This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/7OrrjRSIohhlOzDy5iCgiFkZ-w8.roa File: 7OrrjRSIohhlOzDy5iCgiFkZ-w8.roa (raw, json) Hash identifier: gq+NhZWA4AcO6EA3K0PZqbNfho/ij3J0dzti2DxF2II= Subject key identifier: EC:EA:EB:8D:14:88:A2:18:65:3B:30:F2:E6:20:A0:88:59:19:FB:0F Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019BC647E54563D77C5BEDEFDC781A0B04B3 Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/7OrrjRSIohhlOzDy5iCgiFkZ-w8.roa Signing time: Fri 16 Jan 2026 10:09:19 +0000 ROA not before: Fri 16 Jan 2026 10:09:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48037 IP address blocks: 147.181.40.0/22 maxlen: 24 147.181.64.0/18 maxlen: 24 147.181.96.0/24 maxlen: 24 147.181.97.0/24 maxlen: 24 147.181.98.0/24 maxlen: 24 147.181.99.0/24 maxlen: 24 147.181.103.0/24 maxlen: 24 147.181.108.0/24 maxlen: 24 147.181.109.0/24 maxlen: 24 147.181.112.0/24 maxlen: 24 147.181.113.0/24 maxlen: 24 147.181.114.0/24 maxlen: 24 147.181.117.0/24 maxlen: 24 2a04:9a00:1004::/48 maxlen: 48 2a04:9a00:111c::/48 maxlen: 48 2a04:9a00:1121::/48 maxlen: 48 2a04:9a00:1124::/48 maxlen: 48 2a04:9a03:1010::/44 maxlen: 44 2a04:9a03:1020::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:47:e5:45:63:d7:7c:5b:ed:ef:dc:78:1a:0b:04:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 16 10:09:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eceaeb8d1488a218653b30f2e620a0885919fb0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:01:c9:b3:10:de:f3:eb:0d:23:d1:4d:05:05: ae:55:46:52:81:c0:e6:27:94:17:96:25:ed:ff:9c: 74:b6:7a:42:75:f6:23:9d:bd:2a:df:d9:e5:ef:31: 46:59:21:a5:2b:12:d8:b8:c5:36:06:3b:0a:32:17: 3d:0c:36:16:4c:6b:9e:b2:bc:0a:40:2c:f6:7a:07: b5:ac:46:b3:1d:a2:27:d7:a3:e9:6c:ed:13:74:33: 89:0d:fc:89:61:f8:72:a3:0f:68:e7:0d:2a:6a:15: 77:f2:45:36:ae:3b:a8:8e:5b:a8:49:60:07:ab:4b: 75:1f:df:c7:5e:99:3b:9c:76:3d:9a:02:ee:04:eb: e5:ec:5a:c1:d7:d8:1f:fc:5f:49:04:d4:5f:6e:52: 7d:2d:9d:b8:c2:72:fb:f0:cc:ba:11:a3:ff:0a:91: e5:1d:59:b8:1c:c2:36:6d:8b:5f:f9:e3:84:32:8c: 43:57:01:1f:7e:2f:a4:4d:e9:81:fc:ce:87:7c:19: f0:cd:e8:b3:64:85:ca:1f:3a:e1:94:0f:a8:f1:fd: be:c3:55:b2:8c:72:bf:0e:22:75:03:36:1f:a6:0e: 2d:2d:92:56:8b:db:d2:20:51:0e:ac:51:35:50:f2: 17:52:50:2f:96:aa:70:20:4d:a1:23:96:ab:34:fc: 53:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:EA:EB:8D:14:88:A2:18:65:3B:30:F2:E6:20:A0:88:59:19:FB:0F X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/7OrrjRSIohhlOzDy5iCgiFkZ-w8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.181.40.0/22 147.181.64.0/18 IPv6: 2a04:9a00:1004::/48 2a04:9a00:111c::/48 2a04:9a00:1121::/48 2a04:9a00:1124::/48 2a04:9a03:1010::-2a04:9a03:102f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 8c:e3:ab:18:d4:e3:75:44:45:82:a1:5b:6f:75:70:53:18:24: 66:13:cf:88:db:6d:9a:37:b5:63:6e:e2:78:64:c1:34:7b:8f: 8f:a2:00:ed:ac:2b:b0:cc:72:40:91:92:66:b1:6a:ef:d5:bc: 67:36:c5:42:d8:62:4d:d3:13:86:b4:8a:63:aa:86:88:d6:6f: 30:ea:0b:7f:96:0e:10:c6:14:77:a2:26:de:02:80:b8:0b:89: db:23:98:34:31:1f:14:aa:8d:36:23:04:0d:e0:47:c0:f1:52: 5b:1b:8a:19:75:e5:d5:a0:0c:a5:b8:af:db:1a:74:70:82:41: 34:73:6b:cb:ac:e2:0d:72:5f:3e:5b:80:ee:14:c6:69:96:fe: 0d:05:75:dc:82:25:4e:3a:3b:3b:fa:70:18:9d:68:7e:90:43: 37:c7:be:8e:05:55:3c:6e:3c:be:b1:5c:e2:0e:32:00:b2:48: 8b:90:ec:e3:7b:f0:77:20:8d:68:24:45:62:7c:08:6d:5c:18: a8:60:f5:3c:85:91:ab:8b:26:15:4b:c5:c0:1b:1b:54:23:2c: 7e:a7:39:8f:84:da:e3:84:8b:4f:b5:0b:60:76:dd:d6:0e:e4: 46:de:49:08:d9:e1:b7:c4:6e:39:4a:61:65:3d:70:e9:83:e5: 65:fe:c5:f0 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZvGR+VFY9d8W+3v3HgaCwSzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTE2MTAwOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2VhZWI4ZDE0ODhhMjE4NjUzYjMwZjJlNjIwYTA4ODU5MTlmYjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AHJsxDe8+sNI9FNBQWuVUZSgcDm J5QXliXt/5x0tnpCdfYjnb0q39nl7zFGWSGlKxLYuMU2BjsKMhc9DDYWTGuesrwK QCz2ege1rEazHaIn16PpbO0TdDOJDfyJYfhyow9o5w0qahV38kU2rjuojluoSWAH q0t1H9/HXpk7nHY9mgLuBOvl7FrB19gf/F9JBNRfblJ9LZ24wnL78My6EaP/CpHl HVm4HMI2bYtf+eOEMoxDVwEffi+kTemB/M6HfBnwzeizZIXKHzrhlA+o8f2+w1Wy jHK/DiJ1AzYfpg4tLZJWi9vSIFEOrFE1UPIXUlAvlqpwIE2hI5arNPxTFwIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFOzq640UiKIYZTsw8uYgoIhZGfsPMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvN09ycmpSU0lvaGhsT3pEeTVpQ2dpRmtaLXc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDASBAIAATAMAwQCk7UoAwQG k7VAMD4EAgACMDgDBwAqBJoAEAQDBwAqBJoAERwDBwAqBJoAESEDBwAqBJoAESQw EgMHBCoEmgMQEAMHBCoEmgMQIDANBgkqhkiG9w0BAQsFAAOCAQEAjOOrGNTjdURF gqFbb3VwUxgkZhPPiNttmje1Y27ieGTBNHuPj6IA7awrsMxyQJGSZrFq79W8ZzbF QthiTdMThrSKY6qGiNZvMOoLf5YOEMYUd6Im3gKAuAuJ2yOYNDEfFKqNNiMEDeBH wPFSWxuKGXXl1aAMpbiv2xp0cIJBNHNry6ziDXJfPluA7hTGaZb+DQV13IIlTjo7 O/pwGJ1ofpBDN8e+jgVVPG48vrFc4g4yALJIi5Ds43vwdyCNaCRFYnwIbVwYqGD1 PIWRq4smFUvFwBsbVCMsfqc5j4Ta44SLT7ULYHbd1g7kRt5JCNnht8RuOUphZT1w 6YPlZf7F8A== -----END CERTIFICATE-----Generated at Tue Jan 20 04:48:48 2026 by rpki-client