This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/7r-OTqFmWd7Sf0hWuwVz9tkClfo.roa File: 7r-OTqFmWd7Sf0hWuwVz9tkClfo.roa (raw, json) Hash identifier: +HrdZrIW2kmtsCJtDgSgLCvs15znHURhEapKmWsbkfA= Subject key identifier: EE:BF:8E:4E:A1:66:59:DE:D2:7F:48:56:BB:05:73:F6:D9:02:95:FA Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Certificate serial: 019B7AC908EE03DE1B06780782F5549AAAE6 Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/7r-OTqFmWd7Sf0hWuwVz9tkClfo.roa Signing time: Thu 01 Jan 2026 18:19:13 +0000 ROA not before: Thu 01 Jan 2026 18:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215540 IP address blocks: 31.129.22.0/24 maxlen: 24 45.95.232.0/24 maxlen: 24 45.95.233.0/24 maxlen: 24 77.83.116.0/24 maxlen: 24 89.191.232.0/24 maxlen: 24 92.118.112.0/24 maxlen: 24 141.98.233.0/24 maxlen: 24 141.98.234.0/24 maxlen: 24 185.247.184.0/24 maxlen: 24 194.28.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:08:ee:03:de:1b:06:78:07:82:f5:54:9a:aa:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Validity Not Before: Jan 1 18:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eebf8e4ea16659ded27f4856bb0573f6d90295fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2a:24:7a:fc:45:98:f4:85:48:35:aa:de:46: 01:58:c8:1e:d2:43:7b:5e:d8:24:90:23:ba:42:fa: 5c:20:f0:22:e0:c6:a1:8a:4c:7f:07:bc:4c:f5:2f: 2e:67:ce:3e:05:88:80:04:49:65:85:37:34:ef:42: 74:c8:70:5d:4e:c7:0a:a5:61:be:0b:8c:08:d7:59: b0:79:46:57:71:da:a6:bd:88:4a:52:77:d7:02:d8: 30:6d:da:78:7b:61:b1:b2:ad:92:6a:d5:88:1f:35: 3b:8a:2b:66:2a:c8:21:19:e1:72:e3:90:b8:36:af: f8:16:c3:74:1e:f2:5e:65:3c:da:0c:a9:0d:19:20: bf:15:b6:e0:f5:c7:a1:d0:d4:2c:f9:01:85:04:2b: d3:e4:63:cb:e1:09:05:d5:3c:97:ce:4f:d0:f5:92: df:ab:e3:f1:6c:48:eb:24:c0:97:30:fe:cf:ef:ba: a7:e8:ce:47:30:3a:4a:36:86:5c:8e:fe:a3:e2:72: 1f:1c:61:b5:ea:1a:e9:84:67:6e:a2:9c:d8:8f:74: d2:e8:e2:63:2e:52:71:15:b1:41:bd:3d:aa:9b:f7: 18:73:63:54:6d:a5:55:23:eb:5b:1d:70:c7:49:e8: e5:03:7d:2c:48:06:1f:b2:af:72:87:7b:b3:9e:4a: d0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:BF:8E:4E:A1:66:59:DE:D2:7F:48:56:BB:05:73:F6:D9:02:95:FA X509v3 Authority Key Identifier: keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/7r-OTqFmWd7Sf0hWuwVz9tkClfo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.129.22.0/24 45.95.232.0/23 77.83.116.0/24 89.191.232.0/24 92.118.112.0/24 141.98.233.0-141.98.234.255 185.247.184.0/24 194.28.192.0/24 Signature Algorithm: sha256WithRSAEncryption 68:05:64:de:d2:41:e1:c2:93:34:c9:e5:1b:9c:34:f1:8d:9b: 2b:00:f0:c7:c9:9c:06:4f:e7:56:e1:92:3c:db:9e:6a:88:49: 73:23:df:c6:12:c5:01:b4:1f:2a:c7:6e:5e:66:2c:c0:b8:a7: c3:30:0e:44:ec:90:27:a8:41:67:45:5d:52:c2:bd:7c:0a:94: 46:53:12:43:c7:8c:23:9e:cc:33:a7:08:fe:ea:cb:8c:37:b5: 1b:a6:a5:38:52:a4:5f:3f:f8:12:a6:3a:35:d1:df:11:bc:96: 89:5d:a3:36:04:d2:d6:5a:0b:5c:08:40:ea:84:6b:91:fc:8d: 53:07:1b:7d:de:d5:d8:04:45:87:5a:5e:ab:9a:6b:89:5b:c7: c8:8e:37:e9:15:76:34:33:1b:c8:73:c7:c8:ca:8c:fb:8c:63: 79:0b:44:69:d5:9b:e7:d6:ff:34:af:80:76:cb:96:e8:ae:1d: d6:89:0b:89:0a:41:94:36:33:dd:2d:ff:99:07:d7:8e:b2:c9: 9a:ba:6f:ca:1c:38:e4:d8:7a:23:18:c2:0a:c8:52:4b:82:19: d8:07:74:4c:b4:00:86:e3:b1:34:ef:eb:28:df:3b:59:d1:44: 21:68:32:28:f2:c5:0c:79:f8:bc:1c:93:bd:fc:a2:97:01:4f: 27:c7:2f:ea -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt6yQjuA94bBngHgvVUmqrmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2 NGIyMGYwHhcNMjYwMTAxMTgxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWJmOGU0ZWExNjY1OWRlZDI3ZjQ4NTZiYjA1NzNmNmQ5MDI5NWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyokevxFmPSFSDWq3kYBWMge0kN7 XtgkkCO6QvpcIPAi4Mahikx/B7xM9S8uZ84+BYiABEllhTc070J0yHBdTscKpWG+ C4wI11mweUZXcdqmvYhKUnfXAtgwbdp4e2Gxsq2SatWIHzU7iitmKsghGeFy45C4 Nq/4FsN0HvJeZTzaDKkNGSC/Fbbg9ceh0NQs+QGFBCvT5GPL4QkF1TyXzk/Q9ZLf q+PxbEjrJMCXMP7P77qn6M5HMDpKNoZcjv6j4nIfHGG16hrphGduopzYj3TS6OJj LlJxFbFBvT2qm/cYc2NUbaVVI+tbHXDHSejlA30sSAYfsq9yh3uznkrQ+QIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFO6/jk6hZlne0n9IVrsFc/bZApX6MB8GA1UdIwQY MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct NDkwNTI0M2JjODI4LzEvN3ItT1RxRm1XZDdTZjBoV3V3Vno5dGtDbGZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4 LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAH4EWAwQB LV/oAwQATVN0AwQAWb/oAwQAXHZwMAwDBACNYukDBACNYuoDBAC597gDBADCHMAw DQYJKoZIhvcNAQELBQADggEBAGgFZN7SQeHCkzTJ5RucNPGNmysA8MfJnAZP51bh kjzbnmqISXMj38YSxQG0HyrHbl5mLMC4p8MwDkTskCeoQWdFXVLCvXwKlEZTEkPH jCOezDOnCP7qy4w3tRumpThSpF8/+BKmOjXR3xG8loldozYE0tZaC1wIQOqEa5H8 jVMHG33e1dgERYdaXquaa4lbx8iON+kVdjQzG8hzx8jKjPuMY3kLRGnVm+fW/zSv gHbLluiuHdaJC4kKQZQ2M90t/5kH146yyZq6b8ocOOTYeiMYwgrIUkuCGdgHdEy0 AIbjsTTv6yjfO1nRRCFoMijyxQx5+Lwck738opcBTyfHL+o= -----END CERTIFICATE-----Generated at Wed Jan 21 14:11:46 2026 by rpki-client