This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/T7SGrHKPk51Bd9kpjh6WAe1tWEA.roa File: T7SGrHKPk51Bd9kpjh6WAe1tWEA.roa (raw, json) Hash identifier: FVkceHso9IzRGOUwbIhbDL1KSec08KiEK4/1vfjoIxA= Subject key identifier: 4F:B4:86:AC:72:8F:93:9D:41:77:D9:29:8E:1E:96:01:ED:6D:58:40 Certificate issuer: /CN=a14e499240cea588541a7dc74f321c9141744bb6 Certificate serial: 019B7AC841CBA34E23B714AAEFC5493F37D5 Authority key identifier: A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/T7SGrHKPk51Bd9kpjh6WAe1tWEA.roa Signing time: Thu 01 Jan 2026 18:18:22 +0000 ROA not before: Thu 01 Jan 2026 18:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47447 IP address blocks: 46.19.152.0/21 maxlen: 24 185.88.60.0/22 maxlen: 24 2a02:2980::/32 maxlen: 32 2a05:ca80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:41:cb:a3:4e:23:b7:14:aa:ef:c5:49:3f:37:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a14e499240cea588541a7dc74f321c9141744bb6 Validity Not Before: Jan 1 18:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fb486ac728f939d4177d9298e1e9601ed6d5840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d2:f3:11:a7:2e:60:0f:88:93:59:03:b4:82: 21:78:ab:5e:43:ac:d5:30:50:72:cd:aa:a9:62:76: 0b:0b:f1:f0:74:96:bc:35:b1:87:7d:ef:42:0d:8f: 38:18:b1:1e:9f:b0:92:72:a7:9b:02:bd:7d:5c:88: e7:f2:9f:6a:fe:5e:5b:f4:bd:5a:1c:dc:fd:9d:18: f9:d3:b2:44:09:83:6f:cc:b1:5d:69:d6:c7:57:13: 95:2a:d8:29:c4:8d:f5:4a:51:8e:a0:c3:37:36:e8: 44:7c:71:3f:1a:a3:53:c3:72:f0:57:8a:68:09:bd: 77:62:96:21:a8:da:90:59:fb:c2:ba:cd:a6:87:cb: 14:c9:11:b1:31:df:41:1c:1a:57:06:44:00:43:46: 38:ff:db:b9:06:94:9c:12:ec:9e:e0:96:8d:f4:fc: 98:79:3a:07:af:49:57:04:33:1e:e9:59:9f:69:1c: b3:ec:ef:70:37:58:6d:88:55:da:10:92:1c:cf:2f: 2e:20:34:d7:d0:51:1a:11:ff:86:d5:e7:c4:9e:65: cb:75:60:ea:b3:b5:1a:30:5e:33:51:5f:fa:48:43: d8:4e:50:59:2b:8d:44:67:29:e1:b9:b7:03:71:6e: 09:4a:9a:67:ba:a7:d2:7d:5f:5a:aa:06:8f:f2:24: 2b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B4:86:AC:72:8F:93:9D:41:77:D9:29:8E:1E:96:01:ED:6D:58:40 X509v3 Authority Key Identifier: keyid:A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/T7SGrHKPk51Bd9kpjh6WAe1tWEA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.19.152.0/21 185.88.60.0/22 IPv6: 2a02:2980::/32 2a05:ca80::/29 Signature Algorithm: sha256WithRSAEncryption 27:f2:3b:57:88:5e:b8:f6:ad:62:9e:6e:f5:e4:cc:16:93:4d: 0b:ee:b8:d8:50:45:66:92:5e:9c:da:da:c9:72:9b:8e:5b:a6: cc:fc:de:8e:0a:01:65:43:05:18:4d:39:93:25:a9:c8:eb:c8: 70:c4:7e:aa:ef:ce:40:d8:9e:11:d5:06:76:8b:f8:22:a9:21: 28:2e:6b:a8:2e:02:62:21:c0:cc:33:77:ff:5f:42:39:d6:a4: 04:79:53:05:23:94:6f:17:8d:ff:86:bd:fe:d6:b0:19:17:db: 8e:12:4a:fb:e7:0a:2b:ac:28:62:aa:51:11:45:3f:02:75:7e: c1:8f:48:7e:ac:57:12:84:96:a8:71:ae:de:31:5a:5d:9d:a2: 3d:4a:38:f3:ab:43:80:43:e8:03:60:3e:de:61:92:3b:a9:06: 09:41:3b:97:22:b4:f0:5e:15:9b:2d:9c:ae:f6:d4:ad:a4:28: 43:98:14:6c:8b:be:08:ee:a5:c7:e9:88:70:e5:ae:0e:d9:a9: c1:3a:80:ce:25:4f:94:ac:95:08:ec:d2:91:d1:bf:0a:cf:49: fb:1b:21:dc:ad:6e:aa:f6:6c:09:a6:38:71:e5:db:a0:ca:fe: e4:1a:9a:9a:22:c6:53:e1:84:5c:ff:46:74:ee:8c:fa:d0:c3: 93:58:ef:8b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt6yEHLo04jtxSq78VJPzfVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNGU0OTkyNDBjZWE1ODg1NDFhN2RjNzRmMzIxYzkxNDE3 NDRiYjYwHhcNMjYwMTAxMTgxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmI0ODZhYzcyOGY5MzlkNDE3N2Q5Mjk4ZTFlOTYwMWVkNmQ1ODQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodLzEacuYA+Ik1kDtIIheKteQ6zV MFByzaqpYnYLC/HwdJa8NbGHfe9CDY84GLEen7CScqebAr19XIjn8p9q/l5b9L1a HNz9nRj507JECYNvzLFdadbHVxOVKtgpxI31SlGOoMM3NuhEfHE/GqNTw3LwV4po Cb13YpYhqNqQWfvCus2mh8sUyRGxMd9BHBpXBkQAQ0Y4/9u5BpScEuye4JaN9PyY eToHr0lXBDMe6VmfaRyz7O9wN1htiFXaEJIczy8uIDTX0FEaEf+G1efEnmXLdWDq s7UaMF4zUV/6SEPYTlBZK41EZynhubcDcW4JSppnuqfSfV9aqgaP8iQrRwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFE+0hqxyj5OdQXfZKY4elgHtbVhAMB8GA1UdIwQY MBaAFKFOSZJAzqWIVBp9x08yHJFBdEu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1U1SmtrRE9wWWhVR24zSFR6SWNrVUYwUzdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wODI4ZTctMWU1Ny00NzQ3LThlYTEt MzZhODA4ZjNkMTRkLzEvVDdTR3JIS1BrNTFCZDlrcGpoNldBZTF0V0VBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8wODI4ZTctMWU1Ny00NzQ3LThlYTEtMzZhODA4ZjNkMTRk LzEvb1U1SmtrRE9wWWhVR24zSFR6SWNrVUYwUzdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQDLhOYAwQC uVg8MBQEAgACMA4DBQAqAimAAwUDKgXKgDANBgkqhkiG9w0BAQsFAAOCAQEAJ/I7 V4heuPatYp5u9eTMFpNNC+642FBFZpJenNrayXKbjlumzPzejgoBZUMFGE05kyWp yOvIcMR+qu/OQNieEdUGdov4IqkhKC5rqC4CYiHAzDN3/19COdakBHlTBSOUbxeN /4a9/tawGRfbjhJK++cKK6woYqpREUU/AnV+wY9IfqxXEoSWqHGu3jFaXZ2iPUo4 86tDgEPoA2A+3mGSO6kGCUE7lyK08F4Vmy2crvbUraQoQ5gUbIu+CO6lx+mIcOWu DtmpwTqAziVPlKyVCOzSkdG/Cs9J+xsh3K1uqvZsCaY4ceXboMr+5BqamiLGU+GE XP9GdO6M+tDDk1jviw== -----END CERTIFICATE-----Generated at Wed Jan 21 20:23:54 2026 by rpki-client