This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/7CuuMu75v2ke5Xdx3b9qKN7n4Y4.roa File: 7CuuMu75v2ke5Xdx3b9qKN7n4Y4.roa (raw, json) Hash identifier: 4EY3GSH/tIrLwl1yZXfEtQ+XZsJnpbfMvJM5DC8DJrc= Subject key identifier: EC:2B:AE:32:EE:F9:BF:69:1E:E5:77:71:DD:BF:6A:28:DE:E7:E1:8E Certificate issuer: /CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d Certificate serial: 019B79110BFAF190F1A5D6B89B23FD230F30 Authority key identifier: D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/7CuuMu75v2ke5Xdx3b9qKN7n4Y4.roa Signing time: Thu 01 Jan 2026 10:18:38 +0000 ROA not before: Thu 01 Jan 2026 10:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206451 IP address blocks: 31.14.24.0/24 maxlen: 24 89.33.180.0/22 maxlen: 23 89.36.168.0/24 maxlen: 24 89.36.175.0/24 maxlen: 24 89.39.160.0/24 maxlen: 24 176.97.232.0/21 maxlen: 21 176.97.232.0/22 maxlen: 22 176.97.236.0/22 maxlen: 22 185.155.4.0/22 maxlen: 24 212.85.232.0/22 maxlen: 22 212.85.232.0/23 maxlen: 23 212.85.234.0/23 maxlen: 23 2a0d:bf00::/32 maxlen: 32 2a0d:bf01::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:0b:fa:f1:90:f1:a5:d6:b8:9b:23:fd:23:0f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d Validity Not Before: Jan 1 10:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec2bae32eef9bf691ee57771ddbf6a28dee7e18e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8b:89:93:8a:d4:60:7a:5d:e7:08:e6:5e:75: ae:82:ce:b3:e7:3f:d7:66:a7:18:29:7d:65:54:4c: 3a:fd:60:e6:4b:c3:d3:8a:de:16:5b:91:9a:61:0b: 62:5e:91:d4:81:f7:be:2c:d0:ba:de:38:f3:36:3a: 9e:d4:69:ba:d4:f3:dd:8c:c7:d0:32:3c:4a:a7:62: 9f:5d:6b:6b:43:98:e4:73:36:d5:d8:09:9d:31:03: ab:0f:b2:d6:5c:e0:f7:47:a3:6b:77:15:bc:9e:e1: f6:96:fa:7c:f7:fa:4c:6c:41:64:9c:ed:4b:4a:f6: 9e:82:97:f0:9a:52:8d:39:f6:3b:b0:f6:b6:38:5b: 0f:31:07:24:5f:c2:4e:77:d2:d8:1c:2f:cf:d6:ef: 63:1f:9e:8a:da:75:37:c1:73:de:30:0e:13:36:0b: c4:c8:b1:0e:8c:5e:7c:7f:d9:d7:8f:bf:74:d0:14: d4:69:b1:f3:d6:50:57:34:13:c8:a7:a1:df:7d:04: cc:a5:53:55:c8:75:b6:67:44:1e:41:1a:de:b7:0a: 18:5f:80:7c:c9:b7:06:a9:3b:e4:9e:22:3f:75:3f: ca:9b:df:38:bd:35:64:10:27:bb:05:e4:6e:ba:65: 06:c3:f8:7a:d9:ac:bc:a9:0e:a3:ff:b2:8e:c7:8f: e3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2B:AE:32:EE:F9:BF:69:1E:E5:77:71:DD:BF:6A:28:DE:E7:E1:8E X509v3 Authority Key Identifier: keyid:D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/7CuuMu75v2ke5Xdx3b9qKN7n4Y4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.24.0/24 89.33.180.0/22 89.36.168.0/24 89.36.175.0/24 89.39.160.0/24 176.97.232.0/21 185.155.4.0/22 212.85.232.0/22 IPv6: 2a0d:bf00::/31 Signature Algorithm: sha256WithRSAEncryption 36:c5:6e:6a:41:f2:f5:73:6b:6b:ea:98:99:e4:11:ee:6a:d1: 25:31:25:e7:89:69:f9:5a:b7:cc:5c:2d:04:10:46:08:cc:50: f9:6a:e6:81:bf:8b:08:69:5e:10:08:3f:7c:bd:d4:9d:d1:fc: 44:8f:86:2a:5b:b5:f0:95:17:a4:b8:5c:bc:7f:cb:28:49:23: 38:a0:b7:5f:b1:17:ae:db:26:6b:ff:bb:5a:cd:52:d7:c2:8e: 9b:8e:fb:32:db:6e:cf:ab:92:34:e3:97:61:ec:6b:f4:21:4e: 53:4f:4a:43:06:c0:54:c4:67:ac:19:43:ba:45:35:ba:68:d0: 94:99:4c:c4:5f:fb:ea:ac:53:cc:10:4e:60:ff:18:7e:6e:03: bd:ff:b9:41:3e:87:68:74:29:28:12:92:68:9b:11:d2:84:98: 35:11:f6:b9:df:25:9d:d5:85:c6:83:dd:ee:64:59:49:ab:04: 3a:1c:77:af:cb:56:d8:04:5d:2e:4a:43:df:a3:9a:99:92:ef: f4:44:ee:02:ad:99:d7:c4:37:97:f7:3f:91:b3:e3:0f:64:b2: b7:e5:94:83:b1:4f:cb:60:47:48:d7:63:de:0e:9d:81:11:b0: 7d:45:02:c3:10:cd:02:80:c8:60:a9:fd:69:43:3b:56:15:7e: 82:9f:3f:7c -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt5EQv68ZDxpda4myP9Iw8wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5Zjg2NmZiMGFhODNhMjcxYTBjYjdkYzkwMzAxODhjODlk MjNlNWQwHhcNMjYwMTAxMTAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzJiYWUzMmVlZjliZjY5MWVlNTc3NzFkZGJmNmEyOGRlZTdlMThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ouJk4rUYHpd5wjmXnWugs6z5z/X ZqcYKX1lVEw6/WDmS8PTit4WW5GaYQtiXpHUgfe+LNC63jjzNjqe1Gm61PPdjMfQ MjxKp2KfXWtrQ5jkczbV2AmdMQOrD7LWXOD3R6NrdxW8nuH2lvp89/pMbEFknO1L SvaegpfwmlKNOfY7sPa2OFsPMQckX8JOd9LYHC/P1u9jH56K2nU3wXPeMA4TNgvE yLEOjF58f9nXj7900BTUabHz1lBXNBPIp6HffQTMpVNVyHW2Z0QeQRretwoYX4B8 ybcGqTvkniI/dT/Km984vTVkECe7BeRuumUGw/h62ay8qQ6j/7KOx4/jlwIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFOwrrjLu+b9pHuV3cd2/aije5+GOMB8GA1UdIwQY MBaAFNn4ZvsKqDonGgy33JAwGIyJ0j5dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmZobS13cW9PaWNhRExmY2tEQVlqSW5TUGwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81MjczYTQtMTBjOC00MGJmLWIyNGYt NWMxZDVhNjk5MmQ4LzEvN0N1dU11NzV2MmtlNVhkeDNiOXFLTjduNFk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS81MjczYTQtMTBjOC00MGJmLWIyNGYtNWMxZDVhNjk5MmQ4 LzEvMmZobS13cW9PaWNhRExmY2tEQVlqSW5TUGwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQAHw4YAwQC WSG0AwQAWSSoAwQAWSSvAwQAWSegAwQDsGHoAwQCuZsEAwQC1FXoMA0EAgACMAcD BQEqDb8AMA0GCSqGSIb3DQEBCwUAA4IBAQA2xW5qQfL1c2tr6piZ5BHuatElMSXn iWn5WrfMXC0EEEYIzFD5auaBv4sIaV4QCD98vdSd0fxEj4YqW7XwlRekuFy8f8so SSM4oLdfsReu2yZr/7tazVLXwo6bjvsy227Pq5I045dh7Gv0IU5TT0pDBsBUxGes GUO6RTW6aNCUmUzEX/vqrFPMEE5g/xh+bgO9/7lBPododCkoEpJomxHShJg1Efa5 3yWd1YXGg93uZFlJqwQ6HHevy1bYBF0uSkPfo5qZku/0RO4CrZnXxDeX9z+Rs+MP ZLK35ZSDsU/LYEdI12PeDp2BEbB9RQLDEM0CgMhgqf1pQztWFX6Cnz98 -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:31 2026 by rpki-client