This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/7iabnlFmeCBBjsLFJN99I8--_-4.roa File: 7iabnlFmeCBBjsLFJN99I8--_-4.roa (raw, json) Hash identifier: XEo4P0carZV4gE6HMO4BcJUELgS7un1lJ1bRLna274A= Subject key identifier: EE:26:9B:9E:51:66:78:20:41:8E:C2:C5:24:DF:7D:23:CF:BE:FF:EE Certificate issuer: /CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff Certificate serial: 019B78A2755E717983DD93E9E75B94E9AFBB Authority key identifier: 99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/7iabnlFmeCBBjsLFJN99I8--_-4.roa Signing time: Thu 01 Jan 2026 08:17:51 +0000 ROA not before: Thu 01 Jan 2026 08:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42926 IP address blocks: 152.114.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:75:5e:71:79:83:dd:93:e9:e7:5b:94:e9:af:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff Validity Not Before: Jan 1 08:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee269b9e51667820418ec2c524df7d23cfbeffee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c8:8e:7a:8c:0e:ff:fa:74:e5:6f:31:08:5a: 5b:58:ac:9a:38:e9:5d:8f:09:b2:df:6d:49:ab:f3: 75:a4:9d:39:7a:59:57:bb:d9:f6:d3:f7:9d:d2:71: 58:1d:5b:8f:77:4d:f7:63:48:eb:50:18:80:3d:b2: d5:ef:18:60:ec:1c:91:84:2c:c0:42:75:c2:46:67: 0f:f5:6b:46:86:87:f9:3e:f2:30:36:7e:1e:0b:d1: c4:d9:fc:c7:be:7d:95:57:d0:ba:76:6d:27:f1:b7: 86:71:ac:41:c6:3d:fb:14:8e:c0:6b:48:10:dc:ea: d8:45:08:8c:d1:c6:d1:46:05:92:75:8d:e4:d9:60: 9d:a7:aa:16:09:ae:1e:de:cb:a2:23:48:e5:ec:96: e0:64:24:9a:48:d2:27:7e:18:28:ab:d1:5c:a7:7d: f1:25:ec:6d:f8:9d:29:72:8c:ef:23:93:17:e3:95: 75:52:e7:b3:21:ee:c2:68:f7:36:3c:49:ab:c7:95: f0:40:36:b2:97:97:7e:8b:35:f9:78:38:10:66:f2: 60:e0:41:91:b1:2e:d2:50:bf:de:b5:87:38:e5:da: e7:1d:66:f1:c2:86:bd:f6:7d:10:1e:52:6a:de:04: df:2d:3d:0f:13:94:c2:ae:74:2b:aa:b9:8f:66:38: bc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:26:9B:9E:51:66:78:20:41:8E:C2:C5:24:DF:7D:23:CF:BE:FF:EE X509v3 Authority Key Identifier: keyid:99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/7iabnlFmeCBBjsLFJN99I8--_-4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.114.207.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:4c:09:59:7c:3f:7c:ce:e5:c9:21:4d:75:dd:a6:5b:a0:c7: 27:92:c6:9d:6f:ef:65:ce:5c:37:72:e5:24:f9:34:8b:76:69: 6c:49:c5:26:6e:62:f1:9b:0f:75:6d:a4:57:53:2d:d9:06:aa: d3:0b:dc:48:2a:1d:8d:af:54:94:e2:e4:2b:af:ff:11:6b:5f: ec:ed:0e:45:15:79:53:db:69:b7:42:ff:ba:28:f6:f9:3d:c1: ec:9b:45:a5:fd:68:11:6f:9c:12:bc:63:52:01:ed:84:0e:60: 65:a7:4b:cb:84:08:dd:c5:20:e6:cf:8c:98:67:9d:90:95:bb: 39:12:0a:57:3b:75:08:25:92:2b:55:08:cd:fa:5f:cc:77:d1: 30:13:10:b4:de:42:cc:56:9c:dd:86:e9:4f:f0:e1:de:d8:2b: 76:51:53:c0:90:7d:11:3f:ef:e8:ca:f8:99:09:06:4c:f8:23: 82:d2:f3:49:e5:52:6a:b0:53:54:46:c9:91:7f:f6:d9:bc:ad: 1d:83:66:56:17:81:1f:f9:35:c4:d8:b8:2e:c5:f8:2c:50:63: 34:10:24:a1:17:16:3f:c0:4d:5b:e6:b2:fb:a1:f2:02:b1:c9: b3:1b:1b:69:37:e1:ab:1a:78:30:93:83:69:ec:7a:27:6b:0a: 3b:53:3d:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4onVecXmD3ZPp51uU6a+7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZmM4ZGMyYTdjMWI5ZjMyYmExOTU3ZmY0OTJkYzBiYTRm MjYwZmYwHhcNMjYwMTAxMDgxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTI2OWI5ZTUxNjY3ODIwNDE4ZWMyYzUyNGRmN2QyM2NmYmVmZmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMiOeowO//p05W8xCFpbWKyaOOld jwmy321Jq/N1pJ05ellXu9n20/ed0nFYHVuPd033Y0jrUBiAPbLV7xhg7ByRhCzA QnXCRmcP9WtGhof5PvIwNn4eC9HE2fzHvn2VV9C6dm0n8beGcaxBxj37FI7Aa0gQ 3OrYRQiM0cbRRgWSdY3k2WCdp6oWCa4e3suiI0jl7JbgZCSaSNInfhgoq9Fcp33x Jext+J0pcozvI5MX45V1UuezIe7CaPc2PEmrx5XwQDayl5d+izX5eDgQZvJg4EGR sS7SUL/etYc45drnHWbxwoa99n0QHlJq3gTfLT0PE5TCrnQrqrmPZji86QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO4mm55RZnggQY7CxSTffSPPvv/uMB8GA1UdIwQY MBaAFJn8jcKnwbnzK6GVf/SS3Auk8mD/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWZ5TndxZkJ1Zk1yb1pWXzlKTGNDNlR5WVA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MjA1YjgtOThjZi00MDQyLWEwY2Ut ZTRjNjc0MWM4MDJjLzEvN2lhYm5sRm1lQ0JCanNMRkpOOTlJOC0tXy00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS81MjA1YjgtOThjZi00MDQyLWEwY2UtZTRjNjc0MWM4MDJj LzEvbWZ5TndxZkJ1Zk1yb1pWXzlKTGNDNlR5WVA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmHLPMA0G CSqGSIb3DQEBCwUAA4IBAQBOTAlZfD98zuXJIU113aZboMcnksadb+9lzlw3cuUk +TSLdmlsScUmbmLxmw91baRXUy3ZBqrTC9xIKh2Nr1SU4uQrr/8Ra1/s7Q5FFXlT 22m3Qv+6KPb5PcHsm0Wl/WgRb5wSvGNSAe2EDmBlp0vLhAjdxSDmz4yYZ52Qlbs5 EgpXO3UIJZIrVQjN+l/Md9EwExC03kLMVpzdhulP8OHe2Ct2UVPAkH0RP+/oyviZ CQZM+COC0vNJ5VJqsFNURsmRf/bZvK0dg2ZWF4Ef+TXE2LguxfgsUGM0ECShFxY/ wE1b5rL7ofICscmzGxtpN+GrGngwk4Np7Honawo7Uz1Z -----END CERTIFICATE-----Generated at Mon Jan 26 11:39:48 2026 by rpki-client