This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/N7EYzGEcYA36m-xSvdYRWYsCcUE.roa File: N7EYzGEcYA36m-xSvdYRWYsCcUE.roa (raw, json) Hash identifier: WxQmK8/jxnVfJLUqxdBcxCVr+Pgy+YeHJkLPADfkzds= Subject key identifier: 37:B1:18:CC:61:1C:60:0D:FA:9B:EC:52:BD:D6:11:59:8B:02:71:41 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 019B76EB8471992DEBCD3E3FB4C93920C9D5 Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/N7EYzGEcYA36m-xSvdYRWYsCcUE.roa Signing time: Thu 01 Jan 2026 00:18:24 +0000 ROA not before: Thu 01 Jan 2026 00:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49367 IP address blocks: 185.213.20.0/24 maxlen: 24 185.213.21.0/24 maxlen: 24 2a11:840:23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:84:71:99:2d:eb:cd:3e:3f:b4:c9:39:20:c9:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Jan 1 00:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37b118cc611c600dfa9bec52bdd611598b027141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ce:58:80:68:98:2b:bd:8f:d1:d2:c9:69:39: 8d:f8:fd:0b:20:5b:da:de:61:86:f0:09:34:d9:15: 79:fb:8f:ed:ea:da:ae:d4:d0:a6:e0:82:79:ea:cf: df:12:30:55:10:55:7b:7b:5c:fc:80:59:4c:37:f1: ab:f1:34:93:69:d0:4a:ac:e4:ff:60:ef:b9:22:d4: c8:2a:bf:a9:ce:a8:dd:fc:8c:75:d2:d7:9c:1a:a4: 30:d9:22:54:1c:e5:58:75:73:c8:14:f2:72:cc:ce: 92:2c:a4:27:ab:91:65:30:d3:f0:5e:76:2d:6e:5b: 3d:cb:f9:67:16:55:3c:30:2a:ee:df:bb:cb:09:4c: fa:e4:40:3d:21:fa:2e:b6:ee:87:78:7c:5b:0e:09: 05:f0:3c:a1:48:96:20:5f:17:31:a1:45:ca:71:4b: 9f:09:b1:03:dc:ca:19:e9:74:78:04:7c:2e:53:22: cd:f3:70:98:6b:eb:6f:d5:6b:ed:3c:16:27:75:7f: d2:11:5e:9f:93:79:f7:b0:ba:04:84:1c:22:9a:84: 25:18:99:24:96:f7:c7:90:11:46:fc:7b:c7:b0:e2: 0e:7e:16:16:a5:b9:05:20:ce:f8:5a:ec:a5:b8:87: f9:1b:df:a4:ec:9d:4f:91:6e:fa:69:5b:a4:91:a5: da:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B1:18:CC:61:1C:60:0D:FA:9B:EC:52:BD:D6:11:59:8B:02:71:41 X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/N7EYzGEcYA36m-xSvdYRWYsCcUE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.20.0/23 IPv6: 2a11:840:23::/48 Signature Algorithm: sha256WithRSAEncryption 41:1f:1a:7b:e3:37:57:ef:98:06:5e:72:0b:09:9c:1d:25:c4: 13:22:bb:f4:01:62:ff:24:a3:3f:eb:f8:34:74:72:ed:19:dc: 8a:06:cb:9c:66:90:27:1d:ee:36:63:e5:52:0a:81:fd:66:8e: 11:37:e9:02:7e:3e:27:73:e4:fa:2a:25:a6:9b:a5:38:5c:46: e8:d3:59:9f:a0:f9:42:cf:80:36:87:bc:9b:5f:54:e1:41:a3: d4:f7:8f:33:2f:9c:79:d2:fe:73:36:45:79:26:2c:7b:44:08: f6:01:97:35:b7:1b:27:06:2f:62:58:cf:d8:5f:8d:82:06:b2: 1e:d9:bd:49:80:b1:d5:e2:4d:5e:43:df:0c:60:dc:74:8c:46: a0:d8:1b:28:27:db:f2:fd:2d:03:2a:e4:9e:40:b8:38:59:88: 2a:54:b1:0f:e7:2f:4a:8a:6f:de:ba:7c:50:a2:57:8e:f8:03: a6:8f:41:4c:38:46:62:34:23:70:94:2f:6b:7d:8f:10:cb:17: 23:35:3f:30:a5:be:85:b9:c4:f7:34:ce:55:5b:5a:2c:42:71: ce:ac:59:b9:66:eb:1c:9e:43:23:4c:6f:fd:a0:0f:7d:39:e4: 7e:1f:27:35:c8:a1:c5:94:34:9e:e1:dc:66:9e:9e:4a:48:85: 0d:58:f6:d9 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt264RxmS3rzT4/tMk5IMnVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjYwMTAxMDAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2IxMThjYzYxMWM2MDBkZmE5YmVjNTJiZGQ2MTE1OThiMDI3MTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM5YgGiYK72P0dLJaTmN+P0LIFva 3mGG8Ak02RV5+4/t6tqu1NCm4IJ56s/fEjBVEFV7e1z8gFlMN/Gr8TSTadBKrOT/ YO+5ItTIKr+pzqjd/Ix10tecGqQw2SJUHOVYdXPIFPJyzM6SLKQnq5FlMNPwXnYt bls9y/lnFlU8MCru37vLCUz65EA9Ifoutu6HeHxbDgkF8DyhSJYgXxcxoUXKcUuf CbED3MoZ6XR4BHwuUyLN83CYa+tv1WvtPBYndX/SEV6fk3n3sLoEhBwimoQlGJkk lvfHkBFG/HvHsOIOfhYWpbkFIM74WuyluIf5G9+k7J1PkW76aVukkaXaGQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDexGMxhHGAN+pvsUr3WEVmLAnFBMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvTjdFWXpHRWNZQTM2bS14U3ZkWVJXWXNDY1VFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBudUUMA8E AgACMAkDBwAqEQhAACMwDQYJKoZIhvcNAQELBQADggEBAEEfGnvjN1fvmAZecgsJ nB0lxBMiu/QBYv8koz/r+DR0cu0Z3IoGy5xmkCcd7jZj5VIKgf1mjhE36QJ+Pidz 5PoqJaabpThcRujTWZ+g+ULPgDaHvJtfVOFBo9T3jzMvnHnS/nM2RXkmLHtECPYB lzW3GycGL2JYz9hfjYIGsh7ZvUmAsdXiTV5D3wxg3HSMRqDYGygn2/L9LQMq5J5A uDhZiCpUsQ/nL0qKb966fFCiV474A6aPQUw4RmI0I3CUL2t9jxDLFyM1PzClvoW5 xPc0zlVbWixCcc6sWblm6xyeQyNMb/2gD3055H4fJzXIocWUNJ7h3GaenkpIhQ1Y 9tk= -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:55 2026 by rpki-client