This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/7uS7FJeJqfkBOKs7jAgs7VUqjPQ.roa File: 7uS7FJeJqfkBOKs7jAgs7VUqjPQ.roa (raw, json) Hash identifier: AUrVVqZgFBpQPO1HYsXG2X9cKcmkyjTr27P1yB02VUc= Subject key identifier: EE:E4:BB:14:97:89:A9:F9:01:38:AB:3B:8C:08:2C:ED:55:2A:8C:F4 Certificate issuer: /CN=09a686e370d6d0608119eeb006c8aadaab078d22 Certificate serial: 019B7F8E683A29036C789E1843CC9588C559 Authority key identifier: 09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/7uS7FJeJqfkBOKs7jAgs7VUqjPQ.roa Signing time: Fri 02 Jan 2026 16:33:17 +0000 ROA not before: Fri 02 Jan 2026 16:33:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48881 IP address blocks: 185.104.180.0/22 maxlen: 22 2a06:1fc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.crl rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:8e:68:3a:29:03:6c:78:9e:18:43:cc:95:88:c5:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a686e370d6d0608119eeb006c8aadaab078d22 Validity Not Before: Jan 2 16:33:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eee4bb149789a9f90138ab3b8c082ced552a8cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:39:31:a0:79:31:8d:93:e6:45:8e:02:f2:1a: 8f:01:26:23:32:18:f2:cd:ff:47:21:4f:d0:a0:37: f3:4b:7f:4d:f4:f5:1f:46:dd:75:89:12:56:fc:3b: f7:cc:b3:c5:36:b7:2f:62:a4:95:f1:a8:9d:fe:ac: 7a:e8:5d:be:5d:e2:e7:9e:c1:94:28:c6:26:b1:0f: 29:66:75:fb:d6:81:c2:19:06:31:cf:e3:e1:0f:27: 26:46:12:21:48:46:84:b5:2a:47:c4:81:18:cc:47: 38:42:9a:76:2d:32:b4:5c:a1:a5:53:d2:8e:a7:20: 9e:5f:47:92:41:64:ce:3c:7b:69:ad:57:5c:0d:42: a6:0e:1d:78:35:9f:c8:e0:79:21:8c:0a:f9:1b:35: 1e:f3:8c:06:28:64:9e:a1:13:07:f0:68:28:ba:d3: 83:01:2b:19:6e:00:fa:1b:d4:8e:58:5e:42:3d:02: 77:7b:10:96:5a:58:90:91:05:3a:f0:09:bf:35:9a: 59:75:cb:1d:f4:1f:c0:b3:03:c0:ab:95:f3:bb:f5: 72:f0:cb:0d:f6:4e:8c:3a:f7:f3:9e:b7:66:54:13: 09:68:63:06:6b:49:c2:ae:7b:db:56:61:24:35:38: b6:50:21:b1:b8:79:0e:db:b0:b0:5a:be:11:91:65: 57:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E4:BB:14:97:89:A9:F9:01:38:AB:3B:8C:08:2C:ED:55:2A:8C:F4 X509v3 Authority Key Identifier: keyid:09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/7uS7FJeJqfkBOKs7jAgs7VUqjPQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.104.180.0/22 IPv6: 2a06:1fc0::/29 Signature Algorithm: sha256WithRSAEncryption 1f:55:90:d7:0a:73:ba:ab:50:08:2d:2d:fa:47:1f:12:19:7a: c6:0e:52:9f:3e:8e:dd:8a:0b:30:f0:28:90:42:0c:49:f6:4c: 1f:51:48:85:d8:37:ae:4c:a9:c4:2d:2a:ff:b8:1f:44:0c:56: da:ed:6a:76:43:1e:71:9c:85:9b:4b:2a:23:37:cb:2b:d0:83: 0f:17:f4:0a:11:23:ed:97:67:4c:95:4d:1a:49:f1:44:92:fe: 30:b1:e4:b0:64:ec:33:6d:ab:03:98:47:45:b2:28:08:be:3e: a8:6b:19:c7:7e:e1:82:ab:6c:0c:6f:7f:c8:a1:5a:a7:86:1b: d9:aa:a2:b9:7f:71:93:d6:46:ec:b8:aa:6d:fa:32:46:4e:af: ee:fd:ad:28:48:1d:27:78:bc:1d:ef:89:a9:0b:42:fc:46:49: b4:8e:f6:db:0e:20:af:03:0f:03:5f:54:40:b3:21:9e:2b:91: 6e:ed:f8:66:62:cb:a6:9e:3c:af:fa:5a:c6:83:48:56:bc:75: c7:f2:73:2d:8e:db:aa:e7:77:81:c5:ba:75:32:a2:a2:cb:38: f0:f2:67:7c:17:b4:4a:52:bf:32:db:5e:18:e3:e5:e6:46:ef: 4e:28:fb:5b:a0:ad:1a:e0:24:e7:02:1d:7f:f9:58:22:d1:e6: e5:b2:88:d4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/jmg6KQNseJ4YQ8yViMVZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YTY4NmUzNzBkNmQwNjA4MTE5ZWViMDA2YzhhYWRhYWIw NzhkMjIwHhcNMjYwMTAyMTYzMzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWU0YmIxNDk3ODlhOWY5MDEzOGFiM2I4YzA4MmNlZDU1MmE4Y2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjkxoHkxjZPmRY4C8hqPASYjMhjy zf9HIU/QoDfzS39N9PUfRt11iRJW/Dv3zLPFNrcvYqSV8aid/qx66F2+XeLnnsGU KMYmsQ8pZnX71oHCGQYxz+PhDycmRhIhSEaEtSpHxIEYzEc4Qpp2LTK0XKGlU9KO pyCeX0eSQWTOPHtprVdcDUKmDh14NZ/I4HkhjAr5GzUe84wGKGSeoRMH8GgoutOD ASsZbgD6G9SOWF5CPQJ3exCWWliQkQU68Am/NZpZdcsd9B/AswPAq5Xzu/Vy8MsN 9k6MOvfznrdmVBMJaGMGa0nCrnvbVmEkNTi2UCGxuHkO27CwWr4RkWVXnwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFO7kuxSXian5ATirO4wILO1VKoz0MB8GA1UdIwQY MBaAFAmmhuNw1tBggRnusAbIqtqrB40iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2FhRzQzRFcwR0NCR2U2d0JzaXEycXNIalNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9kNDI5YjktMzg1ZS00MzBmLWIyYzQt ODE3NjhjNjBlZTA4LzEvN3VTN0ZKZUpxZmtCT0tzN2pBZ3M3VlVxalBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9kNDI5YjktMzg1ZS00MzBmLWIyYzQtODE3NjhjNjBlZTA4 LzEvQ2FhRzQzRFcwR0NCR2U2d0JzaXEycXNIalNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWi0MA0E AgACMAcDBQMqBh/AMA0GCSqGSIb3DQEBCwUAA4IBAQAfVZDXCnO6q1AILS36Rx8S GXrGDlKfPo7digsw8CiQQgxJ9kwfUUiF2DeuTKnELSr/uB9EDFba7Wp2Qx5xnIWb SyojN8sr0IMPF/QKESPtl2dMlU0aSfFEkv4wseSwZOwzbasDmEdFsigIvj6oaxnH fuGCq2wMb3/IoVqnhhvZqqK5f3GT1kbsuKpt+jJGTq/u/a0oSB0neLwd74mpC0L8 Rkm0jvbbDiCvAw8DX1RAsyGeK5Fu7fhmYsumnjyv+lrGg0hWvHXH8nMtjtuq53eB xbp1MqKiyzjw8md8F7RKUr8y214Y4+XmRu9OKPtboK0a4CTnAh1/+Vgi0eblsojU -----END CERTIFICATE-----Generated at Sun Jan 18 10:58:36 2026 by rpki-client