This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/u7nm7KaLFEUobvomxOuq9AM0PKw.roa File: u7nm7KaLFEUobvomxOuq9AM0PKw.roa (raw, json) Hash identifier: 8P2GbtAuUpiA0weZTjQJgKOoytVL0f8XEYruP/NDhps= Subject key identifier: BB:B9:E6:EC:A6:8B:14:45:28:6E:FA:26:C4:EB:AA:F4:03:34:3C:AC Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758E3412875CEF83F2499F1F8467BE1 Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/u7nm7KaLFEUobvomxOuq9AM0PKw.roa Signing time: Thu 01 Jan 2026 02:17:52 +0000 ROA not before: Thu 01 Jan 2026 02:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44103 IP address blocks: 185.150.96.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e3:41:28:75:ce:f8:3f:24:99:f1:f8:46:7b:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbb9e6eca68b1445286efa26c4ebaaf403343cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:07:94:76:88:cc:1b:c4:6f:3d:dc:e3:39:0d: d7:df:cf:d9:65:d7:4e:a4:6e:32:a3:f7:02:4b:a9: df:6a:f1:9d:1a:dc:24:ee:42:91:72:d8:a9:9e:51: 7b:ac:c0:30:af:da:ef:18:f1:82:7d:22:de:ce:92: e5:c3:82:54:6e:e0:0d:28:89:c9:fb:41:6a:f9:dd: 41:99:3e:a0:0c:3a:f4:73:2d:61:db:aa:d5:cc:56: 68:ce:14:bf:1c:8e:cb:1c:2a:a3:0a:26:a1:d0:61: 70:54:9a:c9:06:fb:28:cf:44:ad:27:a6:41:a9:80: 48:e0:94:62:02:13:bd:c6:8a:3f:4c:9f:55:33:5a: d4:d8:36:8b:11:41:46:40:f0:23:6f:ec:bd:00:82: 17:80:0a:83:0a:8b:09:13:49:b0:b1:d9:eb:d3:07: 83:06:97:5a:c4:ac:a5:90:8f:a8:3a:ef:e6:5f:4b: 74:fe:0f:5e:35:1a:ed:76:7e:f5:eb:46:32:62:7e: 29:1b:b4:41:0b:c8:b5:05:3e:25:52:51:da:64:4c: ce:57:3e:59:6f:88:47:67:44:fa:6d:50:ec:2b:ce: f9:57:59:0d:ff:af:15:ae:fb:fc:75:11:d6:6a:f1: ec:31:1d:08:2a:2e:f5:60:bf:42:4e:08:24:a8:ab: ca:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B9:E6:EC:A6:8B:14:45:28:6E:FA:26:C4:EB:AA:F4:03:34:3C:AC X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/u7nm7KaLFEUobvomxOuq9AM0PKw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.96.0/24 Signature Algorithm: sha256WithRSAEncryption 62:b6:e4:3d:44:32:b4:cb:4d:0e:c3:84:a0:80:e5:a1:ab:f2: d8:1f:0e:6d:80:4d:b3:3f:c4:e6:8b:2b:8d:8a:23:03:2b:e2: 9b:94:17:40:fc:41:3e:7b:f1:66:b5:c6:b8:41:ad:95:85:63: 00:9d:17:1f:cf:d3:45:12:a2:3a:60:01:99:16:51:09:35:9c: 4e:ed:d2:22:bc:ad:36:da:8b:d3:c6:63:49:3f:00:01:2d:f8: be:a9:6a:9d:5f:b2:9d:3a:d9:47:55:31:4c:c7:6e:57:af:61: aa:d7:88:75:bd:83:fb:c2:78:2d:e9:bc:52:9f:48:a8:13:44: 88:16:a4:b8:ec:09:49:48:9e:a5:5d:74:e2:49:5c:f7:02:9f: f3:3e:3b:68:b6:5b:48:3c:30:ba:3a:1c:39:af:f5:06:d4:3e: 35:fb:bb:f6:b7:d8:05:ed:9d:ac:de:57:ca:d1:49:92:ac:2d: 97:97:80:de:a8:62:ee:b9:c8:d4:18:eb:0c:43:a3:31:73:16: 54:47:04:ff:14:81:3a:33:ef:68:26:77:6b:e0:03:95:36:51: 59:cd:e7:b2:22:51:ca:40:ab:35:19:db:92:6d:0d:4f:b3:c1: 43:2d:56:33:75:82:30:83:63:94:81:cb:1e:27:66:32:92:3b: 4e:72:35:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WONBKHXO+D8kmfH4RnvhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmI5ZTZlY2E2OGIxNDQ1Mjg2ZWZhMjZjNGViYWFmNDAzMzQzY2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQeUdojMG8RvPdzjOQ3X38/ZZddO pG4yo/cCS6nfavGdGtwk7kKRctipnlF7rMAwr9rvGPGCfSLezpLlw4JUbuANKInJ +0Fq+d1BmT6gDDr0cy1h26rVzFZozhS/HI7LHCqjCiah0GFwVJrJBvsoz0StJ6ZB qYBI4JRiAhO9xoo/TJ9VM1rU2DaLEUFGQPAjb+y9AIIXgAqDCosJE0mwsdnr0weD BpdaxKylkI+oOu/mX0t0/g9eNRrtdn7160YyYn4pG7RBC8i1BT4lUlHaZEzOVz5Z b4hHZ0T6bVDsK875V1kN/68Vrvv8dRHWavHsMR0IKi71YL9CTggkqKvKVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLu55uymixRFKG76JsTrqvQDNDysMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvdTdubTdLYUxGRVVvYnZvbXhPdXE5QU0wUEt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZZgMA0G CSqGSIb3DQEBCwUAA4IBAQBituQ9RDK0y00Ow4SggOWhq/LYHw5tgE2zP8TmiyuN iiMDK+KblBdA/EE+e/Fmtca4Qa2VhWMAnRcfz9NFEqI6YAGZFlEJNZxO7dIivK02 2ovTxmNJPwABLfi+qWqdX7KdOtlHVTFMx25Xr2Gq14h1vYP7wngt6bxSn0ioE0SI FqS47AlJSJ6lXXTiSVz3Ap/zPjtotltIPDC6Ohw5r/UG1D41+7v2t9gF7Z2s3lfK 0UmSrC2Xl4DeqGLuucjUGOsMQ6MxcxZURwT/FIE6M+9oJndr4AOVNlFZzeeyIlHK QKs1GduSbQ1Ps8FDLVYzdYIwg2OUgcseJ2YykjtOcjUS -----END CERTIFICATE-----Generated at Wed Jan 21 00:04:10 2026 by rpki-client