This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/7iwbrMs-D3nTvbzBJVqEDIRq4NI.roa File: 7iwbrMs-D3nTvbzBJVqEDIRq4NI.roa (raw, json) Hash identifier: NOJagwW5QOv6tMhfF2OqRIEJAaU7K3GfJCIh+Pm2aDU= Subject key identifier: EE:2C:1B:AC:CB:3E:0F:79:D3:BD:BC:C1:25:5A:84:0C:84:6A:E0:D2 Certificate issuer: /CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892 Certificate serial: 019B7F836F60E677993A677007F889A841DF Authority key identifier: E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/7iwbrMs-D3nTvbzBJVqEDIRq4NI.roa Signing time: Fri 02 Jan 2026 16:21:18 +0000 ROA not before: Fri 02 Jan 2026 16:21:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199624 IP address blocks: 91.208.171.0/24 maxlen: 32 95.131.176.0/21 maxlen: 32 185.8.4.0/22 maxlen: 32 185.25.9.0/24 maxlen: 32 185.25.10.0/23 maxlen: 32 185.166.240.0/22 maxlen: 32 185.166.243.0/24 maxlen: 32 2a00:7b60::/32 maxlen: 32 2a03:13c0::/32 maxlen: 32 2a0a:2100::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:6f:60:e6:77:99:3a:67:70:07:f8:89:a8:41:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892 Validity Not Before: Jan 2 16:21:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee2c1baccb3e0f79d3bdbcc1255a840c846ae0d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fe:e8:2d:55:cd:a9:e5:b8:d1:42:46:04:6b: d4:33:a7:c9:4e:b8:91:4a:99:27:d0:d5:a2:d5:17: 8f:3f:bb:6b:46:e0:e7:d2:a3:2f:f8:f8:d8:1c:77: ee:92:b2:2d:bb:96:6e:ca:f8:61:77:83:04:15:54: 7c:57:d1:1f:c4:25:c7:7e:71:b8:66:c7:60:48:a1: b4:c4:8c:ef:83:25:ac:72:64:1d:27:5f:a2:ae:78: 5d:76:55:3d:81:dc:7a:e0:ec:7b:39:8c:66:e1:e2: 91:6a:13:00:63:4a:39:93:d1:9e:db:ff:b3:f3:5b: 8b:eb:2b:7c:a8:f2:7f:06:30:1a:a1:26:95:7b:ba: 45:29:2e:77:bf:ab:30:f9:54:b9:61:26:1a:db:a8: 24:1d:78:8c:5e:3e:97:01:52:91:9e:98:bf:6e:14: ed:6a:03:ec:66:44:30:47:cc:b8:a0:c4:e0:46:f7: 3e:46:cc:f4:4c:b2:f5:ac:f1:89:b6:18:ee:cd:32: 69:58:59:f2:49:f3:70:69:18:d0:cf:65:92:89:6e: 64:03:39:d2:2e:0b:48:01:bc:7c:63:49:34:13:df: 21:c7:be:d9:48:cf:d2:1d:e4:8f:62:c1:36:93:5c: 09:2f:aa:91:51:f8:1a:a9:3c:7a:dd:aa:aa:9b:2d: fc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2C:1B:AC:CB:3E:0F:79:D3:BD:BC:C1:25:5A:84:0C:84:6A:E0:D2 X509v3 Authority Key Identifier: keyid:E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/7iwbrMs-D3nTvbzBJVqEDIRq4NI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.171.0/24 95.131.176.0/21 185.8.4.0/22 185.25.9.0-185.25.11.255 185.166.240.0/22 IPv6: 2a00:7b60::/32 2a03:13c0::/32 2a0a:2100::/29 Signature Algorithm: sha256WithRSAEncryption 17:bd:81:7c:f7:64:ff:bf:47:11:0d:9f:0a:20:5b:f9:a4:95: 03:90:f0:27:14:e3:73:2d:ab:0c:98:53:8b:66:46:65:7c:68: 3e:77:d3:35:27:8b:d9:67:30:7f:4f:c0:7d:5e:3c:b9:2c:70: d3:b8:c2:c8:0f:cc:1e:00:97:e0:dc:2d:1b:b7:5c:d5:96:d4: 1d:c4:ab:70:76:d4:8b:4c:ea:4a:2e:07:fa:75:ca:d3:0f:3d: 76:f9:e2:9e:46:d6:bf:b4:ed:bd:9f:d6:ee:69:f2:6f:e0:b7: 40:52:44:ea:97:91:cf:54:ab:04:ab:aa:ec:c8:5c:7d:85:35: 73:79:2e:ff:6b:84:59:ba:e0:4e:78:ec:4d:89:04:d5:06:c1: 7a:88:9d:d0:c9:19:6b:56:0c:6b:6b:2c:c1:ba:d1:63:0e:29: a2:79:ff:32:3e:02:cd:1d:65:83:e8:2b:3c:f5:9b:ee:fb:df: e4:84:92:22:f4:3f:c8:cf:73:f4:30:d6:cc:ed:3b:51:85:61: a1:7a:01:4b:55:ce:35:e3:52:22:9c:8b:a6:71:ce:10:a7:c6: c9:6a:ec:97:44:b1:b5:1d:e0:82:8c:e8:9e:88:ea:30:a7:33: cd:03:28:72:73:ba:5b:a6:4d:de:0d:6a:c7:f2:3c:4f:5c:cb: cd:5f:40:ae -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgISAZt/g29g5neZOmdwB/iJqEHfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YTgzYjQwYjNmNGQ3ZDMxZmIzMzY4ZGFmYWNhMTE5OWE0 NDk4OTIwHhcNMjYwMTAyMTYyMTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTJjMWJhY2NiM2UwZjc5ZDNiZGJjYzEyNTVhODQwYzg0NmFlMGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/7oLVXNqeW40UJGBGvUM6fJTriR Spkn0NWi1RePP7trRuDn0qMv+PjYHHfukrItu5Zuyvhhd4MEFVR8V9EfxCXHfnG4 ZsdgSKG0xIzvgyWscmQdJ1+irnhddlU9gdx64Ox7OYxm4eKRahMAY0o5k9Ge2/+z 81uL6yt8qPJ/BjAaoSaVe7pFKS53v6sw+VS5YSYa26gkHXiMXj6XAVKRnpi/bhTt agPsZkQwR8y4oMTgRvc+Rsz0TLL1rPGJthjuzTJpWFnySfNwaRjQz2WSiW5kAznS LgtIAbx8Y0k0E98hx77ZSM/SHeSPYsE2k1wJL6qRUfgaqTx63aqqmy38mwIDAQAB o4ICRjCCAkIwHQYDVR0OBBYEFO4sG6zLPg950728wSVahAyEauDSMB8GA1UdIwQY MBaAFOWoO0Cz9NfTH7M2ja+soRmaRJiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWFnN1FMUDAxOU1mc3phTnI2eWhHWnBFbUpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yNGNhYjQtMDEyNS00MzgzLTg1ZmEt M2QzODg2MDZkYTEyLzEvN2l3YnJNcy1EM25UdmJ6QkpWcUVESVJxNE5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8yNGNhYjQtMDEyNS00MzgzLTg1ZmEtM2QzODg2MDZkYTEy LzEvNWFnN1FMUDAxOU1mc3phTnI2eWhHWnBFbUpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFwGCCsGAQUFBwEHAQH/BE0wSzAsBAIAATAmAwQAW9CrAwQD X4OwAwQCuQgEMAwDBAC5GQkDBAK5GQgDBAK5pvAwGwQCAAIwFQMFACoAe2ADBQAq AxPAAwUDKgohADANBgkqhkiG9w0BAQsFAAOCAQEAF72BfPdk/79HEQ2fCiBb+aSV A5DwJxTjcy2rDJhTi2ZGZXxoPnfTNSeL2Wcwf0/AfV48uSxw07jCyA/MHgCX4Nwt G7dc1ZbUHcSrcHbUi0zqSi4H+nXK0w89dvninkbWv7TtvZ/W7mnyb+C3QFJE6peR z1SrBKuq7MhcfYU1c3ku/2uEWbrgTnjsTYkE1QbBeoid0MkZa1YMa2sswbrRYw4p onn/Mj4CzR1lg+grPPWb7vvf5ISSIvQ/yM9z9DDWzO07UYVhoXoBS1XONeNSIpyL pnHOEKfGyWrsl0SxtR3ggozonojqMKczzQMocnO6W6ZN3g1qx/I8T1zLzV9Arg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:26 2026 by rpki-client