This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/7TI02Lv1cy3_UcW4boFfMyZEr-Q.roa File: 7TI02Lv1cy3_UcW4boFfMyZEr-Q.roa (raw, json) Hash identifier: DmYt4DmUxguBs8rVL28skaqZFt632pvDfhGKKnzPZqw= Subject key identifier: ED:32:34:D8:BB:F5:73:2D:FF:51:C5:B8:6E:81:5F:33:26:44:AF:E4 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019BBB73AF4618DB4791F3F774B89F86ABA7 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/7TI02Lv1cy3_UcW4boFfMyZEr-Q.roa Signing time: Wed 14 Jan 2026 07:41:19 +0000 ROA not before: Wed 14 Jan 2026 07:41:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57013 IP address blocks: 45.155.206.0/24 maxlen: 24 77.83.204.0/24 maxlen: 24 77.83.205.0/24 maxlen: 24 194.26.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:73:af:46:18:db:47:91:f3:f7:74:b8:9f:86:ab:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 14 07:41:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed3234d8bbf5732dff51c5b86e815f332644afe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bf:79:95:96:f7:8d:fc:75:4b:0a:57:a6:22: 6f:e1:8c:b8:45:df:fa:69:e8:02:59:a5:4c:d3:31: 46:7a:7e:27:d3:49:3d:d5:41:d8:59:d5:bb:f2:dd: 71:f0:8f:84:98:df:46:c4:4c:b2:db:fb:74:ff:4d: 4a:25:18:2b:6e:e4:83:a0:8f:dd:b1:ff:02:32:e6: 7b:ab:20:a2:e6:e9:43:9d:e1:7c:8d:bd:1e:3d:0e: fe:8c:93:50:41:dc:14:d7:a9:db:0c:13:dd:66:7e: b1:aa:7f:dc:73:20:6a:80:3d:aa:32:d0:61:3a:9f: c9:58:60:31:f4:d2:f8:4f:a9:65:3d:cd:7e:a6:0e: 91:2a:21:23:7e:bd:31:e2:0e:a4:64:1b:22:5f:96: d5:11:94:27:43:ff:8f:bd:1b:ea:4f:52:70:ac:f0: b8:33:0c:b2:1a:40:8b:73:10:3d:14:c9:7a:2c:8d: 06:c4:63:51:15:89:a7:22:91:6a:96:d9:3a:82:99: 40:43:5a:1c:66:8a:a8:9e:14:05:9d:0a:cb:46:51: bd:ef:9c:78:13:78:53:44:61:2e:86:76:d1:e8:f9: 96:3c:f4:1b:df:3e:eb:98:af:d1:3f:77:b7:59:c3: 50:cd:7d:b5:b1:37:40:aa:61:36:60:1f:21:05:6f: b2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:32:34:D8:BB:F5:73:2D:FF:51:C5:B8:6E:81:5F:33:26:44:AF:E4 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/7TI02Lv1cy3_UcW4boFfMyZEr-Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.206.0/24 77.83.204.0/23 194.26.205.0/24 Signature Algorithm: sha256WithRSAEncryption 60:5c:e8:20:9b:97:87:54:89:01:60:93:4a:05:c2:16:fd:f7: 7f:15:e0:91:7d:5f:b5:ee:20:db:7b:db:e4:f6:9a:36:53:99: fd:00:61:92:f1:b6:9f:47:b0:ea:90:4b:07:cd:22:77:98:e7: 94:8b:12:b7:cd:9d:7c:a2:2e:63:b3:75:51:a7:79:ca:9e:49: b0:97:7b:7e:6a:61:7b:27:7e:d6:0c:1c:f3:cd:0a:4a:9a:b1: 8d:6e:89:ec:09:ec:ab:38:13:63:9c:49:f7:27:5e:c0:9a:e0: 87:fd:18:a8:52:ce:38:11:f8:f9:67:95:cf:af:0c:1b:5b:2e: 02:80:85:08:96:54:f5:4c:42:7e:17:f9:72:ca:4c:fc:4a:4e: af:f7:9b:d8:fa:c6:d6:06:34:ce:3e:1b:5c:b1:e0:1b:9a:1b: 20:10:48:0b:07:2e:e7:40:f0:d0:27:3a:22:d9:9b:26:b2:21: a6:de:cc:ac:f7:05:5d:08:76:60:be:78:25:7e:c4:7e:14:96: 55:82:67:77:c6:06:f8:16:3a:8d:1d:8b:0a:e2:8c:18:0c:d7: 0e:04:a4:ee:34:c2:49:bb:51:9c:63:af:e2:b8:f4:e0:bd:ec: 4e:dd:8c:15:1e:71:0e:0f:77:8d:40:25:f3:01:a3:13:ee:36: fe:c6:9a:af -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZu7c69GGNtHkfP3dLifhqunMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTE0MDc0MTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDMyMzRkOGJiZjU3MzJkZmY1MWM1Yjg2ZTgxNWYzMzI2NDRhZmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb95lZb3jfx1SwpXpiJv4Yy4Rd/6 aegCWaVM0zFGen4n00k91UHYWdW78t1x8I+EmN9GxEyy2/t0/01KJRgrbuSDoI/d sf8CMuZ7qyCi5ulDneF8jb0ePQ7+jJNQQdwU16nbDBPdZn6xqn/ccyBqgD2qMtBh Op/JWGAx9NL4T6llPc1+pg6RKiEjfr0x4g6kZBsiX5bVEZQnQ/+PvRvqT1JwrPC4 MwyyGkCLcxA9FMl6LI0GxGNRFYmnIpFqltk6gplAQ1ocZoqonhQFnQrLRlG975x4 E3hTRGEuhnbR6PmWPPQb3z7rmK/RP3e3WcNQzX21sTdAqmE2YB8hBW+yMQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFO0yNNi79XMt/1HFuG6BXzMmRK/kMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvN1RJMDJMdjFjeTNfVWNXNGJvRmZNeVpFci1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZvOAwQB TVPMAwQAwhrNMA0GCSqGSIb3DQEBCwUAA4IBAQBgXOggm5eHVIkBYJNKBcIW/fd/ FeCRfV+17iDbe9vk9po2U5n9AGGS8bafR7DqkEsHzSJ3mOeUixK3zZ18oi5js3VR p3nKnkmwl3t+amF7J37WDBzzzQpKmrGNbonsCeyrOBNjnEn3J17AmuCH/RioUs44 Efj5Z5XPrwwbWy4CgIUIllT1TEJ+F/lyykz8Sk6v95vY+sbWBjTOPhtcseAbmhsg EEgLBy7nQPDQJzoi2ZsmsiGm3sys9wVdCHZgvnglfsR+FJZVgmd3xgb4FjqNHYsK 4owYDNcOBKTuNMJJu1GcY6/iuPTgvexO3YwVHnEOD3eNQCXzAaMT7jb+xpqv -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:06 2026 by rpki-client