This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/r7dmA6Cimt2y9DxwybhrZ8RQGZI.roa File: r7dmA6Cimt2y9DxwybhrZ8RQGZI.roa (raw, json) Hash identifier: gakrlzuzHNIrUEQPTssrms796la3N/RETBOOb2DRmlk= Subject key identifier: AF:B7:66:03:A0:A2:9A:DD:B2:F4:3C:70:C9:B8:6B:67:C4:50:19:92 Certificate issuer: /CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51 Certificate serial: 019B77C76438FB5DAB4A8BC8AC4C52AC7BDA Authority key identifier: 96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/r7dmA6Cimt2y9DxwybhrZ8RQGZI.roa Signing time: Thu 01 Jan 2026 04:18:34 +0000 ROA not before: Thu 01 Jan 2026 04:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57897 IP address blocks: 91.236.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:64:38:fb:5d:ab:4a:8b:c8:ac:4c:52:ac:7b:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51 Validity Not Before: Jan 1 04:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afb76603a0a29addb2f43c70c9b86b67c4501992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7f:8b:9e:c5:7e:20:dd:73:e2:ea:cb:aa:69: fb:a3:25:11:d8:b8:ff:fa:fc:05:e9:6d:e0:59:b5: c4:d5:51:bb:39:e7:1f:7b:6e:e2:95:d1:d2:66:6c: b9:a3:7f:00:0b:67:5c:8c:43:0f:ab:55:dd:81:52: 34:93:cf:5f:bb:fb:e8:92:a8:99:72:b8:76:9a:0c: 47:06:be:22:3b:19:79:d6:db:31:9f:41:4c:5c:1b: e7:55:a5:f5:c8:e5:8c:4a:90:09:5a:a8:bb:e4:07: 09:12:af:ef:cb:d2:11:88:cb:4b:31:85:30:65:ec: 69:6c:fb:0a:7a:73:74:cc:13:15:a7:22:5b:65:b3: 05:2c:c2:9c:21:db:44:45:5e:80:b1:1f:d2:c4:1f: 2c:ec:f3:63:be:47:c1:82:64:65:4b:1a:c6:32:57: 57:32:63:26:7d:c2:85:1e:f7:d7:f2:f8:4b:3d:75: 5b:0f:2b:44:9a:f4:28:c8:65:a0:46:60:15:0c:4e: 87:41:f4:67:52:ea:04:94:b4:93:e4:24:a5:3c:58: 5d:6f:8f:70:15:0e:80:0c:c9:29:01:cc:a7:1d:0a: c0:58:8e:f6:0e:a5:17:5b:3f:bd:f8:20:fb:8e:2e: c3:7e:e5:a6:7e:21:3d:f3:e8:9f:22:39:f6:a0:6f: c6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B7:66:03:A0:A2:9A:DD:B2:F4:3C:70:C9:B8:6B:67:C4:50:19:92 X509v3 Authority Key Identifier: keyid:96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/r7dmA6Cimt2y9DxwybhrZ8RQGZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.125.0/24 Signature Algorithm: sha256WithRSAEncryption 83:5b:cc:4b:1a:41:d9:72:03:30:59:a8:7a:e3:eb:36:69:2e: 93:54:1e:10:e2:5c:74:e9:b2:2c:05:c2:bd:cc:3f:c4:38:6c: 64:e5:35:85:ac:a8:66:d7:9e:aa:e2:d6:79:54:66:f3:60:71: de:2d:c5:40:c1:44:1b:dd:c8:75:f9:22:74:28:6b:07:57:61: e8:62:8c:5b:5e:fe:50:44:f7:c9:fd:18:d9:55:a0:b9:58:40: 2e:46:77:50:ee:77:90:1a:97:cd:01:a9:39:c9:8a:49:4a:1d: 9d:5f:5c:5e:7f:2d:3e:5b:74:bb:0b:2a:e6:ac:10:9e:3a:70: 76:85:12:93:e7:41:c8:82:98:62:d8:86:22:fc:b0:88:5e:49: ca:8a:1d:5b:ff:13:da:72:d8:11:4a:ce:d7:e2:2e:4e:9e:b0: 38:48:9c:c4:6c:ef:49:a8:c5:81:15:f8:9a:01:70:f5:b1:8a: 83:a0:f9:8e:78:22:b4:19:d4:83:c2:bf:35:d6:8f:b9:2c:97: af:31:2c:28:9e:47:1b:e8:a0:d8:7d:85:b5:55:02:6b:1b:b7: ba:72:6f:4b:e1:f4:b5:e1:23:ba:b4:35:eb:ed:0a:7c:11:5e: 37:c9:a7:28:14:08:c0:bc:bc:43:a8:0d:af:36:97:0f:12:a0: 62:bb:23:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x2Q4+12rSovIrExSrHvaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YTQ5YjM4NWQzNzM5ZmRkMjQzN2UwYWVmZGYyMjUxY2Q1 ZDJhNTEwHhcNMjYwMTAxMDQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmI3NjYwM2EwYTI5YWRkYjJmNDNjNzBjOWI4NmI2N2M0NTAxOTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3+LnsV+IN1z4urLqmn7oyUR2Lj/ +vwF6W3gWbXE1VG7Oecfe27ildHSZmy5o38AC2dcjEMPq1XdgVI0k89fu/vokqiZ crh2mgxHBr4iOxl51tsxn0FMXBvnVaX1yOWMSpAJWqi75AcJEq/vy9IRiMtLMYUw ZexpbPsKenN0zBMVpyJbZbMFLMKcIdtERV6AsR/SxB8s7PNjvkfBgmRlSxrGMldX MmMmfcKFHvfX8vhLPXVbDytEmvQoyGWgRmAVDE6HQfRnUuoElLST5CSlPFhdb49w FQ6ADMkpAcynHQrAWI72DqUXWz+9+CD7ji7DfuWmfiE98+ifIjn2oG/GqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK+3ZgOgoprdsvQ8cMm4a2fEUBmSMB8GA1UdIwQY MBaAFJakmzhdNzn90kN+Cu/fIlHNXSpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHFTYk9GMDNPZjNTUTM0Szc5OGlVYzFkS2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC85NWYxNDMtZTljZC00NDQ3LWFiZWEt ZmI0ZWFhNTI2MmY3LzEvcjdkbUE2Q2ltdDJ5OUR4d3liaHJaOFJRR1pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC85NWYxNDMtZTljZC00NDQ3LWFiZWEtZmI0ZWFhNTI2MmY3 LzEvbHFTYk9GMDNPZjNTUTM0Szc5OGlVYzFkS2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+x9MA0G CSqGSIb3DQEBCwUAA4IBAQCDW8xLGkHZcgMwWah64+s2aS6TVB4Q4lx06bIsBcK9 zD/EOGxk5TWFrKhm156q4tZ5VGbzYHHeLcVAwUQb3ch1+SJ0KGsHV2HoYoxbXv5Q RPfJ/RjZVaC5WEAuRndQ7neQGpfNAak5yYpJSh2dX1xefy0+W3S7CyrmrBCeOnB2 hRKT50HIgphi2IYi/LCIXknKih1b/xPactgRSs7X4i5OnrA4SJzEbO9JqMWBFfia AXD1sYqDoPmOeCK0GdSDwr811o+5LJevMSwonkcb6KDYfYW1VQJrG7e6cm9L4fS1 4SO6tDXr7Qp8EV43yacoFAjAvLxDqA2vNpcPEqBiuyM3 -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:19 2026 by rpki-client