This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/7CUwK1UYwqayiiojTeY6DuJ4PuE.roa File: 7CUwK1UYwqayiiojTeY6DuJ4PuE.roa (raw, json) Hash identifier: 0KwqbQB6sudYAbA+sSqdOrA5B6tIA7G2Tl98Yz+oNVs= Subject key identifier: EC:25:30:2B:55:18:C2:A6:B2:8A:2A:23:4D:E6:3A:0E:E2:78:3E:E1 Certificate issuer: /CN=b0340251f1826347f4e9645f6824d3b93f47e5de Certificate serial: 019B7A5A058E7BACFE6D1061C3DAD02D122A Authority key identifier: B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/7CUwK1UYwqayiiojTeY6DuJ4PuE.roa Signing time: Thu 01 Jan 2026 16:17:58 +0000 ROA not before: Thu 01 Jan 2026 16:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203930 IP address blocks: 89.207.152.0/24 maxlen: 24 2a13:5b00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:05:8e:7b:ac:fe:6d:10:61:c3:da:d0:2d:12:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0340251f1826347f4e9645f6824d3b93f47e5de Validity Not Before: Jan 1 16:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec25302b5518c2a6b28a2a234de63a0ee2783ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0e:bc:f3:9a:ef:36:1d:e6:f0:da:79:9d:36: 30:6b:24:34:fc:0b:3b:b2:0d:e5:54:c9:42:73:91: 1d:1e:62:28:19:70:10:a7:d4:bd:4e:d2:9a:6b:83: d9:1f:3d:7e:84:d0:6f:38:23:b3:93:5d:cc:8b:25: f2:b6:4e:4b:bb:20:ee:89:1c:41:a8:3f:53:29:e0: da:08:e3:67:aa:a2:0f:78:43:7c:b5:14:fa:72:5a: 02:1f:b9:1d:f7:33:43:d9:7e:02:c2:90:70:03:6a: e5:e8:82:67:d1:b7:dc:14:0d:31:81:6e:f7:54:e9: 15:36:57:06:b5:47:3a:06:7b:4a:5c:ad:db:b2:68: ed:22:4d:64:85:11:a5:d1:8a:29:b3:40:6b:3c:06: a8:ef:b9:ef:a5:b0:e0:2c:f0:1c:93:7f:56:19:65: b0:03:11:d7:21:32:51:66:93:1b:0d:f6:a1:d5:f8: f7:b6:bd:64:33:1f:d1:af:04:29:c0:74:53:36:81: 4f:4d:26:59:d6:58:59:ca:03:4c:f1:9e:67:b6:fa: fe:b5:a3:92:ef:fb:64:d7:09:f2:4f:04:dc:80:52: 1e:fd:76:2c:ad:b0:26:f5:d5:61:d1:b2:39:54:de: eb:d9:ec:d1:6a:2b:74:14:f5:27:18:c9:1d:e1:57: b4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:25:30:2B:55:18:C2:A6:B2:8A:2A:23:4D:E6:3A:0E:E2:78:3E:E1 X509v3 Authority Key Identifier: keyid:B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/7CUwK1UYwqayiiojTeY6DuJ4PuE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.207.152.0/24 IPv6: 2a13:5b00::/32 Signature Algorithm: sha256WithRSAEncryption 81:29:3e:3a:02:44:1b:14:48:c0:19:69:a3:ac:32:2e:ce:f4: 7f:9b:b5:8a:9b:32:2d:d0:74:fb:08:23:ef:12:33:42:d6:2f: 1e:18:20:b5:f2:02:2d:3a:f5:ef:e1:49:1a:2e:3c:dd:3a:00: 16:87:ab:a1:b9:5e:1f:1c:5f:57:81:9c:68:a1:17:b6:e1:81: b8:34:c4:11:1c:15:6c:5c:85:75:70:ce:25:65:a7:4a:dd:b5: a6:7f:ed:56:c8:73:4a:07:d5:22:fa:49:14:e6:a9:1d:61:ce: 34:0c:c3:e2:bf:75:44:89:6e:14:96:91:42:09:67:13:31:26: 3c:a0:e3:f3:99:6d:76:35:2b:2a:60:31:e5:0f:40:e0:f0:7d: a5:a1:54:67:67:8a:d3:cb:3d:26:3a:0a:ff:18:90:08:2f:d1: 27:79:26:85:29:62:b1:1c:04:e5:b0:d0:07:c5:82:f8:34:94: 55:3b:b1:1b:53:99:5a:ab:39:f3:11:ff:7d:76:64:46:72:2a: 4b:eb:5c:2d:1d:2b:b8:60:2b:0f:be:fa:af:34:1a:65:8b:d3: a1:77:22:95:7d:86:a3:b4:1f:ac:43:fb:08:c4:1d:ee:f5:86: 5c:18:57:03:f2:16:05:7a:d4:34:50:8b:ed:62:7a:6c:19:dc: 36:d0:56:a4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6WgWOe6z+bRBhw9rQLRIqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMzQwMjUxZjE4MjYzNDdmNGU5NjQ1ZjY4MjRkM2I5M2Y0 N2U1ZGUwHhcNMjYwMTAxMTYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzI1MzAyYjU1MThjMmE2YjI4YTJhMjM0ZGU2M2EwZWUyNzgzZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ6885rvNh3m8Np5nTYwayQ0/As7 sg3lVMlCc5EdHmIoGXAQp9S9TtKaa4PZHz1+hNBvOCOzk13MiyXytk5LuyDuiRxB qD9TKeDaCONnqqIPeEN8tRT6cloCH7kd9zND2X4CwpBwA2rl6IJn0bfcFA0xgW73 VOkVNlcGtUc6BntKXK3bsmjtIk1khRGl0Yops0BrPAao77nvpbDgLPAck39WGWWw AxHXITJRZpMbDfah1fj3tr1kMx/RrwQpwHRTNoFPTSZZ1lhZygNM8Z5ntvr+taOS 7/tk1wnyTwTcgFIe/XYsrbAm9dVh0bI5VN7r2ezRait0FPUnGMkd4Ve00QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOwlMCtVGMKmsooqI03mOg7ieD7hMB8GA1UdIwQY MBaAFLA0AlHxgmNH9OlkX2gk07k/R+XeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0RRQ1VmR0NZMGYwNldSZmFDVFR1VDlINWQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mNTIxMGQtMDU5MC00M2EzLTllZWQt NmE4MzU2M2I2NTViLzEvN0NVd0sxVVl3cWF5aWlvalRlWTZEdUo0UHVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9mNTIxMGQtMDU5MC00M2EzLTllZWQtNmE4MzU2M2I2NTVi LzEvc0RRQ1VmR0NZMGYwNldSZmFDVFR1VDlINWQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAWc+YMA0E AgACMAcDBQAqE1sAMA0GCSqGSIb3DQEBCwUAA4IBAQCBKT46AkQbFEjAGWmjrDIu zvR/m7WKmzIt0HT7CCPvEjNC1i8eGCC18gItOvXv4UkaLjzdOgAWh6uhuV4fHF9X gZxooRe24YG4NMQRHBVsXIV1cM4lZadK3bWmf+1WyHNKB9Ui+kkU5qkdYc40DMPi v3VEiW4UlpFCCWcTMSY8oOPzmW12NSsqYDHlD0Dg8H2loVRnZ4rTyz0mOgr/GJAI L9EneSaFKWKxHATlsNAHxYL4NJRVO7EbU5laqznzEf99dmRGcipL61wtHSu4YCsP vvqvNBpli9OhdyKVfYajtB+sQ/sIxB3u9YZcGFcD8hYFetQ0UIvtYnpsGdw20Fak -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:58 2026 by rpki-client