This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/f25A04rpXtD2_br_jQIVVfQ8etM.roa File: f25A04rpXtD2_br_jQIVVfQ8etM.roa (raw, json) Hash identifier: iSZljQkRURevE7K28zcSzw6RdndhY9rvXLjgdmSdTqY= Subject key identifier: 7F:6E:40:D3:8A:E9:5E:D0:F6:FD:BA:FF:8D:02:15:55:F4:3C:7A:D3 Certificate issuer: /CN=c7983b3a9758fcbe78733d9155aed266c882a23c Certificate serial: 019B76EB3BEF3D665B59EBF3A39753629F43 Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/f25A04rpXtD2_br_jQIVVfQ8etM.roa Signing time: Thu 01 Jan 2026 00:18:06 +0000 ROA not before: Thu 01 Jan 2026 00:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29553 IP address blocks: 188.246.128.0/19 maxlen: 19 188.246.131.0/24 maxlen: 24 217.76.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:3b:ef:3d:66:5b:59:eb:f3:a3:97:53:62:9f:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c Validity Not Before: Jan 1 00:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f6e40d38ae95ed0f6fdbaff8d021555f43c7ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:04:e8:fa:04:1f:e5:1c:4d:ea:38:5f:04:ea: 69:20:ac:56:d3:4e:1e:38:02:b1:bd:80:af:61:1c: 03:70:d6:41:9c:0d:df:7e:13:c4:29:92:ec:27:0c: d0:02:8a:ea:57:bc:35:a1:75:fd:32:20:1b:e1:f2: 75:ef:e0:61:f2:c2:31:d0:b8:a3:99:43:09:ab:96: 1e:68:ce:d6:79:4f:de:50:71:65:24:d5:a3:f3:c8: d9:0b:5a:77:64:d9:fc:a8:b4:6f:6c:fd:34:49:7d: ca:8d:33:73:bb:be:d9:9d:71:81:c8:72:ab:14:a9: 2a:bd:fc:96:21:32:81:65:eb:68:4f:55:21:d3:b5: 59:5a:5b:14:07:67:85:0e:8e:9c:24:8c:ac:21:68: 02:af:9d:4c:8e:b6:c3:5a:d4:3a:3c:81:a2:72:91: 30:14:d0:85:3c:ca:fa:7c:fd:6e:d3:66:ac:df:0f: cc:40:35:b4:ae:f4:65:a4:57:c9:c7:97:8d:9b:bc: e1:9a:61:42:e8:0f:67:6d:87:d0:0d:4c:3f:87:a7: f3:d7:f5:80:8f:b8:b4:c5:2b:c6:ea:b3:5d:0e:96: 1c:7e:16:37:ca:b3:38:0d:0f:a5:1d:9a:1b:37:61: a0:4f:8d:73:cc:c2:48:b3:ae:ec:db:d7:ba:9a:21: a6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6E:40:D3:8A:E9:5E:D0:F6:FD:BA:FF:8D:02:15:55:F4:3C:7A:D3 X509v3 Authority Key Identifier: keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/f25A04rpXtD2_br_jQIVVfQ8etM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.246.128.0/19 217.76.112.0/20 Signature Algorithm: sha256WithRSAEncryption 6c:3b:69:ec:ad:c4:94:44:4d:49:98:eb:3d:65:40:ca:e6:47: 26:b4:e2:98:ad:50:c3:02:92:58:9f:6f:4a:94:16:0a:ed:5c: 43:93:de:57:74:d1:5f:80:8f:a3:ba:21:1a:4a:9b:3a:23:c7: 73:ce:7a:87:41:60:0a:bd:5b:12:b8:48:7e:74:3b:36:69:5d: d0:da:27:19:46:62:a1:82:cc:c0:df:f4:6b:65:8f:57:39:9a: 0c:36:cd:73:4f:2f:af:dc:e3:d7:97:3b:9f:50:57:18:af:c5: 94:d2:f0:de:50:a1:93:33:38:70:c1:28:04:a8:52:9e:93:b4: 0c:72:ff:e1:48:a8:98:48:07:c0:22:27:f8:a6:59:e9:cc:06: b0:e1:0b:d9:a1:2f:bc:a1:cf:b6:f8:54:c5:dd:10:25:0c:9d: 8d:23:e7:5a:81:0b:6c:d6:58:5d:aa:ce:41:99:92:0f:69:15: 82:c1:1e:cb:ac:59:59:89:60:01:ce:39:73:25:35:0d:4d:67: 7d:04:12:4d:91:c0:d6:bf:dc:a1:7d:c1:81:2e:af:fb:d1:75: 0a:b1:84:df:fd:39:e5:47:fc:88:52:f8:11:3e:77:25:6b:f5: f3:49:a9:f1:c8:3f:03:95:e5:37:d6:0b:b8:72:7b:5a:95:5a: 62:0e:05:28 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26zvvPWZbWevzo5dTYp9DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3OTgzYjNhOTc1OGZjYmU3ODczM2Q5MTU1YWVkMjY2Yzg4 MmEyM2MwHhcNMjYwMTAxMDAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjZlNDBkMzhhZTk1ZWQwZjZmZGJhZmY4ZDAyMTU1NWY0M2M3YWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwTo+gQf5RxN6jhfBOppIKxW004e OAKxvYCvYRwDcNZBnA3ffhPEKZLsJwzQAorqV7w1oXX9MiAb4fJ17+Bh8sIx0Lij mUMJq5YeaM7WeU/eUHFlJNWj88jZC1p3ZNn8qLRvbP00SX3KjTNzu77ZnXGByHKr FKkqvfyWITKBZetoT1Uh07VZWlsUB2eFDo6cJIysIWgCr51MjrbDWtQ6PIGicpEw FNCFPMr6fP1u02as3w/MQDW0rvRlpFfJx5eNm7zhmmFC6A9nbYfQDUw/h6fz1/WA j7i0xSvG6rNdDpYcfhY3yrM4DQ+lHZobN2GgT41zzMJIs67s29e6miGm4wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFH9uQNOK6V7Q9v26/40CFVX0PHrTMB8GA1UdIwQY MBaAFMeYOzqXWPy+eHM9kVWu0mbIgqI8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDVnN09wZFlfTDU0Y3oyUlZhN1Nac2lDb2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MTFkMTYtYjUxMy00N2VkLTllNzEt MjM4NDA1ZjJjZGU5LzEvZjI1QTA0cnBYdEQyX2JyX2pRSVZWZlE4ZXRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MTFkMTYtYjUxMy00N2VkLTllNzEtMjM4NDA1ZjJjZGU5 LzEveDVnN09wZFlfTDU0Y3oyUlZhN1Nac2lDb2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFvPaAAwQE 2UxwMA0GCSqGSIb3DQEBCwUAA4IBAQBsO2nsrcSURE1JmOs9ZUDK5kcmtOKYrVDD ApJYn29KlBYK7VxDk95XdNFfgI+juiEaSps6I8dzznqHQWAKvVsSuEh+dDs2aV3Q 2icZRmKhgszA3/RrZY9XOZoMNs1zTy+v3OPXlzufUFcYr8WU0vDeUKGTMzhwwSgE qFKek7QMcv/hSKiYSAfAIif4plnpzAaw4QvZoS+8oc+2+FTF3RAlDJ2NI+dagQts 1lhdqs5BmZIPaRWCwR7LrFlZiWABzjlzJTUNTWd9BBJNkcDWv9yhfcGBLq/70XUK sYTf/TnlR/yIUvgRPncla/XzSanxyD8DleU31gu4cntalVpiDgUo -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:23 2026 by rpki-client