This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/7BgGMhfrcQqzufLm6BOZyNmcrP4.roa File: 7BgGMhfrcQqzufLm6BOZyNmcrP4.roa (raw, json) Hash identifier: Ez1hXHY/SyH5UhM0EJmIkgA9tRyMxJtbCALr5l1nz1Y= Subject key identifier: EC:18:06:32:17:EB:71:0A:B3:B9:F2:E6:E8:13:99:C8:D9:9C:AC:FE Certificate issuer: /CN=6516844d245d4124a22a536b046da86332d0b911 Certificate serial: 019B7C800EC22EFE09E09E8FF7F0E69C04E1 Authority key identifier: 65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/7BgGMhfrcQqzufLm6BOZyNmcrP4.roa Signing time: Fri 02 Jan 2026 02:18:45 +0000 ROA not before: Fri 02 Jan 2026 02:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15525 IP address blocks: 192.188.10.0/24 maxlen: 24 193.236.120.0/24 maxlen: 24 193.236.121.0/24 maxlen: 24 193.236.122.0/24 maxlen: 24 193.236.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:0e:c2:2e:fe:09:e0:9e:8f:f7:f0:e6:9c:04:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6516844d245d4124a22a536b046da86332d0b911 Validity Not Before: Jan 2 02:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec18063217eb710ab3b9f2e6e81399c8d99cacfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9e:af:d5:98:91:d5:59:3a:95:2e:8a:6b:b8: 90:eb:f9:10:04:bb:2b:f3:62:a6:6e:ee:0b:e0:fc: 0f:62:a1:36:41:64:c2:56:b5:2c:39:89:8e:14:19: 2e:72:57:22:ce:d9:38:0c:ed:5c:b1:28:ba:d1:ab: 83:65:6c:3f:d9:54:f9:6a:ca:5a:bf:e1:98:fc:c4: a1:28:32:af:33:4b:c3:62:17:87:73:f0:1b:90:ab: d4:23:56:3e:eb:db:1d:d1:28:ee:fd:e5:6d:4c:48: e8:3d:a7:e8:e5:3c:13:2d:34:b7:30:90:9c:26:7c: a6:e2:62:02:25:bb:6a:9e:0b:0c:b4:0d:80:43:ad: 4f:d6:fe:31:3e:e3:2a:61:38:59:03:b7:d3:35:87: d3:63:02:2f:5b:91:3a:3f:84:fe:29:70:21:0c:b5: 94:80:70:2b:88:8c:e0:5b:54:7a:5f:c3:bd:0f:f1: c2:5d:d9:8a:00:9d:a0:a3:98:d9:f6:23:9d:4d:b5: 1c:54:27:1e:55:74:6f:eb:a8:35:cf:2a:27:d8:b2: ee:7c:97:45:d5:6c:9a:25:27:c2:c5:22:57:ab:e0: d3:6e:a6:b4:d1:9f:de:4c:e3:a5:70:ed:09:ed:61: 60:2e:ab:65:00:13:b8:59:20:30:b0:ca:a7:61:68: 27:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:18:06:32:17:EB:71:0A:B3:B9:F2:E6:E8:13:99:C8:D9:9C:AC:FE X509v3 Authority Key Identifier: keyid:65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/7BgGMhfrcQqzufLm6BOZyNmcrP4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.188.10.0/24 193.236.120.0/22 Signature Algorithm: sha256WithRSAEncryption b6:14:aa:94:53:45:a8:5a:75:54:72:22:78:a2:b4:8b:cc:3c: 68:6a:a8:8e:ae:11:7d:e3:be:58:44:ae:59:ac:61:f5:b3:97: 5d:ff:62:de:80:74:ac:bc:ee:89:00:7d:8f:86:0d:88:e8:d8: f5:66:07:51:32:6f:98:b0:4b:2d:30:3b:0c:8c:a1:64:29:c1: 93:c0:3b:f7:fc:f4:5a:5f:a5:dd:51:70:6d:8f:e4:77:63:b9: a5:c9:64:86:f7:bb:dd:05:d1:a1:ee:90:3f:7b:5f:40:cf:71: 7e:e2:9f:b3:60:1c:87:e1:67:0f:67:e9:6c:78:23:3a:28:95: 17:b9:d0:5a:4b:0a:de:5c:18:42:06:f3:c7:20:b9:cb:e0:a1: 25:37:e5:3e:57:17:44:eb:4a:55:1b:60:cb:59:9d:ee:7d:9e: 3c:a3:91:a5:d5:57:f8:9f:f7:f0:5a:b4:6b:d7:d6:67:e8:72: 2c:d3:87:aa:64:f2:3b:3a:fb:51:1a:11:c6:86:b0:f1:e0:cf: ab:51:58:8a:4e:d6:28:93:cc:68:d8:58:c2:e6:93:11:34:44: fb:59:9d:d0:7e:5a:a0:8a:c5:1b:2c:72:45:5e:2c:39:ba:5f: 02:fd:7f:5f:48:3d:8b:62:f9:8f:94:0e:8b:37:f2:c7:47:b8: ae:ce:27:db -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gA7CLv4J4J6P9/DmnAThMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MTY4NDRkMjQ1ZDQxMjRhMjJhNTM2YjA0NmRhODYzMzJk MGI5MTEwHhcNMjYwMTAyMDIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzE4MDYzMjE3ZWI3MTBhYjNiOWYyZTZlODEzOTljOGQ5OWNhY2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ6v1ZiR1Vk6lS6Ka7iQ6/kQBLsr 82Kmbu4L4PwPYqE2QWTCVrUsOYmOFBkuclciztk4DO1csSi60auDZWw/2VT5aspa v+GY/MShKDKvM0vDYheHc/AbkKvUI1Y+69sd0Sju/eVtTEjoPafo5TwTLTS3MJCc Jnym4mICJbtqngsMtA2AQ61P1v4xPuMqYThZA7fTNYfTYwIvW5E6P4T+KXAhDLWU gHAriIzgW1R6X8O9D/HCXdmKAJ2go5jZ9iOdTbUcVCceVXRv66g1zyon2LLufJdF 1WyaJSfCxSJXq+DTbqa00Z/eTOOlcO0J7WFgLqtlABO4WSAwsMqnYWgn6wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOwYBjIX63EKs7ny5ugTmcjZnKz+MB8GA1UdIwQY MBaAFGUWhE0kXUEkoipTawRtqGMy0LkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlJhRVRTUmRRU1NpS2xOckJHMm9ZekxRdVJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80OTM5ODUtYzI3MC00MjllLTkxYjIt ZDU3MDQ4M2MzNjhiLzEvN0JnR01oZnJjUXF6dWZMbTZCT1p5Tm1jclA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80OTM5ODUtYzI3MC00MjllLTkxYjItZDU3MDQ4M2MzNjhi LzEvWlJhRVRTUmRRU1NpS2xOckJHMm9ZekxRdVJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwLwKAwQC wex4MA0GCSqGSIb3DQEBCwUAA4IBAQC2FKqUU0WoWnVUciJ4orSLzDxoaqiOrhF9 475YRK5ZrGH1s5dd/2LegHSsvO6JAH2Phg2I6Nj1ZgdRMm+YsEstMDsMjKFkKcGT wDv3/PRaX6XdUXBtj+R3Y7mlyWSG97vdBdGh7pA/e19Az3F+4p+zYByH4WcPZ+ls eCM6KJUXudBaSwreXBhCBvPHILnL4KElN+U+VxdE60pVG2DLWZ3ufZ48o5Gl1Vf4 n/fwWrRr19Zn6HIs04eqZPI7OvtRGhHGhrDx4M+rUViKTtYok8xo2FjC5pMRNET7 WZ3QflqgisUbLHJFXiw5ul8C/X9fSD2LYvmPlA6LN/LHR7iuzifb -----END CERTIFICATE-----Generated at Mon Jan 26 19:35:54 2026 by rpki-client