This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/7bhssnFALKXf6vwJgxr6iyB1j-E.roa File: 7bhssnFALKXf6vwJgxr6iyB1j-E.roa (raw, json) Hash identifier: Mq+fb+f7dnR1wdSCKsUAoyChLnoaaSkxAWMCvhi3v8s= Subject key identifier: ED:B8:6C:B2:71:40:2C:A5:DF:EA:FC:09:83:1A:FA:8B:20:75:8F:E1 Certificate issuer: /CN=a5dae805cc94bdd29fc27107cd63b0bd27c914d0 Certificate serial: 019B79ED6163B08FD90D706A4270D3CF8A18 Authority key identifier: A5:DA:E8:05:CC:94:BD:D2:9F:C2:71:07:CD:63:B0:BD:27:C9:14:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/7bhssnFALKXf6vwJgxr6iyB1j-E.roa Signing time: Thu 01 Jan 2026 14:19:18 +0000 ROA not before: Thu 01 Jan 2026 14:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44630 IP address blocks: 91.199.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.crl rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:61:63:b0:8f:d9:0d:70:6a:42:70:d3:cf:8a:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5dae805cc94bdd29fc27107cd63b0bd27c914d0 Validity Not Before: Jan 1 14:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edb86cb271402ca5dfeafc09831afa8b20758fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9a:b7:4f:07:29:66:c1:0f:aa:6e:2e:d9:d3: ec:e4:53:a6:85:3c:df:38:5a:cf:55:f3:a5:f4:4c: ac:36:ed:8b:87:0a:3d:b3:aa:f7:1f:5d:d6:bd:af: a2:d7:bd:b5:88:eb:65:0e:b6:60:af:26:2a:00:54: 1c:13:90:a3:c1:6e:d0:51:7c:ea:3b:3c:2d:05:73: 60:12:5d:2c:64:e0:66:a6:96:46:57:da:f2:31:9b: 44:7b:f7:e0:1e:97:e1:67:33:fa:29:50:c0:70:dc: de:52:13:1e:a4:c8:51:35:71:0d:9a:ad:98:38:70: cb:df:f6:da:1d:0d:98:46:8e:76:8d:ad:3f:0f:0c: f5:71:64:c9:03:30:a2:c6:ec:3c:17:c4:b0:88:35: b0:25:02:a9:2b:2e:39:e6:b2:fb:fd:14:ea:96:09: 78:43:5a:02:66:05:82:3f:23:37:ed:77:88:0b:cb: c1:e5:d3:32:f2:b0:79:7e:5e:e4:31:de:ae:5a:87: 41:7f:a5:a8:bc:59:f1:87:07:32:75:59:80:8d:be: 0a:0d:df:85:ce:44:f1:85:2b:0a:21:5d:a2:3f:cd: b8:c4:87:4d:66:40:2e:b9:1d:e8:11:f3:90:b8:f6: 56:c0:72:9d:e2:3a:9e:34:e7:d1:ba:72:40:ed:1b: 68:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B8:6C:B2:71:40:2C:A5:DF:EA:FC:09:83:1A:FA:8B:20:75:8F:E1 X509v3 Authority Key Identifier: keyid:A5:DA:E8:05:CC:94:BD:D2:9F:C2:71:07:CD:63:B0:BD:27:C9:14:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/7bhssnFALKXf6vwJgxr6iyB1j-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.188.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:6b:a2:69:e9:17:9c:d1:ea:e9:a0:b5:be:d7:7c:72:4a:ed: 08:60:c3:c6:63:7a:7f:e3:1c:d7:ce:90:9b:60:d8:ea:4c:ed: d2:8c:bf:2c:83:ed:61:1a:41:b2:44:45:3b:3d:99:9b:9f:fe: 4f:84:80:8b:c4:ba:d3:54:13:2b:cd:bc:71:0e:e9:8e:a1:67: 24:ab:43:6c:2d:f8:f0:61:27:c7:60:e9:9d:0d:bc:80:35:73: 56:3c:6f:14:f3:55:79:2a:a7:5a:ac:5c:17:40:84:ac:b7:a0: 84:13:e5:39:db:56:c6:f4:05:d1:8b:21:ed:ed:c2:50:d4:7f: c7:ae:1f:61:31:5b:d4:47:64:5e:1b:f1:f4:75:36:14:2b:0a: 5d:e1:bc:a7:06:c4:c7:e2:fd:e4:34:f2:0d:69:52:90:40:d5: 85:da:04:02:14:a0:be:3a:b9:e2:63:1d:1c:cc:3c:ab:b5:4a: 18:78:d0:b8:d9:75:7f:e4:3a:64:51:12:71:e4:c4:61:55:e2: da:cd:be:17:f9:6f:39:18:25:6d:06:c9:3c:7b:3a:96:2a:11: b7:97:a9:e9:7d:d3:34:43:ad:23:8b:63:b4:a2:3a:1f:48:1d: dd:5e:e4:37:5b:fb:9d:6d:3d:85:cc:34:07:88:df:73:bd:dd: e9:0a:c3:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57WFjsI/ZDXBqQnDTz4oYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZGFlODA1Y2M5NGJkZDI5ZmMyNzEwN2NkNjNiMGJkMjdj OTE0ZDAwHhcNMjYwMTAxMTQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGI4NmNiMjcxNDAyY2E1ZGZlYWZjMDk4MzFhZmE4YjIwNzU4ZmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Zq3TwcpZsEPqm4u2dPs5FOmhTzf OFrPVfOl9EysNu2Lhwo9s6r3H13Wva+i1721iOtlDrZgryYqAFQcE5CjwW7QUXzq OzwtBXNgEl0sZOBmppZGV9ryMZtEe/fgHpfhZzP6KVDAcNzeUhMepMhRNXENmq2Y OHDL3/baHQ2YRo52ja0/Dwz1cWTJAzCixuw8F8SwiDWwJQKpKy455rL7/RTqlgl4 Q1oCZgWCPyM37XeIC8vB5dMy8rB5fl7kMd6uWodBf6WovFnxhwcydVmAjb4KDd+F zkTxhSsKIV2iP824xIdNZkAuuR3oEfOQuPZWwHKd4jqeNOfRunJA7RtoYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO24bLJxQCyl3+r8CYMa+osgdY/hMB8GA1UdIwQY MBaAFKXa6AXMlL3Sn8JxB81jsL0nyRTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGRyb0JjeVV2ZEtmd25FSHpXT3d2U2ZKRk5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jOGUwMDEtYWRhMy00NWJmLWFhNDYt ZmQ1MTU2ODE2MjBjLzEvN2Joc3NuRkFMS1hmNnZ3Smd4cjZpeUIxai1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9jOGUwMDEtYWRhMy00NWJmLWFhNDYtZmQ1MTU2ODE2MjBj LzEvcGRyb0JjeVV2ZEtmd25FSHpXT3d2U2ZKRk5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8e8MA0G CSqGSIb3DQEBCwUAA4IBAQBLa6Jp6Rec0erpoLW+13xySu0IYMPGY3p/4xzXzpCb YNjqTO3SjL8sg+1hGkGyREU7PZmbn/5PhICLxLrTVBMrzbxxDumOoWckq0NsLfjw YSfHYOmdDbyANXNWPG8U81V5KqdarFwXQISst6CEE+U521bG9AXRiyHt7cJQ1H/H rh9hMVvUR2ReG/H0dTYUKwpd4bynBsTH4v3kNPINaVKQQNWF2gQCFKC+OrniYx0c zDyrtUoYeNC42XV/5DpkURJx5MRhVeLazb4X+W85GCVtBsk8ezqWKhG3l6npfdM0 Q60ji2O0ojofSB3dXuQ3W/udbT2FzDQHiN9zvd3pCsMY -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:15 2026 by rpki-client