This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/7-BHgIfd8UJXQcrdaeCEGNqT0DU.roa File: 7-BHgIfd8UJXQcrdaeCEGNqT0DU.roa (raw, json) Hash identifier: r7iG2JSHeb88gixTYl7AFD1jnKrQ0a+iH+yjlWvhS9w= Subject key identifier: EF:E0:47:80:87:DD:F1:42:57:41:CA:DD:69:E0:84:18:DA:93:D0:35 Certificate issuer: /CN=d832da8d458849d5f40ba6f0b9208f8585d9e23e Certificate serial: 019B7C11239EBFC3F668EFB4957C26C2382D Authority key identifier: D8:32:DA:8D:45:88:49:D5:F4:0B:A6:F0:B9:20:8F:85:85:D9:E2:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/7-BHgIfd8UJXQcrdaeCEGNqT0DU.roa Signing time: Fri 02 Jan 2026 00:17:36 +0000 ROA not before: Fri 02 Jan 2026 00:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50295 IP address blocks: 37.203.216.0/21 maxlen: 24 93.187.8.0/21 maxlen: 24 185.47.112.0/22 maxlen: 24 185.66.80.0/22 maxlen: 24 185.101.60.0/22 maxlen: 24 2a00:1f00::/32 maxlen: 64 2a01:8ee0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:23:9e:bf:c3:f6:68:ef:b4:95:7c:26:c2:38:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d832da8d458849d5f40ba6f0b9208f8585d9e23e Validity Not Before: Jan 2 00:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=efe0478087ddf1425741cadd69e08418da93d035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:31:31:00:a1:bf:7c:2b:f9:f8:b7:b1:33:28: 2f:ef:84:51:56:c6:9f:60:9d:88:6a:3b:8d:0c:bd: 92:f6:61:30:50:ff:dc:db:68:c6:56:66:bd:99:3c: 21:a3:81:82:5b:43:e8:26:ed:b5:7f:b8:67:61:32: 3c:ad:10:f9:67:16:41:bf:76:6d:40:28:1f:40:d4: ab:44:da:e0:f2:21:75:c2:b2:12:6b:f2:c2:4b:ab: 4f:f1:d1:df:43:1a:5f:a5:e6:38:2b:82:e9:05:87: 0e:a7:12:6a:d7:f9:ea:c2:e9:9a:27:a6:b5:44:18: b1:ef:21:9b:61:1e:92:e9:d4:f1:65:61:4e:d3:02: c2:89:c7:39:e4:cc:65:fd:b2:f5:6f:3a:8f:0a:ca: 85:45:29:b3:75:01:72:88:bb:17:71:5d:73:5e:15: a8:d0:d8:e0:a8:49:f8:9e:e7:3f:02:ef:79:5c:d1: 14:bf:b7:9d:47:47:c2:0e:6f:4a:85:f5:53:f6:76: cb:9b:3b:43:d6:31:1d:ec:c5:e6:e2:19:dd:25:73: 8f:67:15:3d:9c:76:59:5a:4d:a0:ca:85:15:d0:c6: e8:af:a6:a4:de:04:e0:d3:e3:2d:1a:69:71:09:46: c4:43:f8:60:7e:28:4f:ef:76:21:99:02:8d:01:eb: ea:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E0:47:80:87:DD:F1:42:57:41:CA:DD:69:E0:84:18:DA:93:D0:35 X509v3 Authority Key Identifier: keyid:D8:32:DA:8D:45:88:49:D5:F4:0B:A6:F0:B9:20:8F:85:85:D9:E2:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/7-BHgIfd8UJXQcrdaeCEGNqT0DU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.203.216.0/21 93.187.8.0/21 185.47.112.0/22 185.66.80.0/22 185.101.60.0/22 IPv6: 2a00:1f00::/32 2a01:8ee0::/32 Signature Algorithm: sha256WithRSAEncryption a1:32:35:f6:14:38:55:6b:61:f5:47:31:03:66:f6:24:8a:66: 6b:e0:f3:4c:c6:5b:32:04:b7:9b:bd:82:e1:73:d8:d5:9f:c7: e8:7c:7d:63:aa:32:90:7f:5f:47:3f:04:1f:d0:a4:a6:b7:53: 66:07:2e:16:0d:6a:39:b0:08:3c:ce:c6:31:89:af:93:b9:7b: 95:65:80:8d:62:8c:e4:ce:34:37:7c:b9:79:17:b0:f1:bc:6e: 1d:f4:60:9f:37:83:2d:a6:df:41:c5:74:e3:8e:45:8d:93:bb: 93:4c:b4:bd:ee:d3:53:1b:99:8e:8c:98:05:c0:32:7e:d7:eb: 1a:b3:af:6c:fc:20:93:da:0c:73:75:ca:d9:20:00:02:3b:9e: 9a:00:a4:79:b6:00:64:46:88:b0:18:a3:3c:4c:cc:09:62:6f: 1c:c7:b3:b6:fc:c5:73:c5:9d:4b:18:ec:53:df:3f:cb:09:d7: 52:f6:23:bb:5c:14:b3:90:a9:82:63:c6:6f:68:b0:7d:e2:23: cf:89:db:bf:07:c0:4d:6f:54:c1:ab:79:51:98:5e:af:cd:f2: ad:51:18:1b:1c:60:95:1c:1a:5c:6e:a5:a2:75:7f:ca:cf:0c: 8e:da:86:5e:de:d0:d8:da:07:89:02:d5:1a:10:b0:e2:08:dd: ea:d6:07:f7 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZt8ESOev8P2aO+0lXwmwjgtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MzJkYThkNDU4ODQ5ZDVmNDBiYTZmMGI5MjA4Zjg1ODVk OWUyM2UwHhcNMjYwMTAyMDAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmUwNDc4MDg3ZGRmMTQyNTc0MWNhZGQ2OWUwODQxOGRhOTNkMDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjExAKG/fCv5+LexMygv74RRVsaf YJ2IajuNDL2S9mEwUP/c22jGVma9mTwho4GCW0PoJu21f7hnYTI8rRD5ZxZBv3Zt QCgfQNSrRNrg8iF1wrISa/LCS6tP8dHfQxpfpeY4K4LpBYcOpxJq1/nqwumaJ6a1 RBix7yGbYR6S6dTxZWFO0wLCicc55Mxl/bL1bzqPCsqFRSmzdQFyiLsXcV1zXhWo 0NjgqEn4nuc/Au95XNEUv7edR0fCDm9KhfVT9nbLmztD1jEd7MXm4hndJXOPZxU9 nHZZWk2gyoUV0Mbor6ak3gTg0+MtGmlxCUbEQ/hgfihP73YhmQKNAevq7wIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFO/gR4CH3fFCV0HK3WnghBjak9A1MB8GA1UdIwQY MBaAFNgy2o1FiEnV9Aum8Lkgj4WF2eI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkRMYWpVV0lTZFgwQzZid3VTQ1BoWVhaNGo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZDIxZWUtYTQ2MC00YzM5LTllNmYt Yzk5Nzk1ZjM4ODVmLzEvNy1CSGdJZmQ4VUpYUWNyZGFlQ0VHTnFUMERVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83ZDIxZWUtYTQ2MC00YzM5LTllNmYtYzk5Nzk1ZjM4ODVm LzEvMkRMYWpVV0lTZFgwQzZid3VTQ1BoWVhaNGo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAkBAIAATAeAwQDJcvYAwQD XbsIAwQCuS9wAwQCuUJQAwQCuWU8MBQEAgACMA4DBQAqAB8AAwUAKgGO4DANBgkq hkiG9w0BAQsFAAOCAQEAoTI19hQ4VWth9UcxA2b2JIpma+DzTMZbMgS3m72C4XPY 1Z/H6Hx9Y6oykH9fRz8EH9CkprdTZgcuFg1qObAIPM7GMYmvk7l7lWWAjWKM5M40 N3y5eRew8bxuHfRgnzeDLabfQcV0445FjZO7k0y0ve7TUxuZjoyYBcAyftfrGrOv bPwgk9oMc3XK2SAAAjuemgCkebYAZEaIsBijPEzMCWJvHMeztvzFc8WdSxjsU98/ ywnXUvYju1wUs5CpgmPGb2iwfeIjz4nbvwfATW9Uwat5UZher83yrVEYGxxglRwa XG6lonV/ys8MjtqGXt7Q2NoHiQLVGhCw4gjd6tYH9w== -----END CERTIFICATE-----Generated at Mon Feb 9 23:47:29 2026 by rpki-client