This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/7sVlthbHEZHYrJEkSNmKqTiGTGU.roa File: 7sVlthbHEZHYrJEkSNmKqTiGTGU.roa (raw, json) Hash identifier: 9pR0VQnrEJxcV1nhe8EuJeaucG1M2LQN/bD3SKHmkOU= Subject key identifier: EE:C5:65:B6:16:C7:11:91:D8:AC:91:24:48:D9:8A:A9:38:86:4C:65 Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09 Certificate serial: 019B78A256283EDF28076898D1ACDA9C0BF1 Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/7sVlthbHEZHYrJEkSNmKqTiGTGU.roa Signing time: Thu 01 Jan 2026 08:17:43 +0000 ROA not before: Thu 01 Jan 2026 08:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3302 IP address blocks: 5.150.128.0/20 maxlen: 20 62.94.0.0/16 maxlen: 24 81.92.32.0/20 maxlen: 20 83.211.0.0/16 maxlen: 24 128.65.112.0/20 maxlen: 20 185.58.44.0/22 maxlen: 22 185.82.0.0/22 maxlen: 22 185.168.24.0/22 maxlen: 24 194.20.0.0/16 maxlen: 24 194.21.0.0/18 maxlen: 24 194.153.192.0/20 maxlen: 24 194.153.208.0/22 maxlen: 24 195.62.224.0/19 maxlen: 24 212.90.0.0/19 maxlen: 24 212.110.0.0/19 maxlen: 24 213.136.128.0/18 maxlen: 24 213.149.192.0/19 maxlen: 19 213.183.128.0/19 maxlen: 19 213.198.128.0/18 maxlen: 24 217.15.208.0/20 maxlen: 24 217.29.160.0/20 maxlen: 20 2001:750::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:56:28:3e:df:28:07:68:98:d1:ac:da:9c:0b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09 Validity Not Before: Jan 1 08:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eec565b616c71191d8ac912448d98aa938864c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:81:57:23:f5:9b:ed:d9:15:18:c0:77:68:54: 50:fc:02:56:7b:cd:90:87:ec:44:eb:46:f2:b2:66: 81:39:3c:c2:44:40:7c:85:72:d1:cd:fc:f4:9f:ca: cd:95:7d:0a:71:bd:c8:77:0e:1c:19:7f:13:5c:6b: 46:78:cc:b0:a4:f8:0a:8e:8d:3b:88:bd:1f:b4:54: 04:9a:9e:c2:93:40:f6:3f:52:27:c4:20:3f:e8:99: 53:d1:d2:8d:d9:92:30:78:9f:2e:cb:ac:76:fd:d9: e6:c3:ab:80:96:7b:31:2c:19:81:db:1d:0d:94:f4: ef:b5:a9:15:d3:54:2d:18:48:6d:32:eb:ef:58:0e: 77:be:94:d0:11:3d:dd:b9:a0:9f:1d:9d:a0:44:76: 3f:94:96:58:ad:36:33:d2:88:67:70:4e:bf:ca:74: 81:3e:8a:68:d3:a7:34:c4:1c:45:aa:62:d2:fd:08: 15:aa:10:39:43:1c:8a:77:fe:00:62:bc:2a:14:aa: f4:f2:0f:05:49:d3:6b:1d:93:20:54:6e:ac:34:48: b3:ec:fa:73:ba:76:ca:00:6d:0c:a1:4a:0a:92:a6: 7a:28:b3:ef:f9:6f:51:c1:5d:13:da:ee:f8:11:07: b9:b0:ce:9c:59:fa:81:5a:0f:96:45:70:bb:76:3e: 6e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C5:65:B6:16:C7:11:91:D8:AC:91:24:48:D9:8A:A9:38:86:4C:65 X509v3 Authority Key Identifier: keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/7sVlthbHEZHYrJEkSNmKqTiGTGU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.150.128.0/20 62.94.0.0/16 81.92.32.0/20 83.211.0.0/16 128.65.112.0/20 185.58.44.0/22 185.82.0.0/22 185.168.24.0/22 194.20.0.0-194.21.63.255 194.153.192.0-194.153.211.255 195.62.224.0/19 212.90.0.0/19 212.110.0.0/19 213.136.128.0/18 213.149.192.0/19 213.183.128.0/19 213.198.128.0/18 217.15.208.0/20 217.29.160.0/20 IPv6: 2001:750::/29 Signature Algorithm: sha256WithRSAEncryption 37:c2:ed:7a:65:fe:54:fb:e6:80:f6:2d:e3:24:d1:92:3b:5c: 87:d3:61:75:96:af:be:3f:72:0f:cb:63:e3:94:d9:7a:97:34: 57:1b:20:60:92:f4:9a:8a:9e:e3:1c:55:0d:b4:f0:c0:b0:f3: 2f:d8:3d:56:92:8c:14:74:e3:ab:3b:78:a2:44:87:69:24:70: 7a:6f:d7:cd:5b:1f:1e:50:d4:39:4a:95:4b:ab:31:94:5f:3d: 53:28:00:21:a0:13:62:b1:1a:91:c3:98:5c:b9:31:fb:42:f6: ac:45:68:72:8d:b5:f8:f0:57:72:96:df:3f:b2:51:86:69:82: 3f:24:40:78:64:a2:7b:f8:c8:18:27:1b:47:0e:ab:e7:f0:f6: d9:43:39:63:92:41:f6:f6:44:cf:16:e6:de:cd:00:3a:ea:c8: 99:4f:c4:0a:23:c4:63:2d:aa:db:85:d3:9f:d8:e4:d6:c6:ea: 8b:c7:44:4a:9d:8b:cf:82:ee:68:41:a9:86:ab:6d:c1:74:f4: 9f:28:98:0f:86:04:9b:46:0a:59:45:e2:f1:d4:9a:a6:9c:bb: 3f:09:06:de:4e:0b:92:56:9d:43:1b:54:dd:bb:e9:83:f3:8d: 49:f9:31:38:62:ad:95:07:05:dc:ca:50:d9:6e:48:80:46:06: ab:a6:d4:c5 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt4olYoPt8oB2iY0azanAvxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MzliN2ExMjM0MTdhYTcxOTMyNTk0NmFhODllMGYzMGFi MGNhMDkwHhcNMjYwMTAxMDgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWM1NjViNjE2YzcxMTkxZDhhYzkxMjQ0OGQ5OGFhOTM4ODY0YzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYFXI/Wb7dkVGMB3aFRQ/AJWe82Q h+xE60bysmaBOTzCREB8hXLRzfz0n8rNlX0Kcb3Idw4cGX8TXGtGeMywpPgKjo07 iL0ftFQEmp7Ck0D2P1InxCA/6JlT0dKN2ZIweJ8uy6x2/dnmw6uAlnsxLBmB2x0N lPTvtakV01QtGEhtMuvvWA53vpTQET3duaCfHZ2gRHY/lJZYrTYz0ohncE6/ynSB Popo06c0xBxFqmLS/QgVqhA5QxyKd/4AYrwqFKr08g8FSdNrHZMgVG6sNEiz7Ppz unbKAG0MoUoKkqZ6KLPv+W9RwV0T2u74EQe5sM6cWfqBWg+WRXC7dj5utQIDAQAB o4IClTCCApEwHQYDVR0OBBYEFO7FZbYWxxGR2KyRJEjZiqk4hkxlMB8GA1UdIwQY MBaAFHU5t6EjQXqnGTJZRqqJ4PMKsMoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjct NWI1ZTMzY2U3MGFkLzEvN3NWbHRoYkhFWkhZckpFa1NObUtxVGlHVEdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjctNWI1ZTMzY2U3MGFk LzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGqBggrBgEFBQcBBwEB/wSBmjCBlzCBhQQCAAEwfwMEBAWW gAMDAD5eAwQEUVwgAwMAU9MDBASAQXADBAK5OiwDBAK5UgADBAK5qBgwCwMDAsIU AwQGwhUAMAwDBAbCmcADBALCmdADBAXDPuADBAXUWgADBAXUbgADBAbViIADBAXV lcADBAXVt4ADBAbVxoADBATZD9ADBATZHaAwDQQCAAIwBwMFAyABB1AwDQYJKoZI hvcNAQELBQADggEBADfC7Xpl/lT75oD2LeMk0ZI7XIfTYXWWr74/cg/LY+OU2XqX NFcbIGCS9JqKnuMcVQ208MCw8y/YPVaSjBR046s7eKJEh2kkcHpv181bHx5Q1DlK lUurMZRfPVMoACGgE2KxGpHDmFy5MftC9qxFaHKNtfjwV3KW3z+yUYZpgj8kQHhk onv4yBgnG0cOq+fw9tlDOWOSQfb2RM8W5t7NADrqyJlPxAojxGMtqtuF05/Y5NbG 6ovHREqdi8+C7mhBqYarbcF09J8omA+GBJtGCllF4vHUmqacuz8JBt5OC5JWnUMb VN276YPzjUn5MThirZUHBdzKUNluSIBGBqum1MU= -----END CERTIFICATE-----Generated at Tue Jan 27 05:42:00 2026 by rpki-client