This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/7eHaRVW-XDpYbYMS7PM9kVQMrmU.roa File: 7eHaRVW-XDpYbYMS7PM9kVQMrmU.roa (raw, json) Hash identifier: IHRINIPPQysqZwAhYPRCxmedKH/g1vm6KrKFWWCI12A= Subject key identifier: ED:E1:DA:45:55:BE:5C:3A:58:6D:83:12:EC:F3:3D:91:54:0C:AE:65 Certificate issuer: /CN=05eb12157317bec58fd41d92ff105b361864a6f2 Certificate serial: 019B7C80C91467F4A771C8B8E18704B0D30C Authority key identifier: 05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/7eHaRVW-XDpYbYMS7PM9kVQMrmU.roa Signing time: Fri 02 Jan 2026 02:19:33 +0000 ROA not before: Fri 02 Jan 2026 02:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56599 IP address blocks: 194.9.42.0/23 maxlen: 23 195.158.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:c9:14:67:f4:a7:71:c8:b8:e1:87:04:b0:d3:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05eb12157317bec58fd41d92ff105b361864a6f2 Validity Not Before: Jan 2 02:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ede1da4555be5c3a586d8312ecf33d91540cae65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b2:90:49:3d:0c:d0:e3:a6:d3:ba:b2:c5:e0: 10:f4:2d:f4:d9:ec:bf:d5:42:65:c9:91:ce:9b:a3: 72:19:49:60:82:74:b9:c1:db:2e:cf:b8:27:84:22: 0e:7a:64:c7:ca:fa:4a:7d:3d:82:09:7c:84:02:d2: 95:95:22:02:aa:a9:7f:82:14:bb:38:1a:dd:b0:5d: 40:09:65:5b:26:3c:1d:ed:59:64:c6:83:ee:93:1f: 7c:52:12:97:0b:9a:3b:2b:93:a2:cd:b0:f6:a0:b6: d7:d1:41:0a:6c:4d:14:22:d6:c8:cc:c5:9c:cc:15: 48:c4:1a:0e:e6:4c:5a:1a:06:8b:27:15:97:98:12: 8f:ae:d6:ae:7a:e7:8a:6b:fe:d3:7a:82:f0:4d:f8: 3c:b7:23:2a:a3:00:dd:da:eb:da:74:a1:66:4a:df: 93:de:4c:b0:fb:73:a9:cf:f3:91:30:18:1a:60:7d: b8:00:92:7c:b4:1e:32:8c:34:cb:b9:90:05:39:a5: dd:27:ab:97:8f:0f:7f:64:6d:55:91:41:03:ae:32: 40:61:16:3b:3f:d3:55:29:72:c7:91:1b:ae:12:d4: ed:66:c9:9d:45:6f:89:e2:aa:46:1f:45:23:01:d7: e2:8c:09:3d:54:79:b3:51:6c:dc:68:ba:68:2c:af: 9f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E1:DA:45:55:BE:5C:3A:58:6D:83:12:EC:F3:3D:91:54:0C:AE:65 X509v3 Authority Key Identifier: keyid:05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/7eHaRVW-XDpYbYMS7PM9kVQMrmU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.9.42.0/23 195.158.244.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:ca:fa:17:93:09:b9:3c:ff:1b:e2:e5:57:26:84:3d:fe:61: 23:fa:98:bd:e7:50:05:00:48:54:87:8b:ca:f7:4e:b6:65:83: 98:95:c6:7b:c3:d2:42:52:d0:40:5f:1a:16:2b:20:ca:c8:0f: d6:d5:fc:3e:43:0d:ab:22:24:25:81:8b:84:e3:b4:47:df:f4: d2:99:ee:7d:85:e7:08:71:2c:46:22:1d:a6:72:fe:6d:6d:38: 39:0c:91:a4:1c:d5:8a:57:cb:12:fc:fe:ad:8e:99:2d:0f:86: a0:05:dc:cb:05:a5:28:45:19:f9:01:02:58:c9:95:a9:cb:9d: 41:22:19:ae:a4:31:b2:98:18:84:26:0f:1b:27:84:a4:ad:26: 56:7d:01:68:fa:c7:4a:b0:7e:c0:14:cc:11:f7:bb:64:8d:1f: 93:00:ac:cc:21:44:b1:68:e6:c7:6f:ed:a4:df:54:da:96:c2: ad:d4:60:53:f0:29:c7:f7:93:65:d6:52:49:b0:77:e6:06:b5: e9:82:f7:8c:4e:79:fd:5d:14:fe:13:ef:ba:99:ce:d9:14:93: 10:71:db:98:cf:7a:d2:0e:a4:c0:f7:d0:22:e3:fd:b2:4d:f7: bc:4c:05:22:b7:ec:8b:f7:4e:5d:e0:e5:33:4a:8d:73:13:6d: c8:ad:20:08 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gMkUZ/Sncci44YcEsNMMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZWIxMjE1NzMxN2JlYzU4ZmQ0MWQ5MmZmMTA1YjM2MTg2 NGE2ZjIwHhcNMjYwMTAyMDIxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGUxZGE0NTU1YmU1YzNhNTg2ZDgzMTJlY2YzM2Q5MTU0MGNhZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrKQST0M0OOm07qyxeAQ9C302ey/ 1UJlyZHOm6NyGUlggnS5wdsuz7gnhCIOemTHyvpKfT2CCXyEAtKVlSICqql/ghS7 OBrdsF1ACWVbJjwd7VlkxoPukx98UhKXC5o7K5OizbD2oLbX0UEKbE0UItbIzMWc zBVIxBoO5kxaGgaLJxWXmBKPrtaueueKa/7TeoLwTfg8tyMqowDd2uvadKFmSt+T 3kyw+3Opz/ORMBgaYH24AJJ8tB4yjDTLuZAFOaXdJ6uXjw9/ZG1VkUEDrjJAYRY7 P9NVKXLHkRuuEtTtZsmdRW+J4qpGH0UjAdfijAk9VHmzUWzcaLpoLK+fOwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFO3h2kVVvlw6WG2DEuzzPZFUDK5lMB8GA1UdIwQY MBaAFAXrEhVzF77Fj9Qdkv8QWzYYZKbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yMGM4NDItYjQ5NC00ZGI2LWFhNzUt M2RkMzZhMjlmYTI4LzEvN2VIYVJWVy1YRHBZYllNUzdQTTlrVlFNcm1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8yMGM4NDItYjQ5NC00ZGI2LWFhNzUtM2RkMzZhMjlmYTI4 LzEvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwgkqAwQA w570MA0GCSqGSIb3DQEBCwUAA4IBAQAayvoXkwm5PP8b4uVXJoQ9/mEj+pi951AF AEhUh4vK9062ZYOYlcZ7w9JCUtBAXxoWKyDKyA/W1fw+Qw2rIiQlgYuE47RH3/TS me59hecIcSxGIh2mcv5tbTg5DJGkHNWKV8sS/P6tjpktD4agBdzLBaUoRRn5AQJY yZWpy51BIhmupDGymBiEJg8bJ4SkrSZWfQFo+sdKsH7AFMwR97tkjR+TAKzMIUSx aObHb+2k31TalsKt1GBT8CnH95Nl1lJJsHfmBrXpgveMTnn9XRT+E++6mc7ZFJMQ cduYz3rSDqTA99Ai4/2yTfe8TAUit+yL905d4OUzSo1zE23IrSAI -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:45 2026 by rpki-client