This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/B7aCk0b-K5XgdvEjGdk5wXSAkDc.roa File: B7aCk0b-K5XgdvEjGdk5wXSAkDc.roa (raw, json) Hash identifier: nyiUF3Zt9sMp6+mzeEZ8PMtjO/iACI+KfmNy9BotXDk= Subject key identifier: 07:B6:82:93:46:FE:2B:95:E0:76:F1:23:19:D9:39:C1:74:80:90:37 Certificate issuer: /CN=764928a97be955377013d382c62940e950dd212b Certificate serial: 019B7A5AF5FA02DA74945F6BA6CFEB4F2882 Authority key identifier: 76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/B7aCk0b-K5XgdvEjGdk5wXSAkDc.roa Signing time: Thu 01 Jan 2026 16:18:59 +0000 ROA not before: Thu 01 Jan 2026 16:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13135 IP address blocks: 185.132.220.0/22 maxlen: 24 192.76.134.0/24 maxlen: 24 212.12.48.0/21 maxlen: 24 213.238.56.0/21 maxlen: 24 2a00:14b0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f5:fa:02:da:74:94:5f:6b:a6:cf:eb:4f:28:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=764928a97be955377013d382c62940e950dd212b Validity Not Before: Jan 1 16:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07b6829346fe2b95e076f12319d939c174809037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:86:3e:6f:91:39:60:80:70:4b:e5:21:8f:bb: c4:b2:67:ef:be:8d:55:53:77:22:fb:a0:55:e8:a6: df:69:08:1e:5b:f0:f9:6a:cb:bf:44:b4:ae:5f:3d: ce:93:7c:1c:06:b7:38:f9:ec:78:54:14:f7:d3:4d: 84:aa:2d:80:16:12:02:73:85:6f:79:31:1e:2a:07: 45:ce:29:91:a4:d6:a7:65:0a:8f:49:5b:7d:47:d7: ae:07:c8:8c:11:f8:55:31:3f:51:8e:43:0c:ae:d9: 38:03:2f:ad:4e:fd:ba:f6:63:64:79:b4:0e:0d:3a: 02:56:25:de:98:94:8a:6e:62:34:12:d0:82:ae:06: 27:91:c7:4f:2c:fc:43:b5:2b:c4:db:cd:d5:68:ec: 7b:fa:d5:c7:7a:50:9c:3f:9d:b8:29:47:82:6d:77: 81:38:91:d1:37:3e:83:39:64:15:36:50:96:f7:8a: 5d:0d:33:bb:b6:72:30:cf:19:bc:f4:68:1d:61:21: c5:11:1c:12:12:2e:b2:28:4a:0e:94:3a:21:cd:d6: 23:9b:b3:5e:05:3a:f0:69:f9:bc:df:94:f9:47:02: 28:90:a4:ef:f3:33:81:52:42:a4:50:00:ba:a2:0a: 07:ac:1b:45:2a:e5:6c:5f:73:fc:f6:3c:db:f7:f2: 35:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B6:82:93:46:FE:2B:95:E0:76:F1:23:19:D9:39:C1:74:80:90:37 X509v3 Authority Key Identifier: keyid:76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/B7aCk0b-K5XgdvEjGdk5wXSAkDc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.132.220.0/22 192.76.134.0/24 212.12.48.0/21 213.238.56.0/21 IPv6: 2a00:14b0::/32 Signature Algorithm: sha256WithRSAEncryption 9b:26:95:e9:65:c4:5d:e2:78:ba:40:c4:9a:d8:b2:c0:f3:04: 33:b8:bf:bc:d1:e1:77:99:b8:24:1d:96:0c:a9:62:8a:a9:fb: f5:b4:b5:43:99:df:ec:c1:3e:b4:6f:77:49:12:71:4f:1b:be: cd:dd:e2:6c:2a:51:68:ad:3a:b1:87:29:4d:30:d1:16:95:b7: c7:a8:65:a0:d4:43:2a:bc:59:4f:4f:b2:7c:94:8b:22:73:8e: 1b:ce:25:03:5e:9b:c2:66:51:ee:2b:94:af:5a:10:9e:fe:d8: da:a3:4c:fe:d0:42:b4:9d:fe:4b:0d:35:f4:21:df:95:4f:07: c3:bf:cd:13:98:9a:de:ce:05:d8:3c:9a:c9:4f:30:b3:0f:19: ac:ee:bd:c2:e7:86:c0:81:d0:e2:ef:2a:ad:cc:aa:6d:c7:3f: 0f:0c:75:1d:bb:7b:ca:dc:eb:55:72:d2:bf:6e:6f:a1:d6:49: 2a:aa:e6:86:b3:73:30:8d:08:23:28:ae:10:4d:21:b4:f0:0b: 7c:5d:93:58:95:e1:66:0a:e3:b0:68:b2:1b:ad:f9:af:6d:94: bc:bc:ed:6e:d7:f8:ec:5a:dc:d7:36:9e:b7:9f:34:a0:71:8d: 79:d0:d4:f8:86:fd:60:65:33:9c:06:2e:ad:e1:d1:d0:12:f0: fa:51:74:5c -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt6WvX6Atp0lF9rps/rTyiCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NDkyOGE5N2JlOTU1Mzc3MDEzZDM4MmM2Mjk0MGU5NTBk ZDIxMmIwHhcNMjYwMTAxMTYxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2I2ODI5MzQ2ZmUyYjk1ZTA3NmYxMjMxOWQ5MzljMTc0ODA5MDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIY+b5E5YIBwS+Uhj7vEsmfvvo1V U3ci+6BV6KbfaQgeW/D5asu/RLSuXz3Ok3wcBrc4+ex4VBT3002Eqi2AFhICc4Vv eTEeKgdFzimRpNanZQqPSVt9R9euB8iMEfhVMT9RjkMMrtk4Ay+tTv269mNkebQO DToCViXemJSKbmI0EtCCrgYnkcdPLPxDtSvE283VaOx7+tXHelCcP524KUeCbXeB OJHRNz6DOWQVNlCW94pdDTO7tnIwzxm89GgdYSHFERwSEi6yKEoOlDohzdYjm7Ne BTrwafm835T5RwIokKTv8zOBUkKkUAC6ogoHrBtFKuVsX3P89jzb9/I1WwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFAe2gpNG/iuV4HbxIxnZOcF0gJA3MB8GA1UdIwQY MBaAFHZJKKl76VU3cBPTgsYpQOlQ3SErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85NTM2ZjUtZjU2Ni00YzgwLWE3ZDkt YmMxNTIyNzg5ZDNiLzEvQjdhQ2swYi1LNVhnZHZFakdkazV3WFNBa0RjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85NTM2ZjUtZjU2Ni00YzgwLWE3ZDktYmMxNTIyNzg5ZDNi LzEvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCuYTcAwQA wEyGAwQD1AwwAwQD1e44MA0EAgACMAcDBQAqABSwMA0GCSqGSIb3DQEBCwUAA4IB AQCbJpXpZcRd4ni6QMSa2LLA8wQzuL+80eF3mbgkHZYMqWKKqfv1tLVDmd/swT60 b3dJEnFPG77N3eJsKlForTqxhylNMNEWlbfHqGWg1EMqvFlPT7J8lIsic44bziUD XpvCZlHuK5SvWhCe/tjao0z+0EK0nf5LDTX0Id+VTwfDv80TmJrezgXYPJrJTzCz Dxms7r3C54bAgdDi7yqtzKptxz8PDHUdu3vK3OtVctK/bm+h1kkqquaGs3MwjQgj KK4QTSG08At8XZNYleFmCuOwaLIbrfmvbZS8vO1u1/jsWtzXNp63nzSgcY150NT4 hv1gZTOcBi6t4dHQEvD6UXRc -----END CERTIFICATE-----Generated at Mon Jan 26 19:22:37 2026 by rpki-client