This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/7heerGQUVM2NoqBGyJhyehohjOk.roa File: 7heerGQUVM2NoqBGyJhyehohjOk.roa (raw, json) Hash identifier: UIFcGcsWGAqkq5UEo2aGOtCYPQ+zsoxDP1sifMcfHL4= Subject key identifier: EE:17:9E:AC:64:14:54:CD:8D:A2:A0:46:C8:98:72:7A:1A:21:8C:E9 Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019B77C77B0251C1DED4576CFE5773C0D863 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/7heerGQUVM2NoqBGyJhyehohjOk.roa Signing time: Thu 01 Jan 2026 04:18:40 +0000 ROA not before: Thu 01 Jan 2026 04:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210668 IP address blocks: 171.25.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:7b:02:51:c1:de:d4:57:6c:fe:57:73:c0:d8:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Jan 1 04:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee179eac641454cd8da2a046c898727a1a218ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:56:28:1b:f1:60:5d:09:c2:67:18:49:f2:cd: f7:92:ec:92:a5:f5:ab:a8:bf:20:76:e4:5c:89:07: 62:08:f3:b4:89:07:37:b4:7d:87:0d:a3:d2:f6:79: 56:38:66:ee:5c:d1:5e:06:5f:43:b3:66:c3:00:09: 15:35:c6:ac:7c:cb:e5:2f:b4:f0:b8:55:31:51:90: e0:34:0b:04:37:76:a7:7a:3d:0b:df:56:af:bc:09: 57:4a:51:5c:f5:4d:50:e5:49:fe:82:4d:d6:73:d2: 27:e7:6f:e2:61:a7:6e:fb:34:be:4f:cc:cf:02:43: 09:e6:7c:6b:8c:9d:3e:d1:7c:21:5a:38:96:90:84: d6:cd:29:39:5b:d5:5e:ab:30:e4:00:a6:86:c0:0d: 29:9a:44:27:f4:80:2c:9e:30:2b:47:7c:50:71:97: 4c:ae:1a:d8:ba:46:77:61:5e:ac:55:29:dc:24:d8: 6c:d4:49:90:5a:cc:b1:e6:0b:33:bb:6c:a0:71:5d: c3:2d:ce:83:23:e8:f2:6f:34:aa:9f:a9:6c:21:11: 77:b5:26:a5:8f:c7:55:27:a4:2d:9d:5b:b6:e7:a3: c3:9e:c2:e5:73:15:70:bb:e4:0e:e1:60:e4:ae:d4: bf:a9:c5:1c:cd:c8:b4:69:b1:68:bc:4c:f1:54:ef: 2f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:17:9E:AC:64:14:54:CD:8D:A2:A0:46:C8:98:72:7A:1A:21:8C:E9 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/7heerGQUVM2NoqBGyJhyehohjOk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.25.219.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:60:5a:08:39:d5:02:9f:77:09:5c:30:b8:14:c9:46:30:b7: 43:8a:7a:1d:b6:4e:20:4b:89:5f:e1:c6:a8:ef:d4:5c:b6:23: f1:b8:25:45:e7:33:fe:3d:52:29:50:55:46:66:c4:f3:5e:7c: c5:ce:0b:b8:44:57:ba:16:55:27:2c:38:70:69:e7:55:c9:6e: 28:19:db:c2:8b:94:96:0f:d1:71:04:58:32:a1:0a:6b:84:5e: b9:a7:1c:a4:9d:a8:a4:e3:27:a2:5f:c2:9a:87:f3:82:f6:3d: 6c:67:f3:64:9d:6f:23:19:f0:1f:17:4f:3d:fc:d1:87:2b:b0: d0:80:b0:d9:2f:e9:b3:6d:8e:b9:12:00:02:6a:e3:13:4e:eb: f9:d9:31:a6:d6:25:6c:8c:cd:d4:1c:07:ba:ac:a5:5d:ac:9b: 79:f5:2a:56:ee:b7:65:bc:5a:83:38:a9:df:6c:50:51:c8:6e: fb:67:06:db:19:59:f7:d9:4e:d0:6a:ee:a6:ba:69:82:67:89: e7:7b:02:22:29:59:30:17:04:1e:95:95:f6:65:b4:b2:e5:44: 6f:64:30:6c:24:e0:bb:4a:a6:f8:76:65:70:3d:ed:d8:db:3a: f0:ff:44:16:bb:32:1f:c7:99:b4:07:f0:32:3e:8e:32:63:62: 85:bf:08:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3sCUcHe1Fds/ldzwNhjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwMTAxMDQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTE3OWVhYzY0MTQ1NGNkOGRhMmEwNDZjODk4NzI3YTFhMjE4Y2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lYoG/FgXQnCZxhJ8s33kuySpfWr qL8gduRciQdiCPO0iQc3tH2HDaPS9nlWOGbuXNFeBl9Ds2bDAAkVNcasfMvlL7Tw uFUxUZDgNAsEN3anej0L31avvAlXSlFc9U1Q5Un+gk3Wc9In52/iYadu+zS+T8zP AkMJ5nxrjJ0+0XwhWjiWkITWzSk5W9VeqzDkAKaGwA0pmkQn9IAsnjArR3xQcZdM rhrYukZ3YV6sVSncJNhs1EmQWsyx5gszu2ygcV3DLc6DI+jybzSqn6lsIRF3tSal j8dVJ6QtnVu256PDnsLlcxVwu+QO4WDkrtS/qcUczci0abFovEzxVO8vEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO4XnqxkFFTNjaKgRsiYcnoaIYzpMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvN2hlZXJHUVVWTTJOb3FCR3lKaHllaG9oak9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqxnbMA0G CSqGSIb3DQEBCwUAA4IBAQA7YFoIOdUCn3cJXDC4FMlGMLdDinodtk4gS4lf4cao 79RctiPxuCVF5zP+PVIpUFVGZsTzXnzFzgu4RFe6FlUnLDhwaedVyW4oGdvCi5SW D9FxBFgyoQprhF65pxyknaik4yeiX8Kah/OC9j1sZ/NknW8jGfAfF089/NGHK7DQ gLDZL+mzbY65EgACauMTTuv52TGm1iVsjM3UHAe6rKVdrJt59SpW7rdlvFqDOKnf bFBRyG77ZwbbGVn32U7Qau6mummCZ4nnewIiKVkwFwQelZX2ZbSy5URvZDBsJOC7 Sqb4dmVwPe3Y2zrw/0QWuzIfx5m0B/AyPo4yY2KFvwjb -----END CERTIFICATE-----Generated at Sun Jan 25 15:01:07 2026 by rpki-client