This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/7G49o5z8bi7Lcd53h1h0bVLCJZ4.roa File: 7G49o5z8bi7Lcd53h1h0bVLCJZ4.roa (raw, json) Hash identifier: xDGbGchiaLKjcl8d608rUMISo9V9+y1tYFZNtiJzodk= Subject key identifier: EC:6E:3D:A3:9C:FC:6E:2E:CB:71:DE:77:87:58:74:6D:52:C2:25:9E Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 019B7C131699674347FCE828FF3E142F32B4 Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/7G49o5z8bi7Lcd53h1h0bVLCJZ4.roa Signing time: Fri 02 Jan 2026 00:19:44 +0000 ROA not before: Fri 02 Jan 2026 00:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209372 IP address blocks: 89.185.76.0/24 maxlen: 24 89.185.79.0/24 maxlen: 24 92.240.196.0/24 maxlen: 24 92.240.198.0/24 maxlen: 24 92.240.199.0/24 maxlen: 24 92.240.204.0/24 maxlen: 24 92.240.206.0/23 maxlen: 24 92.240.215.0/24 maxlen: 24 92.240.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:16:99:67:43:47:fc:e8:28:ff:3e:14:2f:32:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Jan 2 00:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec6e3da39cfc6e2ecb71de778758746d52c2259e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ed:b5:c7:58:b2:78:4e:5e:e6:98:1b:60:4e: a9:97:a8:49:19:49:72:81:fc:54:9e:d1:dd:c5:67: 0c:cb:66:dd:67:aa:14:2c:e8:c0:54:77:9f:00:0c: 84:9d:6d:d0:38:02:28:aa:aa:67:2b:7c:0d:35:75: 79:59:5e:71:0f:37:5a:b8:94:60:c0:3c:d2:51:83: 54:61:87:68:80:6e:d4:0d:8e:66:86:b1:13:59:50: 46:5b:88:75:78:ed:a3:b1:fd:3f:22:d9:c2:e8:5a: 59:9c:ec:28:aa:ec:47:2d:dc:f3:5a:60:c6:28:73: fb:d3:aa:d0:9d:44:00:a6:aa:2b:87:32:05:d2:d4: b3:17:e4:b1:89:fa:33:52:ac:e9:18:21:db:36:c0: 3b:f9:aa:93:00:e7:09:b1:31:ff:9e:15:bb:b5:4f: ad:9a:c5:cf:7e:ad:18:b6:58:fe:d2:8b:ad:ff:ae: 78:73:f2:74:25:28:49:bc:45:51:f4:f9:14:3a:19: 18:8d:2f:d1:bc:2a:3a:35:f0:ce:82:73:ba:68:f9: 7f:ca:38:13:23:c4:94:ac:7d:e9:c9:34:52:76:a6: f8:db:2b:71:00:42:fd:9a:40:d1:bc:12:09:cf:72: 22:e4:59:00:e7:3b:d6:63:70:91:81:0e:85:8a:42: 27:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6E:3D:A3:9C:FC:6E:2E:CB:71:DE:77:87:58:74:6D:52:C2:25:9E X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/7G49o5z8bi7Lcd53h1h0bVLCJZ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.76.0/24 89.185.79.0/24 92.240.196.0/24 92.240.198.0/23 92.240.204.0/24 92.240.206.0/23 92.240.215.0/24 92.240.217.0/24 Signature Algorithm: sha256WithRSAEncryption 06:79:de:0e:67:6a:4a:59:0c:df:a1:77:40:cf:cc:27:ee:cf: 65:72:df:53:0f:ff:16:1a:7b:a2:81:f2:27:cc:d3:4d:b0:3b: f9:5b:4e:0b:43:33:4a:65:bf:80:38:4e:56:3e:c3:4b:65:46: 6a:4b:d4:cd:d8:14:40:a8:ee:59:45:53:8b:0b:40:bf:23:f7: 13:b8:59:40:20:16:a4:5f:4c:d5:51:70:1f:02:d3:ce:b6:0b: 66:62:a1:21:78:33:9f:39:c7:f8:e8:2b:f2:37:c3:9f:54:7b: 48:50:a4:99:04:f7:23:69:42:0a:e7:9c:37:5e:d0:55:07:bd: 98:8a:76:97:a9:ea:6d:fd:ff:ff:6b:78:08:58:6f:2f:fc:f5: ed:6f:40:97:c1:24:be:4a:7c:a8:cb:99:c1:c4:de:bb:87:78: f3:63:33:8f:1f:35:f4:c2:7e:34:43:fe:6e:15:ea:c6:87:5f: 43:ea:04:da:c9:37:a9:c4:52:8e:60:b2:43:af:76:dc:13:47: 78:a8:10:98:b4:1d:e7:13:3b:b9:1e:f5:c0:bf:d9:d0:cb:81: b6:a4:30:32:91:df:84:d0:28:5f:f0:85:99:8a:d4:10:e2:08: 44:a4:75:c1:d8:e4:45:54:65:da:71:e1:46:b9:cb:62:e6:f7: 7c:1c:aa:fb -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt8ExaZZ0NH/Ogo/z4ULzK0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjYwMTAyMDAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzZlM2RhMzljZmM2ZTJlY2I3MWRlNzc4NzU4NzQ2ZDUyYzIyNTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu21x1iyeE5e5pgbYE6pl6hJGUly gfxUntHdxWcMy2bdZ6oULOjAVHefAAyEnW3QOAIoqqpnK3wNNXV5WV5xDzdauJRg wDzSUYNUYYdogG7UDY5mhrETWVBGW4h1eO2jsf0/ItnC6FpZnOwoquxHLdzzWmDG KHP706rQnUQApqorhzIF0tSzF+SxifozUqzpGCHbNsA7+aqTAOcJsTH/nhW7tU+t msXPfq0Ytlj+0out/654c/J0JShJvEVR9PkUOhkYjS/RvCo6NfDOgnO6aPl/yjgT I8SUrH3pyTRSdqb42ytxAEL9mkDRvBIJz3Ii5FkA5zvWY3CRgQ6FikInkQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFOxuPaOc/G4uy3Hed4dYdG1SwiWeMB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvN0c0OW81ejhiaTdMY2Q1M2gxaDBiVkxDSlo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAWblMAwQA WblPAwQAXPDEAwQBXPDGAwQAXPDMAwQBXPDOAwQAXPDXAwQAXPDZMA0GCSqGSIb3 DQEBCwUAA4IBAQAGed4OZ2pKWQzfoXdAz8wn7s9lct9TD/8WGnuigfInzNNNsDv5 W04LQzNKZb+AOE5WPsNLZUZqS9TN2BRAqO5ZRVOLC0C/I/cTuFlAIBakX0zVUXAf AtPOtgtmYqEheDOfOcf46CvyN8OfVHtIUKSZBPcjaUIK55w3XtBVB72YinaXqept /f//a3gIWG8v/PXtb0CXwSS+Snyoy5nBxN67h3jzYzOPHzX0wn40Q/5uFerGh19D 6gTayTepxFKOYLJDr3bcE0d4qBCYtB3nEzu5HvXAv9nQy4G2pDAykd+E0Chf8IWZ itQQ4ghEpHXB2ORFVGXaceFGucti5vd8HKr7 -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:36 2026 by rpki-client