This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/7aJ2vx7jWwpxgEHKfahIo95P8lQ.roa File: 7aJ2vx7jWwpxgEHKfahIo95P8lQ.roa (raw, json) Hash identifier: AhUWqNQR2kELsGnghtqFgdl7fa7OSUKnSD6Nyk/XinA= Subject key identifier: ED:A2:76:BF:1E:E3:5B:0A:71:80:41:CA:7D:A8:48:A3:DE:4F:F2:54 Certificate issuer: /CN=6e9a558ad546dcc9abc0b8a131067af02e407007 Certificate serial: 019B7BA395B8D3728EDD5CAB62DC0A9C30B3 Authority key identifier: 6E:9A:55:8A:D5:46:DC:C9:AB:C0:B8:A1:31:06:7A:F0:2E:40:70:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bppVitVG3MmrwLihMQZ68C5AcAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/7aJ2vx7jWwpxgEHKfahIo95P8lQ.roa Signing time: Thu 01 Jan 2026 22:17:56 +0000 ROA not before: Thu 01 Jan 2026 22:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43892 IP address blocks: 79.171.96.0/21 maxlen: 21 79.171.96.0/22 maxlen: 22 79.171.96.0/24 maxlen: 24 79.171.100.0/22 maxlen: 22 79.171.101.0/24 maxlen: 24 185.62.60.0/22 maxlen: 24 185.67.180.0/22 maxlen: 22 185.67.182.0/24 maxlen: 24 185.67.183.0/24 maxlen: 24 185.130.12.0/22 maxlen: 24 185.130.12.0/23 maxlen: 23 185.130.14.0/24 maxlen: 24 2a02:3c8::/32 maxlen: 32 2a06:d700::/29 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/bppVitVG3MmrwLihMQZ68C5AcAc.crl rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/bppVitVG3MmrwLihMQZ68C5AcAc.mft rsync://rpki.ripe.net/repository/DEFAULT/bppVitVG3MmrwLihMQZ68C5AcAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 01:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:95:b8:d3:72:8e:dd:5c:ab:62:dc:0a:9c:30:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9a558ad546dcc9abc0b8a131067af02e407007 Validity Not Before: Jan 1 22:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eda276bf1ee35b0a718041ca7da848a3de4ff254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:08:59:23:e4:c5:18:e2:7b:29:00:a4:e9:be: 91:8d:8a:b5:04:c0:79:aa:da:d3:60:13:f4:af:d3: f2:9c:f1:a1:95:5b:c5:68:99:43:80:23:b1:79:7c: 52:f1:67:97:da:ed:22:35:e5:46:cb:0b:db:f9:8e: 25:d4:bd:12:72:19:89:c3:c7:d7:c5:b1:3e:97:8f: eb:f3:75:c4:ac:37:6d:b5:fa:e3:d4:13:f0:e2:57: e0:11:24:d6:bb:89:96:2f:ff:a8:80:2c:74:f2:49: 8e:04:9d:9d:c5:27:cb:5e:0d:14:eb:b6:11:6c:d7: d6:0a:82:db:e0:a9:c4:cb:0a:4e:4e:c0:f9:d9:b4: ab:62:0c:b4:c7:f5:3f:e2:68:1a:40:a1:9b:5e:df: 92:46:6f:5c:ab:ba:0e:db:9a:44:0d:98:b1:2d:5b: af:15:c2:36:e7:8f:4b:28:35:de:c4:52:f7:36:78: d2:66:6e:9d:2f:b4:33:00:83:df:fd:e4:4e:5b:c7: 75:06:aa:c6:66:18:f4:e0:1e:17:7d:53:58:9d:0d: 74:cb:2a:e1:bc:57:ea:0f:15:7d:85:20:71:2d:34: 81:eb:d2:7f:82:d0:94:24:d9:01:8b:d3:d4:4b:31: ce:4b:b5:3b:13:8b:90:99:b2:87:d2:7e:d9:6a:e6: d2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A2:76:BF:1E:E3:5B:0A:71:80:41:CA:7D:A8:48:A3:DE:4F:F2:54 X509v3 Authority Key Identifier: keyid:6E:9A:55:8A:D5:46:DC:C9:AB:C0:B8:A1:31:06:7A:F0:2E:40:70:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bppVitVG3MmrwLihMQZ68C5AcAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/7aJ2vx7jWwpxgEHKfahIo95P8lQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/bppVitVG3MmrwLihMQZ68C5AcAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.171.96.0/21 185.62.60.0/22 185.67.180.0/22 185.130.12.0/22 IPv6: 2a02:3c8::/32 2a06:d700::/29 Signature Algorithm: sha256WithRSAEncryption 26:b9:ca:36:92:2a:53:c7:32:e8:7f:3f:1d:af:a8:46:85:c3: 69:28:4d:67:11:4e:03:a9:f5:cd:86:91:a3:4b:67:b9:af:66: fa:09:39:41:f0:a1:f9:f3:f5:02:38:e9:29:e4:10:07:1a:ca: 6b:77:94:81:0f:d7:30:69:91:78:d4:4f:6f:d2:e8:dc:38:b8: 15:69:63:d3:96:92:9e:f3:ce:ab:10:23:35:0f:a7:36:4b:db: f1:b5:8f:3c:63:39:c1:42:59:dc:2b:8c:43:9a:e4:03:53:a8: 51:8d:62:6a:c2:c0:f4:0a:57:dd:75:5e:1f:03:f7:c2:f3:ca: 41:9d:5f:51:9e:bb:37:ed:3c:6c:3e:07:ce:fd:7d:67:ee:a8: df:39:fe:7f:a4:22:ae:5e:18:91:ad:4b:c8:52:ac:0c:e7:e3: c9:ba:0f:63:43:0d:9c:48:e1:d0:21:83:1a:63:9e:9c:24:f4: 52:02:ee:4c:03:08:f1:3c:e2:ff:50:3e:a8:c0:ff:b4:e1:92: f6:ba:08:9b:b3:35:90:18:83:17:a5:1e:76:34:36:e0:bb:33: bb:38:9d:38:d0:35:bc:47:50:75:45:23:c7:3c:0a:9a:5b:bf: 62:a5:50:2a:83:2f:89:5d:35:84:93:0f:23:13:9e:7b:ff:0e: aa:2d:47:ba -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt7o5W403KO3VyrYtwKnDCzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlOWE1NThhZDU0NmRjYzlhYmMwYjhhMTMxMDY3YWYwMmU0 MDcwMDcwHhcNMjYwMTAxMjIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGEyNzZiZjFlZTM1YjBhNzE4MDQxY2E3ZGE4NDhhM2RlNGZmMjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwghZI+TFGOJ7KQCk6b6RjYq1BMB5 qtrTYBP0r9PynPGhlVvFaJlDgCOxeXxS8WeX2u0iNeVGywvb+Y4l1L0SchmJw8fX xbE+l4/r83XErDdttfrj1BPw4lfgESTWu4mWL/+ogCx08kmOBJ2dxSfLXg0U67YR bNfWCoLb4KnEywpOTsD52bSrYgy0x/U/4mgaQKGbXt+SRm9cq7oO25pEDZixLVuv FcI2549LKDXexFL3NnjSZm6dL7QzAIPf/eROW8d1BqrGZhj04B4XfVNYnQ10yyrh vFfqDxV9hSBxLTSB69J/gtCUJNkBi9PUSzHOS7U7E4uQmbKH0n7ZaubSRwIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFO2idr8e41sKcYBByn2oSKPeT/JUMB8GA1UdIwQY MBaAFG6aVYrVRtzJq8C4oTEGevAuQHAHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnBwVml0VkczTW1yd0xpaE1RWjY4QzVBY0FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8xNTI5YzYtODA4Mi00ZjNhLWJjOTIt NDIzZmNhMjI0MDQxLzEvN2FKMnZ4N2pXd3B4Z0VIS2ZhaElvOTVQOGxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8xNTI5YzYtODA4Mi00ZjNhLWJjOTItNDIzZmNhMjI0MDQx LzEvYnBwVml0VkczTW1yd0xpaE1RWjY4QzVBY0FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQDT6tgAwQC uT48AwQCuUO0AwQCuYIMMBQEAgACMA4DBQAqAgPIAwUDKgbXADANBgkqhkiG9w0B AQsFAAOCAQEAJrnKNpIqU8cy6H8/Ha+oRoXDaShNZxFOA6n1zYaRo0tnua9m+gk5 QfCh+fP1AjjpKeQQBxrKa3eUgQ/XMGmReNRPb9Lo3Di4FWlj05aSnvPOqxAjNQ+n Nkvb8bWPPGM5wUJZ3CuMQ5rkA1OoUY1iasLA9ApX3XVeHwP3wvPKQZ1fUZ67N+08 bD4Hzv19Z+6o3zn+f6Qirl4Yka1LyFKsDOfjyboPY0MNnEjh0CGDGmOenCT0UgLu TAMI8Tzi/1A+qMD/tOGS9roIm7M1kBiDF6UedjQ24LszuzidONA1vEdQdUUjxzwK mlu/YqVQKoMviV01hJMPIxOee/8Oqi1Hug== -----END CERTIFICATE-----Generated at Wed Jan 21 10:29:16 2026 by rpki-client