This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/7xuiCxAV9pPv_Ekyw3-_YLNS1uA.roa File: 7xuiCxAV9pPv_Ekyw3-_YLNS1uA.roa (raw, json) Hash identifier: MCVYToIwnCC1cCLBpzOqMu2Pvd8YhgVDSgwS714t8N0= Subject key identifier: EF:1B:A2:0B:10:15:F6:93:EF:FC:49:32:C3:7F:BF:60:B3:52:D6:E0 Certificate issuer: /CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8 Certificate serial: 019B78A2E6D7D86722BAA67DE7D75CCCDD51 Authority key identifier: F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/7xuiCxAV9pPv_Ekyw3-_YLNS1uA.roa Signing time: Thu 01 Jan 2026 08:18:20 +0000 ROA not before: Thu 01 Jan 2026 08:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202055 IP address blocks: 185.54.156.0/24 maxlen: 24 185.54.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e6:d7:d8:67:22:ba:a6:7d:e7:d7:5c:cc:dd:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8 Validity Not Before: Jan 1 08:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef1ba20b1015f693effc4932c37fbf60b352d6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:90:93:2e:a9:a9:43:84:ce:02:a9:ac:77:9e: 93:6c:ee:ba:86:76:94:8d:de:28:4a:0c:d1:e5:8d: 8b:ba:18:89:bb:5d:93:cd:41:95:28:01:bb:9d:ba: 17:38:ed:ab:32:04:09:a6:20:c4:43:b3:ce:35:2f: d0:5d:8c:55:6d:4f:32:22:9b:f4:aa:62:d9:db:79: fd:15:c4:2b:b6:dc:b5:a7:77:88:bd:1d:8a:8c:e6: d6:ca:c0:cc:0e:26:56:ca:4b:6f:7e:fd:aa:3f:58: f4:a3:f3:ee:34:3d:82:e4:00:a0:a1:7a:17:a8:8c: ae:1d:c7:ea:df:33:88:ab:a8:48:fc:e8:75:ec:a7: 09:3a:52:4c:50:bd:be:fa:04:2c:02:bc:3b:82:d4: 6c:9d:f2:bc:93:4e:74:05:29:40:21:d3:78:53:5e: a5:95:1b:05:03:e2:d2:41:f2:87:1b:91:5e:c8:02: 5b:47:46:eb:37:95:95:44:b9:c5:d6:4a:66:9d:b2: 44:14:b4:7e:9a:06:a3:20:77:f5:c7:5d:2c:1f:f2: af:b6:2a:12:31:89:af:61:cf:98:8f:cf:54:8b:5b: 8a:27:ad:45:dd:95:53:f8:1e:06:55:61:03:e2:3d: 9a:15:9f:4d:d1:98:35:8f:74:85:c1:f5:26:fd:05: 15:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1B:A2:0B:10:15:F6:93:EF:FC:49:32:C3:7F:BF:60:B3:52:D6:E0 X509v3 Authority Key Identifier: keyid:F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/7xuiCxAV9pPv_Ekyw3-_YLNS1uA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.156.0/24 185.54.159.0/24 Signature Algorithm: sha256WithRSAEncryption 39:c3:87:f9:45:67:a2:2d:f6:d9:62:fe:8c:1c:24:47:3d:27: f1:ae:25:70:66:77:74:0d:88:8c:54:ef:ac:af:b3:bc:56:a8: 04:ff:dc:be:7a:57:98:b3:ad:4a:9a:e3:a2:8c:69:49:a6:3a: 73:38:d1:c0:23:bf:a7:6a:d1:88:dd:e9:13:8e:77:57:32:50: d2:1f:8a:20:58:ad:df:c9:d3:3c:59:0d:9e:cc:89:c0:2c:c6: ae:52:dd:96:c9:b9:90:86:1b:84:cb:a5:0e:8c:7f:b1:fe:a3: c2:d7:be:ff:05:b3:1b:85:12:21:96:67:a9:e8:4a:b6:8b:60: e0:8f:fc:1c:2d:6c:83:1b:06:e4:d3:c6:52:ff:df:92:04:53: 22:df:0f:bf:47:7f:9f:66:c7:70:94:07:8d:54:d4:03:d2:fe: e7:2c:18:a9:af:a9:a2:01:36:db:22:ae:86:e0:c7:0b:fe:8a: 43:dc:57:b1:2c:f8:1d:67:e3:ed:31:b2:5c:01:d9:04:4b:c0: 04:68:e3:a1:a2:1c:e3:80:e9:68:5e:c1:e8:0b:6e:a1:2d:6f: 2d:db:c1:ea:0d:45:bf:15:65:e1:55:3e:e6:19:5e:12:a8:a8: a1:34:56:14:42:24:ce:14:cd:1d:a8:c6:e1:80:d0:6c:57:c6: 7d:81:96:69 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4oubX2GciuqZ959dczN1RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ODdhYzdlNWIyODljZTY4MWIyNDc0YzM4Zjc5NTJjY2E5 YzBmYjgwHhcNMjYwMTAxMDgxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjFiYTIwYjEwMTVmNjkzZWZmYzQ5MzJjMzdmYmY2MGIzNTJkNmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZCTLqmpQ4TOAqmsd56TbO66hnaU jd4oSgzR5Y2LuhiJu12TzUGVKAG7nboXOO2rMgQJpiDEQ7PONS/QXYxVbU8yIpv0 qmLZ23n9FcQrtty1p3eIvR2KjObWysDMDiZWyktvfv2qP1j0o/PuND2C5ACgoXoX qIyuHcfq3zOIq6hI/Oh17KcJOlJMUL2++gQsArw7gtRsnfK8k050BSlAIdN4U16l lRsFA+LSQfKHG5FeyAJbR0brN5WVRLnF1kpmnbJEFLR+mgajIHf1x10sH/KvtioS MYmvYc+Yj89Ui1uKJ61F3ZVT+B4GVWED4j2aFZ9N0Zg1j3SFwfUm/QUVpQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFO8bogsQFfaT7/xJMsN/v2CzUtbgMB8GA1UdIwQY MBaAFPiHrH5bKJzmgbJHTDj3lSzKnA+4MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1JZXNmbHNvbk9hQnNrZE1PUGVWTE1xY0Q3Zy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvY2MzYWQ0LWZmMWEtNDQ5Ny04MmRh LThkNTFkYjY1ZGI2Ni8xLzd4dWlDeEFWOXBQdl9Fa3l3My1fWUxOUzF1QS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDkvY2MzYWQ0LWZmMWEtNDQ5Ny04MmRhLThkNTFkYjY1ZGI2 Ni8xLzEtSWVzZmxzb25PYUJza2RNT1BlVkxNcWNEN2cuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAC5NpwD BAC5Np8wDQYJKoZIhvcNAQELBQADggEBADnDh/lFZ6It9tli/owcJEc9J/GuJXBm d3QNiIxU76yvs7xWqAT/3L56V5izrUqa46KMaUmmOnM40cAjv6dq0Yjd6ROOd1cy UNIfiiBYrd/J0zxZDZ7MicAsxq5S3ZbJuZCGG4TLpQ6Mf7H+o8LXvv8FsxuFEiGW Z6noSraLYOCP/BwtbIMbBuTTxlL/35IEUyLfD79Hf59mx3CUB41U1APS/ucsGKmv qaIBNtsirobgxwv+ikPcV7Es+B1n4+0xslwB2QRLwARo46GiHOOA6WhewegLbqEt by3bweoNRb8VZeFVPuYZXhKoqKE0VhRCJM4UzR2oxuGA0GxXxn2Blmk= -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:41 2026 by rpki-client