This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/yX7-VtqrrdDv7vs2gdtp2PBHHms.roa File: yX7-VtqrrdDv7vs2gdtp2PBHHms.roa (raw, json) Hash identifier: 7Eaxb4xLBZMek5rOGdgNQUBxlSvYpqN5jH75GBFXgPU= Subject key identifier: C9:7E:FE:56:DA:AB:AD:D0:EF:EE:FB:36:81:DB:69:D8:F0:47:1E:6B Certificate issuer: /CN=f394a464728b82856dc2b955ccae9ab5ba6539c8 Certificate serial: 019B7F155BDB385505A80882B023451809C3 Authority key identifier: F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/yX7-VtqrrdDv7vs2gdtp2PBHHms.roa Signing time: Fri 02 Jan 2026 14:21:04 +0000 ROA not before: Fri 02 Jan 2026 14:21:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 164.138.240.0/24 maxlen: 24 164.138.241.0/24 maxlen: 24 164.138.242.0/24 maxlen: 24 164.138.243.0/24 maxlen: 24 164.138.244.0/24 maxlen: 24 164.138.245.0/24 maxlen: 24 164.138.247.0/24 maxlen: 24 188.244.108.0/24 maxlen: 24 188.244.109.0/24 maxlen: 24 188.244.110.0/24 maxlen: 24 188.244.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:5b:db:38:55:05:a8:08:82:b0:23:45:18:09:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f394a464728b82856dc2b955ccae9ab5ba6539c8 Validity Not Before: Jan 2 14:21:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c97efe56daabadd0efeefb3681db69d8f0471e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1c:9d:51:b6:d1:64:d8:f7:72:e9:49:66:b5: 25:79:0f:67:20:f7:88:3d:6f:6a:31:e0:e2:14:33: 8d:97:99:74:d6:50:ec:8e:f9:13:3f:a6:37:e9:f4: d7:d6:81:9e:47:c8:fe:08:e8:a6:37:2a:5c:a1:d6: c6:e5:d7:b7:4b:f4:6c:3b:40:8e:32:67:7b:27:ca: 9c:b1:36:32:c7:1e:66:b5:c9:38:1e:22:55:68:42: 09:a0:2c:13:fc:56:32:f1:57:b2:5d:12:49:dd:eb: 67:d7:a5:e8:a1:1e:96:10:c2:56:0f:68:1f:1b:50: 5f:9f:13:5b:0b:44:8f:2d:20:e9:90:0f:26:9c:de: 6b:86:5f:59:f3:11:3a:b2:27:8a:7b:52:72:11:44: 29:88:c0:50:f3:43:84:12:06:8f:74:bd:2c:6f:c5: 8d:dc:43:de:65:15:0f:c3:58:37:fc:6f:58:08:bd: da:8c:87:18:ef:a8:16:12:08:dd:5d:84:50:4e:6c: 4e:0d:0b:24:c0:50:19:26:d7:4f:0a:68:6b:e9:86: 29:84:19:7d:d5:31:5c:83:5f:62:63:38:2f:d5:4c: 62:37:e4:73:16:76:9b:53:b9:31:b4:2a:d9:7b:58: e8:b8:46:6c:ba:32:21:e4:2f:d2:d1:0a:83:8d:af: a1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7E:FE:56:DA:AB:AD:D0:EF:EE:FB:36:81:DB:69:D8:F0:47:1E:6B X509v3 Authority Key Identifier: keyid:F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/yX7-VtqrrdDv7vs2gdtp2PBHHms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.138.240.0-164.138.245.255 164.138.247.0/24 188.244.108.0/22 Signature Algorithm: sha256WithRSAEncryption 92:df:6a:e2:ee:2b:c6:58:08:70:34:bd:48:76:4f:2a:ee:b8: 83:3d:7b:c9:8f:04:fa:eb:b4:c6:2d:82:77:32:85:9c:14:24: 12:41:6c:c8:20:f5:50:88:12:0d:0c:a5:62:86:70:04:59:01: 3b:1b:51:ce:e2:6f:6b:91:7e:bd:bf:7c:f6:e1:25:c3:7a:18: 13:32:bd:75:4e:73:41:7f:e3:f4:25:5a:a1:fc:9b:09:9e:80: 6a:3c:02:80:58:da:12:12:f3:99:f5:d4:2b:3d:7e:29:90:93: f1:29:ed:b0:7a:59:10:8e:07:20:ca:8d:32:de:36:91:9e:a4: a4:1e:ac:15:11:32:63:ad:c2:0c:dc:d2:bc:e7:7a:9c:3d:8b: 3e:49:32:ee:70:3c:7d:f8:a5:69:ec:58:79:6c:fa:d2:48:2f: d8:7a:07:9d:d7:75:6f:8d:1a:97:04:77:90:7c:70:6b:05:45: f2:93:1a:44:5f:26:58:f1:2c:98:df:cc:a5:58:f3:25:4d:74: 85:e5:f9:09:fa:dd:18:0e:84:9e:f3:77:68:8f:66:eb:63:7c: 60:71:29:8d:b3:72:1b:61:48:74:8f:a5:a8:04:f6:38:c0:18: 85:a5:18:63:86:27:cc:82:53:29:d4:f5:ed:a9:a2:79:6e:73: d8:f4:b4:d5 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt/FVvbOFUFqAiCsCNFGAnDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzOTRhNDY0NzI4YjgyODU2ZGMyYjk1NWNjYWU5YWI1YmE2 NTM5YzgwHhcNMjYwMTAyMTQyMTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTdlZmU1NmRhYWJhZGQwZWZlZWZiMzY4MWRiNjlkOGYwNDcxZTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxydUbbRZNj3culJZrUleQ9nIPeI PW9qMeDiFDONl5l01lDsjvkTP6Y36fTX1oGeR8j+COimNypcodbG5de3S/RsO0CO Mmd7J8qcsTYyxx5mtck4HiJVaEIJoCwT/FYy8VeyXRJJ3etn16XooR6WEMJWD2gf G1BfnxNbC0SPLSDpkA8mnN5rhl9Z8xE6sieKe1JyEUQpiMBQ80OEEgaPdL0sb8WN 3EPeZRUPw1g3/G9YCL3ajIcY76gWEgjdXYRQTmxODQskwFAZJtdPCmhr6YYphBl9 1TFcg19iYzgv1UxiN+RzFnabU7kxtCrZe1jouEZsujIh5C/S0QqDja+hoQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFMl+/lbaq63Q7+77NoHbadjwRx5rMB8GA1UdIwQY MBaAFPOUpGRyi4KFbcK5VcyumrW6ZTnIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODVTa1pIS0xnb1Z0d3JsVnpLNmF0YnBsT2NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi83ZGI4MGMtNTExMy00ZTgzLWIyYzgt ZjI2NjRkMTkyMWQzLzEveVg3LVZ0cXJyZER2N3ZzMmdkdHAyUEJISG1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi83ZGI4MGMtNTExMy00ZTgzLWIyYzgtZjI2NjRkMTkyMWQz LzEvODVTa1pIS0xnb1Z0d3JsVnpLNmF0YnBsT2NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBASkivAD BAGkivQDBACkivcDBAK89GwwDQYJKoZIhvcNAQELBQADggEBAJLfauLuK8ZYCHA0 vUh2TyruuIM9e8mPBPrrtMYtgncyhZwUJBJBbMgg9VCIEg0MpWKGcARZATsbUc7i b2uRfr2/fPbhJcN6GBMyvXVOc0F/4/QlWqH8mwmegGo8AoBY2hIS85n11Cs9fimQ k/Ep7bB6WRCOByDKjTLeNpGepKQerBURMmOtwgzc0rznepw9iz5JMu5wPH34pWns WHls+tJIL9h6B53XdW+NGpcEd5B8cGsFRfKTGkRfJljxLJjfzKVY8yVNdIXl+Qn6 3RgOhJ7zd2iPZutjfGBxKY2zchthSHSPpagE9jjAGIWlGGOGJ8yCUynU9e2ponlu c9j0tNU= -----END CERTIFICATE-----Generated at Wed Jan 21 07:21:56 2026 by rpki-client