This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/7dEOiIA8_9zh3xckJYupQMCdciI.roa File: 7dEOiIA8_9zh3xckJYupQMCdciI.roa (raw, json) Hash identifier: Tjdlo0qqbCRgS4I5Nkc+cC8kBHitGngl1heiUQSaGXc= Subject key identifier: ED:D1:0E:88:80:3C:FF:DC:E1:DF:17:24:25:8B:A9:40:C0:9D:72:22 Certificate issuer: /CN=509f391f29d92078ba6e2c76faa2f8ae947343e6 Certificate serial: 019B7F838DA66294DD330E908471F8C1CC23 Authority key identifier: 50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/7dEOiIA8_9zh3xckJYupQMCdciI.roa Signing time: Fri 02 Jan 2026 16:21:26 +0000 ROA not before: Fri 02 Jan 2026 16:21:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203568 IP address blocks: 92.243.76.0/22 maxlen: 22 185.130.156.0/22 maxlen: 22 185.130.156.0/24 maxlen: 24 185.214.220.0/22 maxlen: 22 185.214.220.0/24 maxlen: 24 2a07:6a80::/29 maxlen: 29 2a07:6a82::/31 maxlen: 31 2a07:6a86::/32 maxlen: 32 2a0d:d5c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:8d:a6:62:94:dd:33:0e:90:84:71:f8:c1:cc:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509f391f29d92078ba6e2c76faa2f8ae947343e6 Validity Not Before: Jan 2 16:21:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edd10e88803cffdce1df1724258ba940c09d7222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ba:74:d3:3d:93:b7:5f:c9:c2:b9:a3:60:a9: bf:f7:88:be:22:8a:a8:1e:bf:ef:04:fb:7c:50:61: bf:0d:a7:30:50:a3:bf:bc:71:95:18:e6:a3:6d:83: 43:c0:f5:80:09:f9:cb:58:1d:96:ec:37:83:74:94: 60:7f:8e:14:f7:96:a9:a3:6e:0f:04:da:93:f2:22: 0f:8e:ae:71:bb:ad:45:14:4a:b5:df:12:80:db:63: 37:68:44:ea:5f:29:45:dc:e4:2d:9c:8e:ff:15:a6: 17:9e:d9:65:0b:0a:72:de:b2:5b:74:f9:90:b3:dd: 58:bd:7a:99:b9:b8:06:c7:ce:4e:a7:c9:65:79:92: 88:b8:f0:b1:fd:67:99:0a:0e:41:05:c3:34:5d:07: 65:a2:13:78:79:25:6a:2b:44:57:fc:d3:38:f9:c8: b4:eb:ea:bf:2b:65:f7:39:76:7c:c3:ff:70:3e:17: 0b:1d:89:e6:61:55:49:f2:51:57:cb:98:f4:33:21: c3:e4:a1:ca:02:84:37:79:65:24:9f:64:7f:7f:6d: c6:e3:b7:41:c0:14:e8:c7:af:c0:30:6f:99:f5:32: 5a:d4:7b:00:5b:70:06:f8:79:c4:9c:3e:ae:89:f9: f4:f9:7d:38:7e:17:ae:e7:3d:e5:81:e9:1b:8b:c9: 94:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D1:0E:88:80:3C:FF:DC:E1:DF:17:24:25:8B:A9:40:C0:9D:72:22 X509v3 Authority Key Identifier: keyid:50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/7dEOiIA8_9zh3xckJYupQMCdciI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.243.76.0/22 185.130.156.0/22 185.214.220.0/22 IPv6: 2a07:6a80::/29 2a0d:d5c0::/29 Signature Algorithm: sha256WithRSAEncryption 3e:b8:21:d3:90:b5:b6:dd:3a:44:41:f1:7c:3f:f9:cd:42:72: 08:f4:aa:23:15:86:9b:74:63:f2:03:01:9d:5b:39:1e:c9:19: 0d:a7:34:76:5c:e8:f2:67:20:3b:c3:61:bc:f4:e8:a9:7d:b9: c9:01:09:b5:e7:f9:5d:66:51:53:89:ac:f8:e6:d5:a5:95:87: 40:39:f1:52:00:83:fc:2a:1e:db:2d:ba:01:a9:1e:6c:c4:61: 8b:6f:6b:62:d2:7c:5b:20:4c:be:a7:7d:0b:84:58:ef:02:4f: ab:45:42:4a:6e:5f:25:61:57:18:0f:c5:45:70:0e:c9:a5:41: 0d:69:57:ad:03:16:dc:f2:da:96:18:0e:9e:e3:b8:23:ae:4a: 8b:16:70:cd:14:db:e6:b6:6d:d9:68:03:85:c1:41:85:8d:94: 70:c1:45:51:24:4e:30:f7:af:a0:38:77:a2:e5:c5:df:15:7a: 70:c9:2c:c9:27:aa:ab:d4:b3:99:49:7a:ad:29:83:45:1e:b0: 7e:41:11:ec:33:07:09:3b:fa:6b:32:0e:9b:2a:b6:d0:ac:6a: 58:e7:78:34:18:0f:51:35:4b:97:3e:04:23:9b:6c:52:64:55: dc:fa:e0:1d:f6:5c:f8:ae:85:62:b0:e0:31:09:42:4c:05:31: 77:08:bb:dd -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt/g42mYpTdMw6QhHH4wcwjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOWYzOTFmMjlkOTIwNzhiYTZlMmM3NmZhYTJmOGFlOTQ3 MzQzZTYwHhcNMjYwMTAyMTYyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGQxMGU4ODgwM2NmZmRjZTFkZjE3MjQyNThiYTk0MGMwOWQ3MjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrp00z2Tt1/JwrmjYKm/94i+Ioqo Hr/vBPt8UGG/DacwUKO/vHGVGOajbYNDwPWACfnLWB2W7DeDdJRgf44U95apo24P BNqT8iIPjq5xu61FFEq13xKA22M3aETqXylF3OQtnI7/FaYXntllCwpy3rJbdPmQ s91YvXqZubgGx85Op8lleZKIuPCx/WeZCg5BBcM0XQdlohN4eSVqK0RX/NM4+ci0 6+q/K2X3OXZ8w/9wPhcLHYnmYVVJ8lFXy5j0MyHD5KHKAoQ3eWUkn2R/f23G47dB wBTox6/AMG+Z9TJa1HsAW3AG+HnEnD6uifn0+X04fheu5z3lgekbi8mUdQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFO3RDoiAPP/c4d8XJCWLqUDAnXIiMB8GA1UdIwQY MBaAFFCfOR8p2SB4um4sdvqi+K6Uc0PmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUo4NUh5blpJSGk2Yml4Mi1xTDRycFJ6US1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9kNWRkMWEtN2I1OS00NDM1LWFiZGYt MjhkMGYyMDJlMzZkLzEvN2RFT2lJQThfOXpoM3hja0pZdXBRTUNkY2lJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9kNWRkMWEtN2I1OS00NDM1LWFiZGYtMjhkMGYyMDJlMzZk LzEvVUo4NUh5blpJSGk2Yml4Mi1xTDRycFJ6US1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCXPNMAwQC uYKcAwQCudbcMBQEAgACMA4DBQMqB2qAAwUDKg3VwDANBgkqhkiG9w0BAQsFAAOC AQEAPrgh05C1tt06REHxfD/5zUJyCPSqIxWGm3Rj8gMBnVs5HskZDac0dlzo8mcg O8NhvPToqX25yQEJtef5XWZRU4ms+ObVpZWHQDnxUgCD/Coe2y26AakebMRhi29r YtJ8WyBMvqd9C4RY7wJPq0VCSm5fJWFXGA/FRXAOyaVBDWlXrQMW3PLalhgOnuO4 I65KixZwzRTb5rZt2WgDhcFBhY2UcMFFUSROMPevoDh3ouXF3xV6cMksySeqq9Sz mUl6rSmDRR6wfkER7DMHCTv6azIOmyq20KxqWOd4NBgPUTVLlz4EI5tsUmRV3Prg HfZc+K6FYrDgMQlCTAUxdwi73Q== -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:33 2026 by rpki-client