This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/_7yKofbHnJoEbJpKfmaDh_UzpU4.roa File: _7yKofbHnJoEbJpKfmaDh_UzpU4.roa (raw, json) Hash identifier: SGPyBt5E90o9ZLuMZHW0/rutTar66Sv5UUe187RDyyg= Subject key identifier: FF:BC:8A:A1:F6:C7:9C:9A:04:6C:9A:4A:7E:66:83:87:F5:33:A5:4E Certificate issuer: /CN=67dbf31d597746c9a1434706062a40653bc545c3 Certificate serial: 019B7DC945EB4B444424CDEF864DD4916003 Authority key identifier: 67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/_7yKofbHnJoEbJpKfmaDh_UzpU4.roa Signing time: Fri 02 Jan 2026 08:18:21 +0000 ROA not before: Fri 02 Jan 2026 08:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207560 IP address blocks: 185.225.226.0/24 maxlen: 24 185.237.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:45:eb:4b:44:44:24:cd:ef:86:4d:d4:91:60:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67dbf31d597746c9a1434706062a40653bc545c3 Validity Not Before: Jan 2 08:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffbc8aa1f6c79c9a046c9a4a7e668387f533a54e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:04:59:8d:86:de:35:68:60:d5:17:91:4c:ad: 89:02:4f:1f:23:f6:16:c3:3d:d5:8f:68:e2:f1:21: 11:41:7c:50:4b:f4:50:4f:fe:14:7c:3e:f8:3d:96: e7:b9:ca:e2:f6:75:ed:9c:67:f9:07:3b:21:a2:92: a1:70:de:f1:ed:43:a5:e4:16:ad:6f:72:53:1c:9c: d1:5c:54:d0:26:70:a2:1d:9e:f2:88:29:7d:03:ad: ff:b9:14:c9:8b:78:42:7e:75:ed:88:30:12:a3:59: 65:e1:3a:f3:2d:31:b9:3d:be:c9:25:36:18:33:da: 24:f3:87:d3:18:eb:44:36:de:6a:22:17:93:56:40: 03:37:9e:77:b9:1a:64:fa:7b:36:05:75:26:d4:d8: 81:03:56:a1:99:51:54:f1:26:62:c0:e5:66:bd:5d: 28:46:cd:48:89:52:6d:88:f6:0d:76:70:32:57:52: e6:53:db:2b:66:84:a3:3e:71:a2:2e:45:2d:21:fa: 50:05:d0:f0:5d:18:59:fc:a3:b7:77:aa:6b:8d:82: af:db:10:74:79:51:91:ec:8d:49:a5:63:11:52:b7: 17:8c:01:4e:2d:6d:4b:58:5f:fd:62:13:7a:8d:af: d1:28:ed:4b:48:7c:66:a7:12:2a:3d:e0:0c:fc:ff: 1e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:BC:8A:A1:F6:C7:9C:9A:04:6C:9A:4A:7E:66:83:87:F5:33:A5:4E X509v3 Authority Key Identifier: keyid:67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/_7yKofbHnJoEbJpKfmaDh_UzpU4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.226.0/24 185.237.166.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:9a:0d:e9:e5:f6:60:5b:96:f4:4f:08:0d:9c:04:15:d1:92: 59:ff:89:19:42:d7:30:0d:a1:79:a7:ef:78:af:6d:69:78:cf: af:84:a0:36:35:5d:bf:e4:fe:5d:a2:54:33:65:5b:06:a8:bf: 50:bd:5b:63:29:81:35:71:7f:96:fb:24:7c:29:5c:d2:87:9c: f8:96:18:6e:20:2c:96:8e:0a:fb:62:9d:23:95:20:5c:7e:49: eb:d1:a3:5a:1e:73:91:86:68:d2:fd:43:66:6a:c4:fc:28:b3: 75:b2:f8:8d:cb:f1:4a:c2:5a:1f:ee:b3:86:d4:8b:a2:9f:c0: a3:79:a6:f0:50:f8:aa:ec:4e:27:40:2f:90:39:99:a6:15:38: 54:59:57:1f:e9:a0:10:4a:98:04:cf:ec:ca:0a:5b:02:69:d3: 3e:1f:8f:40:b8:1f:2b:22:71:f5:fc:d3:ea:73:37:c8:79:60: 9e:ad:28:a8:6c:bf:50:66:0c:62:f8:56:96:4b:96:03:ce:8e: 12:ee:9d:d5:9f:7f:ec:41:7f:38:e6:4d:1e:f2:e9:26:5f:61: a6:a0:f0:67:67:6e:32:4e:89:b7:1c:b6:5a:e5:79:69:ae:e5: 83:7a:cf:3a:c0:c0:0c:e8:d6:dd:d5:be:7a:1e:f4:83:88:f0: d6:9a:be:ce -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yUXrS0REJM3vhk3UkWADMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZGJmMzFkNTk3NzQ2YzlhMTQzNDcwNjA2MmE0MDY1M2Jj NTQ1YzMwHhcNMjYwMTAyMDgxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmJjOGFhMWY2Yzc5YzlhMDQ2YzlhNGE3ZTY2ODM4N2Y1MzNhNTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogRZjYbeNWhg1ReRTK2JAk8fI/YW wz3Vj2ji8SERQXxQS/RQT/4UfD74PZbnucri9nXtnGf5BzshopKhcN7x7UOl5Bat b3JTHJzRXFTQJnCiHZ7yiCl9A63/uRTJi3hCfnXtiDASo1ll4TrzLTG5Pb7JJTYY M9ok84fTGOtENt5qIheTVkADN553uRpk+ns2BXUm1NiBA1ahmVFU8SZiwOVmvV0o Rs1IiVJtiPYNdnAyV1LmU9srZoSjPnGiLkUtIfpQBdDwXRhZ/KO3d6prjYKv2xB0 eVGR7I1JpWMRUrcXjAFOLW1LWF/9YhN6ja/RKO1LSHxmpxIqPeAM/P8eUQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP+8iqH2x5yaBGyaSn5mg4f1M6VOMB8GA1UdIwQY MBaAFGfb8x1Zd0bJoUNHBgYqQGU7xUXDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjl2ekhWbDNSc21oUTBjR0JpcEFaVHZGUmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lY2RiMDktZDc4Ni00MjljLWFiMjQt MmZiM2RiMTRlN2ExLzEvXzd5S29mYkhuSm9FYkpwS2ZtYURoX1V6cFU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9lY2RiMDktZDc4Ni00MjljLWFiMjQtMmZiM2RiMTRlN2Ex LzEvWjl2ekhWbDNSc21oUTBjR0JpcEFaVHZGUmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAueHiAwQA ue2mMA0GCSqGSIb3DQEBCwUAA4IBAQBcmg3p5fZgW5b0TwgNnAQV0ZJZ/4kZQtcw DaF5p+94r21peM+vhKA2NV2/5P5dolQzZVsGqL9QvVtjKYE1cX+W+yR8KVzSh5z4 lhhuICyWjgr7Yp0jlSBcfknr0aNaHnORhmjS/UNmasT8KLN1sviNy/FKwlof7rOG 1Iuin8CjeabwUPiq7E4nQC+QOZmmFThUWVcf6aAQSpgEz+zKClsCadM+H49AuB8r InH1/NPqczfIeWCerSiobL9QZgxi+FaWS5YDzo4S7p3Vn3/sQX845k0e8ukmX2Gm oPBnZ24yTom3HLZa5XlpruWDes86wMAM6Nbd1b56HvSDiPDWmr7O -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:40 2026 by rpki-client