This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/7RRyo5mrSZHKaCfweZimJC0UI0A.roa File: 7RRyo5mrSZHKaCfweZimJC0UI0A.roa (raw, json) Hash identifier: LQwFNkqaemk7BQFWfMSkrEO4PRaAlztizBh/5pehkzc= Subject key identifier: ED:14:72:A3:99:AB:49:91:CA:68:27:F0:79:98:A6:24:2D:14:23:40 Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Certificate serial: 019B7FF1EE990171AB94EEC0D77388869F18 Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/7RRyo5mrSZHKaCfweZimJC0UI0A.roa Signing time: Fri 02 Jan 2026 18:22:00 +0000 ROA not before: Fri 02 Jan 2026 18:22:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207279 IP address blocks: 85.117.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:ee:99:01:71:ab:94:ee:c0:d7:73:88:86:9f:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Validity Not Before: Jan 2 18:22:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed1472a399ab4991ca6827f07998a6242d142340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f5:df:d5:8b:2a:c3:bc:0a:6f:34:b7:53:ae: 83:78:79:7c:83:82:ac:04:0e:26:b8:3d:4f:57:89: be:ed:e6:89:2f:21:31:12:21:2a:f8:5a:de:4f:08: 76:03:8b:d0:26:a3:8c:8b:fc:5f:80:6b:4d:9d:b9: e2:84:7c:aa:cb:54:43:70:10:57:d1:8b:cc:24:e7: 88:0c:16:04:a3:9c:fc:ba:5e:4b:d3:7b:eb:54:e2: d2:6e:85:89:50:fd:54:65:0a:95:16:f3:10:0f:bc: e2:b8:75:1a:9d:fe:87:aa:1c:8f:bc:0a:b9:ce:50: 8c:0d:c5:18:bd:1b:ad:4c:8d:22:c3:4c:72:ea:c7: 8f:19:ff:a9:3f:a0:e9:4f:5f:57:77:62:82:57:a9: 55:0e:51:bf:d9:bd:17:5a:1c:6f:d5:7f:01:45:c8: 7b:75:34:99:44:51:da:51:a2:ba:80:82:6d:3e:95: 0c:0e:5d:fa:11:0c:c7:a0:03:a6:d7:19:5a:65:d9: 43:7b:ec:cd:b9:f2:bc:39:7b:52:cf:41:5b:25:11: 7a:bb:1d:b0:e0:6d:f2:96:ac:00:de:43:08:0c:b8: 75:f6:99:bd:a7:d9:50:d7:38:3d:84:e8:a9:32:15: b1:d2:ed:84:50:9f:27:b5:88:e8:ec:66:96:9c:82: 76:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:14:72:A3:99:AB:49:91:CA:68:27:F0:79:98:A6:24:2D:14:23:40 X509v3 Authority Key Identifier: keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/7RRyo5mrSZHKaCfweZimJC0UI0A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.117.239.0/24 Signature Algorithm: sha256WithRSAEncryption 22:8d:80:28:0e:1c:95:d9:55:af:a0:2c:f5:96:9f:71:f3:66: a2:56:98:48:dd:aa:f3:fd:0c:d2:aa:bc:a2:e4:c3:47:c1:5c: 9b:a5:d5:09:7c:8a:b6:3b:16:63:71:c6:df:fb:e6:21:12:4c: 14:06:9a:f2:b1:8c:3c:ee:26:dd:58:18:82:03:b1:13:bc:16: 3d:de:68:3c:8f:c2:26:51:5e:fd:11:df:6d:c8:be:f0:7f:31: 21:48:26:fd:c7:16:3d:d8:0d:74:a7:32:2a:85:d0:d5:28:82: d7:48:eb:69:29:64:c1:74:ff:3a:55:b3:62:ab:14:cc:f5:82: 04:fc:c2:14:d4:71:e5:00:dc:1d:01:5a:60:ce:2c:43:31:37: 46:4d:c3:7f:94:bf:a0:21:77:ef:a6:c7:65:95:12:bb:c0:f7: 90:ab:de:18:2d:d3:db:bb:51:cb:71:bd:ed:ca:5c:6a:a6:4a: 60:ec:f1:73:f1:e9:28:ed:85:90:53:0b:08:84:37:94:bc:da: 38:92:07:47:0c:62:9e:44:98:d7:74:fb:a0:f6:ce:27:04:6f: 69:7c:9f:a7:df:e9:48:18:ca:4b:68:9e:c5:17:2c:2f:44:1b: ce:52:a0:22:10:e3:cf:24:a1:80:8a:bd:5c:8f:22:b5:a1:ed: 23:a1:39:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8e6ZAXGrlO7A13OIhp8YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmRkOWRhZDc1ODc3ZjdkMjhkMTRlMDhkYzU1YjEzMzBi ZDEzYjcwHhcNMjYwMTAyMTgyMjAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDE0NzJhMzk5YWI0OTkxY2E2ODI3ZjA3OTk4YTYyNDJkMTQyMzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/Xf1Ysqw7wKbzS3U66DeHl8g4Ks BA4muD1PV4m+7eaJLyExEiEq+FreTwh2A4vQJqOMi/xfgGtNnbnihHyqy1RDcBBX 0YvMJOeIDBYEo5z8ul5L03vrVOLSboWJUP1UZQqVFvMQD7ziuHUanf6HqhyPvAq5 zlCMDcUYvRutTI0iw0xy6sePGf+pP6DpT19Xd2KCV6lVDlG/2b0XWhxv1X8BRch7 dTSZRFHaUaK6gIJtPpUMDl36EQzHoAOm1xlaZdlDe+zNufK8OXtSz0FbJRF6ux2w 4G3ylqwA3kMIDLh19pm9p9lQ1zg9hOipMhWx0u2EUJ8ntYjo7GaWnIJ2qQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO0UcqOZq0mRymgn8HmYpiQtFCNAMB8GA1UdIwQY MBaAFKdt2drXWHf30o0U4I3FWxMwvRO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQt MmFjNmZmNzViZWIwLzEvN1JSeW81bXJTWkhLYUNmd2VaaW1KQzBVSTBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQtMmFjNmZmNzViZWIw LzEvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXXvMA0G CSqGSIb3DQEBCwUAA4IBAQAijYAoDhyV2VWvoCz1lp9x82aiVphI3arz/QzSqryi 5MNHwVybpdUJfIq2OxZjccbf++YhEkwUBprysYw87ibdWBiCA7ETvBY93mg8j8Im UV79Ed9tyL7wfzEhSCb9xxY92A10pzIqhdDVKILXSOtpKWTBdP86VbNiqxTM9YIE /MIU1HHlANwdAVpgzixDMTdGTcN/lL+gIXfvpsdllRK7wPeQq94YLdPbu1HLcb3t ylxqpkpg7PFz8eko7YWQUwsIhDeUvNo4kgdHDGKeRJjXdPug9s4nBG9pfJ+n3+lI GMpLaJ7FFywvRBvOUqAiEOPPJKGAir1cjyK1oe0joTmg -----END CERTIFICATE-----Generated at Wed Jan 21 16:32:11 2026 by rpki-client