This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/7w9615nIUak6j9qKBSemLYUs4lE.roa File: 7w9615nIUak6j9qKBSemLYUs4lE.roa (raw, json) Hash identifier: UXmWoVxNa8W/M8yy0s9ag8l2H1J69QCKdRwDtmWIJD0= Subject key identifier: EF:0F:7A:D7:99:C8:51:A9:3A:8F:DA:8A:05:27:A6:2D:85:2C:E2:51 Certificate issuer: /CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244 Certificate serial: 019B791110F106FBB1B72AE7ECBC768EB8F1 Authority key identifier: BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/7w9615nIUak6j9qKBSemLYUs4lE.roa Signing time: Thu 01 Jan 2026 10:18:40 +0000 ROA not before: Thu 01 Jan 2026 10:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12843 IP address blocks: 194.59.18.0/23 maxlen: 23 194.59.20.0/22 maxlen: 22 2001:67c:12f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:10:f1:06:fb:b1:b7:2a:e7:ec:bc:76:8e:b8:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244 Validity Not Before: Jan 1 10:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef0f7ad799c851a93a8fda8a0527a62d852ce251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fa:3a:a2:42:d5:90:51:7c:1a:71:04:34:f9: ec:4d:fa:ff:5c:c3:17:da:72:fa:e5:1e:80:3d:26: 6d:1a:5c:b7:2b:c7:ec:eb:2a:e4:52:2a:ad:8d:44: 8c:f5:d4:42:bb:61:7b:40:f1:e1:e5:67:4a:5f:f4: 49:87:96:4a:e9:e8:9f:b7:af:29:13:0a:31:e3:dd: cc:63:92:82:7a:62:02:8f:63:91:eb:92:32:dc:35: 49:b8:94:94:87:27:9a:6d:ab:e0:91:ec:be:fa:f7: 1e:97:bf:04:34:43:63:41:34:01:aa:74:eb:21:3f: aa:c7:7a:7a:73:16:72:92:2c:bb:03:ed:a8:6c:46: e7:92:59:70:87:db:50:13:59:36:b1:b3:a4:f4:13: 0e:34:cb:cb:1a:af:8a:f1:23:8b:3e:9e:20:32:2a: ba:1b:9c:91:54:2c:be:ed:94:b2:1b:9e:93:bc:46: 5e:3e:a5:38:36:64:3e:4c:d7:83:6a:1a:a5:84:a2: 1d:0d:bc:e5:03:6a:ae:b2:c9:69:f8:2b:6b:e2:86: bb:e1:29:78:5f:40:bf:26:26:de:f4:4c:f6:b7:11: c2:fc:90:46:4a:31:f7:c2:f1:9f:99:f7:7f:56:f1: 39:ef:bf:14:e4:e4:d4:f4:84:b7:01:ad:4b:ac:5c: 5c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:0F:7A:D7:99:C8:51:A9:3A:8F:DA:8A:05:27:A6:2D:85:2C:E2:51 X509v3 Authority Key Identifier: keyid:BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/7w9615nIUak6j9qKBSemLYUs4lE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.59.18.0-194.59.23.255 IPv6: 2001:67c:12f0::/48 Signature Algorithm: sha256WithRSAEncryption 1c:51:04:3e:0c:0f:bd:9f:0f:64:ef:22:d7:2b:ac:eb:e4:e4: 92:8c:77:7c:02:d1:75:bb:8e:26:0f:1e:90:88:ed:97:0f:1e: 30:07:dc:b3:a8:f0:ff:d5:16:c5:e7:86:66:8c:9a:38:3a:6d: 69:42:22:b9:d1:00:9b:44:02:60:b2:2e:a3:9e:97:90:f3:f9: 79:17:0f:d5:ef:59:73:14:9e:cb:dc:bd:16:d7:95:a1:8b:9c: ca:fa:96:87:91:22:69:80:5e:7f:dd:b9:1a:97:da:ed:d7:7b: 29:13:85:b0:4f:43:2c:3c:17:91:1f:26:b0:9e:bb:09:25:fe: 14:f9:14:37:e4:b0:41:e8:55:e5:5e:8a:e4:64:c3:dc:36:e9: 61:47:ea:c1:94:80:67:c0:d9:0a:f3:c6:5e:85:07:f8:de:f9: b0:47:90:a7:4a:7d:9d:b5:0a:b1:9e:bd:a6:1c:ed:8b:d3:0a: 67:43:c5:74:13:6d:af:53:a1:c7:a1:9e:d3:30:97:5c:1f:6c: b9:1b:30:be:b0:d1:11:0d:76:bf:2b:62:63:a6:f0:7f:6f:fc: cb:0b:c4:98:06:08:be:86:4d:ca:ad:58:b3:c1:a2:33:2f:41: 96:6b:0e:cd:6c:ad:0c:87:df:02:d3:a9:22:54:85:1d:c3:24: 0c:c7:b3:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5ERDxBvuxtyrn7Lx2jrjxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmYzZDk2ZThhYTE0MWQyMmM0MjQyYWVmZjc4YWY3MWVm OGIyNDQwHhcNMjYwMTAxMTAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjBmN2FkNzk5Yzg1MWE5M2E4ZmRhOGEwNTI3YTYyZDg1MmNlMjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPo6okLVkFF8GnEENPnsTfr/XMMX 2nL65R6APSZtGly3K8fs6yrkUiqtjUSM9dRCu2F7QPHh5WdKX/RJh5ZK6eift68p Ewox493MY5KCemICj2OR65Iy3DVJuJSUhyeabavgkey++vcel78ENENjQTQBqnTr IT+qx3p6cxZykiy7A+2obEbnkllwh9tQE1k2sbOk9BMONMvLGq+K8SOLPp4gMiq6 G5yRVCy+7ZSyG56TvEZePqU4NmQ+TNeDahqlhKIdDbzlA2qusslp+Ctr4oa74Sl4 X0C/Jibe9Ez2txHC/JBGSjH3wvGfmfd/VvE5778U5OTU9IS3Aa1LrFxcHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8PeteZyFGpOo/aigUnpi2FLOJRMB8GA1UdIwQY MBaAFL3/PZboqhQdIsQkKu/3ivce+LJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82MTFjN2YtYjEyNS00NzEyLTllZjct M2M3OTg3YzQyYzE2LzEvN3c5NjE1bklVYWs2ajlxS0JTZW1MWVVzNGxFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS82MTFjN2YtYjEyNS00NzEyLTllZjctM2M3OTg3YzQyYzE2 LzEvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAHCOxID BAPCOxAwDwQCAAIwCQMHACABBnwS8DANBgkqhkiG9w0BAQsFAAOCAQEAHFEEPgwP vZ8PZO8i1yus6+Tkkox3fALRdbuOJg8ekIjtlw8eMAfcs6jw/9UWxeeGZoyaODpt aUIiudEAm0QCYLIuo56XkPP5eRcP1e9ZcxSey9y9FteVoYucyvqWh5EiaYBef925 Gpfa7dd7KROFsE9DLDwXkR8msJ67CSX+FPkUN+SwQehV5V6K5GTD3DbpYUfqwZSA Z8DZCvPGXoUH+N75sEeQp0p9nbUKsZ69phzti9MKZ0PFdBNtr1Ohx6Ge0zCXXB9s uRswvrDREQ12vytiY6bwf2/8ywvEmAYIvoZNyq1Ys8GiMy9BlmsOzWytDIffAtOp IlSFHcMkDMezww== -----END CERTIFICATE-----Generated at Mon Jan 26 19:35:52 2026 by rpki-client