This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/7OkmnPh3ynYj5y3_NgmBm3m_TO4.roa File: 7OkmnPh3ynYj5y3_NgmBm3m_TO4.roa (raw, json) Hash identifier: 76UePjEP+wElQI63EJrAUQNqnmL6+mG0ZmW2QHArepk= Subject key identifier: EC:E9:26:9C:F8:77:CA:76:23:E7:2D:FF:36:09:81:9B:79:BF:4C:EE Certificate issuer: /CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c Certificate serial: 019B7C80080FF05E431E92C18DA9BC8A5531 Authority key identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/7OkmnPh3ynYj5y3_NgmBm3m_TO4.roa Signing time: Fri 02 Jan 2026 02:18:43 +0000 ROA not before: Fri 02 Jan 2026 02:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210536 IP address blocks: 25.129.198.0/24 maxlen: 24 25.129.199.0/24 maxlen: 24 2a08:600:ee::/48 maxlen: 48 2a08:600:ef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:08:0f:f0:5e:43:1e:92:c1:8d:a9:bc:8a:55:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c Validity Not Before: Jan 2 02:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ece9269cf877ca7623e72dff3609819b79bf4cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:08:9a:a7:70:64:6b:c4:2b:53:9d:16:66:36: 23:a7:23:91:f4:66:2f:9d:c2:b2:4d:f0:31:3f:8c: 4f:68:e5:39:a2:79:e5:94:1f:be:b6:40:f6:73:b7: 7a:34:df:0e:52:35:65:c6:54:f3:f7:15:1c:11:9c: 8e:1a:2e:2f:d1:35:e9:32:45:42:8b:1f:16:a4:ff: 1c:ff:ab:9c:20:de:ae:e0:89:68:bb:57:56:f7:1b: db:50:31:9b:42:85:ac:8d:2a:e3:9a:83:a8:49:93: ee:47:23:b0:24:51:02:b7:7e:62:02:b2:30:53:4d: 40:c2:85:62:03:06:24:68:2a:6f:0f:16:6a:64:71: 0e:2d:bd:0c:7e:f8:e3:b6:62:20:a7:6b:28:dd:02: 56:e4:e0:07:5f:1c:af:df:fd:bd:8e:08:ba:df:2b: 3c:5c:32:92:40:9e:fd:c6:77:d6:67:59:6b:9d:78: ee:4e:e7:91:6a:a3:7c:54:14:df:5e:8e:4b:50:96: ce:46:83:f9:99:e4:d5:37:2e:65:23:7e:2c:cd:90: d1:2b:f2:0a:ad:1d:d6:c6:69:dc:ab:62:87:74:30: 0d:03:33:5f:7d:18:a8:a5:9c:45:60:0f:4d:93:ec: c5:ae:fb:16:cf:4a:28:f0:d7:24:4e:a5:e4:07:b1: 9c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E9:26:9C:F8:77:CA:76:23:E7:2D:FF:36:09:81:9B:79:BF:4C:EE X509v3 Authority Key Identifier: keyid:DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/7OkmnPh3ynYj5y3_NgmBm3m_TO4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 25.129.198.0/23 IPv6: 2a08:600:ee::/47 Signature Algorithm: sha256WithRSAEncryption e0:3a:21:29:e9:8c:62:60:c2:38:dd:08:ca:88:ad:23:c2:ca: 89:0a:ff:54:5c:cc:60:6b:c0:e6:ae:a9:09:8d:12:bf:72:bc: 7a:1e:bc:bd:6c:fb:4d:8b:9b:96:ec:ec:60:7b:1f:24:0e:87: 05:2d:e2:2e:26:7f:2a:f4:bd:4c:06:0d:3b:2d:70:84:df:5c: 54:72:44:64:46:cc:b2:23:77:72:42:05:11:01:82:1b:40:40: a2:8d:d8:a3:e7:c3:bb:86:18:85:36:41:a8:cd:d3:5a:88:0e: 6d:a9:40:8d:e9:ad:02:d2:82:24:53:43:e7:08:8a:71:df:e4: de:1e:27:5b:13:86:56:54:51:60:c9:30:49:95:30:76:0d:fe: 1e:c3:90:ed:32:57:24:74:60:29:fe:14:f0:45:1c:60:10:98: b3:a6:49:31:bc:90:ce:83:28:26:68:67:36:7b:03:96:29:4a: 82:a9:b1:a2:8d:42:1d:ac:56:5a:51:82:17:eb:39:12:b4:26: 30:93:50:d7:4f:41:72:ce:08:f9:fa:a9:92:7e:10:7f:d2:16: cf:71:c9:0b:dc:6a:19:30:bf:83:e5:04:37:f6:d0:66:6a:9c: 09:11:43:48:98:1d:f1:28:c6:30:5c:15:67:7d:cc:94:4b:5a: 9b:98:9d:a5 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8gAgP8F5DHpLBjam8ilUxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNDRlMTllMmJiNGU3MDIzY2MxYmExMGQ0OWI3NGVkZTRi Zjg2NWMwHhcNMjYwMTAyMDIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2U5MjY5Y2Y4NzdjYTc2MjNlNzJkZmYzNjA5ODE5Yjc5YmY0Y2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwiap3Bka8QrU50WZjYjpyOR9GYv ncKyTfAxP4xPaOU5onnllB++tkD2c7d6NN8OUjVlxlTz9xUcEZyOGi4v0TXpMkVC ix8WpP8c/6ucIN6u4Ilou1dW9xvbUDGbQoWsjSrjmoOoSZPuRyOwJFECt35iArIw U01AwoViAwYkaCpvDxZqZHEOLb0MfvjjtmIgp2so3QJW5OAHXxyv3/29jgi63ys8 XDKSQJ79xnfWZ1lrnXjuTueRaqN8VBTfXo5LUJbORoP5meTVNy5lI34szZDRK/IK rR3Wxmncq2KHdDANAzNffRiopZxFYA9Nk+zFrvsWz0oo8NckTqXkB7GcxwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOzpJpz4d8p2I+ct/zYJgZt5v0zuMB8GA1UdIwQY MBaAFNxE4Z4rtOcCPMG6ENSbdO3kv4ZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0VUaG5pdTA1d0k4d2JvUTFKdDA3ZVNfaGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80NmY1YjktNjAwMC00MDcyLTg5ZjIt NGM4MmFjZTcyYzg1LzEvN09rbW5QaDN5bllqNXkzX05nbUJtM21fVE80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS80NmY1YjktNjAwMC00MDcyLTg5ZjItNGM4MmFjZTcyYzg1 LzEvM0VUaG5pdTA1d0k4d2JvUTFKdDA3ZVNfaGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBGYHGMA8E AgACMAkDBwEqCAYAAO4wDQYJKoZIhvcNAQELBQADggEBAOA6ISnpjGJgwjjdCMqI rSPCyokK/1RczGBrwOauqQmNEr9yvHoevL1s+02Lm5bs7GB7HyQOhwUt4i4mfyr0 vUwGDTstcITfXFRyRGRGzLIjd3JCBREBghtAQKKN2KPnw7uGGIU2QajN01qIDm2p QI3prQLSgiRTQ+cIinHf5N4eJ1sThlZUUWDJMEmVMHYN/h7DkO0yVyR0YCn+FPBF HGAQmLOmSTG8kM6DKCZoZzZ7A5YpSoKpsaKNQh2sVlpRghfrORK0JjCTUNdPQXLO CPn6qZJ+EH/SFs9xyQvcahkwv4PlBDf20GZqnAkRQ0iYHfEoxjBcFWd9zJRLWpuY naU= -----END CERTIFICATE-----Generated at Sun Jan 25 20:01:10 2026 by rpki-client