This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa File: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (raw, json) Hash identifier: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM= Subject key identifier: B0:9E:E6:87:83:CC:47:34:7B:2B:47:F5:FE:EF:12:27:56:91:B0:08 Certificate issuer: /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95 Certificate serial: 019B77C67678ACDDF4855734CAB9AB1E276D Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa Signing time: Thu 01 Jan 2026 04:17:33 +0000 ROA not before: Thu 01 Jan 2026 04:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20712 IP address blocks: 109.205.152.0/22 maxlen: 22 109.205.156.0/24 maxlen: 24 185.6.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:76:78:ac:dd:f4:85:57:34:ca:b9:ab:1e:27:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95 Validity Not Before: Jan 1 04:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b09ee68783cc47347b2b47f5feef12275691b008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7e:be:43:e5:3f:e8:48:fd:71:7d:fe:d3:22: dc:3e:f9:62:20:45:b7:9d:bd:ad:94:ed:db:73:dd: 15:c7:94:8d:e5:aa:54:9c:7a:1e:89:3a:31:9b:2f: dd:70:7a:63:48:e6:e6:93:0d:50:b8:ca:70:9a:79: c5:3b:8a:28:38:c8:91:6c:e8:a5:6f:5d:5c:e7:a4: 74:e5:36:c6:7e:d5:f3:27:43:8f:00:1c:58:dd:80: 75:19:46:76:5e:b9:04:cd:58:cf:4b:22:8f:14:0f: 55:3d:ce:ab:6d:83:67:a5:75:5e:a7:b3:76:fb:92: ca:41:ca:99:fe:82:93:a9:49:0d:70:1b:2a:42:0c: 33:83:8d:0d:31:bd:f6:c4:c3:61:2f:61:fa:e6:36: 69:f7:34:ea:77:f6:3a:76:db:2b:5b:59:e3:7e:0d: 07:7c:ac:87:d4:49:d1:4a:78:f7:f1:1e:7a:6b:92: 34:1b:45:28:14:d6:b0:dd:bc:4a:d1:0d:ea:fc:48: e6:47:37:5f:00:f2:ce:71:4b:d8:e1:bb:c2:36:00: e6:f0:cd:c8:44:33:9b:2f:be:8e:87:d6:60:29:87: 46:72:f9:7d:5a:6a:1d:ac:f0:a7:23:bf:8f:3c:24: 2a:4d:03:54:b8:1f:8a:fd:ec:36:5c:b1:cf:f2:b7: 9f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9E:E6:87:83:CC:47:34:7B:2B:47:F5:FE:EF:12:27:56:91:B0:08 X509v3 Authority Key Identifier: keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.152.0-109.205.156.255 185.6.132.0/23 Signature Algorithm: sha256WithRSAEncryption 30:ba:77:ab:6a:09:9e:40:78:e2:6e:91:1b:10:15:96:f3:d9: 18:13:fc:86:55:cf:09:ca:76:21:4a:13:18:bd:75:45:7e:01: ef:e7:39:34:9e:26:06:8d:34:1c:c7:71:8a:92:64:f5:f7:86: 74:55:46:91:9e:08:f1:f5:df:b8:67:b6:7b:74:d9:68:b9:ae: 1a:49:10:23:16:0f:86:e5:2e:ad:90:97:a6:03:ca:6d:b6:92: 9e:06:2e:f5:67:7b:e4:66:48:60:93:b4:13:35:ab:c1:2b:66: 57:ed:73:77:0f:07:17:54:7d:eb:c6:14:50:da:9c:01:f2:f6: 12:38:16:86:ac:d9:b8:7b:5e:62:96:5f:54:fd:42:45:fd:69: 01:47:64:52:33:41:ae:70:0b:a7:34:e0:87:11:a4:dc:7a:42: f4:43:7b:b4:fe:7b:d2:e1:bb:66:2e:75:7d:90:23:89:01:6b: 39:de:ce:68:c5:3e:ca:1a:61:4b:71:c9:34:d8:1d:b9:7a:c0: 11:bd:22:86:33:be:00:4f:d2:b5:6d:9d:67:34:03:23:10:65: 01:c1:f4:d2:d7:0a:df:f1:03:d6:ed:c2:a7:c6:94:c5:e1:89: 8d:26:9f:01:72:18:86:ad:6a:15:1f:bc:96:41:41:c0:e3:26: ee:7e:f2:6f -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt3xnZ4rN30hVc0yrmrHidtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNTUxNmFmNGI3NGExMTQyYmVmMTNjM2ZkNzA3MDU5ZTYx YTZiOTUwHhcNMjYwMTAxMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDllZTY4NzgzY2M0NzM0N2IyYjQ3ZjVmZWVmMTIyNzU2OTFiMDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA036+Q+U/6Ej9cX3+0yLcPvliIEW3 nb2tlO3bc90Vx5SN5apUnHoeiToxmy/dcHpjSObmkw1QuMpwmnnFO4ooOMiRbOil b11c56R05TbGftXzJ0OPABxY3YB1GUZ2XrkEzVjPSyKPFA9VPc6rbYNnpXVep7N2 +5LKQcqZ/oKTqUkNcBsqQgwzg40NMb32xMNhL2H65jZp9zTqd/Y6dtsrW1njfg0H fKyH1EnRSnj38R56a5I0G0UoFNaw3bxK0Q3q/EjmRzdfAPLOcUvY4bvCNgDm8M3I RDObL76Oh9ZgKYdGcvl9WmodrPCnI7+PPCQqTQNUuB+K/ew2XLHP8refiwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFLCe5oeDzEc0eytH9f7vEidWkbAIMB8GA1UdIwQY MBaAFHtVFq9LdKEUK+8Tw/1wcFnmGmuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kYzhlMTMtNmRkMy00NGY5LTkwZjYt N2NkMWY2NTJkOTI1LzEvc0o3bWg0UE1SelI3SzBmMV91OFNKMWFSc0FnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9kYzhlMTMtNmRkMy00NGY5LTkwZjYtN2NkMWY2NTJkOTI1 LzEvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBANtzZgD BABtzZwDBAG5BoQwDQYJKoZIhvcNAQELBQADggEBADC6d6tqCZ5AeOJukRsQFZbz 2RgT/IZVzwnKdiFKExi9dUV+Ae/nOTSeJgaNNBzHcYqSZPX3hnRVRpGeCPH137hn tnt02Wi5rhpJECMWD4blLq2Ql6YDym22kp4GLvVne+RmSGCTtBM1q8ErZlftc3cP BxdUfevGFFDanAHy9hI4Foas2bh7XmKWX1T9QkX9aQFHZFIzQa5wC6c04IcRpNx6 QvRDe7T+e9Lhu2YudX2QI4kBaznezmjFPsoaYUtxyTTYHbl6wBG9IoYzvgBP0rVt nWc0AyMQZQHB9NLXCt/xA9btwqfGlMXhiY0mnwFyGIatahUfvJZBQcDjJu5+8m8= -----END CERTIFICATE-----Generated at Fri Jan 2 03:45:12 2026 by rpki-client