This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/7sPrb7r6Wy8uPvEBWargP4rupus.roa File: 7sPrb7r6Wy8uPvEBWargP4rupus.roa (raw, json) Hash identifier: +2Id5rt613qaytwLMb0HTOHjHFwJxeYQxhjfTHDMFN4= Subject key identifier: EE:C3:EB:6F:BA:FA:5B:2F:2E:3E:F1:01:59:AA:E0:3F:8A:EE:A6:EB Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Certificate serial: 019B76EB2F2D5A54285DEEBC44A462E47658 Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/7sPrb7r6Wy8uPvEBWargP4rupus.roa Signing time: Thu 01 Jan 2026 00:18:03 +0000 ROA not before: Thu 01 Jan 2026 00:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5537 IP address blocks: 89.111.128.0/18 maxlen: 18 89.111.144.0/20 maxlen: 20 89.111.148.0/24 maxlen: 24 89.111.160.0/20 maxlen: 20 89.111.176.0/20 maxlen: 24 89.111.177.0/24 maxlen: 24 2a01:d8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 15:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:2f:2d:5a:54:28:5d:ee:bc:44:a4:62:e4:76:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Validity Not Before: Jan 1 00:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eec3eb6fbafa5b2f2e3ef10159aae03f8aeea6eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:29:1c:b0:3a:c5:47:eb:ab:51:19:23:84:00: 2d:63:76:6f:9e:91:93:c8:29:7d:2e:06:4c:e9:4d: 80:66:d9:23:eb:6f:15:e1:6e:2c:ad:c3:ad:ad:41: 59:2d:d8:51:bc:d8:05:cc:f4:49:65:f0:5d:b0:57: 18:ce:b9:58:8d:3c:1e:8e:8e:a5:c2:79:91:31:d0: ad:f0:71:f1:83:e9:43:03:9e:98:34:d5:26:e7:1c: 66:1f:02:21:55:f5:7c:a7:87:97:26:a1:67:56:39: 00:19:fe:15:4d:83:89:87:86:98:5d:bb:72:85:e4: 05:06:9b:ea:de:34:84:7f:a3:64:3b:b7:ae:54:b0: a8:06:90:f1:36:0f:5d:57:dd:d6:c7:5a:86:ce:ad: 6f:cc:77:da:42:9b:6e:46:d4:3e:d9:7e:08:9a:d1: 15:f7:8d:99:f2:af:32:a1:d7:38:b6:dd:80:90:c0: 0b:09:22:4f:b0:ac:bd:99:33:47:24:d9:96:5b:ac: 28:85:a8:5c:59:83:38:72:2b:9d:04:9a:d3:0d:d0: 8b:c0:f9:82:1c:8a:b9:0c:cb:79:06:c9:88:70:08: 49:c5:d0:77:08:c1:d5:d3:71:23:e3:48:25:3f:f6: 7c:af:be:4c:cb:04:d2:cc:39:d5:e4:10:d3:44:4b: ed:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C3:EB:6F:BA:FA:5B:2F:2E:3E:F1:01:59:AA:E0:3F:8A:EE:A6:EB X509v3 Authority Key Identifier: keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/7sPrb7r6Wy8uPvEBWargP4rupus.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.111.128.0/18 IPv6: 2a01:d8::/32 Signature Algorithm: sha256WithRSAEncryption 67:fd:82:90:b9:a8:c9:f1:c6:86:86:73:7b:98:7b:7c:38:25: 8d:3c:c3:40:f4:24:61:5d:03:33:ed:cd:18:cb:97:47:e5:c2: aa:76:1b:ab:1b:0f:89:c8:7d:9e:9c:e9:4a:96:ed:e8:d6:fa: f5:a5:ca:1b:d2:d9:49:b0:b1:0a:ce:7f:72:2e:84:c1:68:0c: cf:9f:13:d3:5a:eb:ae:5a:65:6b:4a:9b:ad:dd:87:55:53:0b: ca:9f:1f:62:36:41:df:40:b6:71:00:0c:bf:17:81:00:7c:93: e4:c5:30:43:5b:e4:c2:2c:a4:91:bf:09:21:14:3c:a5:9a:cf: 3a:5e:14:dc:5c:4e:b0:50:a3:86:39:43:f8:1b:f5:f5:b0:2d: 21:80:92:b2:77:71:07:01:48:76:1b:f1:af:9f:7c:1d:8d:f2: a3:15:34:17:42:46:68:bf:f8:e6:6c:3d:50:19:7a:8b:43:c0: 48:ba:f8:49:af:5d:23:e3:c6:f1:a4:f8:58:dc:57:6e:ca:b4: 8f:71:6f:e7:f6:b0:7e:64:c2:b2:22:25:f1:42:4e:89:b1:c8: 87:63:44:be:bd:48:b0:24:0e:99:5a:36:21:35:e9:26:ce:93: a6:52:c8:95:96:77:06:f2:ab:e7:24:32:28:f0:c8:20:8d:d1: 8f:ea:f0:9f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt26y8tWlQoXe68RKRi5HZYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2 ZjFmZmYwHhcNMjYwMTAxMDAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWMzZWI2ZmJhZmE1YjJmMmUzZWYxMDE1OWFhZTAzZjhhZWVhNmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ikcsDrFR+urURkjhAAtY3ZvnpGT yCl9LgZM6U2AZtkj628V4W4srcOtrUFZLdhRvNgFzPRJZfBdsFcYzrlYjTwejo6l wnmRMdCt8HHxg+lDA56YNNUm5xxmHwIhVfV8p4eXJqFnVjkAGf4VTYOJh4aYXbty heQFBpvq3jSEf6NkO7euVLCoBpDxNg9dV93Wx1qGzq1vzHfaQptuRtQ+2X4ImtEV 942Z8q8yodc4tt2AkMALCSJPsKy9mTNHJNmWW6wohahcWYM4ciudBJrTDdCLwPmC HIq5DMt5BsmIcAhJxdB3CMHV03Ej40glP/Z8r75MywTSzDnV5BDTREvtNQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFO7D62+6+lsvLj7xAVmq4D+K7qbrMB8GA1UdIwQY MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt NGY0ZTcxZTMyMDg0LzEvN3NQcmI3cjZXeTh1UHZFQldhcmdQNHJ1cHVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0 LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQGWW+AMA0E AgACMAcDBQAqAQDYMA0GCSqGSIb3DQEBCwUAA4IBAQBn/YKQuajJ8caGhnN7mHt8 OCWNPMNA9CRhXQMz7c0Yy5dH5cKqdhurGw+JyH2enOlKlu3o1vr1pcob0tlJsLEK zn9yLoTBaAzPnxPTWuuuWmVrSput3YdVUwvKnx9iNkHfQLZxAAy/F4EAfJPkxTBD W+TCLKSRvwkhFDylms86XhTcXE6wUKOGOUP4G/X1sC0hgJKyd3EHAUh2G/Gvn3wd jfKjFTQXQkZov/jmbD1QGXqLQ8BIuvhJr10j48bxpPhY3FduyrSPcW/n9rB+ZMKy IiXxQk6JsciHY0S+vUiwJA6ZWjYhNekmzpOmUsiVlncG8qvnJDIo8MggjdGP6vCf -----END CERTIFICATE-----Generated at Tue Jan 27 19:15:45 2026 by rpki-client