This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/t_7IHQAUEyaUbl5DxXVWHE2bbGE.roa File: t_7IHQAUEyaUbl5DxXVWHE2bbGE.roa (raw, json) Hash identifier: a851GGpE/WvCnOovf5sLJTvqxcyYbrGtDw0UsU9RPPs= Subject key identifier: B7:FE:C8:1D:00:14:13:26:94:6E:5E:43:C5:75:56:1C:4D:9B:6C:61 Certificate issuer: /CN=53d9c969675a27d515d8fab2c63cde0ed056491e Certificate serial: 019B7B35E182C99093625EF0985E9D656664 Authority key identifier: 53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/t_7IHQAUEyaUbl5DxXVWHE2bbGE.roa Signing time: Thu 01 Jan 2026 20:18:07 +0000 ROA not before: Thu 01 Jan 2026 20:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207786 IP address blocks: 195.85.218.0/24 maxlen: 24 195.85.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:e1:82:c9:90:93:62:5e:f0:98:5e:9d:65:66:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53d9c969675a27d515d8fab2c63cde0ed056491e Validity Not Before: Jan 1 20:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7fec81d00141326946e5e43c575561c4d9b6c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:06:ef:92:74:02:45:a8:3a:a6:9f:e1:1e:a7: 88:f0:ab:24:c1:11:82:51:1a:30:22:95:42:e4:d0: f1:a6:e4:c1:fe:e2:dc:23:86:70:97:5a:86:7a:3d: 25:0d:00:18:6a:10:34:0a:db:f5:c3:9e:b0:9f:b1: 17:c0:98:b2:7d:87:03:be:ff:cb:81:6f:f0:b5:2a: ef:72:d5:d9:e2:86:4e:c6:c7:7e:26:4f:30:ab:43: 60:e3:87:d1:78:38:b5:c5:9c:6b:4c:ac:22:d2:d4: 96:3b:3c:65:ea:84:3e:64:e4:1c:62:13:73:aa:bd: c4:9a:b0:e1:47:9b:ae:16:be:f8:cf:8e:b3:31:08: ce:a2:50:b5:e1:b6:14:22:db:2d:a1:86:ea:33:18: 32:f1:71:ff:6b:46:b0:ba:7d:2d:b3:06:55:50:20: d3:48:fe:e1:c4:29:b4:8e:8b:ff:d2:99:d4:dd:69: fc:5f:ea:2f:dd:e3:3c:97:5b:27:c9:88:82:e8:6b: 7e:fd:af:39:4f:a3:8d:d6:c9:6f:2a:6c:2c:73:64: ea:a0:77:68:92:86:85:59:80:cb:e9:25:5f:ea:12: 95:fb:c4:f6:7f:17:b9:7a:dd:d3:a9:b4:91:3a:60: 09:9e:1a:51:90:57:99:db:0c:3a:89:a0:b0:42:41: ea:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FE:C8:1D:00:14:13:26:94:6E:5E:43:C5:75:56:1C:4D:9B:6C:61 X509v3 Authority Key Identifier: keyid:53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/t_7IHQAUEyaUbl5DxXVWHE2bbGE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.85.218.0/24 195.85.244.0/24 Signature Algorithm: sha256WithRSAEncryption 04:4a:0f:ba:42:bd:37:49:7a:b6:8f:03:3b:1a:06:cd:b9:36: c0:b6:8f:69:34:2b:c4:be:04:3e:c1:31:e6:18:ec:17:35:e1: 84:d5:67:77:dd:75:72:ee:78:4f:43:fd:df:7a:30:ed:43:7a: 92:3c:7d:ac:f9:ac:2b:f9:79:f2:3a:6e:f0:50:e3:e8:29:2c: 5f:20:29:78:c6:63:9e:ff:6f:e4:94:ed:a2:67:c9:eb:71:91: 25:9e:a5:11:13:6f:48:27:6e:55:e2:7d:c4:88:48:c6:ec:12: 6a:fb:d3:3a:e8:b9:a7:56:33:97:22:ff:56:38:30:ad:8b:4b: 1a:a3:e7:4c:08:6a:36:2b:08:8d:f7:71:ef:ab:ac:7f:57:6f: 03:a9:a1:dd:0b:b5:1d:68:e6:81:6f:a4:db:ef:fa:47:e3:48: 98:34:14:66:c2:4d:d0:7e:99:92:da:19:19:a9:e7:59:df:56: 4b:33:e2:79:b1:b9:60:3a:21:79:14:58:29:f8:5e:39:51:8b: dc:49:a1:1e:13:61:e3:f7:cb:9e:40:9f:75:2b:f4:a3:23:ae: 63:26:8b:59:ae:8d:f6:93:9b:e7:2d:0c:be:6d:7a:b2:53:73: c3:01:0e:a6:c2:89:63:58:1d:47:e9:c6:c1:77:46:44:5d:db: 7b:74:dd:76 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NeGCyZCTYl7wmF6dZWZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZDljOTY5Njc1YTI3ZDUxNWQ4ZmFiMmM2M2NkZTBlZDA1 NjQ5MWUwHhcNMjYwMTAxMjAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2ZlYzgxZDAwMTQxMzI2OTQ2ZTVlNDNjNTc1NTYxYzRkOWI2YzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwbvknQCRag6pp/hHqeI8KskwRGC URowIpVC5NDxpuTB/uLcI4Zwl1qGej0lDQAYahA0Ctv1w56wn7EXwJiyfYcDvv/L gW/wtSrvctXZ4oZOxsd+Jk8wq0Ng44fReDi1xZxrTKwi0tSWOzxl6oQ+ZOQcYhNz qr3EmrDhR5uuFr74z46zMQjOolC14bYUItstoYbqMxgy8XH/a0awun0tswZVUCDT SP7hxCm0jov/0pnU3Wn8X+ov3eM8l1snyYiC6Gt+/a85T6ON1slvKmwsc2TqoHdo koaFWYDL6SVf6hKV+8T2fxe5et3TqbSROmAJnhpRkFeZ2ww6iaCwQkHqmwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLf+yB0AFBMmlG5eQ8V1VhxNm2xhMB8GA1UdIwQY MBaAFFPZyWlnWifVFdj6ssY83g7QVkkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTluSmFXZGFKOVVWMlBxeXhqemVEdEJXU1I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85OTEwN2EtM2IxYi00YjVlLWFlMTUt Zjk1YzYwYjQ2NmEwLzEvdF83SUhRQVVFeWFVYmw1RHhYVldIRTJiYkdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC85OTEwN2EtM2IxYi00YjVlLWFlMTUtZjk1YzYwYjQ2NmEw LzEvVTluSmFXZGFKOVVWMlBxeXhqemVEdEJXU1I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw1XaAwQA w1X0MA0GCSqGSIb3DQEBCwUAA4IBAQAESg+6Qr03SXq2jwM7GgbNuTbAto9pNCvE vgQ+wTHmGOwXNeGE1Wd33XVy7nhPQ/3fejDtQ3qSPH2s+awr+XnyOm7wUOPoKSxf ICl4xmOe/2/klO2iZ8nrcZElnqURE29IJ25V4n3EiEjG7BJq+9M66LmnVjOXIv9W ODCti0sao+dMCGo2KwiN93Hvq6x/V28DqaHdC7UdaOaBb6Tb7/pH40iYNBRmwk3Q fpmS2hkZqedZ31ZLM+J5sblgOiF5FFgp+F45UYvcSaEeE2Hj98ueQJ91K/SjI65j JotZro32k5vnLQy+bXqyU3PDAQ6mwoljWB1H6cbBd0ZEXdt7dN12 -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:38 2026 by rpki-client