This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/7MSaWd2Ikdx6OC4Bpo2xnSs2Y1c.roa File: 7MSaWd2Ikdx6OC4Bpo2xnSs2Y1c.roa (raw, json) Hash identifier: FMYvJNkNTZL8cIuRbVgdOblkDSz3NER3RCqGLrvn9QE= Subject key identifier: EC:C4:9A:59:DD:88:91:DC:7A:38:2E:01:A6:8D:B1:9D:2B:36:63:57 Certificate issuer: /CN=fc152b48b961649b37c1e89f81106153dc7b1435 Certificate serial: 019AC047656BDB9AFAAC6A637BD41240CBD4 Authority key identifier: FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/7MSaWd2Ikdx6OC4Bpo2xnSs2Y1c.roa Signing time: Wed 26 Nov 2025 13:08:15 +0000 ROA not before: Wed 26 Nov 2025 13:08:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205619 IP address blocks: 185.211.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c0:47:65:6b:db:9a:fa:ac:6a:63:7b:d4:12:40:cb:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc152b48b961649b37c1e89f81106153dc7b1435 Validity Not Before: Nov 26 13:08:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ecc49a59dd8891dc7a382e01a68db19d2b366357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:13:30:5a:62:7b:99:5b:00:fe:a5:ad:66:e5: 0d:67:1e:9c:32:bc:62:0a:52:83:3f:f5:62:86:fe: 3b:a5:53:c6:29:b3:01:a0:d5:fb:fe:51:9b:eb:70: a5:e4:68:90:92:79:7f:a1:60:ed:c8:4d:ca:05:5c: 04:6c:a9:87:c7:80:56:c7:a9:b3:d6:5e:e7:a0:f1: 4e:5c:8a:ef:2b:34:49:28:77:e3:fc:36:73:08:d1: 15:19:c4:0b:79:b4:c5:45:8c:dc:68:54:04:db:e9: a4:6b:e3:83:85:33:1c:d1:58:bc:6c:f6:fc:63:4c: 1b:f7:19:f8:49:15:fe:da:b3:14:ea:90:4e:0e:be: 43:f4:36:c8:42:29:ca:92:37:54:a3:e1:7d:f7:6b: c9:3c:99:4d:69:5b:18:68:39:25:b8:18:5d:8a:83: 4b:36:f6:cb:60:9b:81:55:fc:c7:40:84:aa:39:7f: 86:a4:34:49:cb:7a:29:08:15:06:45:51:33:06:dc: 6e:a0:05:92:6c:da:41:5b:f3:57:f1:b4:4f:0a:72: 9f:27:2d:ab:ea:04:e7:9b:5e:46:53:2f:13:a5:6d: 9f:c5:76:4c:18:a9:96:a1:32:c8:90:f8:60:c9:0d: 17:de:89:31:88:84:7a:ae:a4:d5:43:ab:a6:23:13: c4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C4:9A:59:DD:88:91:DC:7A:38:2E:01:A6:8D:B1:9D:2B:36:63:57 X509v3 Authority Key Identifier: keyid:FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/7MSaWd2Ikdx6OC4Bpo2xnSs2Y1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.192.0/22 Signature Algorithm: sha256WithRSAEncryption 51:a3:c5:ae:94:d4:d5:0e:68:9f:7e:b7:e8:0d:36:20:59:a7: 97:3e:18:4b:5d:8e:a1:80:a8:af:36:70:28:aa:49:82:50:6a: 39:13:85:3c:d7:c3:22:4b:de:e6:a7:02:0d:ac:2b:2a:1c:56: ff:aa:e1:42:ce:c6:74:2f:26:b8:45:7b:6f:6a:34:49:a4:8f: 23:fa:a2:b2:ca:65:94:69:39:2d:0e:1a:35:ef:cf:b0:7b:21: 92:2e:58:a2:00:4a:e8:e4:78:09:2f:10:1b:a9:83:c3:36:f9: 2d:78:50:47:cb:5f:1f:00:3f:8d:a6:3f:66:0a:64:73:c9:11: 2e:c1:0a:a6:81:9a:86:50:3a:ea:34:3e:f1:3f:a7:e1:9a:c5: c4:87:db:13:0a:82:c5:ff:2d:fa:41:09:52:8d:57:06:c7:0b: 59:51:80:56:8d:38:59:69:72:79:56:03:0f:cd:4c:0f:c3:6c: dd:6f:86:95:02:85:4e:1d:46:12:86:23:ac:ac:dd:d5:60:82: 32:4f:32:94:10:c2:28:c2:cf:cc:7e:f2:8f:d8:bd:de:5c:e4: f8:5d:d3:5b:45:31:94:30:3e:c5:74:3c:50:e3:34:23:a2:a1: a1:98:d5:42:79:df:6e:a1:72:2e:a2:bd:e1:fc:85:10:9c:f6: 55:19:41:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrAR2Vr25r6rGpje9QSQMvUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMTUyYjQ4Yjk2MTY0OWIzN2MxZTg5ZjgxMTA2MTUzZGM3 YjE0MzUwHhcNMjUxMTI2MTMwODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2M0OWE1OWRkODg5MWRjN2EzODJlMDFhNjhkYjE5ZDJiMzY2MzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RMwWmJ7mVsA/qWtZuUNZx6cMrxi ClKDP/Vihv47pVPGKbMBoNX7/lGb63Cl5GiQknl/oWDtyE3KBVwEbKmHx4BWx6mz 1l7noPFOXIrvKzRJKHfj/DZzCNEVGcQLebTFRYzcaFQE2+mka+ODhTMc0Vi8bPb8 Y0wb9xn4SRX+2rMU6pBODr5D9DbIQinKkjdUo+F992vJPJlNaVsYaDkluBhdioNL NvbLYJuBVfzHQISqOX+GpDRJy3opCBUGRVEzBtxuoAWSbNpBW/NX8bRPCnKfJy2r 6gTnm15GUy8TpW2fxXZMGKmWoTLIkPhgyQ0X3okxiIR6rqTVQ6umIxPE4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOzEmlndiJHcejguAaaNsZ0rNmNXMB8GA1UdIwQY MBaAFPwVK0i5YWSbN8Hon4EQYVPcexQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0JVclNMbGhaSnMzd2VpZmdSQmhVOXg3RkRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hOWIzNTUtN2U1YS00MDVkLThlNGIt YTQ3Njk1MTQxYTliLzEvN01TYVdkMklrZHg2T0M0QnBvMnhuU3MyWTFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9hOWIzNTUtN2U1YS00MDVkLThlNGItYTQ3Njk1MTQxYTli LzEvX0JVclNMbGhaSnMzd2VpZmdSQmhVOXg3RkRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudPAMA0G CSqGSIb3DQEBCwUAA4IBAQBRo8WulNTVDmiffrfoDTYgWaeXPhhLXY6hgKivNnAo qkmCUGo5E4U818MiS97mpwINrCsqHFb/quFCzsZ0Lya4RXtvajRJpI8j+qKyymWU aTktDho178+weyGSLliiAEro5HgJLxAbqYPDNvkteFBHy18fAD+Npj9mCmRzyREu wQqmgZqGUDrqND7xP6fhmsXEh9sTCoLF/y36QQlSjVcGxwtZUYBWjThZaXJ5VgMP zUwPw2zdb4aVAoVOHUYShiOsrN3VYIIyTzKUEMIows/MfvKP2L3eXOT4XdNbRTGU MD7FdDxQ4zQjoqGhmNVCed9uoXIuor3h/IUQnPZVGUHL -----END CERTIFICATE-----Generated at Sat Dec 6 05:42:20 2025 by rpki-client