This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/7Ybe3VwVebBn_3Dp58ErIFU2DCI.roa File: 7Ybe3VwVebBn_3Dp58ErIFU2DCI.roa (raw, json) Hash identifier: uLq5WfI4V9hrlBMvr6SbcLDBsN0jQny54rAkYdIdE3k= Subject key identifier: ED:86:DE:DD:5C:15:79:B0:67:FF:70:E9:E7:C1:2B:20:55:36:0C:22 Certificate issuer: /CN=851d4e34d4e48539c170451d4e26138887f6e922 Certificate serial: 019B7F15A01BF477152EA4A0D9B33E0B81CB Authority key identifier: 85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/7Ybe3VwVebBn_3Dp58ErIFU2DCI.roa Signing time: Fri 02 Jan 2026 14:21:22 +0000 ROA not before: Fri 02 Jan 2026 14:21:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41960 IP address blocks: 45.129.144.0/22 maxlen: 24 185.249.40.0/22 maxlen: 24 2a0e:5b40::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a0:1b:f4:77:15:2e:a4:a0:d9:b3:3e:0b:81:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=851d4e34d4e48539c170451d4e26138887f6e922 Validity Not Before: Jan 2 14:21:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed86dedd5c1579b067ff70e9e7c12b2055360c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:54:14:2f:e0:a2:f4:0b:04:fe:ae:a7:38:1f: 4d:5b:f1:3d:83:06:49:22:6a:70:57:13:a2:e0:ce: 62:e8:4e:a4:83:dc:f4:62:25:20:10:5d:b8:00:5a: e6:fa:a5:14:96:4b:1b:f7:9a:eb:89:f2:7a:b0:fd: 66:b4:0f:d8:b7:23:c2:bf:eb:4f:8f:fb:e6:d3:e0: 8a:13:72:9e:66:d9:13:a0:19:41:54:0a:08:3b:99: d3:27:a3:21:1c:75:63:99:35:62:13:e8:fa:38:c2: 47:c6:32:d8:3a:1d:4d:39:24:5d:93:f3:a5:af:f8: ea:2c:f4:06:e3:5c:30:eb:74:e7:5e:35:2c:7e:86: 20:b4:45:dd:d3:5f:79:db:46:8e:04:79:a8:c2:2a: 54:88:90:0a:2d:2d:82:36:d5:1b:cd:e4:ab:41:1f: b7:0a:6e:eb:7b:58:25:7e:43:c3:bf:8e:2f:55:41: 67:5a:da:05:70:02:3f:f5:95:0d:c5:92:cd:b2:a2: cb:b6:c2:9f:6b:25:d7:ec:16:a2:58:a1:95:ea:ca: 83:9c:bc:b9:cf:c8:e5:73:a2:6e:a4:1a:11:a1:85: d0:9f:3f:a6:53:82:e6:78:01:9a:6f:2d:82:54:e2: aa:b4:71:12:63:0e:45:f1:6d:ce:9d:88:70:d1:8f: be:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:86:DE:DD:5C:15:79:B0:67:FF:70:E9:E7:C1:2B:20:55:36:0C:22 X509v3 Authority Key Identifier: keyid:85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/7Ybe3VwVebBn_3Dp58ErIFU2DCI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.144.0/22 185.249.40.0/22 IPv6: 2a0e:5b40::/29 Signature Algorithm: sha256WithRSAEncryption 4d:d8:ba:0c:7a:cc:43:32:3b:45:0e:d5:01:75:2e:1c:be:4a: 0c:33:4a:0a:7c:03:da:85:ce:79:40:a5:44:52:ec:39:64:2c: 4a:0a:5e:48:e4:29:d6:58:ae:23:23:03:81:46:41:ab:ee:d4: 39:b6:4d:6a:89:93:20:4a:5d:f3:4a:fe:93:cf:0e:83:2d:bf: 0f:c0:50:41:2d:59:08:94:d0:77:b3:eb:e7:17:68:c4:f3:d1: 5e:b1:0e:d8:e3:e8:c8:f7:79:1f:77:5c:d9:05:06:2d:00:89: 5f:ff:ee:8d:ac:99:ab:4f:46:5b:a3:64:df:a6:fb:f6:23:cf: 47:16:97:06:87:1c:13:96:7b:de:6d:99:38:09:a1:1e:c1:aa: 03:8d:01:5b:75:45:f6:50:12:84:1c:49:70:73:15:7d:f4:fa: a6:b0:fa:60:ac:4e:fb:b5:8c:f8:6c:ae:87:3d:25:fc:ba:e8: a2:33:35:66:bb:f7:31:de:ab:f5:ff:86:37:a9:e1:0e:2e:3b: b4:19:06:90:24:2f:cb:d3:e2:0d:f0:fc:0e:62:d0:d4:48:17: a8:8e:e9:c4:d7:88:bc:bf:28:e0:7f:88:1e:ec:18:a7:ac:58: c7:3b:d8:67:29:81:a2:db:06:b8:e3:e1:27:b3:ea:05:3f:62: fe:c3:5d:ec -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/FaAb9HcVLqSg2bM+C4HLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MWQ0ZTM0ZDRlNDg1MzljMTcwNDUxZDRlMjYxMzg4ODdm NmU5MjIwHhcNMjYwMTAyMTQyMTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDg2ZGVkZDVjMTU3OWIwNjdmZjcwZTllN2MxMmIyMDU1MzYwYzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lQUL+Ci9AsE/q6nOB9NW/E9gwZJ ImpwVxOi4M5i6E6kg9z0YiUgEF24AFrm+qUUlksb95rrifJ6sP1mtA/YtyPCv+tP j/vm0+CKE3KeZtkToBlBVAoIO5nTJ6MhHHVjmTViE+j6OMJHxjLYOh1NOSRdk/Ol r/jqLPQG41ww63TnXjUsfoYgtEXd019520aOBHmowipUiJAKLS2CNtUbzeSrQR+3 Cm7re1glfkPDv44vVUFnWtoFcAI/9ZUNxZLNsqLLtsKfayXX7BaiWKGV6sqDnLy5 z8jlc6JupBoRoYXQnz+mU4LmeAGaby2CVOKqtHESYw5F8W3OnYhw0Y++cQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFO2G3t1cFXmwZ/9w6efBKyBVNgwiMB8GA1UdIwQY MBaAFIUdTjTU5IU5wXBFHU4mE4iH9ukiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFIxT05OVGtoVG5CY0VVZFRpWVRpSWYyNlNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9iZjE1ODktNmFkZi00NGIzLTk3NDYt ODFjNDA1NTE0OGUwLzEvN1liZTNWd1ZlYkJuXzNEcDU4RXJJRlUyRENJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9iZjE1ODktNmFkZi00NGIzLTk3NDYtODFjNDA1NTE0OGUw LzEvaFIxT05OVGtoVG5CY0VVZFRpWVRpSWYyNlNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLYGQAwQC ufkoMA0EAgACMAcDBQMqDltAMA0GCSqGSIb3DQEBCwUAA4IBAQBN2LoMesxDMjtF DtUBdS4cvkoMM0oKfAPahc55QKVEUuw5ZCxKCl5I5CnWWK4jIwOBRkGr7tQ5tk1q iZMgSl3zSv6Tzw6DLb8PwFBBLVkIlNB3s+vnF2jE89FesQ7Y4+jI93kfd1zZBQYt AIlf/+6NrJmrT0Zbo2Tfpvv2I89HFpcGhxwTlnvebZk4CaEewaoDjQFbdUX2UBKE HElwcxV99PqmsPpgrE77tYz4bK6HPSX8uuiiMzVmu/cx3qv1/4Y3qeEOLju0GQaQ JC/L0+IN8PwOYtDUSBeojunE14i8vyjgf4ge7BinrFjHO9hnKYGi2wa44+Ens+oF P2L+w13s -----END CERTIFICATE-----Generated at Mon Jan 26 23:44:14 2026 by rpki-client