This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/7GQjtZuQZ-J57jgxDQlSiA3I-80.roa File: 7GQjtZuQZ-J57jgxDQlSiA3I-80.roa (raw, json) Hash identifier: +1PX9Rg2wkDWHSyugse1b8uCpGYlE/hzwHJtkR9jK+o= Subject key identifier: EC:64:23:B5:9B:90:67:E2:79:EE:38:31:0D:09:52:88:0D:C8:FB:CD Certificate issuer: /CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02 Certificate serial: 019A587423984D9BB042650284F2BFC50F1E Authority key identifier: 6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/7GQjtZuQZ-J57jgxDQlSiA3I-80.roa Signing time: Thu 06 Nov 2025 09:16:37 +0000 ROA not before: Thu 06 Nov 2025 09:16:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20857 IP address blocks: 185.4.132.0/22 maxlen: 24 185.138.40.0/22 maxlen: 24 2a02:c500::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:58:74:23:98:4d:9b:b0:42:65:02:84:f2:bf:c5:0f:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02 Validity Not Before: Nov 6 09:16:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ec6423b59b9067e279ee38310d0952880dc8fbcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f4:1a:60:c7:3d:25:7e:70:cc:89:4f:df:62: 47:7b:fe:a3:43:34:6b:61:60:d3:a0:14:c7:14:23: c0:c6:2f:8e:4e:da:d0:3b:71:5f:79:6b:bf:b7:71: 65:56:41:9a:f8:f5:5f:5b:5a:5f:48:05:ec:7f:b6: dd:a2:ae:41:ee:dd:81:8b:39:02:90:c8:37:20:b0: 11:42:56:1a:94:b3:8f:a7:22:31:f9:1d:fa:20:4e: cc:6b:e0:94:9a:b6:b6:75:49:23:60:4c:62:31:44: 64:e7:a2:ad:33:2b:dd:8f:4c:c2:f3:bb:3e:79:29: 8a:08:63:72:02:56:d3:19:34:2b:ae:e1:3a:2e:74: 4a:d0:1a:8b:70:9b:b0:00:71:07:d1:77:83:42:ac: 0f:96:29:28:78:a6:b4:f1:fb:7e:97:9d:4b:f6:eb: fd:24:61:77:2a:ef:32:62:e4:1d:45:17:ee:9c:0c: e2:91:90:1d:e9:0a:53:26:94:4a:93:23:9a:ba:41: 86:68:1e:ae:45:be:ff:04:d8:c8:8b:27:44:0c:72: b0:05:11:c0:52:f3:4f:df:0e:55:2c:91:16:06:5c: 21:eb:c5:14:9a:61:97:f0:4d:c9:76:62:df:fc:ec: 28:3f:a6:e5:47:10:23:8c:e9:f2:4e:5a:7c:4e:75: e1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:64:23:B5:9B:90:67:E2:79:EE:38:31:0D:09:52:88:0D:C8:FB:CD X509v3 Authority Key Identifier: keyid:6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/7GQjtZuQZ-J57jgxDQlSiA3I-80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.4.132.0/22 185.138.40.0/22 IPv6: 2a02:c500::/29 Signature Algorithm: sha256WithRSAEncryption ce:08:b6:21:3e:37:83:9f:53:c3:bc:de:a2:a2:00:a2:94:d5: 0b:7f:46:b9:67:dc:7d:23:48:aa:f2:a3:35:ed:eb:64:f0:6b: 1e:fb:e3:be:f1:2b:82:38:58:9c:e8:e6:0a:5d:29:71:91:a5: c3:a0:ca:24:b9:fa:6e:62:79:af:2d:1d:fc:a0:c7:63:c8:e9: 6a:30:35:b4:a7:1c:a1:1a:c5:f7:ae:9d:1f:6e:81:bf:c8:eb: 51:05:25:9b:a9:66:3d:0a:04:71:87:6f:14:bc:73:33:e1:6e: 3c:25:8e:02:4e:aa:ce:c1:e9:33:f3:34:8d:41:13:91:70:53: e5:14:a5:d4:55:a2:e2:b0:c0:9c:6c:fb:4b:7b:ef:fe:a2:46: e2:83:85:01:ef:6a:87:4f:01:0e:5a:8f:8a:35:b8:06:9a:cb: 9e:ab:a7:61:d9:4e:9b:5a:02:13:d7:5f:6f:38:d8:1d:f8:5f: 5d:ab:ff:d8:19:e5:38:51:4a:24:95:21:b1:77:5f:ec:ae:60: 7c:c8:6e:80:5e:1b:3c:42:34:74:38:b1:c9:b6:82:5e:1a:ec: be:58:13:49:28:b8:98:3b:c2:43:44:dd:da:a2:ad:c5:62:2d: 87:a6:23:1c:48:73:25:9a:23:0a:21:58:a7:05:12:f5:52:27: e6:01:e2:af -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZpYdCOYTZuwQmUChPK/xQ8eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNDYyM2Y3NmJkNWJiMmRmMGFmNjZmMzYwZmY3NGZmMWMw MGRiMDIwHhcNMjUxMTA2MDkxNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzY0MjNiNTliOTA2N2UyNzllZTM4MzEwZDA5NTI4ODBkYzhmYmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvQaYMc9JX5wzIlP32JHe/6jQzRr YWDToBTHFCPAxi+OTtrQO3FfeWu/t3FlVkGa+PVfW1pfSAXsf7bdoq5B7t2BizkC kMg3ILARQlYalLOPpyIx+R36IE7Ma+CUmra2dUkjYExiMURk56KtMyvdj0zC87s+ eSmKCGNyAlbTGTQrruE6LnRK0BqLcJuwAHEH0XeDQqwPlikoeKa08ft+l51L9uv9 JGF3Ku8yYuQdRRfunAzikZAd6QpTJpRKkyOaukGGaB6uRb7/BNjIiydEDHKwBRHA UvNP3w5VLJEWBlwh68UUmmGX8E3JdmLf/OwoP6blRxAjjOnyTlp8TnXhVQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOxkI7WbkGfiee44MQ0JUogNyPvNMB8GA1UdIwQY MBaAFGpGI/dr1bst8K9m82D/dP8cANsCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWtZajkydlZ1eTN3cjJiellQOTBfeHdBMndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OTk1MjgtYjg5ZC00NDAyLWE4MDgt NmM4MzIwNTBlNzdhLzEvN0dRanRadVFaLUo1N2pneERRbFNpQTNJLTgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS81OTk1MjgtYjg5ZC00NDAyLWE4MDgtNmM4MzIwNTBlNzdh LzEvYWtZajkydlZ1eTN3cjJiellQOTBfeHdBMndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuQSEAwQC uYooMA0EAgACMAcDBQMqAsUAMA0GCSqGSIb3DQEBCwUAA4IBAQDOCLYhPjeDn1PD vN6iogCilNULf0a5Z9x9I0iq8qM17etk8Gse++O+8SuCOFic6OYKXSlxkaXDoMok ufpuYnmvLR38oMdjyOlqMDW0pxyhGsX3rp0fboG/yOtRBSWbqWY9CgRxh28UvHMz 4W48JY4CTqrOwekz8zSNQRORcFPlFKXUVaLisMCcbPtLe+/+okbig4UB72qHTwEO Wo+KNbgGmsueq6dh2U6bWgIT119vONgd+F9dq//YGeU4UUoklSGxd1/srmB8yG6A Xhs8QjR0OLHJtoJeGuy+WBNJKLiYO8JDRN3aoq3FYi2HpiMcSHMlmiMKIVinBRL1 UifmAeKv -----END CERTIFICATE-----Generated at Sat Dec 6 19:00:22 2025 by rpki-client