This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/7OrXiOk0ZwA6iSxnPa51WIpYA7Y.roa File: 7OrXiOk0ZwA6iSxnPa51WIpYA7Y.roa (raw, json) Hash identifier: 8jdGNcl+IQH29POH5ECcrRyFFgDuEuHLPK9BsT8qDgU= Subject key identifier: EC:EA:D7:88:E9:34:67:00:3A:89:2C:67:3D:AE:75:58:8A:58:03:B6 Certificate issuer: /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea Certificate serial: 019B7D5C89EE80592B28F34690C139E22951 Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/7OrXiOk0ZwA6iSxnPa51WIpYA7Y.roa Signing time: Fri 02 Jan 2026 06:19:35 +0000 ROA not before: Fri 02 Jan 2026 06:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54339 IP address blocks: 89.38.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:89:ee:80:59:2b:28:f3:46:90:c1:39:e2:29:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea Validity Not Before: Jan 2 06:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ecead788e93467003a892c673dae75588a5803b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ca:98:fc:b4:96:6f:73:9f:ab:5b:5a:f3:dd: b2:76:b8:67:93:01:b5:a1:95:b4:5d:9a:f0:8b:11: 76:0b:00:41:91:ea:1e:2d:77:92:26:fa:83:a5:10: fb:00:9c:87:29:91:ad:48:51:c8:93:78:21:f0:15: 93:96:83:25:db:49:ec:7c:f6:f0:cf:c8:1c:5f:a5: 62:3e:b8:da:7c:cb:4b:e0:1b:bd:27:03:fd:d6:99: d0:c3:cb:de:00:c4:8e:ac:33:39:ba:43:49:79:20: f1:33:43:d7:9f:ca:cd:af:8e:d2:85:a2:4e:00:3b: 49:d2:d5:28:95:5f:be:1d:bf:ae:c0:71:94:04:b3: e1:c2:a5:1d:d3:cf:67:29:fb:71:22:02:5e:85:c8: a6:7f:de:bc:8d:8c:d2:78:70:22:fe:4a:70:37:af: c9:68:60:26:8f:d5:d8:52:14:7e:77:94:e4:81:4a: 91:74:a6:5b:b2:55:d6:8e:77:89:f1:60:69:ab:6c: 54:e6:2f:07:a5:5d:53:2c:ce:77:03:06:9a:5c:72: c9:39:25:18:85:60:6b:c1:a2:83:e8:30:b3:b4:a1: c1:12:3c:e7:df:68:ef:75:6c:03:77:5f:74:45:cc: 27:f3:ba:a3:12:23:6d:c3:2e:48:6e:53:30:7c:e4: 4c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:EA:D7:88:E9:34:67:00:3A:89:2C:67:3D:AE:75:58:8A:58:03:B6 X509v3 Authority Key Identifier: keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/7OrXiOk0ZwA6iSxnPa51WIpYA7Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.38.40.0/24 Signature Algorithm: sha256WithRSAEncryption 21:f4:b5:39:a8:7c:a9:22:b4:d9:f6:49:cf:8a:27:ac:70:ce: ae:78:8d:b9:0e:ca:15:13:9e:37:dc:14:2a:e2:38:56:be:61: f8:00:47:fb:1d:de:e6:6f:d5:06:8e:f0:9a:a4:be:90:a3:99: 5f:11:ee:9c:b6:cb:ac:fc:b3:89:ed:be:ce:8d:7d:bf:f7:2f: fa:29:5e:15:15:65:ca:02:36:2e:89:d9:1f:53:1b:3f:c3:68: db:13:3d:e5:bb:83:bb:95:40:19:00:8a:8e:20:e7:fb:05:b8: a3:6e:b3:fa:a9:13:62:f3:aa:7a:fa:8e:fb:03:75:da:0a:97: 66:b9:6f:3d:ad:32:30:a0:4f:40:7d:d7:0a:ec:85:a6:80:b1: 1f:d5:3b:a4:b9:b0:72:79:ad:f4:57:c4:52:11:31:12:6d:4c: bd:60:13:98:a8:e5:1f:b4:3d:56:cb:2c:db:4a:54:11:e7:3c: a6:cd:65:da:67:01:74:7e:90:f2:94:2e:6a:9c:2f:f3:99:75: a2:80:05:65:81:7f:79:f1:3e:f9:a8:04:0e:10:6d:dd:9e:98: c8:a7:e0:52:d7:f4:0a:fd:7a:8d:83:ad:6a:81:7b:cc:4e:6a: 23:36:fe:fb:ed:a5:55:8d:99:86:a7:bb:79:86:a9:08:19:9a: 7c:6f:1b:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XInugFkrKPNGkME54ilRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YzhhYTE4NzMwZjRhODNlMjg1MmM1NjkyNTUxYWJiNWIx ZWU3ZWEwHhcNMjYwMTAyMDYxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2VhZDc4OGU5MzQ2NzAwM2E4OTJjNjczZGFlNzU1ODhhNTgwM2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cqY/LSWb3Ofq1ta892ydrhnkwG1 oZW0XZrwixF2CwBBkeoeLXeSJvqDpRD7AJyHKZGtSFHIk3gh8BWTloMl20nsfPbw z8gcX6ViPrjafMtL4Bu9JwP91pnQw8veAMSOrDM5ukNJeSDxM0PXn8rNr47ShaJO ADtJ0tUolV++Hb+uwHGUBLPhwqUd089nKftxIgJehcimf968jYzSeHAi/kpwN6/J aGAmj9XYUhR+d5TkgUqRdKZbslXWjneJ8WBpq2xU5i8HpV1TLM53AwaaXHLJOSUY hWBrwaKD6DCztKHBEjzn32jvdWwDd190Rcwn87qjEiNtwy5IblMwfORMmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOzq14jpNGcAOoksZz2udViKWAO2MB8GA1UdIwQY MBaAFLjIqhhzD0qD4oUsVpJVGrtbHufqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU1pcUdITVBTb1BpaFN4V2tsVWF1MXNlNS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hOTQ5OTItNTY2Yi00YjZmLWE2ODkt YTU3NjA0YTNmNmJiLzEvN09yWGlPazBad0E2aVN4blBhNTFXSXBZQTdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9hOTQ5OTItNTY2Yi00YjZmLWE2ODktYTU3NjA0YTNmNmJi LzEvdU1pcUdITVBTb1BpaFN4V2tsVWF1MXNlNS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSYoMA0G CSqGSIb3DQEBCwUAA4IBAQAh9LU5qHypIrTZ9knPiiescM6ueI25DsoVE5433BQq 4jhWvmH4AEf7Hd7mb9UGjvCapL6Qo5lfEe6ctsus/LOJ7b7OjX2/9y/6KV4VFWXK AjYuidkfUxs/w2jbEz3lu4O7lUAZAIqOIOf7BbijbrP6qRNi86p6+o77A3XaCpdm uW89rTIwoE9AfdcK7IWmgLEf1TukubByea30V8RSETESbUy9YBOYqOUftD1Wyyzb SlQR5zymzWXaZwF0fpDylC5qnC/zmXWigAVlgX958T75qAQOEG3dnpjIp+BS1/QK /XqNg61qgXvMTmojNv777aVVjZmGp7t5hqkIGZp8bxtr -----END CERTIFICATE-----Generated at Wed Jan 21 04:57:49 2026 by rpki-client