This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/x7Aj5c5CpHS67EHFhHxGqUYLP5k.roa File: x7Aj5c5CpHS67EHFhHxGqUYLP5k.roa (raw, json) Hash identifier: iWGIy+nJxt4QRzgUWqeDa1YvqhMWXQYW748n4+4nrgY= Subject key identifier: C7:B0:23:E5:CE:42:A4:74:BA:EC:41:C5:84:7C:46:A9:46:0B:3F:99 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C13A6EF395CEAA5F6F97E7C3E15DA8E Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/x7Aj5c5CpHS67EHFhHxGqUYLP5k.roa Signing time: Fri 02 Jan 2026 00:20:21 +0000 ROA not before: Fri 02 Jan 2026 00:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396356 IP address blocks: 185.223.152.0/24 maxlen: 24 185.255.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:a6:ef:39:5c:ea:a5:f6:f9:7e:7c:3e:15:da:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7b023e5ce42a474baec41c5847c46a9460b3f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:37:47:6f:fc:96:07:54:41:6f:8d:81:1b:ae: be:83:29:b3:c4:5d:4a:17:38:5d:2b:9b:94:3c:d5: 8f:16:22:fa:7d:0c:07:3a:e9:d7:69:6e:4b:b7:e6: 81:ef:02:b0:81:b1:2e:72:98:f8:46:9d:d5:71:de: 75:bc:d0:3e:28:57:c5:9b:e1:85:70:8a:84:c5:cf: 91:94:15:5b:26:61:dd:02:b9:c6:88:bd:cd:43:cf: 12:c6:45:03:b7:65:35:18:2e:4a:ad:59:df:37:95: 50:fc:a9:95:d3:a2:0c:f9:ad:d6:6e:f0:24:eb:f7: 6e:0d:bc:9d:e9:da:14:8a:28:f4:c4:b3:ea:15:d5: 04:a1:5d:44:8b:24:b6:f0:29:d6:b2:a7:ea:47:58: ac:49:8b:6f:75:91:4f:a6:b3:2c:b8:22:d7:69:af: ea:6e:6f:2e:0d:25:c8:30:89:23:1e:37:17:cd:4f: 72:d7:cb:d4:f2:b5:e6:f1:7d:5f:4c:14:54:39:2e: f1:4f:ed:5e:39:10:df:39:8a:ff:b9:03:c0:ff:77: 37:55:61:b1:51:71:ec:39:bd:50:72:d0:8b:3e:a0: 7a:90:00:2e:05:71:0f:51:e3:ef:d7:6f:39:37:ea: 8a:8a:2c:3f:d1:fb:d6:46:d9:47:33:96:8c:2e:96: ca:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B0:23:E5:CE:42:A4:74:BA:EC:41:C5:84:7C:46:A9:46:0B:3F:99 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/x7Aj5c5CpHS67EHFhHxGqUYLP5k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.223.152.0/24 185.255.124.0/24 Signature Algorithm: sha256WithRSAEncryption 00:2f:ed:1c:38:66:49:07:c0:08:d6:74:cd:17:8b:92:9a:3f: df:89:b1:f1:21:3a:94:5f:4a:99:ae:26:ba:98:b6:b1:55:65: c7:78:fe:e7:aa:78:01:13:3a:c6:16:91:cc:cc:83:cf:c8:a7: 2a:01:5d:ae:61:8b:69:3c:4b:af:6a:4c:ad:10:47:06:a1:b0: 51:1e:ce:dc:ff:e1:31:6c:68:85:f3:51:aa:51:95:91:1d:ae: 85:f6:16:81:cc:65:99:5b:0f:27:20:44:a3:59:ee:d7:1f:fd: d4:03:d0:1b:37:ee:6c:fb:05:b1:82:d2:17:96:c8:32:b1:1a: b8:9d:a5:24:68:ce:5b:65:39:9b:2f:b5:8b:16:8b:08:2f:05: c9:55:6c:9a:9e:90:46:33:a4:1e:1f:c3:61:55:ff:9d:a3:13: 3e:42:bd:fa:66:9d:44:61:86:f1:d8:29:f2:c6:bd:8e:f0:f8: f6:38:4d:30:66:10:37:d3:22:90:41:7f:e8:45:69:7f:ac:56: d1:43:e9:ae:4e:78:45:02:62:6b:e8:3c:36:95:06:d1:ba:68: ba:ed:a4:fd:6c:d9:d2:d1:08:c7:1c:cd:81:0e:5a:19:dc:43: 6b:31:5e:99:f7:6e:42:83:08:d7:8a:0a:4c:e0:71:3a:e3:b3: 1b:2e:b1:b1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8E6bvOVzqpfb5fnw+FdqOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2IwMjNlNWNlNDJhNDc0YmFlYzQxYzU4NDdjNDZhOTQ2MGIzZjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDdHb/yWB1RBb42BG66+gymzxF1K FzhdK5uUPNWPFiL6fQwHOunXaW5Lt+aB7wKwgbEucpj4Rp3Vcd51vNA+KFfFm+GF cIqExc+RlBVbJmHdArnGiL3NQ88SxkUDt2U1GC5KrVnfN5VQ/KmV06IM+a3WbvAk 6/duDbyd6doUiij0xLPqFdUEoV1EiyS28CnWsqfqR1isSYtvdZFPprMsuCLXaa/q bm8uDSXIMIkjHjcXzU9y18vU8rXm8X1fTBRUOS7xT+1eORDfOYr/uQPA/3c3VWGx UXHsOb1QctCLPqB6kAAuBXEPUePv1285N+qKiiw/0fvWRtlHM5aMLpbKLQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMewI+XOQqR0uuxBxYR8RqlGCz+ZMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEveDdBajVjNUNwSFM2N0VIRmhIeEdxVVlMUDVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAud+YAwQA uf98MA0GCSqGSIb3DQEBCwUAA4IBAQAAL+0cOGZJB8AI1nTNF4uSmj/fibHxITqU X0qZria6mLaxVWXHeP7nqngBEzrGFpHMzIPPyKcqAV2uYYtpPEuvakytEEcGobBR Hs7c/+ExbGiF81GqUZWRHa6F9haBzGWZWw8nIESjWe7XH/3UA9AbN+5s+wWxgtIX lsgysRq4naUkaM5bZTmbL7WLFosILwXJVWyanpBGM6QeH8NhVf+doxM+Qr36Zp1E YYbx2Cnyxr2O8Pj2OE0wZhA30yKQQX/oRWl/rFbRQ+muTnhFAmJr6Dw2lQbRumi6 7aT9bNnS0QjHHM2BDloZ3ENrMV6Z925CgwjXigpM4HE647MbLrGx -----END CERTIFICATE-----Generated at Fri Jan 2 23:53:21 2026 by rpki-client