This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/7lvjfYbr9G0PNBw25lw_gjQVNAc.roa File: 7lvjfYbr9G0PNBw25lw_gjQVNAc.roa (raw, json) Hash identifier: Q4GZSTUw+N9EKoJs3VO+IluZlSIov3jTQ/daTNuT5H4= Subject key identifier: EE:5B:E3:7D:86:EB:F4:6D:0F:34:1C:36:E6:5C:3F:82:34:15:34:07 Certificate issuer: /CN=e996d2cb3947787f15e19bacb1e3369c19f3ec94 Certificate serial: 019B7D5C5A6BAC92703BB9A087A4BAEF7B0C Authority key identifier: E9:96:D2:CB:39:47:78:7F:15:E1:9B:AC:B1:E3:36:9C:19:F3:EC:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/7lvjfYbr9G0PNBw25lw_gjQVNAc.roa Signing time: Fri 02 Jan 2026 06:19:23 +0000 ROA not before: Fri 02 Jan 2026 06:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197515 IP address blocks: 91.214.124.0/24 maxlen: 24 185.195.192.0/22 maxlen: 24 2a13:3900::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:5a:6b:ac:92:70:3b:b9:a0:87:a4:ba:ef:7b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e996d2cb3947787f15e19bacb1e3369c19f3ec94 Validity Not Before: Jan 2 06:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee5be37d86ebf46d0f341c36e65c3f8234153407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d4:94:fe:12:67:61:5f:c1:67:96:ad:00:e6: ba:ce:6d:d3:71:9a:0e:f2:2c:48:65:bd:2c:a2:96: ce:e3:d8:86:3c:04:3b:92:f1:ad:8d:67:b8:d9:0d: 9d:e1:f1:29:6d:c6:ff:8e:c4:42:76:84:5f:3a:78: 9b:6d:ee:7b:60:a8:88:0b:d6:a3:0d:5c:a8:eb:23: db:31:3e:d6:30:33:c2:c2:fd:5b:9c:6d:e7:50:4d: ee:b9:1a:84:97:94:43:7b:00:2b:67:8f:99:59:6d: 8d:05:ab:df:fe:13:3a:15:03:e3:25:0c:bd:3d:44: 4b:56:bb:0d:72:92:f8:ec:cb:ca:8a:ea:e2:44:e6: f3:87:4f:27:b1:6c:6e:ac:82:da:e5:d5:9b:74:71: 1e:ad:c0:d4:cd:44:62:69:80:f7:55:78:ba:f7:b4: 69:1a:f1:2b:56:c5:24:df:cd:4c:c8:dd:5e:ab:3e: b3:1e:57:15:58:bc:29:79:f6:15:59:bb:19:6b:3a: f3:4a:cf:48:7e:fe:79:f4:ba:49:97:d4:b6:4a:e2: 54:75:e5:d4:7e:3e:3a:e1:96:35:4d:8f:f5:36:85: 63:a0:c5:60:1f:66:3b:9d:16:19:ab:3b:1e:b1:b9: e8:ab:c0:73:48:5f:da:b3:60:e6:17:b0:74:31:64: 6f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:5B:E3:7D:86:EB:F4:6D:0F:34:1C:36:E6:5C:3F:82:34:15:34:07 X509v3 Authority Key Identifier: keyid:E9:96:D2:CB:39:47:78:7F:15:E1:9B:AC:B1:E3:36:9C:19:F3:EC:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/7lvjfYbr9G0PNBw25lw_gjQVNAc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.214.124.0/24 185.195.192.0/22 IPv6: 2a13:3900::/29 Signature Algorithm: sha256WithRSAEncryption 7e:ca:94:8a:ae:a6:6f:7e:13:2d:cd:da:77:b7:7d:52:e4:4b: 79:28:59:a8:1d:3c:8e:33:fa:ad:e8:c4:17:30:da:67:fc:e3: ef:9c:51:29:40:a7:eb:8f:8b:88:32:42:f0:c7:13:2f:4c:67: 7c:d2:85:7d:55:a3:88:be:2e:18:59:1f:9e:bf:d9:16:34:70: 5f:84:29:e8:92:d2:26:32:60:16:09:01:92:6c:8b:87:8b:9b: 78:ee:e8:8d:4f:ae:d0:89:21:5b:20:1b:e6:7a:55:db:43:c6: 6d:1b:49:97:0e:2b:9d:81:01:27:db:72:27:94:c0:94:75:a2: f1:55:30:17:4e:81:40:de:e7:df:31:3e:db:8b:d9:44:ac:2f: db:ab:dd:16:51:14:70:cb:d0:5f:a3:4d:b2:8e:86:f2:86:2a: 58:cc:86:e9:14:72:16:27:20:01:f9:77:0f:90:6d:e4:1b:47: 4b:50:a9:7d:d7:9b:15:43:6b:22:e6:03:e9:98:f9:c3:dd:90: 31:34:fd:f9:e9:39:86:22:1d:19:e6:52:b3:be:59:2e:1b:56: 13:52:61:ae:50:b4:9e:6f:f5:b7:f7:d5:19:81:43:73:60:8e: 92:34:6c:a9:f6:27:ef:bc:eb:82:6a:7e:16:0a:d5:15:1a:7e: e1:7f:4d:9d -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9XFprrJJwO7mgh6S673sMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5OTZkMmNiMzk0Nzc4N2YxNWUxOWJhY2IxZTMzNjljMTlm M2VjOTQwHhcNMjYwMTAyMDYxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTViZTM3ZDg2ZWJmNDZkMGYzNDFjMzZlNjVjM2Y4MjM0MTUzNDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtSU/hJnYV/BZ5atAOa6zm3TcZoO 8ixIZb0sopbO49iGPAQ7kvGtjWe42Q2d4fEpbcb/jsRCdoRfOnibbe57YKiIC9aj DVyo6yPbMT7WMDPCwv1bnG3nUE3uuRqEl5RDewArZ4+ZWW2NBavf/hM6FQPjJQy9 PURLVrsNcpL47MvKiuriRObzh08nsWxurILa5dWbdHEercDUzURiaYD3VXi697Rp GvErVsUk381MyN1eqz6zHlcVWLwpefYVWbsZazrzSs9Ifv559LpJl9S2SuJUdeXU fj464ZY1TY/1NoVjoMVgH2Y7nRYZqzsesbnoq8BzSF/as2DmF7B0MWRvhQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFO5b432G6/RtDzQcNuZcP4I0FTQHMB8GA1UdIwQY MBaAFOmW0ss5R3h/FeGbrLHjNpwZ8+yUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlpiU3l6bEhlSDhWNFp1c3NlTTJuQm56N0pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85YzYxYmEtYzc0Ni00ZmNlLWE5Yzkt NzI3NjJiNTcwNjJmLzEvN2x2amZZYnI5RzBQTkJ3MjVsd19nalFWTkFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85YzYxYmEtYzc0Ni00ZmNlLWE5YzktNzI3NjJiNTcwNjJm LzEvNlpiU3l6bEhlSDhWNFp1c3NlTTJuQm56N0pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW9Z8AwQC ucPAMA0EAgACMAcDBQMqEzkAMA0GCSqGSIb3DQEBCwUAA4IBAQB+ypSKrqZvfhMt zdp3t31S5Et5KFmoHTyOM/qt6MQXMNpn/OPvnFEpQKfrj4uIMkLwxxMvTGd80oV9 VaOIvi4YWR+ev9kWNHBfhCnoktImMmAWCQGSbIuHi5t47uiNT67QiSFbIBvmelXb Q8ZtG0mXDiudgQEn23InlMCUdaLxVTAXToFA3uffMT7bi9lErC/bq90WURRwy9Bf o02yjobyhipYzIbpFHIWJyAB+XcPkG3kG0dLUKl915sVQ2si5gPpmPnD3ZAxNP35 6TmGIh0Z5lKzvlkuG1YTUmGuULSeb/W399UZgUNzYI6SNGyp9ifvvOuCan4WCtUV Gn7hf02d -----END CERTIFICATE-----Generated at Tue Jan 27 07:10:54 2026 by rpki-client