This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/7v8gLWZMvev1LFYyajRZfk02rmw.roa File: 7v8gLWZMvev1LFYyajRZfk02rmw.roa (raw, json) Hash identifier: HpBXJYHAduyr0DgBk7sgeTGoEP7DcUURMYEtC0wBawM= Subject key identifier: EE:FF:20:2D:66:4C:BD:EB:F5:2C:56:32:6A:34:59:7E:4D:36:AE:6C Certificate issuer: /CN=81cfb7c0c2349e80fee51b4783153512cd9da1d2 Certificate serial: 019A8262DC0A9584C52F3D6FAD670ECD23BC Authority key identifier: 81:CF:B7:C0:C2:34:9E:80:FE:E5:1B:47:83:15:35:12:CD:9D:A1:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc-3wMI0noD-5RtHgxU1Es2dodI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/7v8gLWZMvev1LFYyajRZfk02rmw.roa Signing time: Fri 14 Nov 2025 12:41:47 +0000 ROA not before: Fri 14 Nov 2025 12:41:47 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210449 IP address blocks: 146.19.224.0/24 maxlen: 24 178.211.141.0/24 maxlen: 24 2a12:1080::/29 maxlen: 29 2a13:7600::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.crl rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.mft rsync://rpki.ripe.net/repository/DEFAULT/gc-3wMI0noD-5RtHgxU1Es2dodI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 15:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:82:62:dc:0a:95:84:c5:2f:3d:6f:ad:67:0e:cd:23:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81cfb7c0c2349e80fee51b4783153512cd9da1d2 Validity Not Before: Nov 14 12:41:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=eeff202d664cbdebf52c56326a34597e4d36ae6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4c:ac:f0:05:8c:a9:6d:7a:f9:c3:01:3b:e6: ba:a6:6b:33:61:25:5d:2d:2a:82:13:73:0c:c4:c0: e9:f5:85:92:cc:b9:f3:c7:3e:d3:5c:74:06:05:5b: 80:79:0f:65:1d:88:4e:96:78:32:1d:43:7c:88:57: fb:c2:f6:5d:cb:7b:c4:21:92:c7:5c:cb:b7:7e:9f: 9f:76:f6:2b:32:5d:a9:3a:24:db:2a:fa:f9:59:9a: ec:b9:64:70:5d:e6:6d:64:fc:74:ef:37:4a:77:e4: 43:07:03:a7:46:c8:39:84:bd:27:9b:67:1f:96:38: 0b:4a:bb:4c:35:ba:43:86:22:1a:4d:27:63:68:f7: b5:50:7e:a8:82:75:10:a8:da:50:29:1d:fb:5c:eb: f8:a4:59:fb:12:df:f5:eb:d2:cd:82:22:6b:c8:75: 9d:76:f2:fc:72:01:03:bb:21:9b:7e:c9:f0:9b:a6: ed:d4:fd:2e:46:af:3f:c0:9a:67:a4:78:80:a0:e1: 8b:4a:1a:28:f9:8f:fe:06:7f:8b:d3:09:75:a8:77: d6:7e:f1:b3:23:24:38:af:74:d8:ed:e3:4c:4f:27: 33:6d:28:2f:bb:fb:5d:b8:db:93:74:e0:ef:e7:fb: 54:0d:53:94:68:3d:cc:72:ca:34:a4:97:a4:07:c6: d6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FF:20:2D:66:4C:BD:EB:F5:2C:56:32:6A:34:59:7E:4D:36:AE:6C X509v3 Authority Key Identifier: keyid:81:CF:B7:C0:C2:34:9E:80:FE:E5:1B:47:83:15:35:12:CD:9D:A1:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc-3wMI0noD-5RtHgxU1Es2dodI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/7v8gLWZMvev1LFYyajRZfk02rmw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.224.0/24 178.211.141.0/24 IPv6: 2a12:1080::/29 2a13:7600::/29 Signature Algorithm: sha256WithRSAEncryption 21:e6:9b:3d:ec:1e:a9:1c:1d:6b:9f:9d:0b:23:cf:d0:cb:f6: 2f:9f:64:51:23:a1:db:36:01:5e:26:2b:50:7c:05:33:23:70: 81:6c:ec:66:2f:8a:30:cd:b0:0a:60:a6:e8:ed:0d:e1:65:41: e2:9e:f8:0c:27:fc:17:97:f5:13:e5:ea:35:96:53:6b:a2:31: 62:7c:ce:9f:bf:99:87:db:60:8f:7b:04:be:28:33:e5:44:cd: a3:af:db:5b:9e:37:04:03:df:10:0a:b5:95:3c:f1:41:18:6e: 8c:cd:95:c9:10:a6:8c:b9:cb:e5:bc:08:f1:9d:1b:25:24:ee: 1a:93:bb:7b:ee:39:4c:2c:b8:f6:11:62:4d:58:8a:34:59:fb: 11:aa:a6:75:ac:2e:62:12:84:95:ae:5d:1b:0e:0c:ed:3e:53: 14:63:fe:78:ba:c5:65:3c:1f:04:3d:48:5e:8e:06:22:b9:1e: 90:7f:d3:07:69:bb:54:53:94:ba:c9:46:fe:cc:ad:82:46:be: e7:4c:fe:30:cc:42:08:5a:da:94:fb:e6:5e:c9:0a:ca:69:42: 97:f1:c0:06:d1:82:d6:3a:7e:7c:6f:3d:7d:50:f4:a3:8c:b5: 9c:12:9e:7a:ba:66:7a:f2:75:87:f4:fe:40:58:94:ae:ad:8b: 6b:dc:7e:f8 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZqCYtwKlYTFLz1vrWcOzSO8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxY2ZiN2MwYzIzNDllODBmZWU1MWI0NzgzMTUzNTEyY2Q5 ZGExZDIwHhcNMjUxMTE0MTI0MTQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWZmMjAyZDY2NGNiZGViZjUyYzU2MzI2YTM0NTk3ZTRkMzZhZTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0ys8AWMqW16+cMBO+a6pmszYSVd LSqCE3MMxMDp9YWSzLnzxz7TXHQGBVuAeQ9lHYhOlngyHUN8iFf7wvZdy3vEIZLH XMu3fp+fdvYrMl2pOiTbKvr5WZrsuWRwXeZtZPx07zdKd+RDBwOnRsg5hL0nm2cf ljgLSrtMNbpDhiIaTSdjaPe1UH6ognUQqNpQKR37XOv4pFn7Et/169LNgiJryHWd dvL8cgEDuyGbfsnwm6bt1P0uRq8/wJpnpHiAoOGLShoo+Y/+Bn+L0wl1qHfWfvGz IyQ4r3TY7eNMTyczbSgvu/tduNuTdODv5/tUDVOUaD3Mcso0pJekB8bWAwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFO7/IC1mTL3r9SxWMmo0WX5NNq5sMB8GA1UdIwQY MBaAFIHPt8DCNJ6A/uUbR4MVNRLNnaHSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2MtM3dNSTBub0QtNVJ0SGd4VTFFczJkb2RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMDcyOTctYzQ0My00MjdlLWEwZTct N2RjMDA1N2VkOTZkLzEvN3Y4Z0xXWk12ZXYxTEZZeWFqUlpmazAycm13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wMDcyOTctYzQ0My00MjdlLWEwZTctN2RjMDA1N2VkOTZk LzEvZ2MtM3dNSTBub0QtNVJ0SGd4VTFFczJkb2RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQAkhPgAwQA stONMBQEAgACMA4DBQMqEhCAAwUDKhN2ADANBgkqhkiG9w0BAQsFAAOCAQEAIeab PeweqRwda5+dCyPP0Mv2L59kUSOh2zYBXiYrUHwFMyNwgWzsZi+KMM2wCmCm6O0N 4WVB4p74DCf8F5f1E+XqNZZTa6IxYnzOn7+Zh9tgj3sEvigz5UTNo6/bW543BAPf EAq1lTzxQRhujM2VyRCmjLnL5bwI8Z0bJSTuGpO7e+45TCy49hFiTViKNFn7Eaqm dawuYhKEla5dGw4M7T5TFGP+eLrFZTwfBD1IXo4GIrkekH/TB2m7VFOUuslG/syt gka+50z+MMxCCFralPvmXskKymlCl/HABtGC1jp+fG89fVD0o4y1nBKeerpmevJ1 h/T+QFiUrq2La9x++A== -----END CERTIFICATE-----Generated at Sun Dec 7 01:06:46 2025 by rpki-client