This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/7kYVFuyM-RfK26RLFo6DMjfTwzk.roa File: 7kYVFuyM-RfK26RLFo6DMjfTwzk.roa (raw, json) Hash identifier: KbmoPpiA6XOiH7OL5wKdZhHaSYMgcT7lmpKJIFLFmlE= Subject key identifier: EE:46:15:16:EC:8C:F9:17:CA:DB:A4:4B:16:8E:83:32:37:D3:C3:39 Certificate issuer: /CN=e7507db088a7c81a0dbec8f1addb52f95bd10143 Certificate serial: 019B7DCB59194E06B695E044D1869A4E9B68 Authority key identifier: E7:50:7D:B0:88:A7:C8:1A:0D:BE:C8:F1:AD:DB:52:F9:5B:D1:01:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/7kYVFuyM-RfK26RLFo6DMjfTwzk.roa Signing time: Fri 02 Jan 2026 08:20:37 +0000 ROA not before: Fri 02 Jan 2026 08:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50673 IP address blocks: 45.141.28.0/22 maxlen: 22 91.199.167.0/24 maxlen: 24 2a0e:c9c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.mft rsync://rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:59:19:4e:06:b6:95:e0:44:d1:86:9a:4e:9b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7507db088a7c81a0dbec8f1addb52f95bd10143 Validity Not Before: Jan 2 08:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee461516ec8cf917cadba44b168e833237d3c339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b1:e3:9d:7b:19:4b:c1:aa:08:72:68:50:81: bb:6a:ea:50:6e:32:23:62:21:57:78:5c:c3:dd:0c: 37:19:20:4e:c5:2a:93:c1:ac:42:22:d5:bf:cf:8a: 6b:f3:77:02:f3:ad:e5:1f:24:d7:fb:ee:0c:78:de: 97:33:8a:29:8e:36:2e:74:08:ba:3d:28:d1:da:ac: b0:28:d8:af:6d:32:4a:fd:cb:0f:65:7e:1f:25:7f: f5:d6:0e:04:b3:d2:ec:c3:36:7f:c6:a1:ef:8b:db: 0c:d1:e0:a3:67:84:88:15:fd:4c:68:01:4b:3c:7f: c4:49:33:9e:45:be:14:86:10:57:f6:49:40:e2:23: b8:ef:50:61:46:de:e2:63:58:51:30:bb:b6:8d:eb: fc:fd:7f:0d:d0:81:3b:e8:39:34:30:05:5e:4c:ec: 1d:f4:bb:9c:c5:71:d2:89:80:86:4b:bd:09:82:7e: 24:b4:29:78:10:0a:49:d2:7f:7e:62:20:b7:bd:71: 38:85:c8:ca:7e:fa:55:a9:7c:9d:3e:0f:20:c4:0c: 32:6c:cc:75:33:44:aa:07:8d:e7:e1:0c:bc:e4:c7: b6:3b:08:70:72:75:d3:f3:d1:c4:e5:20:3b:85:bc: 7c:95:b1:ac:e9:83:99:39:30:e5:f0:a4:4b:b7:a8: 5f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:46:15:16:EC:8C:F9:17:CA:DB:A4:4B:16:8E:83:32:37:D3:C3:39 X509v3 Authority Key Identifier: keyid:E7:50:7D:B0:88:A7:C8:1A:0D:BE:C8:F1:AD:DB:52:F9:5B:D1:01:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/7kYVFuyM-RfK26RLFo6DMjfTwzk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.28.0/22 91.199.167.0/24 IPv6: 2a0e:c9c0::/29 Signature Algorithm: sha256WithRSAEncryption 87:1a:bc:44:d7:c7:c4:18:4b:ca:de:ad:a8:91:6b:ef:d8:0f: 8a:10:16:37:bb:b6:46:e5:bf:d0:d1:26:86:f0:1c:9e:59:f3: c7:e1:61:1c:1f:76:57:6a:9f:20:a7:93:e4:5f:5a:00:ad:d5: ff:e8:aa:f2:aa:97:ef:74:2e:0c:c6:22:23:b4:c6:66:37:f0: a3:48:1e:3b:bc:cd:97:9f:23:f0:c7:8c:ba:86:7b:80:52:f6: c3:20:12:de:02:0f:51:85:7a:8f:09:00:64:0f:21:47:51:fa: 36:66:62:e1:e5:86:ec:d2:b1:3c:48:26:83:28:c5:3d:23:a5: 41:64:77:22:6e:40:34:12:97:9c:1b:91:5c:14:6c:96:ed:2c: 6b:3e:27:fc:f8:8e:80:dd:0d:3b:d9:04:74:de:df:28:c4:08: 02:7e:73:d0:72:fe:31:12:83:65:df:6b:7e:3b:eb:db:76:ae: 09:1e:08:38:87:d5:d3:82:fe:39:d9:dd:12:4b:67:39:1b:c8: a6:26:66:16:74:c6:9c:26:f6:84:82:0a:8e:2f:16:70:00:39: 0d:93:f8:25:03:b1:e3:6a:b8:6b:9d:72:b1:78:7c:23:a8:71: 4a:be:f0:58:04:09:ad:0f:b8:8c:0c:d7:c5:d1:a3:8a:ea:9b: 7f:0f:24:ba -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9y1kZTga2leBE0YaaTptoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NTA3ZGIwODhhN2M4MWEwZGJlYzhmMWFkZGI1MmY5NWJk MTAxNDMwHhcNMjYwMTAyMDgyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTQ2MTUxNmVjOGNmOTE3Y2FkYmE0NGIxNjhlODMzMjM3ZDNjMzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubHjnXsZS8GqCHJoUIG7aupQbjIj YiFXeFzD3Qw3GSBOxSqTwaxCItW/z4pr83cC863lHyTX++4MeN6XM4opjjYudAi6 PSjR2qywKNivbTJK/csPZX4fJX/11g4Es9LswzZ/xqHvi9sM0eCjZ4SIFf1MaAFL PH/ESTOeRb4UhhBX9klA4iO471BhRt7iY1hRMLu2jev8/X8N0IE76Dk0MAVeTOwd 9LucxXHSiYCGS70Jgn4ktCl4EApJ0n9+YiC3vXE4hcjKfvpVqXydPg8gxAwybMx1 M0SqB43n4Qy85Me2OwhwcnXT89HE5SA7hbx8lbGs6YOZOTDl8KRLt6hfwQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFO5GFRbsjPkXytukSxaOgzI308M5MB8GA1UdIwQY MBaAFOdQfbCIp8gaDb7I8a3bUvlb0QFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTFCOXNJaW55Qm9OdnNqeHJkdFMtVnZSQVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNDEzYzItYzJlYy00MWYxLTlkODUt NWQ4NjM0YWI3ZDkxLzEvN2tZVkZ1eU0tUmZLMjZSTEZvNkRNamZUd3prLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mNDEzYzItYzJlYy00MWYxLTlkODUtNWQ4NjM0YWI3ZDkx LzEvNTFCOXNJaW55Qm9OdnNqeHJkdFMtVnZSQVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLY0cAwQA W8enMA0EAgACMAcDBQMqDsnAMA0GCSqGSIb3DQEBCwUAA4IBAQCHGrxE18fEGEvK 3q2okWvv2A+KEBY3u7ZG5b/Q0SaG8ByeWfPH4WEcH3ZXap8gp5PkX1oArdX/6Kry qpfvdC4MxiIjtMZmN/CjSB47vM2XnyPwx4y6hnuAUvbDIBLeAg9RhXqPCQBkDyFH Ufo2ZmLh5Ybs0rE8SCaDKMU9I6VBZHcibkA0EpecG5FcFGyW7SxrPif8+I6A3Q07 2QR03t8oxAgCfnPQcv4xEoNl32t+O+vbdq4JHgg4h9XTgv452d0SS2c5G8imJmYW dMacJvaEggqOLxZwADkNk/glA7HjarhrnXKxeHwjqHFKvvBYBAmtD7iMDNfF0aOK 6pt/DyS6 -----END CERTIFICATE-----Generated at Sun Jan 11 11:45:39 2026 by rpki-client