This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/cTjmubyLCN4Cd4JXEeIjGOFI_QI.roa File: cTjmubyLCN4Cd4JXEeIjGOFI_QI.roa (raw, json) Hash identifier: 5AsKzlWifWFIxtEM5INGb5cckYMMjWeiNCE8Ap83gMM= Subject key identifier: 71:38:E6:B9:BC:8B:08:DE:02:77:82:57:11:E2:23:18:E1:48:FD:02 Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321 Certificate serial: 019A890F13407932853040A96D85BCD7706C Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/cTjmubyLCN4Cd4JXEeIjGOFI_QI.roa Signing time: Sat 15 Nov 2025 19:47:37 +0000 ROA not before: Sat 15 Nov 2025 19:47:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205463 IP address blocks: 185.7.242.0/24 maxlen: 24 185.7.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:89:0f:13:40:79:32:85:30:40:a9:6d:85:bc:d7:70:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321 Validity Not Before: Nov 15 19:47:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7138e6b9bc8b08de0277825711e22318e148fd02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fc:8c:6a:dc:00:8e:94:8b:79:1f:26:cf:14: 71:c2:fa:62:73:2d:c4:c8:f2:24:e4:98:e3:36:07: 2f:03:6b:77:d4:d4:54:c9:d2:c2:fb:96:8d:09:f0: e2:2e:a7:a0:ec:28:4a:5c:07:21:9d:c5:14:c2:fe: 14:26:16:c4:14:dc:f6:37:aa:61:c2:3a:62:99:14: e3:f3:b9:4e:cd:d2:c3:d6:e3:da:77:49:ba:1a:6b: b9:de:5d:71:0f:36:fb:aa:81:0e:d9:65:55:b4:e8: 9e:3c:56:41:c2:10:fc:d7:a9:9e:43:60:73:92:c3: 3a:0d:f5:cb:cd:78:24:28:c3:fc:13:c7:e1:0f:a9: 03:4c:e1:d4:80:44:c3:ad:70:31:54:f9:e0:48:ae: 94:fd:a8:27:eb:5f:8d:00:a5:76:cc:d5:50:1e:10: 4b:2e:25:46:58:81:ff:7c:93:9e:ee:5f:dd:ca:6a: c5:d7:db:1e:a7:3d:d6:56:ad:da:f0:8d:d8:48:56: b9:18:ba:ea:e2:df:ad:21:2e:c3:16:f4:29:99:96: 2e:dd:a2:69:ad:b9:ee:00:24:02:e5:10:0b:89:7c: cc:77:2b:06:5f:9d:d4:ce:15:9a:2d:be:7f:72:61: 46:24:04:40:89:e9:5e:87:24:eb:97:71:6a:c1:0e: 5a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:38:E6:B9:BC:8B:08:DE:02:77:82:57:11:E2:23:18:E1:48:FD:02 X509v3 Authority Key Identifier: keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/cTjmubyLCN4Cd4JXEeIjGOFI_QI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.7.242.0/23 Signature Algorithm: sha256WithRSAEncryption b6:8e:f7:e7:fb:f7:1d:10:2e:1d:5f:da:d3:4a:d6:33:f3:31: 59:6c:fd:92:f5:30:9f:45:c1:1a:63:8b:bb:25:19:c7:55:07: c8:43:b1:77:cf:85:e0:7d:c4:76:6a:e9:ed:df:07:63:35:3a: 1d:56:0c:08:55:5a:d8:67:ca:b4:9d:a7:9a:33:78:44:86:46: ff:57:91:58:9c:79:be:36:94:67:3c:ae:3a:4d:ad:8a:47:33: 39:ee:07:e6:bf:c5:ad:1c:74:a2:b9:29:a3:89:00:4a:c7:e8: a8:a8:4c:fc:37:2c:40:e5:d5:55:0a:a4:e7:e0:55:45:26:77: 36:c6:0b:7d:ec:02:fb:fa:06:3b:3b:c2:f2:9b:38:3e:17:1e: 08:df:ad:db:c3:4a:51:ed:cf:d0:fe:3d:89:af:de:e7:4f:09: f9:46:27:c4:ca:2c:1a:1a:0a:bf:f5:0d:ed:82:2a:3e:17:a3: 0f:49:a0:16:46:78:ee:16:c1:4c:cc:4d:75:16:40:b4:af:80: c7:2c:8b:d6:cb:9d:32:9a:99:74:a9:47:ca:88:53:8e:17:6a: 46:a6:25:a4:79:06:6b:73:8d:a2:e4:bf:66:e9:3e:77:36:70: 0f:ad:37:44:41:eb:c6:45:4e:6a:bd:6f:34:6a:28:f8:0d:0b: 26:21:2c:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqJDxNAeTKFMECpbYW813BsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx ZDMzMjEwHhcNMjUxMTE1MTk0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTM4ZTZiOWJjOGIwOGRlMDI3NzgyNTcxMWUyMjMxOGUxNDhmZDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvyMatwAjpSLeR8mzxRxwvpicy3E yPIk5JjjNgcvA2t31NRUydLC+5aNCfDiLqeg7ChKXAchncUUwv4UJhbEFNz2N6ph wjpimRTj87lOzdLD1uPad0m6Gmu53l1xDzb7qoEO2WVVtOiePFZBwhD816meQ2Bz ksM6DfXLzXgkKMP8E8fhD6kDTOHUgETDrXAxVPngSK6U/agn61+NAKV2zNVQHhBL LiVGWIH/fJOe7l/dymrF19sepz3WVq3a8I3YSFa5GLrq4t+tIS7DFvQpmZYu3aJp rbnuACQC5RALiXzMdysGX53UzhWaLb5/cmFGJARAielehyTrl3FqwQ5a0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHE45rm8iwjeAneCVxHiIxjhSP0CMB8GA1UdIwQY MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt NDNkZjQ3ZDVhMWU3LzEvY1RqbXVieUxDTjRDZDRKWEVlSWpHT0ZJX1FJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3 LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuQfyMA0G CSqGSIb3DQEBCwUAA4IBAQC2jvfn+/cdEC4dX9rTStYz8zFZbP2S9TCfRcEaY4u7 JRnHVQfIQ7F3z4XgfcR2aunt3wdjNTodVgwIVVrYZ8q0naeaM3hEhkb/V5FYnHm+ NpRnPK46Ta2KRzM57gfmv8WtHHSiuSmjiQBKx+ioqEz8NyxA5dVVCqTn4FVFJnc2 xgt97AL7+gY7O8Lymzg+Fx4I363bw0pR7c/Q/j2Jr97nTwn5RifEyiwaGgq/9Q3t gio+F6MPSaAWRnjuFsFMzE11FkC0r4DHLIvWy50ympl0qUfKiFOOF2pGpiWkeQZr c42i5L9m6T53NnAPrTdEQevGRU5qvW80aij4DQsmISyz -----END CERTIFICATE-----Generated at Sat Dec 6 11:46:35 2025 by rpki-client