This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/BR7SsJy6h1dAvx-Tt5PKRgxWnEM.roa File: BR7SsJy6h1dAvx-Tt5PKRgxWnEM.roa (raw, json) Hash identifier: ltx1OtbKF1rnm5/1WRGOXKzIfxB9u4d2MDtH32xFbq0= Subject key identifier: 05:1E:D2:B0:9C:BA:87:57:40:BF:1F:93:B7:93:CA:46:0C:56:9C:43 Certificate issuer: /CN=fd658693ec327ead4fe83a57b82601cc2552aabd Certificate serial: 019B7A5ADB8433A83D86B78CE8C6ED23E3A9 Authority key identifier: FD:65:86:93:EC:32:7E:AD:4F:E8:3A:57:B8:26:01:CC:25:52:AA:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WWGk-wyfq1P6DpXuCYBzCVSqr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/BR7SsJy6h1dAvx-Tt5PKRgxWnEM.roa Signing time: Thu 01 Jan 2026 16:18:53 +0000 ROA not before: Thu 01 Jan 2026 16:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 185.130.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/_WWGk-wyfq1P6DpXuCYBzCVSqr0.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/_WWGk-wyfq1P6DpXuCYBzCVSqr0.mft rsync://rpki.ripe.net/repository/DEFAULT/_WWGk-wyfq1P6DpXuCYBzCVSqr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:db:84:33:a8:3d:86:b7:8c:e8:c6:ed:23:e3:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd658693ec327ead4fe83a57b82601cc2552aabd Validity Not Before: Jan 1 16:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=051ed2b09cba875740bf1f93b793ca460c569c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e8:85:f4:56:bd:62:74:32:36:63:7a:9d:8c: f6:cc:39:65:1e:74:68:51:81:ce:52:62:50:49:8e: c7:c6:86:4d:47:85:14:3b:e3:72:16:4b:79:0a:8e: d7:f6:14:42:b9:bb:02:b4:1b:47:23:8e:cd:b3:3e: 7b:73:2a:df:a5:d6:c3:d8:86:d0:8f:84:65:65:51: e5:27:6c:98:9c:e0:fc:5f:3f:86:0d:12:76:98:56: 23:9e:18:76:79:8d:ca:33:57:08:7a:e4:37:0e:04: 49:08:b8:2a:79:28:73:53:a8:6c:07:d8:98:12:a2: 8b:79:e3:d0:36:c3:ae:6c:84:7e:61:77:bf:05:e6: f8:9f:b4:01:33:dd:8e:f0:77:a7:d4:d0:c8:fe:4e: a7:e9:6f:5c:1f:93:da:2f:8c:4c:d5:e3:f5:44:de: 0e:e9:02:1b:9a:28:d4:88:cc:a6:63:99:08:ff:21: 30:57:b3:48:20:2d:bb:ad:8e:14:cc:58:53:14:c4: a1:b7:6a:ae:d4:88:45:a7:d0:46:6a:3a:9c:e4:8b: 59:60:87:2c:f6:ba:70:59:47:40:da:62:a0:36:fd: b2:55:73:6f:7b:56:04:ce:90:e1:70:8b:c2:54:f9: 6b:49:3a:ed:bb:26:21:75:9a:4b:20:cb:c8:c2:cc: 83:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1E:D2:B0:9C:BA:87:57:40:BF:1F:93:B7:93:CA:46:0C:56:9C:43 X509v3 Authority Key Identifier: keyid:FD:65:86:93:EC:32:7E:AD:4F:E8:3A:57:B8:26:01:CC:25:52:AA:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WWGk-wyfq1P6DpXuCYBzCVSqr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/BR7SsJy6h1dAvx-Tt5PKRgxWnEM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/_WWGk-wyfq1P6DpXuCYBzCVSqr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.130.89.0/24 Signature Algorithm: sha256WithRSAEncryption b1:da:e1:e9:21:32:7f:97:d5:64:9e:96:bb:1e:96:63:21:82: a2:9e:b2:89:c6:f0:71:7a:df:ed:56:aa:75:31:5e:21:49:09: 9b:df:96:55:ef:87:0f:c2:e4:70:44:a9:54:86:77:22:80:6a: 58:5c:21:7c:34:11:6b:77:4a:cb:99:72:1e:cb:36:73:4b:4f: 10:2f:c6:25:1f:b0:57:e8:22:47:a5:b0:63:93:0c:46:8d:bf: 30:2f:e5:ef:a0:b8:e9:a3:62:13:5f:6e:69:15:7a:7b:21:65: d2:5e:05:a8:41:62:ec:a9:78:45:c1:80:22:8b:30:bd:71:0c: 25:f1:0c:1b:d1:64:f5:5a:3c:ab:a1:2f:8c:30:91:bc:92:2a: 9e:0b:80:d5:54:f3:65:8a:b2:26:28:bd:be:53:ea:ea:c2:f8: 1f:0d:ad:76:25:57:0d:fd:f0:ce:6f:0e:7b:66:87:9b:df:e1: 8f:c4:67:e8:50:5f:43:61:3b:eb:98:b6:4c:24:a3:e9:77:8c: ae:ee:fb:b5:a7:52:18:7a:1e:4f:22:5c:78:24:f4:44:29:9c: 34:63:77:da:07:b6:27:94:eb:43:41:bd:8e:33:5d:1f:18:5f: 2c:d1:03:60:65:c3:c1:f4:bb:b3:45:ed:a4:e9:eb:41:65:af: 06:9b:5a:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WtuEM6g9hreM6MbtI+OpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkNjU4NjkzZWMzMjdlYWQ0ZmU4M2E1N2I4MjYwMWNjMjU1 MmFhYmQwHhcNMjYwMTAxMTYxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTFlZDJiMDljYmE4NzU3NDBiZjFmOTNiNzkzY2E0NjBjNTY5YzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuiF9Fa9YnQyNmN6nYz2zDllHnRo UYHOUmJQSY7HxoZNR4UUO+NyFkt5Co7X9hRCubsCtBtHI47Nsz57cyrfpdbD2IbQ j4RlZVHlJ2yYnOD8Xz+GDRJ2mFYjnhh2eY3KM1cIeuQ3DgRJCLgqeShzU6hsB9iY EqKLeePQNsOubIR+YXe/Beb4n7QBM92O8Hen1NDI/k6n6W9cH5PaL4xM1eP1RN4O 6QIbmijUiMymY5kI/yEwV7NIIC27rY4UzFhTFMSht2qu1IhFp9BGajqc5ItZYIcs 9rpwWUdA2mKgNv2yVXNve1YEzpDhcIvCVPlrSTrtuyYhdZpLIMvIwsyDBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAUe0rCcuodXQL8fk7eTykYMVpxDMB8GA1UdIwQY MBaAFP1lhpPsMn6tT+g6V7gmAcwlUqq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1dXR2std3lmcTFQNkRwWHVDWUJ6Q1ZTcXIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wNzVkMmYtNDZiZC00YmRlLTk4MzUt OTVmZjVjNWRiYjUwLzEvQlI3U3NKeTZoMWRBdngtVHQ1UEtSZ3hXbkVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8wNzVkMmYtNDZiZC00YmRlLTk4MzUtOTVmZjVjNWRiYjUw LzEvX1dXR2std3lmcTFQNkRwWHVDWUJ6Q1ZTcXIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYJZMA0G CSqGSIb3DQEBCwUAA4IBAQCx2uHpITJ/l9Vknpa7HpZjIYKinrKJxvBxet/tVqp1 MV4hSQmb35ZV74cPwuRwRKlUhncigGpYXCF8NBFrd0rLmXIeyzZzS08QL8YlH7BX 6CJHpbBjkwxGjb8wL+XvoLjpo2ITX25pFXp7IWXSXgWoQWLsqXhFwYAiizC9cQwl 8Qwb0WT1WjyroS+MMJG8kiqeC4DVVPNlirImKL2+U+rqwvgfDa12JVcN/fDObw57 Zoeb3+GPxGfoUF9DYTvrmLZMJKPpd4yu7vu1p1IYeh5PIlx4JPREKZw0Y3faB7Yn lOtDQb2OM10fGF8s0QNgZcPB9LuzRe2k6etBZa8Gm1qB -----END CERTIFICATE-----Generated at Thu Jan 8 00:16:37 2026 by rpki-client