This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/C7qqIpTwYf7YNOtV5OPXaeMTQAI.roa File: C7qqIpTwYf7YNOtV5OPXaeMTQAI.roa (raw, json) Hash identifier: KjPNPOXZwVjnuKWDEKGdvD1QS5oO9ubnZY9SVeLWd9M= Subject key identifier: 0B:BA:AA:22:94:F0:61:FE:D8:34:EB:55:E4:E3:D7:69:E3:13:40:02 Certificate issuer: /CN=49af2153f02409a464e4d7461c802d4b8dd10dff Certificate serial: 019B7F831EBB0FE852D0BEF692878020E3DB Authority key identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/C7qqIpTwYf7YNOtV5OPXaeMTQAI.roa Signing time: Fri 02 Jan 2026 16:20:58 +0000 ROA not before: Fri 02 Jan 2026 16:20:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15440 IP address blocks: 185.140.228.0/24 maxlen: 24 185.140.229.0/24 maxlen: 24 2a14:54c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:1e:bb:0f:e8:52:d0:be:f6:92:87:80:20:e3:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49af2153f02409a464e4d7461c802d4b8dd10dff Validity Not Before: Jan 2 16:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bbaaa2294f061fed834eb55e4e3d769e3134002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f5:6e:d2:88:e1:b1:0a:dc:eb:95:83:1c:c9: 00:98:5b:a5:2f:f0:6e:db:5d:11:e5:65:f1:6c:11: 34:22:88:37:cd:77:98:d2:cc:49:cf:a6:14:17:68: 26:fe:42:73:d6:20:ce:d6:6a:74:6f:61:5e:d2:44: e4:31:e8:5c:3c:c1:c0:7a:ce:26:84:a4:70:df:bb: 26:9a:21:b8:8a:ce:9e:dd:03:8c:a6:34:ec:e3:c4: 8a:6d:5d:da:58:f0:39:85:57:ce:60:a9:87:7e:5f: d7:52:9a:87:44:18:1a:ca:81:d6:d4:26:f8:f7:d2: 86:8f:4e:d2:70:e5:87:e2:28:41:a6:f8:f2:07:9c: e8:c1:06:a2:fa:ae:37:26:d0:8e:7b:ef:3a:21:bb: 7c:1a:dc:a5:df:10:d4:44:2d:d2:5f:d3:ea:7b:8e: ae:c5:93:79:b3:d5:30:ba:24:40:b0:09:af:c3:a2: 38:99:24:7c:25:fe:17:10:1b:10:0d:69:a0:2d:5e: 77:c9:b2:bc:c9:c6:c0:34:e6:c1:bd:52:64:44:46: ef:ea:31:41:94:71:65:38:9c:54:7f:d6:bf:fd:ab: 2d:49:d2:ea:fa:d3:42:55:6f:55:04:06:a4:8c:eb: 20:34:b4:5a:a2:05:5e:d4:df:c0:5e:3f:c5:c9:01: 37:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BA:AA:22:94:F0:61:FE:D8:34:EB:55:E4:E3:D7:69:E3:13:40:02 X509v3 Authority Key Identifier: keyid:49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/C7qqIpTwYf7YNOtV5OPXaeMTQAI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.140.228.0/23 IPv6: 2a14:54c0::/29 Signature Algorithm: sha256WithRSAEncryption 16:81:e9:b7:e8:d7:c5:64:92:c0:81:18:98:4a:56:65:1b:cc: 9a:e9:bb:a7:a0:4e:45:8d:45:de:b7:e8:89:3f:e1:5c:44:da: b1:c0:1c:d8:f0:94:a7:e0:9d:3c:43:c0:52:f7:95:69:a7:d8: 1e:df:36:54:61:98:ae:2c:7d:b2:ea:29:af:6e:b9:d8:b3:6e: b7:c2:c8:d9:c5:6b:7c:ce:c4:29:46:01:b1:52:0b:1b:f3:0a: 2d:9a:8f:be:0e:4e:5e:b0:05:9c:bd:3b:5d:ac:52:12:c5:25: bf:d4:88:7b:81:1b:71:f6:27:55:7d:64:7b:04:08:c2:d2:53: 75:c8:c4:57:b3:48:f9:fd:49:ae:77:36:58:ad:68:d0:91:3d: 30:5e:c4:bb:51:22:cd:50:59:54:f4:b0:02:66:0e:d3:af:69: 43:90:25:36:29:59:55:ed:6f:63:eb:24:9a:dc:fe:53:1a:80: 35:44:c4:21:4f:93:c6:9f:3d:c4:95:7b:28:85:ae:bc:3a:ee: 87:d9:93:78:3b:3c:5c:a3:f4:09:e3:87:67:f0:9a:3b:75:ce: 55:8b:32:85:c9:d8:35:13:aa:c2:aa:b2:bf:e4:3a:a2:c4:b7: 50:e3:f5:bf:63:b9:2b:a2:24:30:38:3e:17:87:d7:78:ad:f2: dd:25:6f:3c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/gx67D+hS0L72koeAIOPbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YWYyMTUzZjAyNDA5YTQ2NGU0ZDc0NjFjODAyZDRiOGRk MTBkZmYwHhcNMjYwMTAyMTYyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmJhYWEyMjk0ZjA2MWZlZDgzNGViNTVlNGUzZDc2OWUzMTM0MDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPVu0ojhsQrc65WDHMkAmFulL/Bu 210R5WXxbBE0Iog3zXeY0sxJz6YUF2gm/kJz1iDO1mp0b2Fe0kTkMehcPMHAes4m hKRw37smmiG4is6e3QOMpjTs48SKbV3aWPA5hVfOYKmHfl/XUpqHRBgayoHW1Cb4 99KGj07ScOWH4ihBpvjyB5zowQai+q43JtCOe+86Ibt8Gtyl3xDURC3SX9Pqe46u xZN5s9UwuiRAsAmvw6I4mSR8Jf4XEBsQDWmgLV53ybK8ycbANObBvVJkREbv6jFB lHFlOJxUf9a//astSdLq+tNCVW9VBAakjOsgNLRaogVe1N/AXj/FyQE3QQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAu6qiKU8GH+2DTrVeTj12njE0ACMB8GA1UdIwQY MBaAFEmvIVPwJAmkZOTXRhyALUuN0Q3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2E4aFVfQWtDYVJrNU5kR0hJQXRTNDNSRGY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lYjI1YjUtNzFlYS00NjlkLTk0ODQt NGVhNmRmYjJlNWQzLzEvQzdxcUlwVHdZZjdZTk90VjVPUFhhZU1UUUFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9lYjI1YjUtNzFlYS00NjlkLTk0ODQtNGVhNmRmYjJlNWQz LzEvU2E4aFVfQWtDYVJrNU5kR0hJQXRTNDNSRGY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuYzkMA0E AgACMAcDBQMqFFTAMA0GCSqGSIb3DQEBCwUAA4IBAQAWgem36NfFZJLAgRiYSlZl G8ya6bunoE5FjUXet+iJP+FcRNqxwBzY8JSn4J08Q8BS95Vpp9ge3zZUYZiuLH2y 6imvbrnYs263wsjZxWt8zsQpRgGxUgsb8wotmo++Dk5esAWcvTtdrFISxSW/1Ih7 gRtx9idVfWR7BAjC0lN1yMRXs0j5/UmudzZYrWjQkT0wXsS7USLNUFlU9LACZg7T r2lDkCU2KVlV7W9j6ySa3P5TGoA1RMQhT5PGnz3ElXsoha68Ou6H2ZN4Ozxco/QJ 44dn8Jo7dc5VizKFydg1E6rCqrK/5DqixLdQ4/W/Y7kroiQwOD4Xh9d4rfLdJW88 -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:42 2026 by rpki-client