This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/7C0RXVU3AgsBgO3I-5tJ7yJP6WM.roa File: 7C0RXVU3AgsBgO3I-5tJ7yJP6WM.roa (raw, json) Hash identifier: zGb9a33Qnpr4WzIXt8XY3dXadxDHjRQNTlqjB3b8R/g= Subject key identifier: EC:2D:11:5D:55:37:02:0B:01:80:ED:C8:FB:9B:49:EF:22:4F:E9:63 Certificate issuer: /CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16 Certificate serial: 019B7DC9D96FC10480A06B4F5410B965061C Authority key identifier: D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/7C0RXVU3AgsBgO3I-5tJ7yJP6WM.roa Signing time: Fri 02 Jan 2026 08:18:58 +0000 ROA not before: Fri 02 Jan 2026 08:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4755 IP address blocks: 185.33.114.0/24 maxlen: 24 202.162.49.0/24 maxlen: 24 202.162.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:d9:6f:c1:04:80:a0:6b:4f:54:10:b9:65:06:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16 Validity Not Before: Jan 2 08:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec2d115d5537020b0180edc8fb9b49ef224fe963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f5:d3:f0:f6:72:53:54:f6:05:64:be:6e:88: 90:15:52:53:78:7b:7a:b3:79:8b:f7:ef:88:f2:60: d1:0f:24:12:14:fd:4d:50:32:ab:1d:db:71:77:34: 30:49:91:43:7c:b5:76:09:6e:fa:62:70:24:9c:45: 35:f8:e8:bc:61:4c:2e:33:b5:a8:a8:35:ba:25:6b: 1f:5f:f7:76:89:3a:7e:b7:78:ae:29:99:ed:33:39: 5f:8c:92:70:c8:de:9b:f9:42:76:ec:71:21:d2:0a: 83:0d:c1:85:c8:95:6d:6c:fa:c7:2d:9f:3f:39:8c: 12:8b:9f:42:fd:a4:c7:f6:42:53:8b:28:b6:28:ea: 98:7b:4f:27:18:f8:ac:9d:3c:f2:77:e4:2b:95:92: 16:9c:fb:c5:36:47:ea:ac:c9:a7:3c:2c:61:b0:9f: 28:dd:bf:f9:f4:a3:40:7e:61:26:50:00:88:de:d9: 5b:78:92:3b:7b:06:73:4d:19:ac:75:da:da:1c:4d: cf:ad:b9:14:d4:2d:87:9f:d7:e5:df:9b:7e:35:f0: 0c:9f:5d:c3:4d:7d:b2:26:de:95:74:76:70:2b:fc: 15:da:a0:e8:3b:58:88:69:9c:98:fa:a2:8b:ae:b3: dd:ed:e1:c3:d6:04:14:a4:c5:d3:ea:4a:9b:62:b3: 87:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2D:11:5D:55:37:02:0B:01:80:ED:C8:FB:9B:49:EF:22:4F:E9:63 X509v3 Authority Key Identifier: keyid:D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/7C0RXVU3AgsBgO3I-5tJ7yJP6WM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.33.114.0/24 202.162.49.0/24 202.162.52.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:ee:db:9d:67:e6:45:a4:1f:0c:c1:8c:27:8f:f8:ae:da:f3: 65:1a:cf:ef:14:d8:33:b0:2d:a0:7b:74:32:02:6a:84:d7:66: fa:56:87:7d:1a:88:c9:69:b7:1d:8f:2e:73:0e:24:d5:09:a8: 38:5f:5f:90:9f:8a:cf:1e:b6:c7:6a:f8:e9:60:c1:8c:1f:44: d0:a5:f8:8f:0b:d7:3a:a1:cc:c6:7b:cc:a4:a2:78:4d:a9:64: 04:b1:69:2c:29:c4:f5:21:19:6f:f9:23:cf:ca:e0:eb:2d:a4: 87:0f:95:14:f6:cf:3b:a3:04:69:e0:20:72:af:6f:90:5a:bc: 16:6d:38:0a:55:b8:71:09:74:71:d4:e3:31:c6:88:1b:67:b2: e7:43:01:05:19:0f:b1:0e:48:e4:ba:38:8f:a9:7f:ec:b0:5f: bd:49:cd:c6:69:12:be:e2:d1:39:b1:56:eb:c7:46:78:15:51: ee:d0:e5:16:05:ce:56:99:67:57:d1:6d:00:d0:13:c6:50:de: 9b:da:b7:42:28:6d:e4:e2:c3:54:33:b8:dc:5e:40:20:25:47: 08:9c:d0:28:44:30:01:0b:0b:83:ff:fa:0c:5c:b6:41:94:6e: 09:83:a8:9e:0f:2f:fe:ba:0b:98:f5:58:b5:74:c9:22:22:e3: 79:09:b9:84 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9ydlvwQSAoGtPVBC5ZQYcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3YzYwYTU0ZTAzYzlmODE1Y2MzM2FmZDQ1ZDNjNGRiOWFm NzZmMTYwHhcNMjYwMTAyMDgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzJkMTE1ZDU1MzcwMjBiMDE4MGVkYzhmYjliNDllZjIyNGZlOTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovXT8PZyU1T2BWS+boiQFVJTeHt6 s3mL9++I8mDRDyQSFP1NUDKrHdtxdzQwSZFDfLV2CW76YnAknEU1+Oi8YUwuM7Wo qDW6JWsfX/d2iTp+t3iuKZntMzlfjJJwyN6b+UJ27HEh0gqDDcGFyJVtbPrHLZ8/ OYwSi59C/aTH9kJTiyi2KOqYe08nGPisnTzyd+QrlZIWnPvFNkfqrMmnPCxhsJ8o 3b/59KNAfmEmUACI3tlbeJI7ewZzTRmsddraHE3PrbkU1C2Hn9fl35t+NfAMn13D TX2yJt6VdHZwK/wV2qDoO1iIaZyY+qKLrrPd7eHD1gQUpMXT6kqbYrOHCwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOwtEV1VNwILAYDtyPubSe8iT+ljMB8GA1UdIwQY MBaAFNfGClTgPJ+BXMM6/UXTxNua928WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMThZS1ZPQThuNEZjd3pyOVJkUEUyNXIzYnhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84OTA5MGMtNTNiMS00MWJlLWEzMzgt MzgzMWYzZWQxY2E4LzEvN0MwUlhWVTNBZ3NCZ08zSS01dEo3eUpQNldNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC84OTA5MGMtNTNiMS00MWJlLWEzMzgtMzgzMWYzZWQxY2E4 LzEvMThZS1ZPQThuNEZjd3pyOVJkUEUyNXIzYnhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuSFyAwQA yqIxAwQAyqI0MA0GCSqGSIb3DQEBCwUAA4IBAQAc7tudZ+ZFpB8MwYwnj/iu2vNl Gs/vFNgzsC2ge3QyAmqE12b6Vod9GojJabcdjy5zDiTVCag4X1+Qn4rPHrbHavjp YMGMH0TQpfiPC9c6oczGe8ykonhNqWQEsWksKcT1IRlv+SPPyuDrLaSHD5UU9s87 owRp4CByr2+QWrwWbTgKVbhxCXRx1OMxxogbZ7LnQwEFGQ+xDkjkujiPqX/ssF+9 Sc3GaRK+4tE5sVbrx0Z4FVHu0OUWBc5WmWdX0W0A0BPGUN6b2rdCKG3k4sNUM7jc XkAgJUcInNAoRDABCwuD//oMXLZBlG4Jg6ieDy/+uguY9Vi1dMkiIuN5CbmE -----END CERTIFICATE-----Generated at Tue Jan 20 02:56:25 2026 by rpki-client