This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/7SVxOyfDTdVmUsWmgURrDRQqatM.roa File: 7SVxOyfDTdVmUsWmgURrDRQqatM.roa (raw, json) Hash identifier: kbRt8SjM7r5zHztQmiuG8W05HbVb928re2uT+S2QpLY= Subject key identifier: ED:25:71:3B:27:C3:4D:D5:66:52:C5:A6:81:44:6B:0D:14:2A:6A:D3 Certificate issuer: /CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df Certificate serial: 019B7BA3B530FD774F013B7ACA923B8D2912 Authority key identifier: 2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/7SVxOyfDTdVmUsWmgURrDRQqatM.roa Signing time: Thu 01 Jan 2026 22:18:04 +0000 ROA not before: Thu 01 Jan 2026 22:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16220 IP address blocks: 89.38.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:b5:30:fd:77:4f:01:3b:7a:ca:92:3b:8d:29:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df Validity Not Before: Jan 1 22:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed25713b27c34dd56652c5a681446b0d142a6ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e3:bb:a2:09:10:11:a9:44:55:64:15:a2:cc: 3d:b2:60:f2:dd:b1:c7:95:5c:75:6c:ba:42:99:4a: db:87:7f:1a:18:fc:dd:c3:34:c9:50:03:cb:ba:4f: 15:4e:00:af:b8:0e:f7:27:07:88:86:3c:ae:1d:9e: 81:4a:07:3a:99:b4:8e:d0:8c:95:95:de:d6:e0:3f: 05:a1:ea:02:7d:f9:47:67:ef:6f:7f:6a:07:3f:e2: 8d:5c:e1:48:2b:c0:06:78:9c:a3:ab:c3:04:4f:96: 9f:92:26:41:0b:6f:d8:1f:77:6d:e7:8c:45:71:f0: 6d:42:8a:bd:50:40:cf:1a:48:47:70:97:8f:fa:fc: f5:04:0e:a2:df:96:6d:3b:39:fb:a8:76:46:ca:a6: 7c:2b:23:d1:04:fc:4c:9e:17:6d:0d:5b:75:2d:c0: 88:35:41:ae:87:12:39:3b:9e:a5:f3:09:48:b8:26: 33:c3:25:8e:68:e3:1a:b0:80:07:f4:6b:b3:22:17: 38:3e:84:67:49:f1:88:17:66:20:42:53:7c:0c:26: 92:70:ca:65:eb:89:7c:3e:2e:6c:41:d7:12:87:d0: a0:3d:06:d3:09:79:db:1b:75:c4:b2:30:52:80:31: 02:2b:1a:8f:ed:4c:4b:17:bc:44:ab:60:f1:5f:06: 8f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:25:71:3B:27:C3:4D:D5:66:52:C5:A6:81:44:6B:0D:14:2A:6A:D3 X509v3 Authority Key Identifier: keyid:2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/7SVxOyfDTdVmUsWmgURrDRQqatM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.38.156.0/22 Signature Algorithm: sha256WithRSAEncryption 83:a7:ae:86:a2:b5:aa:c7:00:89:af:dd:3a:fe:3c:2a:0f:1e: 73:29:5d:90:66:9c:72:37:c2:64:5e:49:e7:dc:3b:b9:18:63: 2a:a1:77:f1:4d:5d:88:69:78:f9:24:f2:06:3b:99:78:d9:7d: ea:8e:50:ba:bd:47:49:c0:10:ce:87:2a:5b:04:01:a3:5b:77: 25:89:9e:fc:19:9b:6d:b6:2b:f1:2f:dc:54:ad:cf:27:23:29: 3d:12:ef:b0:76:22:3b:f7:26:fa:42:64:a9:09:5b:d1:16:78: 36:91:69:2b:ed:08:eb:f8:ca:4f:2f:c1:ab:15:0a:65:4d:24: a9:72:55:5b:fe:2b:a2:35:93:62:38:01:76:15:ea:33:c7:36: b5:cf:d8:50:3e:5b:f3:a2:aa:c8:84:bd:00:98:39:5d:d4:8e: 49:6d:0e:0d:7d:92:1d:07:5e:8d:ae:76:a0:50:97:8d:1d:9b: fb:53:a3:b9:ea:f6:b9:94:d7:78:c4:ad:28:5c:1d:ef:08:a4: ca:ea:18:56:7c:13:fb:16:51:e6:fc:dc:40:b7:63:9f:ca:eb: 4e:46:2b:fe:e1:88:11:28:e3:2e:1d:5b:5b:34:79:9f:eb:5c: 22:0a:db:15:ad:b1:4f:d3:8e:81:88:b3:67:2b:2d:e9:ad:42: a2:4a:b0:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o7Uw/XdPATt6ypI7jSkSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmIzMzQxM2ZhYTVlNWUxZDI3OWEyYTI1ZmY4MWQ4ZDE1 MzI1ZGYwHhcNMjYwMTAxMjIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDI1NzEzYjI3YzM0ZGQ1NjY1MmM1YTY4MTQ0NmIwZDE0MmE2YWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuO7ogkQEalEVWQVosw9smDy3bHH lVx1bLpCmUrbh38aGPzdwzTJUAPLuk8VTgCvuA73JweIhjyuHZ6BSgc6mbSO0IyV ld7W4D8FoeoCfflHZ+9vf2oHP+KNXOFIK8AGeJyjq8MET5afkiZBC2/YH3dt54xF cfBtQoq9UEDPGkhHcJeP+vz1BA6i35ZtOzn7qHZGyqZ8KyPRBPxMnhdtDVt1LcCI NUGuhxI5O56l8wlIuCYzwyWOaOMasIAH9GuzIhc4PoRnSfGIF2YgQlN8DCaScMpl 64l8Pi5sQdcSh9CgPQbTCXnbG3XEsjBSgDECKxqP7UxLF7xEq2DxXwaP/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO0lcTsnw03VZlLFpoFEaw0UKmrTMB8GA1UdIwQY MBaAFC5rM0E/ql5eHSeaKiX/gdjRUyXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1zelFULXFYbDRkSjVvcUpmLUIyTkZUSmQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hY2NkZTgtZjQ2Zi00ZWY5LTk0YWYt OGRkODFlNGIzZTMzLzEvN1NWeE95ZkRUZFZtVXNXbWdVUnJEUlFxYXRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9hY2NkZTgtZjQ2Zi00ZWY5LTk0YWYtOGRkODFlNGIzZTMz LzEvTG1zelFULXFYbDRkSjVvcUpmLUIyTkZUSmQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWSacMA0G CSqGSIb3DQEBCwUAA4IBAQCDp66GorWqxwCJr906/jwqDx5zKV2QZpxyN8JkXknn 3Du5GGMqoXfxTV2IaXj5JPIGO5l42X3qjlC6vUdJwBDOhypbBAGjW3cliZ78GZtt tivxL9xUrc8nIyk9Eu+wdiI79yb6QmSpCVvRFng2kWkr7Qjr+MpPL8GrFQplTSSp clVb/iuiNZNiOAF2Feozxza1z9hQPlvzoqrIhL0AmDld1I5JbQ4NfZIdB16Nrnag UJeNHZv7U6O56va5lNd4xK0oXB3vCKTK6hhWfBP7FlHm/NxAt2OfyutORiv+4YgR KOMuHVtbNHmf61wiCtsVrbFP046BiLNnKy3prUKiSrCr -----END CERTIFICATE-----Generated at Tue Jan 20 09:07:46 2026 by rpki-client