This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/U7OkwaNHpgwpk_IKbz0Zyz5OXzk.roa File: U7OkwaNHpgwpk_IKbz0Zyz5OXzk.roa (raw, json) Hash identifier: Fsw63Ry87JP1NMdSW0Lo12MCLQq4XEdntr9zF454Dbk= Subject key identifier: 53:B3:A4:C1:A3:47:A6:0C:29:93:F2:0A:6F:3D:19:CB:3E:4E:5F:39 Certificate issuer: /CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0 Certificate serial: 019B7DCAB8CB39F522427BF7F9B622BDE74B Authority key identifier: 7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/U7OkwaNHpgwpk_IKbz0Zyz5OXzk.roa Signing time: Fri 02 Jan 2026 08:19:56 +0000 ROA not before: Fri 02 Jan 2026 08:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50554 IP address blocks: 89.106.160.0/21 maxlen: 24 139.28.112.0/22 maxlen: 24 185.3.176.0/22 maxlen: 24 2a00:1bc8::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 23:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:b8:cb:39:f5:22:42:7b:f7:f9:b6:22:bd:e7:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0 Validity Not Before: Jan 2 08:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53b3a4c1a347a60c2993f20a6f3d19cb3e4e5f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7c:c4:83:10:48:a6:95:d2:0f:63:d7:5e:76: 59:68:64:5d:56:50:72:65:b3:64:46:dc:77:1b:b5: 74:cb:f4:02:ec:a4:f2:8d:d6:0e:4f:c0:9c:80:95: f5:34:6b:79:da:ba:db:08:c7:ea:a3:22:65:e4:b1: 4d:e1:24:af:50:b1:aa:4d:e6:2e:94:ff:82:d4:bd: c9:4f:e9:74:92:80:dc:6a:8c:35:93:fe:b0:b6:0e: 78:58:5a:8b:d5:2c:94:73:c7:9b:7a:5f:94:33:61: d5:17:5d:06:c6:e0:23:eb:c1:cc:ec:06:b0:89:4d: 83:aa:02:0c:a4:ad:b1:3d:f3:92:02:b0:90:7c:7d: 20:1b:02:85:12:7b:08:a7:8b:8c:87:cd:1b:3d:31: f4:b7:30:f6:7d:ce:c5:59:20:d9:d2:c2:ce:b8:87: 92:fd:33:55:83:e6:ae:37:3a:78:fd:b6:09:cd:f2: 12:8b:3a:a6:dd:1d:f6:7c:d4:6e:6b:fd:38:c1:21: c5:8d:cc:ec:71:9c:e1:c8:89:ad:a6:45:84:39:9a: 68:95:08:e3:9f:0c:0c:ae:0c:20:4a:71:84:b4:21: 41:80:3e:09:5f:d8:e1:c8:54:36:55:74:ab:41:ff: e2:59:32:86:8c:7c:bc:7f:c7:3e:50:31:b4:5c:61: 49:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B3:A4:C1:A3:47:A6:0C:29:93:F2:0A:6F:3D:19:CB:3E:4E:5F:39 X509v3 Authority Key Identifier: keyid:7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/U7OkwaNHpgwpk_IKbz0Zyz5OXzk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.160.0/21 139.28.112.0/22 185.3.176.0/22 IPv6: 2a00:1bc8::/29 Signature Algorithm: sha256WithRSAEncryption 30:32:a4:ab:39:e9:7e:ba:1f:00:a0:e6:6e:b8:bb:66:a5:75: 73:09:61:c7:2b:c2:d8:b0:8d:18:00:91:2a:ad:40:89:bf:37: 34:af:ac:c8:4f:b1:c2:0f:8f:54:fc:a8:20:1b:5f:28:9d:0f: 00:fc:a7:d2:8f:e6:80:da:61:50:ea:e8:ea:a4:5d:4c:89:ed: d4:2f:6d:24:dd:a1:9e:6c:44:f1:19:f6:26:cd:b7:a6:a0:7b: c4:4a:6f:a3:90:f3:45:a4:0f:7c:a6:6b:39:ae:95:0d:bd:41: 94:17:22:78:c3:be:ab:bb:7b:4d:87:3d:08:20:0a:07:5a:5b: 7a:b2:88:32:96:0d:78:67:8f:fc:31:ac:51:39:b7:9c:43:4e: a0:99:8b:41:8b:54:de:1e:e7:c5:4c:75:26:13:c2:3e:29:50: 20:2c:c2:b1:c4:60:12:3e:8d:ae:17:46:83:14:e4:83:10:16: a4:50:61:5c:12:e5:f0:a8:31:7f:03:76:09:1e:64:f6:d7:a9: 25:71:de:74:b7:4e:67:7c:9b:b0:8b:03:42:d8:1a:10:70:93: bf:52:11:25:e1:57:87:fb:9e:f0:4a:ef:7d:30:6c:a1:e2:a5: ab:a2:c6:b5:09:f6:a5:95:37:ea:de:9c:c0:fd:b4:86:b1:68: 50:ce:9a:f6 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9yrjLOfUiQnv3+bYivedLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMzVkNWFlNDE3ZjQ1ZWU4NTA1ZDc2Y2VhYTFiMzRjNDU4 Mzk0YTAwHhcNMjYwMTAyMDgxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2IzYTRjMWEzNDdhNjBjMjk5M2YyMGE2ZjNkMTljYjNlNGU1ZjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHzEgxBIppXSD2PXXnZZaGRdVlBy ZbNkRtx3G7V0y/QC7KTyjdYOT8CcgJX1NGt52rrbCMfqoyJl5LFN4SSvULGqTeYu lP+C1L3JT+l0koDcaow1k/6wtg54WFqL1SyUc8ebel+UM2HVF10GxuAj68HM7Aaw iU2DqgIMpK2xPfOSArCQfH0gGwKFEnsIp4uMh80bPTH0tzD2fc7FWSDZ0sLOuIeS /TNVg+auNzp4/bYJzfISizqm3R32fNRua/04wSHFjczscZzhyImtpkWEOZpolQjj nwwMrgwgSnGEtCFBgD4JX9jhyFQ2VXSrQf/iWTKGjHy8f8c+UDG0XGFJmQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFFOzpMGjR6YMKZPyCm89Gcs+Tl85MB8GA1UdIwQY MBaAFH811a5Bf0XuhQXXbOqhs0xFg5SgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnpYVnJrRl9SZTZGQmRkczZxR3pURVdEbEtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jNTQ2N2ItMzk2Mi00Yjc0LWFlMGQt MzQ0NzNiYzkxZDgwLzEvVTdPa3dhTkhwZ3dwa19JS2J6MFp5ejVPWHprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9jNTQ2N2ItMzk2Mi00Yjc0LWFlMGQtMzQ0NzNiYzkxZDgw LzEvZnpYVnJrRl9SZTZGQmRkczZxR3pURVdEbEtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDWWqgAwQC ixxwAwQCuQOwMA0EAgACMAcDBQMqABvIMA0GCSqGSIb3DQEBCwUAA4IBAQAwMqSr Oel+uh8AoOZuuLtmpXVzCWHHK8LYsI0YAJEqrUCJvzc0r6zIT7HCD49U/KggG18o nQ8A/KfSj+aA2mFQ6ujqpF1Mie3UL20k3aGebETxGfYmzbemoHvESm+jkPNFpA98 pms5rpUNvUGUFyJ4w76ru3tNhz0IIAoHWlt6sogylg14Z4/8MaxRObecQ06gmYtB i1TeHufFTHUmE8I+KVAgLMKxxGASPo2uF0aDFOSDEBakUGFcEuXwqDF/A3YJHmT2 16klcd50t05nfJuwiwNC2BoQcJO/UhEl4VeH+57wSu99MGyh4qWrosa1CfallTfq 3pzA/bSGsWhQzpr2 -----END CERTIFICATE-----Generated at Tue Jan 20 07:47:28 2026 by rpki-client