This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/b7S_nq9L3fLkMmyZfKpBQL5uCIY.roa File: b7S_nq9L3fLkMmyZfKpBQL5uCIY.roa (raw, json) Hash identifier: hHkV6ifNNgCnzjffMB2ARiro7sl9sU2WuipxUNM/huo= Subject key identifier: 6F:B4:BF:9E:AF:4B:DD:F2:E4:32:6C:99:7C:AA:41:40:BE:6E:08:86 Certificate issuer: /CN=897da6001b12383068fe71a30f8cf285c66830fe Certificate serial: 019B7EA749438A1456C8CF4C381643F063AC Authority key identifier: 89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/b7S_nq9L3fLkMmyZfKpBQL5uCIY.roa Signing time: Fri 02 Jan 2026 12:20:51 +0000 ROA not before: Fri 02 Jan 2026 12:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 185.236.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 14:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:49:43:8a:14:56:c8:cf:4c:38:16:43:f0:63:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=897da6001b12383068fe71a30f8cf285c66830fe Validity Not Before: Jan 2 12:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fb4bf9eaf4bddf2e4326c997caa4140be6e0886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cb:d2:56:8f:92:48:1b:2e:e7:97:7f:88:15: 61:86:1b:3a:d2:6b:5a:90:31:b2:af:de:71:67:38: 79:e7:8b:bc:02:bd:0c:81:2f:de:e5:cf:90:8b:d3: 8b:32:24:c4:02:d1:3c:1d:68:8f:0c:a1:b6:b1:4a: ad:31:86:6d:9b:15:57:7e:6a:ad:98:5d:e3:27:9b: 9c:b6:77:e0:0c:b8:db:64:55:ec:dd:37:f1:c1:fb: 11:d5:1f:a8:16:ce:5e:c1:e1:b1:cd:ba:a8:77:2a: 59:fa:71:e0:b3:b5:85:cb:23:84:a3:e4:81:fc:b9: 9c:aa:e0:92:c2:84:22:90:cf:3f:7d:f7:48:f4:0e: d0:0c:c8:ec:fe:3c:ba:3f:f1:16:9a:4d:03:a7:3f: cd:48:60:c9:73:5c:e1:ef:78:0f:de:74:73:41:7a: ff:41:52:4c:6f:b1:04:5a:30:bd:ed:f1:05:df:35: f5:b6:eb:5e:7b:08:a2:9a:eb:bc:d5:45:ec:89:f1: 3b:49:fc:01:28:6e:b8:48:c0:43:01:17:94:06:eb: 1f:58:e7:64:2c:91:9d:7b:11:c0:1c:fd:44:bc:26: ad:c6:ae:86:d6:68:27:0e:1e:e0:97:9e:7e:54:38: 2a:1c:90:1d:06:df:24:71:56:2c:a4:5d:9b:8e:c5: c9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B4:BF:9E:AF:4B:DD:F2:E4:32:6C:99:7C:AA:41:40:BE:6E:08:86 X509v3 Authority Key Identifier: keyid:89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/b7S_nq9L3fLkMmyZfKpBQL5uCIY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.236.221.0/24 Signature Algorithm: sha256WithRSAEncryption 64:f8:58:69:fc:1b:84:1f:3c:e2:f1:a0:f9:bb:39:a7:6d:2e: 66:58:12:e3:b3:88:71:a1:1c:a6:c4:f9:b5:44:c3:43:bd:cf: d1:ab:60:20:cc:1d:4d:31:b9:5b:65:df:0f:7b:b9:28:e4:64: b4:00:54:99:df:0b:10:7b:70:57:36:1f:47:d5:4f:1d:cd:8d: 3a:b4:ec:64:a2:42:42:e2:d1:16:51:3d:5b:be:fe:f3:c2:44: b3:7c:e6:bf:a1:4e:3a:e2:5b:17:1b:4b:b8:a5:c5:2f:ed:84: c8:d2:3a:72:53:82:3a:93:cc:f5:3d:c2:73:78:c0:8b:54:d7: cb:a8:f1:d9:eb:b2:de:f6:f5:96:45:cb:6d:44:0d:7b:70:ed: 26:27:11:34:15:e0:aa:01:69:a9:1f:0f:16:ae:28:56:37:c2: 15:38:a7:64:0f:e1:46:3b:d4:c0:21:f6:95:8b:87:43:75:26: 03:8c:c6:c7:49:fe:ab:22:15:49:c8:77:d6:f6:b8:14:32:ab: 63:ee:f5:85:74:f5:27:b8:ab:93:e9:ef:6b:7c:66:91:e1:60: 52:33:41:1b:f9:17:b9:c5:c5:ec:2a:0b:ab:56:f4:aa:37:9f: 4d:9a:d4:2d:d9:88:69:69:7d:48:d0:44:54:1d:e4:63:4b:32: 28:4d:dc:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p0lDihRWyM9MOBZD8GOsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5N2RhNjAwMWIxMjM4MzA2OGZlNzFhMzBmOGNmMjg1YzY2 ODMwZmUwHhcNMjYwMTAyMTIyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmI0YmY5ZWFmNGJkZGYyZTQzMjZjOTk3Y2FhNDE0MGJlNmUwODg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMvSVo+SSBsu55d/iBVhhhs60mta kDGyr95xZzh554u8Ar0MgS/e5c+Qi9OLMiTEAtE8HWiPDKG2sUqtMYZtmxVXfmqt mF3jJ5uctnfgDLjbZFXs3TfxwfsR1R+oFs5eweGxzbqodypZ+nHgs7WFyyOEo+SB /LmcquCSwoQikM8/ffdI9A7QDMjs/jy6P/EWmk0Dpz/NSGDJc1zh73gP3nRzQXr/ QVJMb7EEWjC97fEF3zX1tuteewiimuu81UXsifE7SfwBKG64SMBDAReUBusfWOdk LJGdexHAHP1EvCatxq6G1mgnDh7gl55+VDgqHJAdBt8kcVYspF2bjsXJFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG+0v56vS93y5DJsmXyqQUC+bgiGMB8GA1UdIwQY MBaAFIl9pgAbEjgwaP5xow+M8oXGaDD+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVgybUFCc1NPREJvX25HakQ0enloY1pvTVA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85NmRlYzgtNzcyMC00ZWZjLWJkMzkt ODRmYWFmMTA1YTk3LzEvYjdTX25xOUwzZkxrTW15WmZLcEJRTDV1Q0lZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85NmRlYzgtNzcyMC00ZWZjLWJkMzktODRmYWFmMTA1YTk3 LzEvaVgybUFCc1NPREJvX25HakQ0enloY1pvTVA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuezdMA0G CSqGSIb3DQEBCwUAA4IBAQBk+Fhp/BuEHzzi8aD5uzmnbS5mWBLjs4hxoRymxPm1 RMNDvc/Rq2AgzB1NMblbZd8Pe7ko5GS0AFSZ3wsQe3BXNh9H1U8dzY06tOxkokJC 4tEWUT1bvv7zwkSzfOa/oU464lsXG0u4pcUv7YTI0jpyU4I6k8z1PcJzeMCLVNfL qPHZ67Le9vWWRcttRA17cO0mJxE0FeCqAWmpHw8WrihWN8IVOKdkD+FGO9TAIfaV i4dDdSYDjMbHSf6rIhVJyHfW9rgUMqtj7vWFdPUnuKuT6e9rfGaR4WBSM0Eb+Re5 xcXsKgurVvSqN59NmtQt2YhpaX1I0ERUHeRjSzIoTdxj -----END CERTIFICATE-----Generated at Sun Jan 18 16:37:23 2026 by rpki-client