This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/7kGNbroThpMnN96LqRGM-Y-5t9Y.roa File: 7kGNbroThpMnN96LqRGM-Y-5t9Y.roa (raw, json) Hash identifier: lxPWqX0/OpM/p7/y+8GA/oyT71oB2fzc6nqiYIWie7o= Subject key identifier: EE:41:8D:6E:BA:13:86:93:27:37:DE:8B:A9:11:8C:F9:8F:B9:B7:D6 Certificate issuer: /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a Certificate serial: 019B7B359A554643921BE9858E1E64D92C1E Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/7kGNbroThpMnN96LqRGM-Y-5t9Y.roa Signing time: Thu 01 Jan 2026 20:17:48 +0000 ROA not before: Thu 01 Jan 2026 20:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200480 IP address blocks: 185.105.240.0/22 maxlen: 22 185.105.240.0/24 maxlen: 24 185.241.16.0/22 maxlen: 22 2a06:38c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:9a:55:46:43:92:1b:e9:85:8e:1e:64:d9:2c:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a Validity Not Before: Jan 1 20:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee418d6eba1386932737de8ba9118cf98fb9b7d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5c:fb:0c:e5:f8:07:2f:ae:1b:f4:34:40:41: e9:ba:27:7a:e9:0e:72:44:85:57:12:76:32:68:22: 6c:5a:87:12:4e:ee:a7:e7:3d:ec:0a:35:96:f7:dc: 3a:af:82:26:10:71:1d:4a:cd:ac:40:9c:4e:e1:60: bd:6f:c0:b5:e0:68:00:75:60:ae:f2:86:0f:38:ff: 77:03:ed:86:ef:51:03:b6:82:0c:3c:d4:f4:40:7b: f7:2e:97:11:67:7d:85:0c:b8:a1:ac:28:22:36:cd: f7:cd:24:f6:64:fe:77:4f:ae:76:52:d5:a9:ff:3a: 26:74:d5:63:b2:00:19:c6:96:f4:19:cd:35:db:22: 40:86:cf:da:a1:17:9b:53:a0:26:cc:d1:91:b4:29: a3:cc:b9:f5:c6:41:36:34:4e:8a:f8:ed:11:ba:d8: 83:0d:83:da:bd:d5:89:1f:55:18:aa:6b:2a:04:a1: bd:dc:67:25:97:c1:17:27:28:f0:e0:24:70:1b:d5: a6:c3:89:88:9d:5e:52:ad:12:81:dc:8a:49:37:b6: 44:b9:09:25:27:1e:9f:7c:cb:80:d3:22:dc:41:90: e6:aa:f0:34:1f:b9:1f:02:37:b8:d3:17:07:2f:6f: e4:ff:72:65:54:0f:38:a3:67:b5:fb:0c:1d:a2:bb: 5d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:41:8D:6E:BA:13:86:93:27:37:DE:8B:A9:11:8C:F9:8F:B9:B7:D6 X509v3 Authority Key Identifier: keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/7kGNbroThpMnN96LqRGM-Y-5t9Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.105.240.0/22 185.241.16.0/22 IPv6: 2a06:38c0::/29 Signature Algorithm: sha256WithRSAEncryption e4:e6:23:9b:e1:98:ee:d4:5d:a5:60:ec:36:86:e0:9a:83:f5: f8:c6:1b:a5:87:c6:ad:71:4e:01:72:44:56:23:fe:a6:8e:70: 4d:04:4b:fb:3f:ea:a5:0a:1b:9f:b6:09:89:04:49:09:9d:0b: 85:c2:4f:5c:8c:82:98:fe:1d:e0:71:85:14:b9:5e:fa:ec:16: f2:dc:87:b6:f7:e5:2a:e6:55:6b:e9:43:2b:cd:1d:1c:84:ea: 49:95:1c:0e:d4:5c:2b:fb:9c:50:ed:8a:51:52:c6:9a:46:1e: 74:f4:c2:ce:8e:d3:96:1d:12:31:26:5a:c6:ba:55:f3:88:db: 63:0d:e2:d6:43:1e:ba:88:10:c9:f6:7a:14:e9:5f:70:f3:b5: ac:a5:59:5d:fb:d5:1f:72:ca:5f:13:8a:eb:a5:01:84:09:7b: a3:12:46:ce:4f:ba:a8:86:cf:ca:a3:9a:7c:18:0b:c2:0d:d0: 50:85:89:82:09:33:4a:9c:16:2d:12:f8:e7:4b:99:b0:62:96: f5:58:5e:6f:3d:39:86:f5:05:1d:da:00:19:20:a6:68:72:64: 60:e6:40:dc:c0:fd:1e:a2:96:bd:3a:cf:7d:6c:9a:18:6e:8a: 0c:25:b9:ee:d7:91:0d:51:ed:b2:25:ac:32:99:e7:bf:72:d6: 4d:50:07:aa -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7NZpVRkOSG+mFjh5k2SweMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZjQzMGQwODA1ZjQyZmZhM2JjZDBjMGI3YzU1MDgwNTEx NzkyM2EwHhcNMjYwMTAxMjAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTQxOGQ2ZWJhMTM4NjkzMjczN2RlOGJhOTExOGNmOThmYjliN2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1z7DOX4By+uG/Q0QEHpuid66Q5y RIVXEnYyaCJsWocSTu6n5z3sCjWW99w6r4ImEHEdSs2sQJxO4WC9b8C14GgAdWCu 8oYPOP93A+2G71EDtoIMPNT0QHv3LpcRZ32FDLihrCgiNs33zST2ZP53T652UtWp /zomdNVjsgAZxpb0Gc012yJAhs/aoRebU6AmzNGRtCmjzLn1xkE2NE6K+O0RutiD DYPavdWJH1UYqmsqBKG93Gcll8EXJyjw4CRwG9Wmw4mInV5SrRKB3IpJN7ZEuQkl Jx6ffMuA0yLcQZDmqvA0H7kfAje40xcHL2/k/3JlVA84o2e1+wwdortd6QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFO5BjW66E4aTJzfei6kRjPmPubfWMB8GA1UdIwQY MBaAFPT0MNCAX0L/o7zQwLfFUIBRF5I6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAt ZjBmOTNjY2EyNDc5LzEvN2tHTmJyb1RocE1uTjk2THFSR00tWS01dDlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAtZjBmOTNjY2EyNDc5 LzEvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuWnwAwQC ufEQMA0EAgACMAcDBQMqBjjAMA0GCSqGSIb3DQEBCwUAA4IBAQDk5iOb4Zju1F2l YOw2huCag/X4xhulh8atcU4BckRWI/6mjnBNBEv7P+qlChuftgmJBEkJnQuFwk9c jIKY/h3gcYUUuV767Bby3Ie29+Uq5lVr6UMrzR0chOpJlRwO1Fwr+5xQ7YpRUsaa Rh509MLOjtOWHRIxJlrGulXziNtjDeLWQx66iBDJ9noU6V9w87WspVld+9Ufcspf E4rrpQGECXujEkbOT7qohs/Ko5p8GAvCDdBQhYmCCTNKnBYtEvjnS5mwYpb1WF5v PTmG9QUd2gAZIKZocmRg5kDcwP0eopa9Os99bJoYbooMJbnu15ENUe2yJawymee/ ctZNUAeq -----END CERTIFICATE-----Generated at Tue Feb 10 01:24:42 2026 by rpki-client