This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/t_7GFKrIpgo8_frGNTj9vBSqEIw.roa File: t_7GFKrIpgo8_frGNTj9vBSqEIw.roa (raw, json) Hash identifier: 230zz6UpO58wwy4WdZOHRg/EgC7aq70c20kkSqSVRPY= Subject key identifier: B7:FE:C6:14:AA:C8:A6:0A:3C:FD:FA:C6:35:38:FD:BC:14:AA:10:8C Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37AB1BB6C14A9CC7296979F10E92DF Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/t_7GFKrIpgo8_frGNTj9vBSqEIw.roa Signing time: Fri 02 Jan 2026 10:18:55 +0000 ROA not before: Fri 02 Jan 2026 10:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6762 IP address blocks: 14.102.16.0/22 maxlen: 24 46.244.111.0/24 maxlen: 24 103.138.79.0/24 maxlen: 24 107.150.168.0/24 maxlen: 24 107.150.172.0/24 maxlen: 24 162.218.176.0/24 maxlen: 24 162.218.179.0/24 maxlen: 24 167.160.0.0/24 maxlen: 24 167.160.3.0/24 maxlen: 24 185.192.212.0/24 maxlen: 24 185.192.215.0/24 maxlen: 24 185.203.148.0/24 maxlen: 24 185.203.151.0/24 maxlen: 24 185.212.172.0/24 maxlen: 24 185.212.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ab:1b:b6:c1:4a:9c:c7:29:69:79:f1:0e:92:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7fec614aac8a60a3cfdfac63538fdbc14aa108c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:08:49:53:a2:dd:0d:d8:32:ac:bf:a7:dc:ec: 06:73:0a:a2:18:5d:2a:7f:5d:d3:44:8a:60:90:82: 33:3f:92:39:84:5b:4c:d4:3f:46:d4:99:4b:d1:6c: 52:1e:39:0b:19:8e:7d:cc:4c:51:83:63:1a:c0:e6: 72:fa:35:90:d1:53:0f:26:ce:9a:fe:b8:f3:dc:b5: da:c4:1b:f5:dc:01:c3:81:99:70:5b:cd:bb:56:e1: 51:44:4a:98:25:06:17:fa:04:cd:71:66:ac:62:7c: e0:01:7f:22:e3:34:75:e2:ec:87:5f:5e:da:42:b8: be:65:33:75:ad:90:0d:ce:1e:89:32:ff:b3:9c:36: dd:7c:14:6d:64:a1:00:ed:f6:63:67:7e:0c:94:e1: 4a:f6:48:74:fc:89:11:e0:7a:db:1d:03:47:5e:45: 8c:ce:30:68:8b:6d:4d:af:73:57:13:05:0c:a3:31: 32:d6:d9:a6:87:72:66:5a:6d:c2:64:1b:b6:df:a6: 30:3c:02:23:63:31:b1:5c:e1:be:6e:1a:24:13:ad: ec:c4:3f:0a:47:2c:f0:51:87:fe:f3:12:64:10:cb: b9:16:18:e7:d3:6f:17:57:55:42:e7:f0:b0:eb:fd: ea:86:54:76:ef:ca:aa:bd:e8:93:00:ae:db:f4:50: 69:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FE:C6:14:AA:C8:A6:0A:3C:FD:FA:C6:35:38:FD:BC:14:AA:10:8C X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/t_7GFKrIpgo8_frGNTj9vBSqEIw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.16.0/22 46.244.111.0/24 103.138.79.0/24 107.150.168.0/24 107.150.172.0/24 162.218.176.0/24 162.218.179.0/24 167.160.0.0/24 167.160.3.0/24 185.192.212.0/24 185.192.215.0/24 185.203.148.0/24 185.203.151.0/24 185.212.172.0/24 185.212.175.0/24 Signature Algorithm: sha256WithRSAEncryption c3:50:11:cb:9d:87:a1:b1:f8:90:36:c3:00:25:cf:5c:64:83: e8:b9:f9:08:24:44:3c:0c:6b:a7:a3:c1:96:b9:88:cd:17:b3: 7a:4b:f9:67:15:24:80:90:4a:9e:6b:2a:58:63:54:2a:58:ab: 33:f0:73:8a:d9:e4:d5:e3:ff:d7:e9:5f:ad:50:8c:4d:2d:44: 0b:10:fe:46:f3:d4:ed:d8:b8:6d:01:4a:38:33:0b:85:f8:72: 82:e8:24:a6:9b:0b:a3:ec:68:1e:10:59:51:12:19:3d:a7:84: 6d:ab:c6:a6:36:ec:fa:d4:7c:76:ef:9c:a7:1c:af:10:4d:d7: 9a:de:6d:00:52:56:de:6d:73:0d:14:0b:cc:a5:14:ac:cb:3e: 50:46:33:a7:d8:0e:4a:68:96:a7:d0:e8:7d:cc:e7:f6:40:cc: ed:c3:92:a7:21:55:7e:44:ad:9b:3f:e5:77:cc:ac:7e:65:36: c3:8f:43:01:06:a2:34:52:1b:3d:c8:2b:7f:98:5a:e3:7a:16: d8:a6:de:ea:cf:bd:d9:ee:32:dd:32:38:59:d9:47:cd:c0:6d: f0:58:e9:00:8d:ee:ca:29:1c:b1:da:84:19:33:58:90:ec:0b: 5f:04:30:d8:5f:96:6f:c4:b8:1a:21:8b:c6:e8:16:01:57:2b: b4:98:b9:a6 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZt+N6sbtsFKnMcpaXnxDpLfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2ZlYzYxNGFhYzhhNjBhM2NmZGZhYzYzNTM4ZmRiYzE0YWExMDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwhJU6LdDdgyrL+n3OwGcwqiGF0q f13TRIpgkIIzP5I5hFtM1D9G1JlL0WxSHjkLGY59zExRg2MawOZy+jWQ0VMPJs6a /rjz3LXaxBv13AHDgZlwW827VuFRREqYJQYX+gTNcWasYnzgAX8i4zR14uyHX17a Qri+ZTN1rZANzh6JMv+znDbdfBRtZKEA7fZjZ34MlOFK9kh0/IkR4HrbHQNHXkWM zjBoi21Nr3NXEwUMozEy1tmmh3JmWm3CZBu236YwPAIjYzGxXOG+bhokE63sxD8K RyzwUYf+8xJkEMu5Fhjn028XV1VC5/Cw6/3qhlR278qqveiTAK7b9FBp4QIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFLf+xhSqyKYKPP36xjU4/bwUqhCMMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvdF83R0ZLcklwZ284X2ZyR05Uajl2QlNxRUl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQCDmYQAwQA LvRvAwQAZ4pPAwQAa5aoAwQAa5asAwQAotqwAwQAotqzAwQAp6AAAwQAp6ADAwQA ucDUAwQAucDXAwQAucuUAwQAucuXAwQAudSsAwQAudSvMA0GCSqGSIb3DQEBCwUA A4IBAQDDUBHLnYehsfiQNsMAJc9cZIPoufkIJEQ8DGuno8GWuYjNF7N6S/lnFSSA kEqeaypYY1QqWKsz8HOK2eTV4//X6V+tUIxNLUQLEP5G89Tt2LhtAUo4MwuF+HKC 6CSmmwuj7GgeEFlREhk9p4Rtq8amNuz61Hx275ynHK8QTdea3m0AUlbebXMNFAvM pRSsyz5QRjOn2A5KaJan0Oh9zOf2QMztw5KnIVV+RK2bP+V3zKx+ZTbDj0MBBqI0 Uhs9yCt/mFrjehbYpt7qz73Z7jLdMjhZ2UfNwG3wWOkAje7KKRyx2oQZM1iQ7Atf BDDYX5ZvxLgaIYvG6BYBVyu0mLmm -----END CERTIFICATE-----Generated at Tue Jan 20 21:16:47 2026 by rpki-client