This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/7p2gKAHI0KadZksvxWzRGB1iB8g.roa File: 7p2gKAHI0KadZksvxWzRGB1iB8g.roa (raw, json) Hash identifier: rCQSaVA3Y3nCZOYBasM7SntiluDtvkssVDLJ9FgZ0z0= Subject key identifier: EE:9D:A0:28:01:C8:D0:A6:9D:66:4B:2F:C5:6C:D1:18:1D:62:07:C8 Certificate issuer: /CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Certificate serial: 019B7E386B9883535A93C0F705ED1515D332 Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/7p2gKAHI0KadZksvxWzRGB1iB8g.roa Signing time: Fri 02 Jan 2026 10:19:45 +0000 ROA not before: Fri 02 Jan 2026 10:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211439 IP address blocks: 91.188.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:6b:98:83:53:5a:93:c0:f7:05:ed:15:15:d3:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Validity Not Before: Jan 2 10:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee9da02801c8d0a69d664b2fc56cd1181d6207c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5d:3d:47:b4:1e:38:22:1f:92:d4:96:ea:65: 92:33:05:65:94:59:a8:c1:b4:1c:80:73:23:30:10: 38:2e:ee:37:8b:a9:70:cc:66:1f:37:50:86:e2:33: 4e:96:6d:53:ba:fc:e0:2a:ae:82:59:75:10:88:e1: e3:56:dd:c0:f2:1b:e8:fc:ca:cf:d5:49:a1:f3:96: f6:d7:78:41:d7:bc:39:6f:c1:da:13:4d:e0:5a:35: dd:47:3c:fb:42:d7:10:b2:2f:23:ab:aa:3d:be:eb: 9f:8b:68:4e:bf:f9:df:65:4c:3b:3d:3d:5f:73:ea: e4:4d:3a:f0:d3:37:63:97:02:b5:04:88:8c:b0:6e: 85:de:26:0e:b0:24:00:76:d9:08:3e:e0:4a:a1:84: 6b:d8:4b:13:34:78:db:58:62:cf:0c:31:4f:8e:fa: 20:1f:01:90:0a:91:d1:70:22:f9:4c:03:77:06:89: b8:17:a0:3d:56:d2:34:5f:a7:95:d3:e4:de:2e:47: 26:ec:83:cb:e3:c6:59:41:44:d7:fd:52:5c:24:1a: 01:48:54:25:2d:5a:1e:5a:98:e6:32:cf:0e:4e:7f: 11:0d:bf:20:7d:e3:d7:45:37:95:14:05:85:88:bb: 19:fb:11:2c:bb:19:5c:05:b6:86:55:2a:31:14:54: 4f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9D:A0:28:01:C8:D0:A6:9D:66:4B:2F:C5:6C:D1:18:1D:62:07:C8 X509v3 Authority Key Identifier: keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/7p2gKAHI0KadZksvxWzRGB1iB8g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.188.252.0/24 Signature Algorithm: sha256WithRSAEncryption 52:c3:9f:47:dc:20:e4:e6:ef:4f:11:66:b3:a9:e6:a7:f3:b0: c3:6c:9f:a4:51:7e:f1:77:ae:ed:38:cc:fd:4c:3a:a4:a1:58: c9:2d:ee:37:a9:ef:cb:84:7a:1b:fd:d4:52:f0:01:50:c6:b9: c5:0d:bb:18:a4:d6:e0:16:1a:30:10:02:39:3a:28:ea:3d:19: 57:6b:cf:fc:18:73:45:95:d4:a8:d7:2d:4a:23:c2:58:af:3e: ff:fe:8a:fa:be:4a:fd:1c:cb:a4:2a:e8:a3:04:0e:8f:d6:16: 52:38:12:0d:7f:3a:a8:18:21:15:26:84:fc:cf:ec:d9:44:4c: a0:d2:d0:41:5a:f5:5b:82:3b:64:46:16:2a:d3:d6:42:b5:ca: b0:e2:0d:91:e8:35:7c:e1:36:44:53:88:bc:f8:e1:72:6c:5b: 08:e4:35:40:4b:40:43:72:e3:76:d4:37:4f:26:e5:ab:e7:12: 84:96:70:42:23:ba:58:e8:2f:a7:14:3d:0c:42:6c:01:2b:ba: 2b:9a:52:b8:38:68:11:9c:06:fe:0c:3b:53:4c:d6:69:21:0d: bd:8b:b0:f1:9e:dd:cc:50:5f:6e:67:73:d1:80:ec:e1:f2:f4: 38:c4:b7:36:09:0e:38:e9:27:04:0f:a4:08:8e:ac:be:ae:eb: 18:29:b2:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OGuYg1Nak8D3Be0VFdMyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTNiZGU5NDZhZTkzNmQzY2FjYzEzNmE1ZjMyMzllZGYy NDMxZjQwHhcNMjYwMTAyMTAxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTlkYTAyODAxYzhkMGE2OWQ2NjRiMmZjNTZjZDExODFkNjIwN2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt109R7QeOCIfktSW6mWSMwVllFmo wbQcgHMjMBA4Lu43i6lwzGYfN1CG4jNOlm1TuvzgKq6CWXUQiOHjVt3A8hvo/MrP 1Umh85b213hB17w5b8HaE03gWjXdRzz7QtcQsi8jq6o9vuufi2hOv/nfZUw7PT1f c+rkTTrw0zdjlwK1BIiMsG6F3iYOsCQAdtkIPuBKoYRr2EsTNHjbWGLPDDFPjvog HwGQCpHRcCL5TAN3Bom4F6A9VtI0X6eV0+TeLkcm7IPL48ZZQUTX/VJcJBoBSFQl LVoeWpjmMs8OTn8RDb8gfePXRTeVFAWFiLsZ+xEsuxlcBbaGVSoxFFRPCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO6doCgByNCmnWZLL8Vs0RgdYgfIMB8GA1UdIwQY MBaAFCeTvelGrpNtPKzBNqXzI57fJDH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2Et OTJjM2JmNzRhOTdiLzEvN3AyZ0tBSEkwS2FkWmtzdnhXelJHQjFpQjhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2EtOTJjM2JmNzRhOTdi LzEvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7z8MA0G CSqGSIb3DQEBCwUAA4IBAQBSw59H3CDk5u9PEWazqean87DDbJ+kUX7xd67tOMz9 TDqkoVjJLe43qe/LhHob/dRS8AFQxrnFDbsYpNbgFhowEAI5OijqPRlXa8/8GHNF ldSo1y1KI8JYrz7//or6vkr9HMukKuijBA6P1hZSOBINfzqoGCEVJoT8z+zZREyg 0tBBWvVbgjtkRhYq09ZCtcqw4g2R6DV84TZEU4i8+OFybFsI5DVAS0BDcuN21DdP JuWr5xKElnBCI7pY6C+nFD0MQmwBK7ormlK4OGgRnAb+DDtTTNZpIQ29i7Dxnt3M UF9uZ3PRgOzh8vQ4xLc2CQ446ScED6QIjqy+rusYKbIF -----END CERTIFICATE-----Generated at Mon Jan 19 17:08:27 2026 by rpki-client