This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/O7HqDaygD9O6vG0dTL7sGXN_CWU.roa File: O7HqDaygD9O6vG0dTL7sGXN_CWU.roa (raw, json) Hash identifier: aTEVcWtuUoxvp/+/pQxWhYeDNrHx0T5iMBBG1CiJzTA= Subject key identifier: 3B:B1:EA:0D:AC:A0:0F:D3:BA:BC:6D:1D:4C:BE:EC:19:73:7F:09:65 Certificate issuer: /CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb Certificate serial: 019B783513CD9D409C776453071CE06DDA06 Authority key identifier: 10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/O7HqDaygD9O6vG0dTL7sGXN_CWU.roa Signing time: Thu 01 Jan 2026 06:18:22 +0000 ROA not before: Thu 01 Jan 2026 06:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8685 IP address blocks: 81.21.160.0/20 maxlen: 24 82.151.128.0/19 maxlen: 24 94.102.64.0/20 maxlen: 24 185.58.244.0/22 maxlen: 24 212.2.192.0/19 maxlen: 24 212.58.0.0/19 maxlen: 24 213.155.96.0/19 maxlen: 24 2a02:480::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:13:cd:9d:40:9c:77:64:53:07:1c:e0:6d:da:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb Validity Not Before: Jan 1 06:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bb1ea0daca00fd3babc6d1d4cbeec19737f0965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:37:f7:9b:ec:97:7d:63:75:f5:b0:63:77:8f: 4f:5f:cb:f4:d7:de:e7:07:f9:b8:e7:6b:92:70:ec: 8d:a9:22:ad:72:58:0b:bc:be:cc:18:11:15:b7:8b: d9:a0:df:cf:03:e2:7e:33:52:0a:a6:d6:4a:49:a8: 79:6f:be:de:bc:79:48:39:a3:82:e2:64:76:ca:0f: 9f:cc:d7:66:43:3e:39:ea:29:02:13:d4:ad:01:6b: a6:c4:bb:ef:99:36:00:88:20:d7:97:78:6d:0f:d4: ae:91:58:97:37:01:26:d2:e0:8a:b5:a2:6e:b7:b1: 45:2c:ab:0b:a3:ee:1a:33:03:be:24:92:bb:06:64: bc:71:7b:0a:3d:c3:cd:13:04:30:7e:39:6b:04:43: a5:5b:0e:63:f3:61:f7:f1:87:77:b6:3c:6a:ed:8c: 68:82:e7:c7:96:6b:19:bc:c7:a5:39:d3:e1:67:e0: 58:2a:a0:f1:b8:73:29:06:17:11:15:12:1f:f5:7e: 0c:42:4b:fa:0a:c4:b3:04:8f:9a:53:41:48:04:bf: 5d:12:26:47:b1:d1:66:4a:8e:cb:30:a3:b7:e6:c9: 62:aa:76:e6:76:48:1e:09:a6:d8:81:2c:ce:9a:39: 65:16:be:b9:94:84:4a:87:47:36:d0:4a:00:8c:45: 26:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B1:EA:0D:AC:A0:0F:D3:BA:BC:6D:1D:4C:BE:EC:19:73:7F:09:65 X509v3 Authority Key Identifier: keyid:10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/O7HqDaygD9O6vG0dTL7sGXN_CWU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.21.160.0/20 82.151.128.0/19 94.102.64.0/20 185.58.244.0/22 212.2.192.0/19 212.58.0.0/19 213.155.96.0/19 IPv6: 2a02:480::/32 Signature Algorithm: sha256WithRSAEncryption 4f:97:16:d2:5e:87:09:92:4a:51:3b:4f:a1:5f:56:bc:04:8b: 1b:cd:cb:21:6b:f9:58:3c:b1:51:f9:cb:89:4e:a1:cb:b6:55: bb:ee:76:3f:0a:47:db:bf:63:2f:77:1b:24:dd:10:32:a0:e4: 20:35:79:cc:ee:b2:6b:36:af:de:61:1c:3a:85:8b:53:96:0c: 07:ec:06:61:08:95:7b:58:0c:9e:7a:ca:08:4f:e1:6a:81:83: d5:d2:80:64:cc:8d:c5:99:1d:21:8a:fa:c1:23:ad:ad:98:ce: da:e8:db:c7:d5:89:03:05:06:ab:cd:08:10:c9:7a:12:8f:88: 19:fe:95:dc:ed:61:94:bd:7b:36:6b:8a:33:6e:25:c2:6b:a4: 50:01:e5:61:f0:5e:07:31:27:cb:c8:c1:69:d4:be:05:fe:a1: 32:b4:29:43:c3:e0:0b:67:9a:53:48:34:6c:fd:d5:75:81:d9: ef:93:91:02:3d:ae:16:4b:90:d8:af:eb:d0:a0:a7:12:4e:18: ac:95:ac:02:29:e2:9f:de:bf:17:69:6d:fb:1d:da:4a:8b:0e: 5c:6a:9c:1f:a9:19:b3:fb:e9:31:e5:28:dc:30:21:20:43:db: 1f:f3:d9:b2:23:ab:78:14:69:86:71:8a:f8:ed:a5:76:ff:65: 01:a5:29:54 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt4NRPNnUCcd2RTBxzgbdoGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNzRkYjk2NDAyZmY1Y2YxODc1NjQ1NjBlYThmMTNlZWVi NWZmZWIwHhcNMjYwMTAxMDYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmIxZWEwZGFjYTAwZmQzYmFiYzZkMWQ0Y2JlZWMxOTczN2YwOTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDf3m+yXfWN19bBjd49PX8v0197n B/m452uScOyNqSKtclgLvL7MGBEVt4vZoN/PA+J+M1IKptZKSah5b77evHlIOaOC 4mR2yg+fzNdmQz456ikCE9StAWumxLvvmTYAiCDXl3htD9SukViXNwEm0uCKtaJu t7FFLKsLo+4aMwO+JJK7BmS8cXsKPcPNEwQwfjlrBEOlWw5j82H38Yd3tjxq7Yxo gufHlmsZvMelOdPhZ+BYKqDxuHMpBhcRFRIf9X4MQkv6CsSzBI+aU0FIBL9dEiZH sdFmSo7LMKO35sliqnbmdkgeCabYgSzOmjllFr65lIRKh0c20EoAjEUmywIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFDux6g2soA/TurxtHUy+7BlzfwllMB8GA1UdIwQY MBaAFBB025ZAL/XPGHVkVg6o8T7utf/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUhUYmxrQXY5YzhZZFdSV0RxanhQdTYxXy1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8xZTFkNjktMGJmZC00MGFmLTg4YjEt YWI0MGI1OGEyODkyLzEvTzdIcURheWdEOU82dkcwZFRMN3NHWE5fQ1dVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8xZTFkNjktMGJmZC00MGFmLTg4YjEtYWI0MGI1OGEyODky LzEvRUhUYmxrQXY5YzhZZFdSV0RxanhQdTYxXy1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQEURWgAwQF UpeAAwQEXmZAAwQCuTr0AwQF1ALAAwQF1DoAAwQF1ZtgMA0EAgACMAcDBQAqAgSA MA0GCSqGSIb3DQEBCwUAA4IBAQBPlxbSXocJkkpRO0+hX1a8BIsbzcsha/lYPLFR +cuJTqHLtlW77nY/Ckfbv2Mvdxsk3RAyoOQgNXnM7rJrNq/eYRw6hYtTlgwH7AZh CJV7WAyeesoIT+FqgYPV0oBkzI3FmR0hivrBI62tmM7a6NvH1YkDBQarzQgQyXoS j4gZ/pXc7WGUvXs2a4ozbiXCa6RQAeVh8F4HMSfLyMFp1L4F/qEytClDw+ALZ5pT SDRs/dV1gdnvk5ECPa4WS5DYr+vQoKcSThislawCKeKf3r8XaW37HdpKiw5capwf qRmz++kx5SjcMCEgQ9sf89myI6t4FGmGcYr47aV2/2UBpSlU -----END CERTIFICATE-----Generated at Mon Jan 26 12:56:56 2026 by rpki-client