This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/7meu7s1H44zdKfP25MFBcQbtGHI.roa File: 7meu7s1H44zdKfP25MFBcQbtGHI.roa (raw, json) Hash identifier: WvFf3T5R9dDcoqBxFhAiq7tVRoIpj2LekmR2mNGzL1E= Subject key identifier: EE:67:AE:EE:CD:47:E3:8C:DD:29:F3:F6:E4:C1:41:71:06:ED:18:72 Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019B7CEDCD6BE774556E46803E29D51C2A36 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/7meu7s1H44zdKfP25MFBcQbtGHI.roa Signing time: Fri 02 Jan 2026 04:18:37 +0000 ROA not before: Fri 02 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200017 IP address blocks: 88.80.134.0/24 maxlen: 24 185.58.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:cd:6b:e7:74:55:6e:46:80:3e:29:d5:1c:2a:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Jan 2 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee67aeeecd47e38cdd29f3f6e4c1417106ed1872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c5:91:5f:33:70:a2:06:42:dd:0a:7d:f0:56: 11:5f:65:09:70:19:1d:67:6a:75:ce:2b:dd:f4:c5: f1:2b:1a:37:7d:7e:72:45:75:df:a8:82:ca:68:13: 8a:b5:2b:d6:29:0d:b7:7f:1e:07:53:2c:15:d2:0b: 11:0f:8b:83:ae:91:18:14:f6:82:3f:c8:6e:00:4f: 14:24:72:05:8d:39:f6:d2:80:c2:ac:c9:df:e3:9c: 0b:7e:46:2f:03:16:10:6c:f9:8a:ec:14:f4:54:cc: a4:fc:04:c0:38:97:4f:5d:d3:6d:23:b1:c4:19:0e: f1:87:9e:02:8c:2c:fa:3b:46:6d:db:59:79:6b:95: e5:0a:a9:87:37:43:94:7c:d7:be:55:40:94:05:b1: b1:5b:c9:58:8f:c6:1a:d0:72:67:e6:87:c7:49:b8: 51:f2:4d:63:1f:9c:7c:94:36:00:89:32:68:30:19: 5d:55:28:dd:76:1a:f2:53:fe:10:d8:d8:eb:0e:13: c6:f8:3d:e1:cf:b8:44:a6:26:5f:cb:9e:67:27:70: 74:d0:a6:43:b5:e0:16:55:00:51:a1:d4:40:04:21: a4:3b:23:45:ad:8e:e7:90:8e:dc:95:9e:50:5d:a1: 94:5d:53:5d:64:54:27:ee:f5:01:02:1f:ef:61:26: 23:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:67:AE:EE:CD:47:E3:8C:DD:29:F3:F6:E4:C1:41:71:06:ED:18:72 X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/7meu7s1H44zdKfP25MFBcQbtGHI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.80.134.0/24 185.58.22.0/24 Signature Algorithm: sha256WithRSAEncryption 73:92:8c:ec:ec:ee:13:c8:f9:84:50:43:a3:3d:b9:3e:c0:7a: 16:03:d8:77:b1:39:b6:05:2f:99:67:92:5d:de:c5:eb:b8:e1: 33:11:66:99:6d:65:82:23:a9:9f:16:1a:99:1e:09:1e:02:53: d8:c3:85:0b:61:e2:97:7b:3f:e8:a9:57:1b:82:74:b7:74:d9: 9f:2f:8b:80:41:bf:a3:cb:d9:c2:54:9c:a5:35:9c:4b:8d:9a: 7f:1b:ed:4c:aa:89:a4:4a:f8:29:64:57:28:8f:9f:0a:85:74: 2d:1a:33:a5:95:84:7b:f6:2a:ac:96:02:9c:76:87:84:e7:44: 57:24:d5:c4:d8:4a:3d:76:d2:d3:98:1a:57:66:fc:27:76:e2: e4:4f:d9:6d:d3:11:69:44:a8:85:91:c9:fb:47:5a:04:48:95: 00:f2:4a:c2:bf:37:51:6c:9b:f9:ef:62:8d:fa:26:8a:53:88: 9c:c9:e7:92:93:27:6b:34:c9:e0:c8:26:fd:79:9d:7e:e3:ad: 64:a0:71:6e:a4:c3:a5:e5:c7:b9:4d:2a:ab:1a:c3:b2:2e:6d: 9a:47:7e:84:0d:c9:20:f0:62:40:94:ad:c0:07:22:c0:98:ef: 3c:f1:4d:2d:1a:66:9e:b3:bc:94:dd:e7:c6:41:31:14:95:66: 71:de:ea:34 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87c1r53RVbkaAPinVHCo2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjYwMTAyMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTY3YWVlZWNkNDdlMzhjZGQyOWYzZjZlNGMxNDE3MTA2ZWQxODcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsWRXzNwogZC3Qp98FYRX2UJcBkd Z2p1zivd9MXxKxo3fX5yRXXfqILKaBOKtSvWKQ23fx4HUywV0gsRD4uDrpEYFPaC P8huAE8UJHIFjTn20oDCrMnf45wLfkYvAxYQbPmK7BT0VMyk/ATAOJdPXdNtI7HE GQ7xh54CjCz6O0Zt21l5a5XlCqmHN0OUfNe+VUCUBbGxW8lYj8Ya0HJn5ofHSbhR 8k1jH5x8lDYAiTJoMBldVSjddhryU/4Q2NjrDhPG+D3hz7hEpiZfy55nJ3B00KZD teAWVQBRodRABCGkOyNFrY7nkI7clZ5QXaGUXVNdZFQn7vUBAh/vYSYjXQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFO5nru7NR+OM3Snz9uTBQXEG7RhyMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvN21ldTdzMUg0NHpkS2ZQMjVNRkJjUWJ0R0hJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWFCGAwQA uToWMA0GCSqGSIb3DQEBCwUAA4IBAQBzkozs7O4TyPmEUEOjPbk+wHoWA9h3sTm2 BS+ZZ5Jd3sXruOEzEWaZbWWCI6mfFhqZHgkeAlPYw4ULYeKXez/oqVcbgnS3dNmf L4uAQb+jy9nCVJylNZxLjZp/G+1MqomkSvgpZFcoj58KhXQtGjOllYR79iqslgKc doeE50RXJNXE2Eo9dtLTmBpXZvwnduLkT9lt0xFpRKiFkcn7R1oESJUA8krCvzdR bJv572KN+iaKU4icyeeSkydrNMngyCb9eZ1+461koHFupMOl5ce5TSqrGsOyLm2a R36EDckg8GJAlK3AByLAmO888U0tGmaes7yU3efGQTEUlWZx3uo0 -----END CERTIFICATE-----Generated at Mon Jan 19 14:22:37 2026 by rpki-client