This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/7HIOB7eoRAyG0ZPEZvvAbpswFrY.roa File: 7HIOB7eoRAyG0ZPEZvvAbpswFrY.roa (raw, json) Hash identifier: Es8A+6R1MLYeRZW+tk5RBf/7aXDiiAHZ+/2nLZtggb4= Subject key identifier: EC:72:0E:07:B7:A8:44:0C:86:D1:93:C4:66:FB:C0:6E:9B:30:16:B6 Certificate issuer: /CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b Certificate serial: 019B7F15271249BF0BE0CD273F3AA43A22C3 Authority key identifier: 8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/7HIOB7eoRAyG0ZPEZvvAbpswFrY.roa Signing time: Fri 02 Jan 2026 14:20:51 +0000 ROA not before: Fri 02 Jan 2026 14:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59877 IP address blocks: 31.223.190.0/24 maxlen: 24 62.68.65.0/24 maxlen: 24 91.212.33.0/24 maxlen: 24 185.61.176.0/22 maxlen: 24 185.160.52.0/22 maxlen: 24 193.39.0.0/22 maxlen: 24 193.56.146.0/24 maxlen: 24 217.197.108.0/24 maxlen: 24 2a02:7b20::/32 maxlen: 32 2a03:9260::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:27:12:49:bf:0b:e0:cd:27:3f:3a:a4:3a:22:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b Validity Not Before: Jan 2 14:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec720e07b7a8440c86d193c466fbc06e9b3016b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ec:ff:34:db:10:da:bb:ce:32:b0:b3:80:8d: 32:1e:99:0d:44:a8:24:1c:b4:cf:8c:89:63:d2:4a: c9:13:44:54:92:8f:e4:d1:c2:19:7e:02:47:a1:9f: 8e:1c:a0:d8:49:97:58:67:36:d6:96:9f:d2:72:a7: 77:c7:b5:21:7e:1e:1c:dd:6f:ca:96:dc:49:18:c2: e3:bd:a6:e0:1b:e7:51:fa:6b:ec:b6:1b:c1:55:e0: 9a:5a:39:93:df:79:35:68:88:39:df:ab:01:bc:99: 92:74:3b:e2:cf:a1:8a:00:58:18:30:8c:db:91:43: 14:7d:de:25:35:f1:3f:4f:c6:75:0b:37:ae:d4:72: ba:eb:0c:da:14:59:76:03:79:36:4a:7e:50:6b:fe: d4:6c:fc:bc:a8:f6:f0:b7:75:69:68:dc:ac:bb:8c: 72:1e:31:06:88:47:3b:b2:38:1e:8d:47:12:4a:b6: dc:1d:0e:d6:63:cb:aa:ad:68:06:c5:51:eb:14:ae: f1:dc:34:3c:49:aa:24:21:de:f2:e2:2c:d6:b7:0b: f3:8d:d9:ed:0b:10:4a:5e:81:32:eb:7c:22:c1:e1: 14:8f:26:83:e2:66:4a:31:13:11:52:2c:02:93:f9: e5:d7:87:9e:13:fc:63:d8:6a:25:d6:fb:f3:64:f3: 5e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:72:0E:07:B7:A8:44:0C:86:D1:93:C4:66:FB:C0:6E:9B:30:16:B6 X509v3 Authority Key Identifier: keyid:8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/7HIOB7eoRAyG0ZPEZvvAbpswFrY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.223.190.0/24 62.68.65.0/24 91.212.33.0/24 185.61.176.0/22 185.160.52.0/22 193.39.0.0/22 193.56.146.0/24 217.197.108.0/24 IPv6: 2a02:7b20::/32 2a03:9260::/32 Signature Algorithm: sha256WithRSAEncryption 51:2d:27:6d:ff:e0:b8:1d:f0:16:c7:88:60:c1:b9:05:ca:e7: 4e:df:76:20:aa:ab:1e:1e:bb:af:48:0b:e9:d3:b6:25:09:6f: f1:69:bf:c3:7d:e9:39:05:28:2a:08:ed:50:18:48:46:6d:4d: 31:2e:19:fd:02:bd:a1:4c:1a:54:81:a5:13:6d:f7:36:89:fd: c6:7c:0b:91:1e:51:87:5b:4f:a6:7f:3d:81:b7:d3:17:c4:c4: a1:c1:e1:ae:ce:f3:17:fd:a9:b2:6d:68:d5:44:ac:ec:d9:70: 13:55:d0:79:c6:8d:6f:91:26:27:24:ed:05:b3:7c:bf:1e:6f: e9:88:73:8a:9c:ba:99:d6:86:75:13:80:1b:c5:0b:ef:c0:cb: 56:26:e2:17:d6:ec:b2:a5:98:72:c4:9f:50:11:4a:79:79:d0: 27:cc:1e:de:71:20:e2:ef:bc:a9:d2:db:16:0a:7f:be:ce:c0: 6e:ed:62:04:e5:ff:1c:db:e7:b1:b3:66:20:bf:51:d3:0b:57: c8:b8:74:8e:dd:16:dc:ce:58:72:04:45:73:e9:71:65:13:7a: 75:24:42:d4:5b:d9:03:a7:ed:c6:69:17:8b:3c:31:97:ff:7a: 35:e0:f3:53:ff:45:0b:00:df:8a:a6:81:4c:53:03:14:13:9f: 95:82:89:e5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZt/FScSSb8L4M0nPzqkOiLDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMzJhNmU1N2VjODFjYzVjYjQzYmI1MDM3NDliMzYwZjJi MDVjM2IwHhcNMjYwMTAyMTQyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzcyMGUwN2I3YTg0NDBjODZkMTkzYzQ2NmZiYzA2ZTliMzAxNmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+z/NNsQ2rvOMrCzgI0yHpkNRKgk HLTPjIlj0krJE0RUko/k0cIZfgJHoZ+OHKDYSZdYZzbWlp/Scqd3x7Uhfh4c3W/K ltxJGMLjvabgG+dR+mvsthvBVeCaWjmT33k1aIg536sBvJmSdDviz6GKAFgYMIzb kUMUfd4lNfE/T8Z1Czeu1HK66wzaFFl2A3k2Sn5Qa/7UbPy8qPbwt3VpaNysu4xy HjEGiEc7sjgejUcSSrbcHQ7WY8uqrWgGxVHrFK7x3DQ8SaokId7y4izWtwvzjdnt CxBKXoEy63wiweEUjyaD4mZKMRMRUiwCk/nl14eeE/xj2Gol1vvzZPNe6wIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFOxyDge3qEQMhtGTxGb7wG6bMBa2MB8GA1UdIwQY MBaAFIwypuV+yBzFy0O7UDdJs2DysFw7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakRLbTVYN0lITVhMUTd0UU4wbXpZUEt3WERzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC82ZTBjZmEtMjA1ZS00ZDY2LWFlM2Et Yzc0M2Q3YzBiYjIyLzEvN0hJT0I3ZW9SQXlHMFpQRVp2dkFicHN3RnJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC82ZTBjZmEtMjA1ZS00ZDY2LWFlM2EtYzc0M2Q3YzBiYjIy LzEvakRLbTVYN0lITVhMUTd0UU4wbXpZUEt3WERzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA2BAIAATAwAwQAH9++AwQA PkRBAwQAW9QhAwQCuT2wAwQCuaA0AwQCwScAAwQAwTiSAwQA2cVsMBQEAgACMA4D BQAqAnsgAwUAKgOSYDANBgkqhkiG9w0BAQsFAAOCAQEAUS0nbf/guB3wFseIYMG5 BcrnTt92IKqrHh67r0gL6dO2JQlv8Wm/w33pOQUoKgjtUBhIRm1NMS4Z/QK9oUwa VIGlE233Non9xnwLkR5Rh1tPpn89gbfTF8TEocHhrs7zF/2psm1o1USs7NlwE1XQ ecaNb5EmJyTtBbN8vx5v6Yhzipy6mdaGdROAG8UL78DLVibiF9bssqWYcsSfUBFK eXnQJ8we3nEg4u+8qdLbFgp/vs7Abu1iBOX/HNvnsbNmIL9R0wtXyLh0jt0W3M5Y cgRFc+lxZRN6dSRC1FvZA6ftxmkXizwxl/96NeDzU/9FCwDfiqaBTFMDFBOflYKJ 5Q== -----END CERTIFICATE-----Generated at Tue Jan 27 09:56:26 2026 by rpki-client