This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/w7qO3XTNq0Yzdc30rEPjt7iJFZU.roa File: w7qO3XTNq0Yzdc30rEPjt7iJFZU.roa (raw, json) Hash identifier: LNZ6lyl5sjWLQK11LqKZIO+Pewy+8JnS92wQrFux3FI= Subject key identifier: C3:BA:8E:DD:74:CD:AB:46:33:75:CD:F4:AC:43:E3:B7:B8:89:15:95 Certificate issuer: /CN=8e5a36a38e9e562476ae70b915028e3018712919 Certificate serial: 019B79ED597516B5F09F5163381082421CB6 Authority key identifier: 8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/w7qO3XTNq0Yzdc30rEPjt7iJFZU.roa Signing time: Thu 01 Jan 2026 14:19:16 +0000 ROA not before: Thu 01 Jan 2026 14:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207627 IP address blocks: 185.225.224.0/24 maxlen: 24 2a06:4740::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:59:75:16:b5:f0:9f:51:63:38:10:82:42:1c:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5a36a38e9e562476ae70b915028e3018712919 Validity Not Before: Jan 1 14:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3ba8edd74cdab463375cdf4ac43e3b7b8891595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:57:4c:1c:50:c2:71:8f:37:b4:cd:ee:6d:ae: 29:4c:a3:31:3f:e3:fa:8a:83:43:8c:0a:eb:d6:ba: 88:e1:f1:ff:c6:eb:59:ce:1e:8c:cd:80:b9:74:30: 63:53:c2:15:2f:8b:6f:e8:54:83:b5:6d:4f:d0:6b: 31:11:56:5a:c6:e9:f6:ac:22:b7:4c:e4:38:2a:07: d0:39:ac:65:0a:d1:74:27:36:9a:09:23:9d:7c:68: 8c:07:fd:ce:6b:f2:12:21:51:5a:b1:41:fe:ea:3c: 92:82:7f:cb:f5:9e:cc:a0:ea:d1:f2:88:74:7e:5c: e0:ca:84:80:df:df:ed:52:7d:e9:70:f2:bc:f7:1c: 18:64:a1:5b:3e:ad:18:9a:81:7a:56:94:c0:c1:2b: 46:ca:50:74:19:d8:8e:3c:1a:3e:18:2c:a9:f2:38: f4:77:42:7d:8b:72:ba:89:f5:41:f2:ad:11:69:46: c6:c2:a4:51:ea:9e:2b:27:7b:58:b2:30:c6:d9:ed: 08:0c:bb:ca:3b:b0:70:ef:80:c2:50:b2:99:e1:c9: 35:5f:87:a3:10:37:0f:92:aa:28:b8:54:3c:ce:4e: 00:36:77:a0:5c:19:93:57:9d:2b:4a:6c:34:1f:04: cd:db:ab:04:e4:31:39:b4:98:26:5f:7b:6f:f1:83: 80:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BA:8E:DD:74:CD:AB:46:33:75:CD:F4:AC:43:E3:B7:B8:89:15:95 X509v3 Authority Key Identifier: keyid:8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/w7qO3XTNq0Yzdc30rEPjt7iJFZU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.224.0/24 IPv6: 2a06:4740::/29 Signature Algorithm: sha256WithRSAEncryption 29:b8:aa:81:16:ac:29:68:51:9c:81:33:d2:cc:75:e9:26:8f: 7c:a0:85:74:06:04:8c:91:e0:79:0f:92:35:d5:76:4f:72:af: a1:83:3c:e3:e2:76:76:92:4a:98:3d:f1:85:0b:6d:cf:af:dd: e4:3c:de:50:c1:6a:12:e3:a7:0d:99:90:c3:8b:cd:03:5d:e7: 94:55:5d:81:4c:fd:7b:81:e2:b7:2a:c9:03:63:f6:72:9d:42: 6a:b9:47:05:ac:2b:81:3e:fa:38:9d:04:bb:04:ab:b4:26:2a: ce:0f:65:27:27:56:c7:93:b7:26:42:a3:fe:3c:3e:be:4e:24: af:6c:50:f4:b9:70:af:6c:b1:ea:bb:56:99:cc:10:72:31:f0: 24:6c:a5:93:7b:73:03:c7:22:78:4b:96:d5:bd:28:d5:87:61: a8:5d:b4:34:5c:10:26:ed:b6:ac:fc:96:57:dc:e9:27:dc:fa: 2a:40:21:65:0b:49:33:de:78:5c:83:75:2b:79:dd:2e:db:7f: 67:c8:7a:3a:6f:d8:b9:f9:53:41:3e:c7:f2:be:2b:98:5c:f6: 1b:c8:9e:5a:7f:f5:47:21:77:7f:d4:c3:38:65:5a:bc:81:37: 72:b8:00:5d:ca:e4:68:b0:76:c9:a1:bf:eb:c2:30:84:89:ec: d3:0f:4b:20 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57Vl1FrXwn1FjOBCCQhy2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNWEzNmEzOGU5ZTU2MjQ3NmFlNzBiOTE1MDI4ZTMwMTg3 MTI5MTkwHhcNMjYwMTAxMTQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2JhOGVkZDc0Y2RhYjQ2MzM3NWNkZjRhYzQzZTNiN2I4ODkxNTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtldMHFDCcY83tM3uba4pTKMxP+P6 ioNDjArr1rqI4fH/xutZzh6MzYC5dDBjU8IVL4tv6FSDtW1P0GsxEVZaxun2rCK3 TOQ4KgfQOaxlCtF0JzaaCSOdfGiMB/3Oa/ISIVFasUH+6jySgn/L9Z7MoOrR8oh0 flzgyoSA39/tUn3pcPK89xwYZKFbPq0YmoF6VpTAwStGylB0GdiOPBo+GCyp8jj0 d0J9i3K6ifVB8q0RaUbGwqRR6p4rJ3tYsjDG2e0IDLvKO7Bw74DCULKZ4ck1X4ej EDcPkqoouFQ8zk4ANnegXBmTV50rSmw0HwTN26sE5DE5tJgmX3tv8YOAHQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMO6jt10zatGM3XN9KxD47e4iRWVMB8GA1UdIwQY MBaAFI5aNqOOnlYkdq5wuRUCjjAYcSkZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamxvMm80NmVWaVIycm5DNUZRS09NQmh4S1JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83YjI1NjctZGJhZi00NmQzLThjMDEt ZGYwZTYxOWEwYjgyLzEvdzdxTzNYVE5xMFl6ZGMzMHJFUGp0N2lKRlpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83YjI1NjctZGJhZi00NmQzLThjMDEtZGYwZTYxOWEwYjgy LzEvamxvMm80NmVWaVIycm5DNUZRS09NQmh4S1JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAueHgMA0E AgACMAcDBQMqBkdAMA0GCSqGSIb3DQEBCwUAA4IBAQApuKqBFqwpaFGcgTPSzHXp Jo98oIV0BgSMkeB5D5I11XZPcq+hgzzj4nZ2kkqYPfGFC23Pr93kPN5QwWoS46cN mZDDi80DXeeUVV2BTP17geK3KskDY/ZynUJquUcFrCuBPvo4nQS7BKu0JirOD2Un J1bHk7cmQqP+PD6+TiSvbFD0uXCvbLHqu1aZzBByMfAkbKWTe3MDxyJ4S5bVvSjV h2GoXbQ0XBAm7bas/JZX3Okn3PoqQCFlC0kz3nhcg3Ured0u239nyHo6b9i5+VNB PsfyviuYXPYbyJ5af/VHIXd/1MM4ZVq8gTdyuABdyuRosHbJob/rwjCEiezTD0sg -----END CERTIFICATE-----Generated at Tue Feb 10 02:58:52 2026 by rpki-client