This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/309d30-b1f6-4442-a2db-2b335ac66af5/1/7tVtNiyO9j_I6qx9pNFbd0tkZzw.roa
File: 7tVtNiyO9j_I6qx9pNFbd0tkZzw.roa (raw, json)
Hash identifier: orMvjxgtz9dgIxvBQuhbyEpCrOfBI/s+0aHhIMY/22U=
Subject key identifier: EE:D5:6D:36:2C:8E:F6:3F:C8:EA:AC:7D:A4:D1:5B:77:4B:64:67:3C
Certificate issuer: /CN=1c6ebf46582a243a798eddf35ab231f75ec5a382
Certificate serial: 019A970BB358CB6F3B4B51EFD8997BCF7D7B
Authority key identifier: 1C:6E:BF:46:58:2A:24:3A:79:8E:DD:F3:5A:B2:31:F7:5E:C5:A3:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HG6_RlgqJDp5jt3zWrIx917Fo4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/309d30-b1f6-4442-a2db-2b335ac66af5/1/7tVtNiyO9j_I6qx9pNFbd0tkZzw.roa
Signing time: Tue 18 Nov 2025 12:58:37 +0000
ROA not before: Tue 18 Nov 2025 12:58:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204815
IP address blocks: 203.23.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/309d30-b1f6-4442-a2db-2b335ac66af5/1/HG6_RlgqJDp5jt3zWrIx917Fo4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/309d30-b1f6-4442-a2db-2b335ac66af5/1/HG6_RlgqJDp5jt3zWrIx917Fo4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/HG6_RlgqJDp5jt3zWrIx917Fo4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:97:0b:b3:58:cb:6f:3b:4b:51:ef:d8:99:7b:cf:7d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6ebf46582a243a798eddf35ab231f75ec5a382
Validity
Not Before: Nov 18 12:58:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eed56d362c8ef63fc8eaac7da4d15b774b64673c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e8:49:19:e7:62:18:a9:9d:94:a3:34:67:4f:
c6:d4:1e:d0:41:02:ad:2d:60:23:96:31:fc:bc:d4:
ad:e9:08:3c:96:2b:fa:4b:e7:f0:f9:09:8b:ab:e9:
83:17:5d:4f:7e:30:cb:59:95:29:20:77:5c:eb:57:
97:9f:75:da:10:5b:ed:ad:76:af:bd:8e:01:e4:43:
9d:0a:09:28:56:c4:fa:2e:14:62:14:fb:61:73:99:
f5:62:4e:7e:2d:b8:57:75:0f:e6:3d:fe:2d:f0:80:
09:d0:e2:f7:9a:2a:94:4d:67:eb:01:51:7c:33:0a:
2b:ac:45:6b:b9:27:12:7f:d5:ac:08:d1:41:c4:36:
d9:50:d3:ab:b9:eb:96:44:67:f8:5a:7c:03:61:77:
88:d5:2a:f3:7f:e3:18:03:34:53:c3:12:d5:c8:b9:
9b:15:23:b6:d5:37:5d:bb:18:f5:43:de:6a:0f:75:
6b:a4:95:d4:1b:19:2a:84:02:7d:6a:ad:01:61:a9:
40:8c:f9:f3:a6:f2:1c:1d:85:cd:71:1d:bd:f2:31:
e6:9c:d0:ac:e5:d2:57:a2:ca:10:60:01:cd:03:a2:
60:5e:17:47:33:21:c0:04:f3:3a:b5:65:08:d4:43:
60:2e:5c:3a:03:a6:a1:97:35:e6:05:47:e7:3c:67:
62:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D5:6D:36:2C:8E:F6:3F:C8:EA:AC:7D:A4:D1:5B:77:4B:64:67:3C
X509v3 Authority Key Identifier:
keyid:1C:6E:BF:46:58:2A:24:3A:79:8E:DD:F3:5A:B2:31:F7:5E:C5:A3:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HG6_RlgqJDp5jt3zWrIx917Fo4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/309d30-b1f6-4442-a2db-2b335ac66af5/1/7tVtNiyO9j_I6qx9pNFbd0tkZzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/309d30-b1f6-4442-a2db-2b335ac66af5/1/HG6_RlgqJDp5jt3zWrIx917Fo4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.23.255.0/24
Signature Algorithm: sha256WithRSAEncryption
28:3d:13:31:a3:1f:33:46:ac:0c:17:1f:01:94:37:fe:02:4f:
45:40:07:e7:3e:ce:b0:f8:b3:f4:18:6c:20:ee:1d:92:0d:62:
3c:18:75:ca:f4:b3:0e:dc:87:40:2e:db:f5:b2:e4:fd:ca:0b:
ce:05:05:be:19:ac:07:99:43:bb:f4:85:19:47:5c:9b:7a:ea:
6a:b3:40:53:2d:66:43:40:d1:f2:45:6b:6a:2c:e8:a1:15:20:
78:43:80:a3:b9:37:f3:76:c9:3d:82:f9:c9:88:3e:9d:b8:bd:
43:86:62:7c:0a:94:70:a4:8b:b0:e3:0a:f8:51:6b:08:11:47:
b2:0e:8a:51:7f:f5:af:c0:0b:cf:ec:a3:d1:a9:1a:49:4f:79:
af:0d:a7:dd:71:59:b7:a5:67:bf:71:52:0c:28:30:c1:14:21:
ed:8c:ae:bb:23:f9:e0:e0:56:45:57:84:07:da:f1:0b:2c:0b:
3f:80:e2:01:79:56:1d:d9:12:d5:ca:6a:6b:bd:32:ea:da:ea:
8a:19:92:0f:23:16:9c:a7:3a:54:e1:17:b9:7b:2a:5b:e2:98:
ea:10:ef:4d:e7:65:fd:ee:83:18:12:9d:f5:6f:0d:c1:94:c1:
41:96:0f:e4:a1:c2:80:d4:8e:7f:af:f6:74:35:76:af:0c:1d:
99:5c:d1:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZqXC7NYy287S1Hv2Jl7z317MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNmViZjQ2NTgyYTI0M2E3OThlZGRmMzVhYjIzMWY3NWVj
NWEzODIwHhcNMjUxMTE4MTI1ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWQ1NmQzNjJjOGVmNjNmYzhlYWFjN2RhNGQxNWI3NzRiNjQ2NzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+hJGediGKmdlKM0Z0/G1B7QQQKt
LWAjljH8vNSt6Qg8liv6S+fw+QmLq+mDF11PfjDLWZUpIHdc61eXn3XaEFvtrXav
vY4B5EOdCgkoVsT6LhRiFPthc5n1Yk5+LbhXdQ/mPf4t8IAJ0OL3miqUTWfrAVF8
MworrEVruScSf9WsCNFBxDbZUNOrueuWRGf4WnwDYXeI1Srzf+MYAzRTwxLVyLmb
FSO21Tdduxj1Q95qD3VrpJXUGxkqhAJ9aq0BYalAjPnzpvIcHYXNcR298jHmnNCs
5dJXosoQYAHNA6JgXhdHMyHABPM6tWUI1ENgLlw6A6ahlzXmBUfnPGdiswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO7VbTYsjvY/yOqsfaTRW3dLZGc8MB8GA1UdIwQY
MBaAFBxuv0ZYKiQ6eY7d81qyMfdexaOCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEc2X1JsZ3FKRHA1anQzeldySXg5MTdGbzRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zMDlkMzAtYjFmNi00NDQyLWEyZGIt
MmIzMzVhYzY2YWY1LzEvN3RWdE5peU85al9JNnF4OXBORmJkMHRrWnp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8zMDlkMzAtYjFmNi00NDQyLWEyZGItMmIzMzVhYzY2YWY1
LzEvSEc2X1JsZ3FKRHA1anQzeldySXg5MTdGbzRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyxf/MA0G
CSqGSIb3DQEBCwUAA4IBAQAoPRMxox8zRqwMFx8BlDf+Ak9FQAfnPs6w+LP0GGwg
7h2SDWI8GHXK9LMO3IdALtv1suT9ygvOBQW+GawHmUO79IUZR1ybeupqs0BTLWZD
QNHyRWtqLOihFSB4Q4CjuTfzdsk9gvnJiD6duL1DhmJ8CpRwpIuw4wr4UWsIEUey
DopRf/WvwAvP7KPRqRpJT3mvDafdcVm3pWe/cVIMKDDBFCHtjK67I/ng4FZFV4QH
2vELLAs/gOIBeVYd2RLVymprvTLq2uqKGZIPIxacpzpU4Re5eypb4pjqEO9N52X9
7oMYEp31bw3BlMFBlg/kocKA1I5/r/Z0NXavDB2ZXNFR
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:34:51 2025 by rpki-client