This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/7owqXESGy_RXh39I2zXYrOmIRmY.roa File: 7owqXESGy_RXh39I2zXYrOmIRmY.roa (raw, json) Hash identifier: uD/kXqY4+DVU4PEvK0O92LooxshLndRFHktHnH9fzjs= Subject key identifier: EE:8C:2A:5C:44:86:CB:F4:57:87:7F:48:DB:35:D8:AC:E9:88:46:66 Certificate issuer: /CN=19f1a9dd126f37237ce200fb8616ff937bca966c Certificate serial: 019B7C11C2C1D32CF722AE24602F4C99084B Authority key identifier: 19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/7owqXESGy_RXh39I2zXYrOmIRmY.roa Signing time: Fri 02 Jan 2026 00:18:17 +0000 ROA not before: Fri 02 Jan 2026 00:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206991 IP address blocks: 85.95.237.0/24 maxlen: 24 85.95.238.0/24 maxlen: 24 85.95.239.0/24 maxlen: 24 85.95.240.0/24 maxlen: 24 85.95.241.0/24 maxlen: 24 85.95.242.0/24 maxlen: 24 85.95.243.0/24 maxlen: 24 85.95.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:c2:c1:d3:2c:f7:22:ae:24:60:2f:4c:99:08:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19f1a9dd126f37237ce200fb8616ff937bca966c Validity Not Before: Jan 2 00:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee8c2a5c4486cbf457877f48db35d8ace9884666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:36:01:f5:5e:32:23:ad:e4:27:c9:b0:9a:a3: cf:c8:4d:da:12:c5:63:97:7b:23:3f:3f:94:e1:e5: 1c:7c:e4:57:ab:b8:ce:86:16:49:bd:76:4e:90:2d: b5:65:62:6d:b8:dc:f6:37:4f:5a:b7:af:b3:f8:ae: 11:99:b7:e2:28:99:12:f9:58:63:1e:e0:de:89:98: 1d:03:37:ed:8f:c7:46:cd:52:54:d8:99:c2:3e:85: 22:f3:20:f9:da:60:f6:c7:c3:57:dd:2c:9c:91:12: c4:a3:d9:66:0e:62:90:e4:c3:71:13:cf:8e:88:5f: 72:d3:29:5b:83:c4:57:2e:0b:06:dd:99:5a:e5:39: dd:20:2f:f3:79:4a:ec:83:13:fd:2d:0d:0b:0a:18: e9:76:91:e9:4e:cb:24:ae:17:bf:88:2f:4b:e8:d7: 60:f2:70:ac:07:96:5a:38:df:00:cb:ce:17:4a:3c: 4a:40:81:e8:5e:cc:c9:26:c3:f5:c2:a1:ae:6a:de: 1f:dc:d1:08:02:09:b8:68:84:7f:9f:a3:82:9e:f0: 2c:b2:64:87:97:22:fa:78:31:2e:cd:d3:71:4c:56: 9d:cd:15:c5:cc:1f:66:60:56:90:01:bb:ab:55:e7: 91:8c:06:d1:86:c2:5d:ce:34:12:7a:92:6e:00:c3: 2e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8C:2A:5C:44:86:CB:F4:57:87:7F:48:DB:35:D8:AC:E9:88:46:66 X509v3 Authority Key Identifier: keyid:19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/7owqXESGy_RXh39I2zXYrOmIRmY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.95.237.0-85.95.244.255 Signature Algorithm: sha256WithRSAEncryption 93:12:db:de:50:bd:1d:fb:53:a1:4e:e4:da:ab:48:8a:d8:bc: 95:6c:38:6f:d5:50:7f:e9:90:fa:84:3a:18:50:ea:f9:8d:b6: e3:f3:ca:0c:89:c1:b0:ed:01:6b:e0:0c:22:cd:e1:f1:61:3a: 9d:a7:a5:33:0b:62:6d:e7:47:17:ec:d1:02:f2:62:c4:d5:64: 57:d3:79:18:71:d6:e0:34:a7:bb:5c:b9:3c:d8:a8:3c:aa:01: 84:c4:9f:b9:c9:63:48:c8:7e:d7:e7:de:67:61:1b:a0:b6:0f: 02:a7:dc:96:d3:4b:64:39:45:6f:67:78:3c:7f:2e:08:7e:c7: aa:0b:f3:fd:e6:b5:3b:f6:2f:3b:79:6a:cc:22:ed:bd:ea:c6: 0a:0b:2d:c1:17:87:85:ce:60:35:5d:06:85:1a:d5:54:1a:c0: ae:d3:bf:0d:65:ff:63:80:bc:c4:60:cc:db:e9:b3:f1:ea:22: 7e:19:48:3a:f0:5c:97:99:fc:bb:9a:d2:ee:f6:c7:29:03:ff: 61:44:d1:08:ef:9e:5d:e5:06:6e:55:a4:81:51:ca:09:2e:95: 02:88:6b:5f:09:bd:de:75:66:75:37:57:5e:f0:2b:2c:06:55: a9:86:0e:1d:9e:58:40:25:e6:df:a6:b4:94:f6:7a:17:2e:26: 1a:12:31:fc -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8EcLB0yz3Iq4kYC9MmQhLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZjFhOWRkMTI2ZjM3MjM3Y2UyMDBmYjg2MTZmZjkzN2Jj YTk2NmMwHhcNMjYwMTAyMDAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZThjMmE1YzQ0ODZjYmY0NTc4NzdmNDhkYjM1ZDhhY2U5ODg0NjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTYB9V4yI63kJ8mwmqPPyE3aEsVj l3sjPz+U4eUcfORXq7jOhhZJvXZOkC21ZWJtuNz2N09at6+z+K4RmbfiKJkS+Vhj HuDeiZgdAzftj8dGzVJU2JnCPoUi8yD52mD2x8NX3SyckRLEo9lmDmKQ5MNxE8+O iF9y0ylbg8RXLgsG3Zla5TndIC/zeUrsgxP9LQ0LChjpdpHpTsskrhe/iC9L6Ndg 8nCsB5ZaON8Ay84XSjxKQIHoXszJJsP1wqGuat4f3NEIAgm4aIR/n6OCnvAssmSH lyL6eDEuzdNxTFadzRXFzB9mYFaQAburVeeRjAbRhsJdzjQSepJuAMMuPQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFO6MKlxEhsv0V4d/SNs12KzpiEZmMB8GA1UdIwQY MBaAFBnxqd0SbzcjfOIA+4YW/5N7ypZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2ZHcDNSSnZOeU44NGdEN2hoYl9rM3ZLbG13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE2M2QtMTczMC00ZDg4LWFiMzgt M2ZkMzA5ODhmNjc3LzEvN293cVhFU0d5X1JYaDM5STJ6WFlyT21JUm1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE2M2QtMTczMC00ZDg4LWFiMzgtM2ZkMzA5ODhmNjc3 LzEvR2ZHcDNSSnZOeU44NGdEN2hoYl9rM3ZLbG13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABVX+0D BABVX/QwDQYJKoZIhvcNAQELBQADggEBAJMS295QvR37U6FO5NqrSIrYvJVsOG/V UH/pkPqEOhhQ6vmNtuPzygyJwbDtAWvgDCLN4fFhOp2npTMLYm3nRxfs0QLyYsTV ZFfTeRhx1uA0p7tcuTzYqDyqAYTEn7nJY0jIftfn3mdhG6C2DwKn3JbTS2Q5RW9n eDx/Lgh+x6oL8/3mtTv2Lzt5aswi7b3qxgoLLcEXh4XOYDVdBoUa1VQawK7Tvw1l /2OAvMRgzNvps/HqIn4ZSDrwXJeZ/Lua0u72xykD/2FE0Qjvnl3lBm5VpIFRygku lQKIa18Jvd51ZnU3V17wKywGVamGDh2eWEAl5t+mtJT2ehcuJhoSMfw= -----END CERTIFICATE-----Generated at Mon Jan 26 14:08:13 2026 by rpki-client