This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/7I_tBHWbfAuhzTjq3Gm1PNjx-Qs.roa File: 7I_tBHWbfAuhzTjq3Gm1PNjx-Qs.roa (raw, json) Hash identifier: 5q6vS67j1r66wMOA186QdQ7UBdZpaJwXyjVG+xm1Kqw= Subject key identifier: EC:8F:ED:04:75:9B:7C:0B:A1:CD:38:EA:DC:69:B5:3C:D8:F1:F9:0B Certificate issuer: /CN=5bd3e848c58a6451ca874cdcfc37e9bc0f5d9ac7 Certificate serial: 019B7AC79837785FC7EA19DB0D7CBECACAAD Authority key identifier: 5B:D3:E8:48:C5:8A:64:51:CA:87:4C:DC:FC:37:E9:BC:0F:5D:9A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/7I_tBHWbfAuhzTjq3Gm1PNjx-Qs.roa Signing time: Thu 01 Jan 2026 18:17:39 +0000 ROA not before: Thu 01 Jan 2026 18:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209820 IP address blocks: 80.208.254.0/24 maxlen: 24 80.209.254.0/24 maxlen: 24 185.40.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.crl rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:98:37:78:5f:c7:ea:19:db:0d:7c:be:ca:ca:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bd3e848c58a6451ca874cdcfc37e9bc0f5d9ac7 Validity Not Before: Jan 1 18:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec8fed04759b7c0ba1cd38eadc69b53cd8f1f90b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f8:16:0e:40:aa:3e:87:b4:0c:34:6f:88:ea: 18:24:9c:0a:d1:27:03:b1:d1:76:1b:b7:8d:32:6e: 2b:8d:87:b4:85:10:cf:23:0d:39:2b:3b:85:b1:12: 55:d8:3d:21:b6:f3:a5:92:96:b5:58:ec:1c:cf:fe: 2e:ac:51:0d:e3:13:8b:27:9d:91:ed:c7:30:c9:60: 03:18:63:8e:63:d4:52:2e:f9:e7:5e:99:31:02:29: 8b:23:df:a7:d3:af:eb:b5:97:38:33:9f:ac:70:57: 09:73:65:bb:11:b7:df:98:e7:5e:df:e9:d6:a6:79: 0b:34:6b:11:e1:f2:80:04:1a:ed:38:09:78:dd:25: c0:83:57:c9:dc:69:8a:8b:cf:73:51:a9:e0:58:18: f8:8a:14:11:ca:4e:6c:e0:79:04:7a:11:ce:1d:9f: fb:55:60:09:c5:21:e1:c9:aa:a0:d9:4d:54:e2:5b: 91:af:41:5d:46:6b:a7:a7:b5:5e:5b:5b:76:b0:c7: 94:c5:86:bf:26:58:fb:4f:2a:0c:5d:dd:80:92:b8: c5:30:ec:ab:84:74:02:29:a8:be:b2:b8:2d:5c:77: 7f:6d:e5:95:79:67:c0:11:2f:a6:cf:82:b6:c9:3c: 10:25:88:0c:f4:62:7e:ae:a2:13:03:7f:99:51:96: 58:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:8F:ED:04:75:9B:7C:0B:A1:CD:38:EA:DC:69:B5:3C:D8:F1:F9:0B X509v3 Authority Key Identifier: keyid:5B:D3:E8:48:C5:8A:64:51:CA:87:4C:DC:FC:37:E9:BC:0F:5D:9A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/7I_tBHWbfAuhzTjq3Gm1PNjx-Qs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.208.254.0/24 80.209.254.0/24 185.40.140.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:eb:d1:0e:a1:06:09:12:a5:fe:be:38:88:a3:12:ea:af:dd: 98:38:de:28:4a:86:80:0d:bf:46:89:b4:30:f9:31:4e:8f:ce: ad:0b:10:c4:a3:6b:5d:b0:16:e1:86:85:9b:60:67:15:b1:57: ef:a0:b8:49:e1:8e:81:a2:1f:2a:cb:fd:44:72:a5:5f:b3:5b: 86:45:8d:cd:14:ea:8a:ed:11:c5:60:1a:30:17:e6:34:83:b1: ed:3f:aa:3f:51:27:9f:7f:2b:fd:e8:70:c5:ee:a0:f8:92:27: b7:86:c0:b8:70:b8:36:cc:50:de:33:24:5a:98:d3:8b:85:15: f8:ce:00:6a:0d:8a:b9:71:c9:22:46:11:0e:68:57:cf:e3:1e: ee:08:2f:ac:db:3e:1b:22:c9:5e:40:f4:83:fb:99:2f:ae:f0: 56:9d:52:2b:68:b6:89:60:8a:73:d8:b9:bf:fd:27:66:a3:f7: be:93:db:7a:8e:55:d3:9f:55:75:83:52:c1:7f:db:4d:ec:20: 01:ff:41:53:e9:6c:d2:57:18:bd:ff:b7:47:7a:be:35:20:3b: 1e:15:8e:fc:c8:0b:ba:40:89:47:37:8e:c6:81:4e:8a:4d:38: 18:4e:ce:f3:34:08:e8:5d:93:48:5f:7e:30:ad:84:24:6c:e7: 5a:82:f9:ff -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6x5g3eF/H6hnbDXy+ysqtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZDNlODQ4YzU4YTY0NTFjYTg3NGNkY2ZjMzdlOWJjMGY1 ZDlhYzcwHhcNMjYwMTAxMTgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzhmZWQwNDc1OWI3YzBiYTFjZDM4ZWFkYzY5YjUzY2Q4ZjFmOTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvgWDkCqPoe0DDRviOoYJJwK0ScD sdF2G7eNMm4rjYe0hRDPIw05KzuFsRJV2D0htvOlkpa1WOwcz/4urFEN4xOLJ52R 7ccwyWADGGOOY9RSLvnnXpkxAimLI9+n06/rtZc4M5+scFcJc2W7EbffmOde3+nW pnkLNGsR4fKABBrtOAl43SXAg1fJ3GmKi89zUangWBj4ihQRyk5s4HkEehHOHZ/7 VWAJxSHhyaqg2U1U4luRr0FdRmunp7VeW1t2sMeUxYa/Jlj7TyoMXd2AkrjFMOyr hHQCKai+srgtXHd/beWVeWfAES+mz4K2yTwQJYgM9GJ+rqITA3+ZUZZYOQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOyP7QR1m3wLoc046txptTzY8fkLMB8GA1UdIwQY MBaAFFvT6EjFimRRyodM3Pw36bwPXZrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzlQb1NNV0taRkhLaDB6Y19EZnB2QTlkbXNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wYjg3ZjUtZTVkMi00NTZmLWFiZTAt NDg0ZDQ1ODZlZTdiLzEvN0lfdEJIV2JmQXVoelRqcTNHbTFQTmp4LVFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wYjg3ZjUtZTVkMi00NTZmLWFiZTAtNDg0ZDQ1ODZlZTdi LzEvVzlQb1NNV0taRkhLaDB6Y19EZnB2QTlkbXNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUND+AwQA UNH+AwQAuSiMMA0GCSqGSIb3DQEBCwUAA4IBAQAO69EOoQYJEqX+vjiIoxLqr92Y ON4oSoaADb9GibQw+TFOj86tCxDEo2tdsBbhhoWbYGcVsVfvoLhJ4Y6Boh8qy/1E cqVfs1uGRY3NFOqK7RHFYBowF+Y0g7HtP6o/USeffyv96HDF7qD4kie3hsC4cLg2 zFDeMyRamNOLhRX4zgBqDYq5cckiRhEOaFfP4x7uCC+s2z4bIsleQPSD+5kvrvBW nVIraLaJYIpz2Lm//Sdmo/e+k9t6jlXTn1V1g1LBf9tN7CAB/0FT6WzSVxi9/7dH er41IDseFY78yAu6QIlHN47GgU6KTTgYTs7zNAjoXZNIX34wrYQkbOdagvn/ -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:07 2026 by rpki-client