This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/7rv6k5uVuhGjktrsjUOGcYvC-9k.roa File: 7rv6k5uVuhGjktrsjUOGcYvC-9k.roa (raw, json) Hash identifier: s1LhNqbDkaJJk+ypgLty0IbjHOS1lXZfumV3rSK/rSs= Subject key identifier: EE:BB:FA:93:9B:95:BA:11:A3:92:DA:EC:8D:43:86:71:8B:C2:FB:D9 Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Certificate serial: 019C245844609A5BC6089C85C52D67D17B48 Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/7rv6k5uVuhGjktrsjUOGcYvC-9k.roa Signing time: Tue 03 Feb 2026 16:31:30 +0000 ROA not before: Tue 03 Feb 2026 16:31:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49690 IP address blocks: 159.151.0.0/18 maxlen: 18 159.151.140.0/24 maxlen: 24 159.151.254.0/24 maxlen: 24 192.109.140.0/24 maxlen: 24 192.109.141.0/24 maxlen: 24 2a07:8140::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:24:58:44:60:9a:5b:c6:08:9c:85:c5:2d:67:d1:7b:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Validity Not Before: Feb 3 16:31:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eebbfa939b95ba11a392daec8d4386718bc2fbd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a4:d4:be:bb:95:7b:d5:e2:ad:47:35:64:84: 26:be:fa:bc:df:f3:c0:a9:9e:34:b8:c0:9b:35:2d: 18:46:49:69:76:c2:a6:5c:fb:9b:8c:62:db:e9:ff: 45:6e:b2:da:d0:63:76:3e:a2:5d:89:70:a2:77:91: fa:9a:09:dd:c5:d6:8d:be:d7:5c:e2:86:d9:5f:51: 9b:28:83:89:90:88:fc:57:ab:5b:ee:44:ee:a2:b8: c8:90:4a:ea:21:58:36:74:39:0e:74:83:4d:56:de: c3:9c:96:2b:17:44:e7:18:5c:6d:63:09:e6:f8:4d: ee:a4:41:04:89:58:a2:6e:86:6e:b2:3b:43:8d:db: 3a:69:e3:6e:ed:22:ec:39:00:07:f8:aa:2f:63:8f: 1b:16:12:aa:e9:d9:7e:ee:d8:e4:59:be:4d:38:cf: 9b:04:e5:51:dc:50:9b:0a:51:7a:04:e4:ad:61:ce: 36:9c:3a:ba:4e:a8:45:39:5e:ba:3a:59:64:b1:2b: a3:44:ff:08:69:37:f3:72:6f:fc:6d:39:83:32:80: 64:a9:1a:75:10:ab:6c:09:3f:82:65:12:96:70:7a: 83:f7:c1:48:f7:49:26:23:71:1c:11:8b:9d:75:4d: 42:5e:9f:01:74:93:91:10:8d:f1:9d:4d:32:83:cd: 3e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:BB:FA:93:9B:95:BA:11:A3:92:DA:EC:8D:43:86:71:8B:C2:FB:D9 X509v3 Authority Key Identifier: keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/7rv6k5uVuhGjktrsjUOGcYvC-9k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.151.0.0/18 159.151.140.0/24 159.151.254.0/24 192.109.140.0/23 IPv6: 2a07:8140::/36 Signature Algorithm: sha256WithRSAEncryption 58:ea:48:e7:8c:0d:8c:e2:9c:ff:1e:6d:d9:9b:dc:eb:9d:2d: e5:53:43:af:5d:cc:a3:cd:cd:66:8f:83:e1:51:76:dd:a7:cf: 15:77:7d:c1:8d:b4:f2:1f:43:2a:81:08:a4:bf:be:e6:8f:8c: ea:9a:5a:fd:9d:af:7f:9a:e3:78:29:d9:1a:99:88:6d:40:6a: 55:70:a1:f8:ee:23:0b:50:54:bd:9b:1f:9f:e8:a3:51:6e:2c: 3f:a0:41:3a:e5:e6:a1:46:de:11:51:82:c7:ec:7b:45:56:77: 15:8a:58:61:83:5e:71:ac:c6:bd:e6:6e:7e:2d:3c:95:78:ff: 22:e1:d1:a5:5d:5a:7f:2c:de:b7:f4:59:93:fe:d7:c5:a9:30: e6:9d:a3:3a:45:d3:3b:03:8d:47:a4:77:c9:a4:29:96:7e:51: 36:a1:d3:86:79:2a:ac:3f:c0:ad:b9:44:f8:d6:20:8e:d1:86: a7:5e:04:a3:1e:b2:2e:e5:c0:b4:50:54:72:ea:e1:77:a9:af: ef:e6:31:03:55:a9:e3:a0:55:91:42:ae:bf:65:fc:8f:65:b5: e0:7c:f6:33:de:d8:6a:1e:85:f8:04:b5:80:d7:00:6d:18:24: b3:de:48:3a:50:81:98:72:88:87:8f:7d:4c:28:33:c5:92:89: 5b:1e:3a:db -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZwkWERgmlvGCJyFxS1n0XtIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzdkODA3ZDRmN2NkZDNlMGFmZTRhYmM4ZWU1YTg4MGM2 MDkwZjEwHhcNMjYwMjAzMTYzMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWJiZmE5MzliOTViYTExYTM5MmRhZWM4ZDQzODY3MThiYzJmYmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqTUvruVe9XirUc1ZIQmvvq83/PA qZ40uMCbNS0YRklpdsKmXPubjGLb6f9FbrLa0GN2PqJdiXCid5H6mgndxdaNvtdc 4obZX1GbKIOJkIj8V6tb7kTuorjIkErqIVg2dDkOdINNVt7DnJYrF0TnGFxtYwnm +E3upEEEiViiboZusjtDjds6aeNu7SLsOQAH+KovY48bFhKq6dl+7tjkWb5NOM+b BOVR3FCbClF6BOStYc42nDq6TqhFOV66OllksSujRP8IaTfzcm/8bTmDMoBkqRp1 EKtsCT+CZRKWcHqD98FI90kmI3EcEYuddU1CXp8BdJOREI3xnU0yg80+XQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFO67+pOblboRo5La7I1DhnGLwvvZMB8GA1UdIwQY MBaAFAo32AfU983T4K/kq8juWogMYJDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjkt ODAwZWRhMmNmYjM2LzEvN3J2Nms1dVZ1aEdqa3Ryc2pVT0djWXZDLTlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjktODAwZWRhMmNmYjM2 LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAeBAIAATAYAwQGn5cAAwQA n5eMAwQAn5f+AwQBwG2MMA4EAgACMAgDBgQqB4FAADANBgkqhkiG9w0BAQsFAAOC AQEAWOpI54wNjOKc/x5t2Zvc650t5VNDr13Mo83NZo+D4VF23afPFXd9wY208h9D KoEIpL++5o+M6ppa/Z2vf5rjeCnZGpmIbUBqVXCh+O4jC1BUvZsfn+ijUW4sP6BB OuXmoUbeEVGCx+x7RVZ3FYpYYYNecazGveZufi08lXj/IuHRpV1afyzet/RZk/7X xakw5p2jOkXTOwONR6R3yaQpln5RNqHThnkqrD/ArblE+NYgjtGGp14Eox6yLuXA tFBUcurhd6mv7+YxA1Wp46BVkUKuv2X8j2W14Hz2M97Yah6F+AS1gNcAbRgks95I OlCBmHKIh499TCgzxZKJWx462w== -----END CERTIFICATE-----Generated at Sat Feb 7 07:14:29 2026 by rpki-client