This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/7IBTUseRk7zv94Dnpevsji-MPak.roa File: 7IBTUseRk7zv94Dnpevsji-MPak.roa (raw, json) Hash identifier: OI9qfsQPi4f7OJOO0DKYF4KRnwctmOowvulRpTfATm8= Subject key identifier: EC:80:53:52:C7:91:93:BC:EF:F7:80:E7:A5:EB:EC:8E:2F:8C:3D:A9 Certificate issuer: /CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05 Certificate serial: 019AEF50A028B9893FCAB4BCDC4176537AD5 Authority key identifier: 31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/7IBTUseRk7zv94Dnpevsji-MPak.roa Signing time: Fri 05 Dec 2025 16:20:29 +0000 ROA not before: Fri 05 Dec 2025 16:20:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209870 IP address blocks: 79.140.195.0/24 maxlen: 32 2a0e:5140::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:50:a0:28:b9:89:3f:ca:b4:bc:dc:41:76:53:7a:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05 Validity Not Before: Dec 5 16:20:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ec805352c79193bceff780e7a5ebec8e2f8c3da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2a:5e:1e:02:06:7d:c7:77:f3:02:76:3d:31: 55:bc:22:df:fb:20:9f:2e:bf:a8:95:af:70:9c:c4: 79:56:87:81:96:4f:fd:4f:8e:26:78:7a:f8:87:aa: 8c:72:3e:f1:04:82:57:b4:2d:44:d5:2c:69:2e:bf: eb:31:92:ff:51:b9:db:c3:aa:8c:c7:53:81:8d:23: 62:d1:2e:82:c0:bb:77:bd:61:d7:a2:6c:f3:99:6e: ba:64:18:5b:2a:c7:cf:01:28:7f:b6:1e:b3:92:d1: 9e:6e:39:5f:e6:1d:f9:40:44:ff:7e:76:7b:22:26: 18:9e:f6:a4:45:f6:99:45:6f:1a:74:d0:d7:86:d1: 70:60:86:a3:ba:f8:b9:15:51:18:32:f1:2f:ef:6e: 09:55:fb:d5:67:12:d7:5b:00:66:a5:d3:fb:e2:6c: ea:bb:3d:2b:9b:b1:7d:f8:8b:05:d3:bd:84:36:b2: eb:5c:87:dd:40:d8:0b:b6:89:8c:f9:74:82:05:ee: 08:65:08:ef:13:f5:97:9c:c5:f7:3c:5d:96:a4:ca: b6:6b:72:5c:cc:a2:e9:0f:12:6c:3d:1d:d8:d4:c3: 53:c6:03:aa:6b:29:37:f2:4b:8f:e9:44:da:31:b0: 2e:ea:0b:8c:da:d5:d2:53:30:f3:d9:1c:1c:07:5a: 28:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:80:53:52:C7:91:93:BC:EF:F7:80:E7:A5:EB:EC:8E:2F:8C:3D:A9 X509v3 Authority Key Identifier: keyid:31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/7IBTUseRk7zv94Dnpevsji-MPak.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.140.195.0/24 IPv6: 2a0e:5140::/29 Signature Algorithm: sha256WithRSAEncryption 17:61:88:a9:18:b6:8f:25:fb:81:9c:3c:50:8a:1b:00:2d:0f: 52:92:73:e7:72:2b:e3:dd:af:03:f2:a6:d6:61:d4:6d:8f:35: af:45:eb:10:b5:06:27:6c:5d:60:9c:87:ac:c8:94:ac:a3:c3: 10:8e:5e:3d:f8:34:cc:79:f5:e1:da:69:4f:b2:a4:27:49:37: 2d:61:ad:c6:45:d5:34:8a:ed:20:00:03:57:80:5e:f6:41:da: 0f:37:5c:51:3d:f3:cf:24:ef:19:1a:75:22:1f:87:0e:c4:47: 7c:77:33:c0:36:db:01:47:fa:9a:88:46:ce:d8:51:a4:21:72: 96:bd:28:9e:a6:c2:f6:13:dd:82:2d:87:00:8e:9d:7e:08:89: 46:26:8f:f9:83:bd:f4:b0:1e:e1:84:c4:b3:4d:89:4e:90:3d: c9:c6:5b:f7:53:60:2b:a4:88:e3:73:31:3c:a6:7b:a9:98:4f: f4:42:26:7a:1c:48:d4:f7:1f:ec:c9:26:e9:2b:9a:16:c0:a2: 4b:be:52:b5:71:71:74:56:a4:64:10:ff:56:a7:6c:dd:d6:71: f5:b2:77:ed:5f:c5:da:b5:32:60:5f:cf:90:af:da:90:fd:0d: f3:b3:36:f7:6b:c2:a6:80:84:be:74:ae:9d:b6:32:51:c9:84: fc:c5:f5:52 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZrvUKAouYk/yrS83EF2U3rVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxOGRhYjcwZjQ0YTdlYjhiMWNmYzEzNzQzM2ZjZDRkNzhh MDNiMDUwHhcNMjUxMjA1MTYyMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzgwNTM1MmM3OTE5M2JjZWZmNzgwZTdhNWViZWM4ZTJmOGMzZGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvipeHgIGfcd38wJ2PTFVvCLf+yCf Lr+ola9wnMR5VoeBlk/9T44meHr4h6qMcj7xBIJXtC1E1SxpLr/rMZL/Ubnbw6qM x1OBjSNi0S6CwLt3vWHXomzzmW66ZBhbKsfPASh/th6zktGebjlf5h35QET/fnZ7 IiYYnvakRfaZRW8adNDXhtFwYIajuvi5FVEYMvEv724JVfvVZxLXWwBmpdP74mzq uz0rm7F9+IsF072ENrLrXIfdQNgLtomM+XSCBe4IZQjvE/WXnMX3PF2WpMq2a3Jc zKLpDxJsPR3Y1MNTxgOqayk38kuP6UTaMbAu6guM2tXSUzDz2RwcB1ooawIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOyAU1LHkZO87/eA56Xr7I4vjD2pMB8GA1UdIwQY MBaAFDGNq3D0Sn64sc/BN0M/zU14oDsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVkycmNQUktmcml4ejhFM1F6X05UWGlnT3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NGY4NzQtNDQ2Yy00NjQ2LThkYjAt ZDk5ZjY2ZWY2MDZjLzEvN0lCVFVzZVJrN3p2OTREbnBldnNqaS1NUGFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80NGY4NzQtNDQ2Yy00NjQ2LThkYjAtZDk5ZjY2ZWY2MDZj LzEvTVkycmNQUktmcml4ejhFM1F6X05UWGlnT3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAT4zDMA0E AgACMAcDBQMqDlFAMA0GCSqGSIb3DQEBCwUAA4IBAQAXYYipGLaPJfuBnDxQihsA LQ9SknPncivj3a8D8qbWYdRtjzWvResQtQYnbF1gnIesyJSso8MQjl49+DTMefXh 2mlPsqQnSTctYa3GRdU0iu0gAANXgF72QdoPN1xRPfPPJO8ZGnUiH4cOxEd8dzPA NtsBR/qaiEbO2FGkIXKWvSiepsL2E92CLYcAjp1+CIlGJo/5g730sB7hhMSzTYlO kD3Jxlv3U2ArpIjjczE8pnupmE/0QiZ6HEjU9x/sySbpK5oWwKJLvlK1cXF0VqRk EP9Wp2zd1nH1snftX8XatTJgX8+Qr9qQ/Q3zszb3a8KmgIS+dK6dtjJRyYT8xfVS -----END CERTIFICATE-----Generated at Sat Dec 6 05:44:45 2025 by rpki-client