This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/7Z6ubB3XyVP5fkPYS7a5rf5eIfI.roa File: 7Z6ubB3XyVP5fkPYS7a5rf5eIfI.roa (raw, json) Hash identifier: EG5JAKVPIfybT5kY/K8T9MAjgRtYUetch17DrIZ8c8g= Subject key identifier: ED:9E:AE:6C:1D:D7:C9:53:F9:7E:43:D8:4B:B6:B9:AD:FE:5E:21:F2 Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Certificate serial: 019B7CEE0037D1FD622C4AE1C1B99B56E657 Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/7Z6ubB3XyVP5fkPYS7a5rf5eIfI.roa Signing time: Fri 02 Jan 2026 04:18:50 +0000 ROA not before: Fri 02 Jan 2026 04:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 80.71.233.0/24 maxlen: 24 80.71.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 22:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:00:37:d1:fd:62:2c:4a:e1:c1:b9:9b:56:e6:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Validity Not Before: Jan 2 04:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed9eae6c1dd7c953f97e43d84bb6b9adfe5e21f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cc:f3:02:70:2f:84:86:4c:75:71:ac:45:5c: 20:f9:07:96:c5:a7:93:99:61:01:44:7c:e8:5b:c1: 2d:f9:d9:fb:72:9f:d4:09:78:ce:27:c8:18:d7:51: cb:73:63:22:f4:3f:2b:5e:5b:c8:30:f4:9e:cb:0f: 6f:e5:2a:e9:85:a9:ba:c3:4b:df:75:79:15:a2:7e: 32:f4:aa:d1:6b:0f:70:04:60:55:c6:ce:e3:5a:4a: 82:7d:44:7b:f8:f2:24:9f:27:92:78:f1:5d:fe:8e: 09:bb:bf:29:0c:2a:d0:32:46:3d:81:9f:53:55:3f: 97:c8:b2:c2:1d:3a:19:1f:97:b3:cf:ae:ee:55:da: 52:c8:84:9c:bd:6c:b1:6b:b1:bc:15:60:3e:35:b1: c7:47:82:d3:dc:35:c0:e0:b0:19:d9:5a:6a:e2:03: 85:80:be:f2:4e:92:a4:ca:dd:ba:de:51:94:7a:eb: 9b:33:db:0a:a2:f8:8a:62:99:1c:58:58:c9:fc:e2: 22:51:b5:20:4e:41:74:8c:b2:5a:b2:65:9d:dd:4e: c8:8a:e3:15:d6:25:ca:41:bd:5b:6d:79:84:83:be: 84:62:32:a4:98:55:2a:d4:0b:12:1a:39:62:e9:74: 98:16:66:b7:5e:8e:23:39:67:00:6c:88:e1:a1:c7: b1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9E:AE:6C:1D:D7:C9:53:F9:7E:43:D8:4B:B6:B9:AD:FE:5E:21:F2 X509v3 Authority Key Identifier: keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/7Z6ubB3XyVP5fkPYS7a5rf5eIfI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.71.233.0/24 80.71.238.0/24 Signature Algorithm: sha256WithRSAEncryption 48:f7:e9:0c:88:eb:3a:d1:25:95:72:68:dd:58:57:ed:7d:dd: 05:ce:ed:e9:8b:f3:34:b3:82:83:00:d7:04:18:f6:34:68:f0: 45:3f:b2:58:fd:2d:39:39:78:2c:74:67:07:31:c8:cd:3e:5b: d4:f9:da:8e:80:da:a7:3b:92:6f:9b:c6:3b:58:27:39:92:8a: 37:ae:11:80:2d:79:4e:14:b8:3d:45:26:3e:6f:66:1d:68:23: cb:c3:6f:d7:f2:fe:76:e8:45:d3:8d:68:3c:f7:66:f0:a1:2d: eb:60:c6:84:cc:cb:8a:28:7a:de:7b:34:52:b2:d1:54:39:63: 5a:94:9d:e5:26:c4:89:24:39:54:a1:0d:95:44:3b:06:02:68: 99:82:c0:ac:d8:1b:90:8d:f9:e3:6b:95:16:25:b0:71:52:10: 84:14:4b:8c:4f:89:06:5b:55:2b:f4:4e:b0:5a:f6:e2:fb:63: 0e:0c:cb:c8:bc:29:30:f9:a6:3f:4e:d3:49:a5:bf:d7:20:83: 83:79:63:a7:fb:77:2c:3c:cb:2a:21:f0:3c:78:61:0f:f9:a1: 52:de:4a:83:53:c9:35:5e:be:8e:a5:45:07:c1:1e:36:26:b5: 31:df:4a:14:7a:17:10:09:b3:f9:ad:4d:e7:7d:18:54:40:3c: ad:61:2c:4a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87gA30f1iLErhwbmbVuZXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx MDhlNDcwHhcNMjYwMTAyMDQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDllYWU2YzFkZDdjOTUzZjk3ZTQzZDg0YmI2YjlhZGZlNWUyMWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnczzAnAvhIZMdXGsRVwg+QeWxaeT mWEBRHzoW8Et+dn7cp/UCXjOJ8gY11HLc2Mi9D8rXlvIMPSeyw9v5Srpham6w0vf dXkVon4y9KrRaw9wBGBVxs7jWkqCfUR7+PIknyeSePFd/o4Ju78pDCrQMkY9gZ9T VT+XyLLCHToZH5ezz67uVdpSyIScvWyxa7G8FWA+NbHHR4LT3DXA4LAZ2Vpq4gOF gL7yTpKkyt263lGUeuubM9sKoviKYpkcWFjJ/OIiUbUgTkF0jLJasmWd3U7IiuMV 1iXKQb1bbXmEg76EYjKkmFUq1AsSGjli6XSYFma3Xo4jOWcAbIjhocexoQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFO2ermwd18lT+X5D2Eu2ua3+XiHyMB8GA1UdIwQY MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt MTkxODliM2M5YzdkLzEvN1o2dWJCM1h5VlA1ZmtQWVM3YTVyZjVlSWZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUEfpAwQA UEfuMA0GCSqGSIb3DQEBCwUAA4IBAQBI9+kMiOs60SWVcmjdWFftfd0Fzu3pi/M0 s4KDANcEGPY0aPBFP7JY/S05OXgsdGcHMcjNPlvU+dqOgNqnO5Jvm8Y7WCc5koo3 rhGALXlOFLg9RSY+b2YdaCPLw2/X8v526EXTjWg892bwoS3rYMaEzMuKKHreezRS stFUOWNalJ3lJsSJJDlUoQ2VRDsGAmiZgsCs2BuQjfnja5UWJbBxUhCEFEuMT4kG W1Ur9E6wWvbi+2MODMvIvCkw+aY/TtNJpb/XIIODeWOn+3csPMsqIfA8eGEP+aFS 3kqDU8k1Xr6OpUUHwR42JrUx30oUehcQCbP5rU3nfRhUQDytYSxK -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:42 2026 by rpki-client