This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/7B9W0clLzsK4p1pr53bEH61EQBg.roa File: 7B9W0clLzsK4p1pr53bEH61EQBg.roa (raw, json) Hash identifier: g9Qq+800T4dGI74x3Nt1LLvxWvY9mzvmzZ74GSFdjw0= Subject key identifier: EC:1F:56:D1:C9:4B:CE:C2:B8:A7:5A:6B:E7:76:C4:1F:AD:44:40:18 Certificate issuer: /CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9 Certificate serial: 019B7D5D0ADD0D7CB05217353686C31C1080 Authority key identifier: FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/7B9W0clLzsK4p1pr53bEH61EQBg.roa Signing time: Fri 02 Jan 2026 06:20:08 +0000 ROA not before: Fri 02 Jan 2026 06:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20860 IP address blocks: 149.255.96.0/20 maxlen: 24 2a03:ca80::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.crl rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:0a:dd:0d:7c:b0:52:17:35:36:86:c3:1c:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9 Validity Not Before: Jan 2 06:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec1f56d1c94bcec2b8a75a6be776c41fad444018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e0:6f:2a:df:5f:f5:00:b9:dd:14:20:f4:58: c2:4e:1c:85:32:83:c8:2a:1f:bf:ae:3a:97:a7:27: 0a:a3:5c:05:50:41:55:ce:ff:99:53:89:5f:92:ba: cc:61:da:43:9f:a5:bc:8f:38:dd:d9:e5:ee:ae:e2: ed:27:63:a5:f1:20:d8:bb:62:75:9d:4c:9b:98:f3: 60:21:05:b6:f9:1d:b9:e1:cf:70:4b:72:db:1f:49: 0d:71:72:31:aa:c2:9b:80:67:e6:3d:be:2b:3e:70: 1e:04:3f:c6:93:49:a9:b1:76:1f:f7:ee:da:bd:89: 35:13:f1:3b:28:c5:6a:6a:00:23:ad:57:cb:e8:f1: 51:31:54:9f:8d:a3:94:58:7d:ab:3f:36:91:f0:0f: 49:ff:c9:6e:ca:43:8a:bc:29:7d:0a:e3:f8:ec:88: 7c:e5:1f:b8:ad:a8:74:23:9a:54:3c:e0:19:80:b2: c5:8d:ac:3c:e9:6c:88:fb:7a:14:1d:0f:14:0d:4f: e2:73:b0:94:cc:9f:12:28:a8:c9:bf:cd:e0:b3:79: dd:e9:22:7f:f0:d9:a3:4c:3c:f9:0f:98:9a:a3:d3: ab:ea:fc:c9:ea:3b:63:71:c9:54:1c:d5:63:d5:a8: 43:89:9d:3b:be:43:42:7c:48:e7:8b:ad:ab:10:28: 98:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:1F:56:D1:C9:4B:CE:C2:B8:A7:5A:6B:E7:76:C4:1F:AD:44:40:18 X509v3 Authority Key Identifier: keyid:FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/7B9W0clLzsK4p1pr53bEH61EQBg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.255.96.0/20 IPv6: 2a03:ca80::/29 Signature Algorithm: sha256WithRSAEncryption 9e:41:34:b8:8d:fe:15:1e:f7:89:a5:5c:3e:24:45:ce:49:10: 53:a4:0d:a4:4b:32:62:91:22:91:cb:67:6e:67:1f:50:43:90: 1e:e5:ff:8b:9c:80:90:b5:75:75:7f:b4:2f:e9:22:76:0f:ec: 68:34:e1:38:ec:aa:1e:a5:0f:6c:82:30:40:87:87:13:59:57: 73:71:e0:89:6f:a8:ee:cd:bc:71:15:6b:ca:4c:2f:d4:eb:20: 23:e1:68:a8:d3:b8:30:93:dd:bf:ab:81:0e:7c:9c:9d:7a:bb: ef:91:d4:25:27:c1:85:66:73:ff:5f:8e:77:44:6c:13:f5:4c: 8a:0f:38:cc:86:c5:80:91:56:05:a5:db:e7:a8:57:30:2e:fd: dd:6e:fd:ee:0a:00:fe:5c:2c:a1:6c:6c:1b:71:b1:0b:36:9c: ff:06:c6:99:d0:e3:df:d7:c3:9d:46:fb:63:f0:ef:20:c5:f7: 34:88:fb:d2:b7:24:9b:a5:19:f5:a0:9c:c5:65:10:93:9d:db: d8:df:e9:e7:25:b7:86:6e:c7:0c:fb:ab:ff:b9:13:1a:c6:97: a1:36:23:be:da:c5:ca:8f:e9:0e:1a:37:30:e7:ec:52:34:8d: 2f:57:28:a3:3f:c4:c9:ed:eb:df:62:1d:71:46:d7:59:f4:28: 0b:51:e9:2e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XQrdDXywUhc1NobDHBCAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkODliMzQ5Yzg0ZmM3YjM0MTJhNTJkNjVmZjI2MGQyY2My ODlhYjkwHhcNMjYwMTAyMDYyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzFmNTZkMWM5NGJjZWMyYjhhNzVhNmJlNzc2YzQxZmFkNDQ0MDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+BvKt9f9QC53RQg9FjCThyFMoPI Kh+/rjqXpycKo1wFUEFVzv+ZU4lfkrrMYdpDn6W8jzjd2eXuruLtJ2Ol8SDYu2J1 nUybmPNgIQW2+R254c9wS3LbH0kNcXIxqsKbgGfmPb4rPnAeBD/Gk0mpsXYf9+7a vYk1E/E7KMVqagAjrVfL6PFRMVSfjaOUWH2rPzaR8A9J/8luykOKvCl9CuP47Ih8 5R+4rah0I5pUPOAZgLLFjaw86WyI+3oUHQ8UDU/ic7CUzJ8SKKjJv83gs3nd6SJ/ 8NmjTDz5D5iao9Or6vzJ6jtjcclUHNVj1ahDiZ07vkNCfEjni62rECiYxQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOwfVtHJS87CuKdaa+d2xB+tREAYMB8GA1UdIwQY MBaAFP2Js0nIT8ezQSpS1l/yYNLMKJq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1ltelNjaFB4N05CS2xMV1hfSmcwc3dvbXJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lZTcxNGEtMjFhYy00Mzg2LTgyZjUt ZTgxNzYxMDJjNWZmLzEvN0I5VzBjbEx6c0s0cDFwcjUzYkVINjFFUUJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9lZTcxNGEtMjFhYy00Mzg2LTgyZjUtZTgxNzYxMDJjNWZm LzEvX1ltelNjaFB4N05CS2xMV1hfSmcwc3dvbXJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQElf9gMA0E AgACMAcDBQMqA8qAMA0GCSqGSIb3DQEBCwUAA4IBAQCeQTS4jf4VHveJpVw+JEXO SRBTpA2kSzJikSKRy2duZx9QQ5Ae5f+LnICQtXV1f7Qv6SJ2D+xoNOE47KoepQ9s gjBAh4cTWVdzceCJb6juzbxxFWvKTC/U6yAj4Wio07gwk92/q4EOfJydervvkdQl J8GFZnP/X453RGwT9UyKDzjMhsWAkVYFpdvnqFcwLv3dbv3uCgD+XCyhbGwbcbEL Npz/BsaZ0OPf18OdRvtj8O8gxfc0iPvStySbpRn1oJzFZRCTndvY3+nnJbeGbscM +6v/uRMaxpehNiO+2sXKj+kOGjcw5+xSNI0vVyijP8TJ7evfYh1xRtdZ9CgLUeku -----END CERTIFICATE-----Generated at Mon Jan 19 17:31:51 2026 by rpki-client