This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/m7vcxzZI7ZuTMx9V0n8WAUL8fQg.roa File: m7vcxzZI7ZuTMx9V0n8WAUL8fQg.roa (raw, json) Hash identifier: QKpDxSlNdLfQPeYhxYae53vmN7mvnnmroRizH/b/Yb0= Subject key identifier: 9B:BB:DC:C7:36:48:ED:9B:93:33:1F:55:D2:7F:16:01:42:FC:7D:08 Certificate issuer: /CN=708029a674177efd99252275094618c0c9cfbd1d Certificate serial: 019B9E4A17386AD27E34A12364F781DAF396 Authority key identifier: 70:80:29:A6:74:17:7E:FD:99:25:22:75:09:46:18:C0:C9:CF:BD:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/m7vcxzZI7ZuTMx9V0n8WAUL8fQg.roa Signing time: Thu 08 Jan 2026 15:46:54 +0000 ROA not before: Thu 08 Jan 2026 15:46:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25369 IP address blocks: 185.167.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:4a:17:38:6a:d2:7e:34:a1:23:64:f7:81:da:f3:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708029a674177efd99252275094618c0c9cfbd1d Validity Not Before: Jan 8 15:46:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bbbdcc73648ed9b93331f55d27f160142fc7d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:74:b1:83:e9:df:f7:55:1f:a7:89:14:55:63: f5:7c:3f:2f:31:bc:d2:1f:02:1e:43:c6:b2:e3:8f: 6a:52:82:09:01:fb:8f:fb:ef:bb:9d:a6:57:97:2b: 4d:7b:32:ce:de:4e:b6:7a:b4:c9:de:6c:37:61:a2: d1:dd:4e:f1:44:a7:f5:5e:71:e1:fa:07:b1:b5:bf: e0:b8:29:ce:c0:d0:e6:2d:70:91:98:d5:ba:11:4c: 7f:54:03:2f:a4:9a:c3:2e:68:45:ad:41:c6:b4:e2: c3:62:8c:58:17:fe:3f:6d:9d:67:e5:c1:ea:45:4d: 05:d0:80:ba:99:da:0d:64:48:e3:4f:1b:cc:38:a6: 1d:16:e8:f6:4c:c7:f2:be:c6:35:9c:e8:ed:1a:4f: ac:99:44:8d:24:2c:3d:b0:2d:29:32:07:8c:d3:5d: 04:b5:8f:38:1b:99:46:7e:59:c4:9c:1e:06:b0:68: 64:a4:6e:22:da:b8:43:9d:a7:3b:9d:1f:5d:65:11: 33:2e:76:7c:25:36:e1:83:bf:b7:64:bf:31:a2:0a: bb:50:f6:73:8e:c4:19:ec:fa:76:7d:1f:24:44:bc: 19:28:0e:70:98:13:af:f1:75:8f:24:2e:d2:da:65: 50:f8:ae:72:c8:d4:4d:60:2b:5b:8c:f2:01:40:60: 23:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BB:DC:C7:36:48:ED:9B:93:33:1F:55:D2:7F:16:01:42:FC:7D:08 X509v3 Authority Key Identifier: keyid:70:80:29:A6:74:17:7E:FD:99:25:22:75:09:46:18:C0:C9:CF:BD:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/m7vcxzZI7ZuTMx9V0n8WAUL8fQg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.167.253.0/24 Signature Algorithm: sha256WithRSAEncryption 50:d6:b3:07:75:d1:95:b4:58:0b:c0:54:ac:2c:59:93:e6:f8: 39:c5:d1:2d:df:66:c6:33:55:44:d4:52:45:d2:30:5d:44:37: 8d:7b:82:0e:6e:a7:b5:43:95:fc:19:7c:5a:00:2e:37:49:01: f3:dc:d3:95:20:28:2e:48:9d:5f:ab:1c:dc:35:dd:09:31:5b: d9:05:ad:ca:4b:ed:df:18:94:29:27:89:be:08:ba:ab:d1:21: 42:67:ec:3b:2c:59:4f:c6:3d:69:72:0f:59:78:24:ef:c0:bc: 1e:77:78:0e:9f:79:0b:3f:55:c6:23:e2:6a:b8:61:be:e4:46: 61:ca:88:33:60:c3:cb:1a:8d:06:b8:8a:89:ca:bd:36:05:ac: fe:ae:d3:06:fa:22:d7:89:1d:2e:6e:b6:de:b6:17:4a:f3:d6: d4:25:3e:3d:b2:a3:27:d2:cf:eb:9f:e6:c9:68:48:6f:8a:c3: 61:93:f5:d2:67:81:f2:2a:cd:d9:b1:31:fe:bb:08:a8:50:6c: 08:e3:cb:d8:f2:bd:b1:80:6b:b7:27:9f:9f:97:6f:85:5e:bf: ae:09:1f:27:bb:57:13:cd:c3:1f:dd:12:ac:da:3d:a9:4d:8b: e3:73:4f:42:ff:92:6a:3c:10:9a:1e:50:f1:ff:6e:bf:ba:ac: 3a:34:53:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZueShc4atJ+NKEjZPeB2vOWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwODAyOWE2NzQxNzdlZmQ5OTI1MjI3NTA5NDYxOGMwYzlj ZmJkMWQwHhcNMjYwMTA4MTU0NjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmJiZGNjNzM2NDhlZDliOTMzMzFmNTVkMjdmMTYwMTQyZmM3ZDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43Sxg+nf91Ufp4kUVWP1fD8vMbzS HwIeQ8ay449qUoIJAfuP+++7naZXlytNezLO3k62erTJ3mw3YaLR3U7xRKf1XnHh +gextb/guCnOwNDmLXCRmNW6EUx/VAMvpJrDLmhFrUHGtOLDYoxYF/4/bZ1n5cHq RU0F0IC6mdoNZEjjTxvMOKYdFuj2TMfyvsY1nOjtGk+smUSNJCw9sC0pMgeM010E tY84G5lGflnEnB4GsGhkpG4i2rhDnac7nR9dZREzLnZ8JTbhg7+3ZL8xogq7UPZz jsQZ7Pp2fR8kRLwZKA5wmBOv8XWPJC7S2mVQ+K5yyNRNYCtbjPIBQGAjkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJu73Mc2SO2bkzMfVdJ/FgFC/H0IMB8GA1UdIwQY MBaAFHCAKaZ0F379mSUidQlGGMDJz70dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0lBcHBuUVhmdjJaSlNKMUNVWVl3TW5QdlIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8wOGQ0NGMtZjEwMi00YjcwLThkYjAt NzJhYmVlZmVkYTRhLzEvbTd2Y3h6Wkk3WnVUTXg5VjBuOFdBVUw4ZlFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8wOGQ0NGMtZjEwMi00YjcwLThkYjAtNzJhYmVlZmVkYTRh LzEvY0lBcHBuUVhmdjJaSlNKMUNVWVl3TW5QdlIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaf9MA0G CSqGSIb3DQEBCwUAA4IBAQBQ1rMHddGVtFgLwFSsLFmT5vg5xdEt32bGM1VE1FJF 0jBdRDeNe4IObqe1Q5X8GXxaAC43SQHz3NOVICguSJ1fqxzcNd0JMVvZBa3KS+3f GJQpJ4m+CLqr0SFCZ+w7LFlPxj1pcg9ZeCTvwLwed3gOn3kLP1XGI+JquGG+5EZh yogzYMPLGo0GuIqJyr02Baz+rtMG+iLXiR0ubrbethdK89bUJT49sqMn0s/rn+bJ aEhvisNhk/XSZ4HyKs3ZsTH+uwioUGwI48vY8r2xgGu3J5+fl2+FXr+uCR8nu1cT zcMf3RKs2j2pTYvjc09C/5JqPBCaHlDx/26/uqw6NFP1 -----END CERTIFICATE-----Generated at Mon Jan 19 17:06:13 2026 by rpki-client