This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/7JRXJdqq0quI6VLheZDVHGBGYz4.roa File: 7JRXJdqq0quI6VLheZDVHGBGYz4.roa (raw, json) Hash identifier: zht/JvnIioKlRWL/1Q3IwXr569wZITbnh/lEFG9dvRk= Subject key identifier: EC:94:57:25:DA:AA:D2:AB:88:E9:52:E1:79:90:D5:1C:60:46:63:3E Certificate issuer: /CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129 Certificate serial: 019B7F1482326C924AD6DC0091A0250FF218 Authority key identifier: E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/7JRXJdqq0quI6VLheZDVHGBGYz4.roa Signing time: Fri 02 Jan 2026 14:20:09 +0000 ROA not before: Fri 02 Jan 2026 14:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210550 IP address blocks: 185.108.86.0/24 maxlen: 24 185.108.87.0/24 maxlen: 24 2a04:88c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:82:32:6c:92:4a:d6:dc:00:91:a0:25:0f:f2:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129 Validity Not Before: Jan 2 14:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec945725daaad2ab88e952e17990d51c6046633e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f0:4d:e9:19:1f:1b:a8:1f:96:c9:5a:c8:c7: c8:e0:b3:88:e8:16:4e:fd:a0:f6:ef:50:8d:3e:15: 08:3a:5a:4a:59:75:bf:9d:ab:95:52:80:fb:ff:97: 7f:76:6d:f7:a4:7a:e0:f0:17:4b:04:4f:ee:8a:73: 65:7a:f4:4d:b7:72:23:92:d0:37:9d:bc:a2:3c:82: 87:29:c8:81:20:c4:12:1b:06:ec:6e:44:cb:42:c1: d3:ca:a7:0d:b9:4b:18:7f:ff:f2:fd:84:d4:50:44: 67:00:22:32:cd:21:c5:fc:0a:8d:b7:0f:67:c3:30: fb:17:13:7d:f4:71:6f:c0:26:08:34:a3:e8:44:f8: 4a:c6:12:90:ee:3b:2d:4a:b7:aa:79:0f:bb:c2:8f: 06:68:5e:49:57:18:8a:f6:aa:70:98:45:ca:30:b3: 35:93:3c:0c:07:b7:77:0c:d2:8e:d1:88:05:10:84: 11:19:56:38:d6:36:47:f4:5d:63:ae:53:89:98:1e: 58:44:64:88:46:86:c5:c3:02:be:1f:83:55:f9:fc: 79:f5:2a:9d:25:1b:34:a7:ce:a0:14:f1:c0:b1:b3: 61:38:60:05:34:5b:19:57:8d:8a:85:e0:03:d3:1d: 4d:9b:17:05:ae:84:a1:7f:1c:08:d3:cf:e2:2b:fe: 2e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:94:57:25:DA:AA:D2:AB:88:E9:52:E1:79:90:D5:1C:60:46:63:3E X509v3 Authority Key Identifier: keyid:E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/7JRXJdqq0quI6VLheZDVHGBGYz4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.108.86.0/23 IPv6: 2a04:88c0:1::/48 Signature Algorithm: sha256WithRSAEncryption 80:e1:85:f6:8e:a3:3d:51:98:23:07:6b:32:ec:17:9a:0d:a5: 69:9f:40:ff:89:d6:bc:9b:22:74:8c:18:b9:c8:10:2d:41:85: 91:f4:c0:d7:96:80:24:c8:66:f7:64:3a:da:63:24:21:75:29: 9e:e1:2d:52:e7:70:03:46:88:54:09:bf:6c:7c:90:55:ab:0b: a7:2b:c2:35:d7:8c:60:aa:b2:ea:9d:f5:f9:75:0b:95:d7:e1: 3a:2d:9e:73:6d:ab:45:a5:bd:9e:05:ff:f7:2a:7b:65:61:19: c1:78:73:24:14:35:a9:16:ab:6b:9f:23:2d:0c:6a:b9:7b:73: f7:a8:23:43:fc:63:d3:38:3a:6e:d6:27:fa:31:e1:69:ca:34: 57:61:ce:97:d8:11:83:39:f8:0a:ea:dc:22:03:aa:25:06:4b: 52:f2:2c:c5:0d:9a:78:4d:ab:a3:72:24:20:40:2c:65:fa:08: 0a:52:dc:c2:c5:c3:52:21:a8:a3:2f:61:a1:c7:fb:6c:b6:1c: d2:d8:e6:f0:14:40:47:67:af:25:6d:a5:4a:1c:f5:16:d7:44: 4e:c6:fc:2c:fc:f6:0c:a8:d7:38:5b:2b:f4:74:75:6c:a6:65: 27:b0:bf:af:8f:4e:de:b0:ac:cf:58:dd:28:2c:63:23:46:23: b6:0a:6f:45 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/FIIybJJK1twAkaAlD/IYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYzViYjNkYTUzNDM1YmY0MWUxN2Y3ZGVjNDdkNDQ4NGU3 ZjMxMjkwHhcNMjYwMTAyMTQyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzk0NTcyNWRhYWFkMmFiODhlOTUyZTE3OTkwZDUxYzYwNDY2MzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/BN6RkfG6gflslayMfI4LOI6BZO /aD271CNPhUIOlpKWXW/nauVUoD7/5d/dm33pHrg8BdLBE/uinNlevRNt3IjktA3 nbyiPIKHKciBIMQSGwbsbkTLQsHTyqcNuUsYf//y/YTUUERnACIyzSHF/AqNtw9n wzD7FxN99HFvwCYINKPoRPhKxhKQ7jstSreqeQ+7wo8GaF5JVxiK9qpwmEXKMLM1 kzwMB7d3DNKO0YgFEIQRGVY41jZH9F1jrlOJmB5YRGSIRobFwwK+H4NV+fx59Sqd JRs0p86gFPHAsbNhOGAFNFsZV42KheAD0x1NmxcFroShfxwI08/iK/4uGwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOyUVyXaqtKriOlS4XmQ1RxgRmM+MB8GA1UdIwQY MBaAFODFuz2lNDW/QeF/fexH1EhOfzEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE1XN1BhVTBOYjlCNFg5OTdFZlVTRTVfTVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83ZjdkOGYtMGRjOC00NWEyLWJjMTYt ODBhZGQ5ZWEzZTVjLzEvN0pSWEpkcXEwcXVJNlZMaGVaRFZIR0JHWXo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83ZjdkOGYtMGRjOC00NWEyLWJjMTYtODBhZGQ5ZWEzZTVj LzEvNE1XN1BhVTBOYjlCNFg5OTdFZlVTRTVfTVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBuWxWMA8E AgACMAkDBwAqBIjAAAEwDQYJKoZIhvcNAQELBQADggEBAIDhhfaOoz1RmCMHazLs F5oNpWmfQP+J1rybInSMGLnIEC1BhZH0wNeWgCTIZvdkOtpjJCF1KZ7hLVLncANG iFQJv2x8kFWrC6crwjXXjGCqsuqd9fl1C5XX4TotnnNtq0WlvZ4F//cqe2VhGcF4 cyQUNakWq2ufIy0Marl7c/eoI0P8Y9M4Om7WJ/ox4WnKNFdhzpfYEYM5+Arq3CID qiUGS1LyLMUNmnhNq6NyJCBALGX6CApS3MLFw1IhqKMvYaHH+2y2HNLY5vAUQEdn ryVtpUoc9RbXRE7G/Cz89gyo1zhbK/R0dWymZSewv6+PTt6wrM9Y3SgsYyNGI7YK b0U= -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:07 2026 by rpki-client