3:d7:e2:17:f9:59:77:32:cd:4c:d5:22:a5: 2d:8a:ff:e7:5a:00:74:92:a2:b7:ae:dc:3f:74:b4: f0:41:ae:5d:11:fe:ed:57:c9:c6:ad:66:1e:93:d0: c6:64:66:76:92:1b:b5:5d:fb:f9:bf:5a:29:0b:30: 17:ce:26:9e:f4:1c:26:f9:ff:de:02:b2:67:2f:dd: fa:33:64:aa:e5:70:be:17:c7:49:1f:78:d0:7e:e2: a3:8a:a5:8e:58:ec:b5:7b:0f:c8:bf:0c:f5:cc:9f: 18:53:b6:2a:68:d2:e7:05:a1:89:3a:5b:0e:50:41: cd:6d:4b:a9:2a:0e:9c:8c:8a:66:88:68:16:e5:9d: f3:30:17:6a:8f:64:0a:56:f7:03:d4:fb:ca:73:40: 73:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:31:7D:78:61:8D:00:07:EF:65:78:4A:AD:F5:76:22:B5:83:1B:33 X509v3 Authority Key Identifier: keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/7zF9eGGNAAfvZXhKrfV2IrWDGzM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.175.44.0/23 89.175.58.0/23 89.175.88.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:90:80:fe:ed:32:38:5b:06:81:71:03:7e:97:13:96:c5:15: bc:72:d9:75:87:87:42:53:1b:83:79:0a:c3:9c:a8:85:6c:6f: 18:17:f3:8d:d0:c9:48:f1:69:67:0d:d0:b6:61:d6:c8:55:38: b3:e7:43:f0:c4:db:f4:d6:07:26:75:0c:aa:5a:16:0c:e6:e5: 4c:e7:55:14:c2:d3:b3:82:45:2c:05:41:81:ab:43:1c:a8:e5: 9f:8c:5a:4f:9b:b0:b9:14:ef:af:43:df:13:e9:ff:d8:e8:1c: c9:55:29:d2:64:c8:69:4f:0b:d0:d9:2b:aa:7b:c3:c1:5a:a8: f7:96:f6:a0:db:a0:2f:66:2a:61:ae:3d:76:43:37:b6:c0:43: b4:ea:f6:f5:41:c1:1b:b9:f1:e4:c5:7b:43:d9:b2:3a:96:c3: a0:4f:52:7d:21:22:c6:e5:38:10:d5:f8:0f:ea:39:63:b1:1a: 07:a1:15:9f:da:79:e9:89:b4:67:7b:45:45:3e:15:a4:7e:8d: 64:32:3e:8a:bb:91:f1:e0:7f:eb:f1:55:b8:41:df:8b:59:bc: e2:7e:68:9a:da:ac:dc:a1:d1:ac:da:9e:f2:6e:79:f4:42:91: e4:dd:cd:39:f9:25:fe:7b:88:92:27:78:00:dd:b3:f8:45:6e: 1e:9a:72:0a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9yivaa3XO8vnU+Tl1OfEjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl NmI3ZTUwHhcNMjYwMTAyMDgxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjMxN2Q3ODYxOGQwMDA3ZWY2NTc4NGFhZGY1NzYyMmI1ODMxYjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw8ZSlK8p0gST79AAzRlNJOvr2ez K9HC/zoerembl8AuqXkVkicc8WTryt7Cc/NuyUO9Fa225b9irfGf+WmvwiQhsPbO AX+oWkKWLZxzyAKWz8YQ+iH3/4ECotvvXMTIXtC5xE1uNRTdEsPX4hf5WXcyzUzV IqUtiv/nWgB0kqK3rtw/dLTwQa5dEf7tV8nGrWYek9DGZGZ2khu1Xfv5v1opCzAX ziae9Bwm+f/eArJnL936M2Sq5XC+F8dJH3jQfuKjiqWOWOy1ew/Ivwz1zJ8YU7Yq aNLnBaGJOlsOUEHNbUupKg6cjIpmiGgW5Z3zMBdqj2QKVvcD1PvKc0BzCQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFO8xfXhhjQAH72V4Sq31diK1gxszMB8GA1UdIwQY MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt NDI4NDU4Njc5Y2U0LzEvN3pGOWVHR05BQWZ2WlhoS3JmVjJJcldER3pNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0 LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBWa8sAwQB Wa86AwQBWa9YMA0GCSqGSIb3DQEBCwUAA4IBAQBdkID+7TI4WwaBcQN+lxOWxRW8 ctl1h4dCUxuDeQrDnKiFbG8YF/ON0MlI8WlnDdC2YdbIVTiz50PwxNv01gcmdQyq WhYM5uVM51UUwtOzgkUsBUGBq0McqOWfjFpPm7C5FO+vQ98T6f/Y6BzJVSnSZMhp TwvQ2Suqe8PBWqj3lvag26AvZiphrj12Qze2wEO06vb1QcEbufHkxXtD2bI6lsOg T1J9ISLG5TgQ1fgP6jljsRoHoRWf2nnpibRne0VFPhWkfo1kMj6Ku5Hx4H/r8VW4 Qd+LWbzifmia2qzcodGs2p7ybnn0QpHk3c05+SX+e4iSJ3gA3bP4RW4emnIK -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:33 2026 by rpki-client