This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/7XyWDZ3DAQ-kSXYc--1ID4u-CAc.roa File: 7XyWDZ3DAQ-kSXYc--1ID4u-CAc.roa (raw, json) Hash identifier: ZeL5IgW1+24bUEeAyHiB53AV+FbJd9KAwEUh+iyT1Tc= Subject key identifier: ED:7C:96:0D:9D:C3:01:0F:A4:49:76:1C:FB:ED:48:0F:8B:BE:08:07 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019BB37B81606DCD391E519FB5A2F5CDCDD1 Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/7XyWDZ3DAQ-kSXYc--1ID4u-CAc.roa Signing time: Mon 12 Jan 2026 18:32:54 +0000 ROA not before: Mon 12 Jan 2026 18:32:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396356 IP address blocks: 5.182.184.0/24 maxlen: 24 104.232.37.0/24 maxlen: 24 162.218.92.0/24 maxlen: 24 162.218.94.0/24 maxlen: 24 185.187.213.0/24 maxlen: 24 185.230.120.0/24 maxlen: 24 2a0a:8f40:31::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:7b:81:60:6d:cd:39:1e:51:9f:b5:a2:f5:cd:cd:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Jan 12 18:32:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed7c960d9dc3010fa449761cfbed480f8bbe0807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f1:d0:ba:60:46:56:85:3e:59:4c:4c:f8:08: e5:c5:8f:01:3d:8f:2f:a1:4e:4f:54:b1:5f:c2:ac: 95:45:9f:c4:7d:31:24:eb:43:4a:33:ff:09:d5:ce: 65:13:12:cc:d7:f3:21:0d:2c:31:ab:d5:82:b4:9c: 4e:50:61:04:68:ba:a1:c1:a6:f9:f5:44:eb:8a:3c: f4:3c:dd:ab:4c:92:cc:14:13:92:63:75:6d:cf:dc: 1c:e7:72:96:ae:1c:e0:ae:bf:fa:77:7a:fd:c4:28: cb:53:88:24:bf:05:98:f1:7e:62:ec:99:36:c4:f5: d8:b2:47:04:b1:fb:10:03:9e:af:7c:85:39:c4:b3: 28:29:54:2d:f8:a7:66:34:74:08:af:80:4a:90:24: c6:cb:32:71:08:5d:59:d3:82:95:45:93:03:d8:67: d2:c2:16:ba:69:7a:65:8a:a9:59:0b:c0:46:ec:a2: ee:5f:e7:1c:44:5c:07:d8:88:af:08:e7:b0:7a:76: 66:85:0e:45:36:6c:02:5c:e1:5b:3a:dd:e1:72:4c: 5c:85:59:b0:3d:28:a6:52:e5:9b:4d:75:f1:d3:dd: 42:fe:1d:11:72:23:84:66:c6:be:b4:b8:66:f0:0d: c3:7d:be:05:07:1e:46:f0:9d:eb:78:b7:29:a3:8e: 19:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7C:96:0D:9D:C3:01:0F:A4:49:76:1C:FB:ED:48:0F:8B:BE:08:07 X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/7XyWDZ3DAQ-kSXYc--1ID4u-CAc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.184.0/24 104.232.37.0/24 162.218.92.0/24 162.218.94.0/24 185.187.213.0/24 185.230.120.0/24 IPv6: 2a0a:8f40:31::/48 Signature Algorithm: sha256WithRSAEncryption 12:c6:98:95:2c:61:6e:41:23:c2:50:8b:4e:ea:49:80:e2:01: 8d:24:50:d3:1a:bb:48:2e:32:4b:12:3c:22:b0:ca:92:18:40: 41:20:15:c8:7c:47:13:db:a5:e0:63:1b:7b:11:6f:a5:4c:d1: 9f:ba:f5:5e:00:8c:7f:91:89:64:ec:39:11:79:98:e3:31:ea: 7e:e5:be:6c:b8:61:59:05:28:e5:37:6a:41:69:3b:de:15:18: 63:d3:e8:94:b4:16:67:12:a2:94:6e:a2:bb:73:75:3e:b2:fd: ea:0b:6e:f2:c5:67:b3:5a:dc:6f:5d:58:5a:ee:20:89:aa:3d: 4b:a2:06:ac:f7:82:e0:e0:7e:77:82:89:f0:e5:cc:64:3c:b7: 91:ac:e3:b5:a8:15:1b:bb:ab:2e:b4:7e:f2:0b:cf:ff:93:cb: 4e:d4:7a:31:5b:08:17:21:93:e4:5f:19:93:81:6a:f7:ed:2c: 24:31:a2:6e:ed:a5:31:2e:02:29:e1:43:51:2f:09:7d:95:7f: 26:f5:e2:45:c5:03:db:be:5e:06:b4:d9:51:d0:dd:e6:66:58: f9:e4:51:84:85:a3:54:57:78:dd:3b:eb:75:52:ef:52:c7:42: 2a:c4:db:73:88:ef:0c:e9:9a:78:34:c0:80:47:be:12:be:d2: 75:49:a6:67 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZuze4Fgbc05HlGftaL1zc3RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYwMTEyMTgzMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDdjOTYwZDlkYzMwMTBmYTQ0OTc2MWNmYmVkNDgwZjhiYmUwODA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/HQumBGVoU+WUxM+AjlxY8BPY8v oU5PVLFfwqyVRZ/EfTEk60NKM/8J1c5lExLM1/MhDSwxq9WCtJxOUGEEaLqhwab5 9UTrijz0PN2rTJLMFBOSY3Vtz9wc53KWrhzgrr/6d3r9xCjLU4gkvwWY8X5i7Jk2 xPXYskcEsfsQA56vfIU5xLMoKVQt+KdmNHQIr4BKkCTGyzJxCF1Z04KVRZMD2GfS wha6aXpliqlZC8BG7KLuX+ccRFwH2IivCOewenZmhQ5FNmwCXOFbOt3hckxchVmw PSimUuWbTXXx091C/h0RciOEZsa+tLhm8A3Dfb4FBx5G8J3reLcpo44ZwQIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFO18lg2dwwEPpEl2HPvtSA+LvggHMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvN1h5V0RaM0RBUS1rU1hZYy0tMUlENHUtQ0FjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAqBAIAATAkAwQABba4AwQA aOglAwQAotpcAwQAotpeAwQAubvVAwQAueZ4MA8EAgACMAkDBwAqCo9AADEwDQYJ KoZIhvcNAQELBQADggEBABLGmJUsYW5BI8JQi07qSYDiAY0kUNMau0guMksSPCKw ypIYQEEgFch8RxPbpeBjG3sRb6VM0Z+69V4AjH+RiWTsORF5mOMx6n7lvmy4YVkF KOU3akFpO94VGGPT6JS0FmcSopRuortzdT6y/eoLbvLFZ7Na3G9dWFruIImqPUui Bqz3guDgfneCifDlzGQ8t5Gs47WoFRu7qy60fvILz/+Ty07UejFbCBchk+RfGZOB avftLCQxom7tpTEuAinhQ1EvCX2Vfyb14kXFA9u+Xga02VHQ3eZmWPnkUYSFo1RX eN0763VS71LHQirE23OI7wzpmng0wIBHvhK+0nVJpmc= -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:17 2026 by rpki-client