This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/7Y5_pXpXkGXQz6r3Ag8VuuKYS-E.roa File: 7Y5_pXpXkGXQz6r3Ag8VuuKYS-E.roa (raw, json) Hash identifier: PcU8D+QmugZnXWhyt6suY1+91eR4RbUDaup9F17x2j0= Subject key identifier: ED:8E:7F:A5:7A:57:90:65:D0:CF:AA:F7:02:0F:15:BA:E2:98:4B:E1 Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Certificate serial: 019B77C725B5F47A5309024F13F642184D72 Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/7Y5_pXpXkGXQz6r3Ag8VuuKYS-E.roa Signing time: Thu 01 Jan 2026 04:18:18 +0000 ROA not before: Thu 01 Jan 2026 04:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25369 IP address blocks: 91.149.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:25:b5:f4:7a:53:09:02:4f:13:f6:42:18:4d:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Validity Not Before: Jan 1 04:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed8e7fa57a579065d0cfaaf7020f15bae2984be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4c:47:69:cd:10:0b:ef:0c:e8:e6:cb:5c:5e: d5:2b:48:3e:d2:24:b3:fd:28:b7:ea:1b:c4:d2:80: e0:d8:5c:55:5a:b0:12:6a:c5:7f:dd:e8:5b:c6:2b: be:07:95:3d:81:71:fd:84:ed:32:8c:9c:26:65:8d: ac:49:b5:40:20:7a:07:32:14:fd:02:ba:02:a2:f4: 8f:a1:ca:87:75:11:84:f4:c3:db:cc:8d:a1:cc:9b: 62:eb:bd:9a:ba:3f:65:3e:13:d2:f0:b3:60:98:29: 88:33:b0:65:a5:8f:af:31:d3:ef:14:45:b8:22:01: 1a:1c:c1:e9:81:c2:f0:78:05:fb:97:18:2b:5c:f9: e0:01:f2:44:2d:fe:7c:af:c6:71:2a:3c:4d:ac:61: 84:f7:67:ba:09:b0:e3:89:2d:aa:da:4b:12:75:9d: 43:0d:05:72:5d:7e:e0:36:92:c3:44:26:c2:76:fb: f1:b5:3e:ee:c9:8e:4c:1b:30:16:db:c4:69:a5:09: f3:f5:04:ad:29:e1:df:8d:60:09:82:de:b3:ce:00: 6b:00:12:ec:51:ca:09:b3:76:20:4a:03:2b:d8:45: 5e:85:b2:c6:8e:be:95:66:e4:be:e4:41:a5:c4:06: 49:ed:a7:f0:0c:5a:68:af:61:11:1a:8a:a1:82:57: 33:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8E:7F:A5:7A:57:90:65:D0:CF:AA:F7:02:0F:15:BA:E2:98:4B:E1 X509v3 Authority Key Identifier: keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/7Y5_pXpXkGXQz6r3Ag8VuuKYS-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.149.192.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:0f:30:b7:dd:25:55:62:ed:2f:62:a4:f2:11:5d:b1:0d:95: 93:3a:03:e1:3a:9b:28:e9:a3:a0:f2:10:20:99:a4:1c:2b:9a: 84:8c:ed:1d:b6:c0:74:02:0b:8a:70:7e:a4:e0:d8:5c:d5:74: ca:48:96:1c:ec:3d:73:98:4a:e8:da:1d:56:03:72:09:b4:de: 64:3d:1a:d4:5c:85:b4:a9:5b:f5:f9:bc:ce:3f:8f:ac:6e:f5: 33:e1:1c:ba:66:06:ab:bc:fd:d9:f3:83:87:6d:b9:b1:80:a1: 82:72:2a:fb:08:3b:fe:64:6d:c8:4d:f8:85:f0:fe:67:38:0c: 12:52:17:20:4e:8d:cb:bf:7d:f5:45:d1:a8:2a:4c:eb:0d:d2: 40:13:54:35:4f:be:04:55:8c:3e:78:4a:f1:af:ab:b7:97:d6: 35:66:6d:41:68:6f:46:34:04:bd:5a:de:e0:bf:0d:1f:07:e8: 34:e6:dd:f5:9a:81:47:2d:7d:6c:22:a8:d6:99:89:84:b4:17: 75:b9:48:68:7c:9e:a3:25:2c:10:ef:05:02:c3:f5:6e:a6:82: b0:38:98:97:66:24:0f:31:ad:39:eb:71:c3:c6:8d:48:ef:75: fe:23:64:1f:e4:25:8a:c1:3e:d8:c8:24:13:19:2a:7d:79:f1: 4c:73:53:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xyW19HpTCQJPE/ZCGE1yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk YzJhZjkwHhcNMjYwMTAxMDQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDhlN2ZhNTdhNTc5MDY1ZDBjZmFhZjcwMjBmMTViYWUyOTg0YmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ExHac0QC+8M6ObLXF7VK0g+0iSz /Si36hvE0oDg2FxVWrASasV/3ehbxiu+B5U9gXH9hO0yjJwmZY2sSbVAIHoHMhT9 AroCovSPocqHdRGE9MPbzI2hzJti672auj9lPhPS8LNgmCmIM7BlpY+vMdPvFEW4 IgEaHMHpgcLweAX7lxgrXPngAfJELf58r8ZxKjxNrGGE92e6CbDjiS2q2ksSdZ1D DQVyXX7gNpLDRCbCdvvxtT7uyY5MGzAW28RppQnz9QStKeHfjWAJgt6zzgBrABLs UcoJs3YgSgMr2EVehbLGjr6VZuS+5EGlxAZJ7afwDFpor2ERGoqhglczMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO2Of6V6V5Bl0M+q9wIPFbrimEvhMB8GA1UdIwQY MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt N2E5MzY3NTFkYjFiLzEvN1k1X3BYcFhrR1hRejZyM0FnOFZ1dUtZUy1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW5XAMA0G CSqGSIb3DQEBCwUAA4IBAQAfDzC33SVVYu0vYqTyEV2xDZWTOgPhOpso6aOg8hAg maQcK5qEjO0dtsB0AguKcH6k4Nhc1XTKSJYc7D1zmEro2h1WA3IJtN5kPRrUXIW0 qVv1+bzOP4+sbvUz4Ry6ZgarvP3Z84OHbbmxgKGCcir7CDv+ZG3ITfiF8P5nOAwS UhcgTo3Lv331RdGoKkzrDdJAE1Q1T74EVYw+eErxr6u3l9Y1Zm1BaG9GNAS9Wt7g vw0fB+g05t31moFHLX1sIqjWmYmEtBd1uUhofJ6jJSwQ7wUCw/VupoKwOJiXZiQP Ma0563HDxo1I73X+I2Qf5CWKwT7YyCQTGSp9efFMc1MW -----END CERTIFICATE-----Generated at Mon Jan 19 17:05:59 2026 by rpki-client