This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/1-7SKLX7Fe7Ix4a6o34ESRoulfMk.roa File: 1-7SKLX7Fe7Ix4a6o34ESRoulfMk.roa (raw, json) Hash identifier: 0HHMTAsB+MNhajvF2102BenVFZxwF6ZCwPg2M41m5SA= Subject key identifier: FB:B4:8A:2D:7E:C5:7B:B2:31:E1:AE:A8:DF:81:12:46:8B:A5:7C:C9 Certificate issuer: /CN=2b58895beef87b55030079112d4ab17d93c98a20 Certificate serial: 019AA0C682B2AAF0AAC03BAA0C448CA71582 Authority key identifier: 2B:58:89:5B:EE:F8:7B:55:03:00:79:11:2D:4A:B1:7D:93:C9:8A:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1iJW-74e1UDAHkRLUqxfZPJiiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/1-7SKLX7Fe7Ix4a6o34ESRoulfMk.roa Signing time: Thu 20 Nov 2025 10:19:15 +0000 ROA not before: Thu 20 Nov 2025 10:19:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203595 IP address blocks: 74.122.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/K1iJW-74e1UDAHkRLUqxfZPJiiA.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/K1iJW-74e1UDAHkRLUqxfZPJiiA.mft rsync://rpki.ripe.net/repository/DEFAULT/K1iJW-74e1UDAHkRLUqxfZPJiiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:c6:82:b2:aa:f0:aa:c0:3b:aa:0c:44:8c:a7:15:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b58895beef87b55030079112d4ab17d93c98a20 Validity Not Before: Nov 20 10:19:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fbb48a2d7ec57bb231e1aea8df8112468ba57cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:84:d0:33:ec:f8:bc:8c:14:9e:4e:0b:f0:60: 91:5b:d8:52:21:19:ff:78:2e:cd:77:0e:04:c5:1c: 6b:67:bb:50:b8:ce:96:06:d8:27:eb:9f:0e:65:bd: 9a:b3:8f:1a:6b:50:14:65:95:86:11:1a:0c:7e:d3: 87:db:c8:6e:96:cc:0e:30:a9:1c:d1:7f:16:70:02: 8c:ff:df:26:da:a1:06:25:1c:19:77:71:5f:f5:43: 6e:a1:53:3b:e0:09:0f:c8:59:f6:e6:98:85:e4:c2: 33:67:74:71:5e:fd:8d:00:e5:37:84:bd:b4:71:ab: 7b:ea:cc:7f:71:bc:14:2d:9f:05:10:22:02:d1:e6: 75:75:49:ab:88:54:8f:3a:f6:a5:85:ad:58:65:0d: 30:18:c1:0f:35:f1:a0:2b:a8:79:0b:09:f4:56:5c: 05:bb:82:54:e1:d5:09:1a:43:18:4e:e0:9c:c4:86: 01:4c:e5:be:7f:b7:c4:78:6d:11:86:d7:8d:2f:a6: f6:a6:dc:2e:a3:e9:cd:b1:6e:f2:37:49:0d:76:e9: f0:36:e4:7d:ee:b5:df:9c:c1:ba:60:fe:e7:fa:ee: c2:42:4a:8e:e6:8e:a8:62:2a:2a:71:f3:f6:2f:86: 64:93:26:7f:90:cb:e7:d9:e5:4c:6c:95:1b:f4:36: cb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B4:8A:2D:7E:C5:7B:B2:31:E1:AE:A8:DF:81:12:46:8B:A5:7C:C9 X509v3 Authority Key Identifier: keyid:2B:58:89:5B:EE:F8:7B:55:03:00:79:11:2D:4A:B1:7D:93:C9:8A:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1iJW-74e1UDAHkRLUqxfZPJiiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/1-7SKLX7Fe7Ix4a6o34ESRoulfMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/K1iJW-74e1UDAHkRLUqxfZPJiiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 74.122.238.0/24 Signature Algorithm: sha256WithRSAEncryption 66:36:f7:b5:c4:e4:8c:78:57:d2:b0:0b:37:e7:34:da:07:32: fe:91:71:c4:82:91:18:11:7d:de:f6:3e:71:2f:0d:87:6d:c2: 9d:08:cd:21:af:33:d0:88:57:10:03:d7:3c:e9:dd:92:29:fa: b3:ae:b8:68:e2:57:f0:44:83:0b:cc:d4:1f:91:3a:c4:c7:7b: 28:6a:c9:bf:5c:67:66:ab:8d:c4:e3:91:63:d9:6f:ed:ba:24: a6:9e:38:c2:ab:08:02:3c:a8:4f:82:93:16:85:49:9a:82:c2: e5:d1:82:ba:e9:f1:5c:d9:60:7f:5d:10:03:c0:c3:e1:f9:08: 99:96:7a:44:00:e7:2c:7e:32:54:13:e7:de:f8:96:a3:46:13: 69:0e:fa:c4:dd:03:c4:10:43:22:9a:86:be:f3:de:c4:8f:ab: 98:0c:1b:37:5b:8f:15:d8:05:97:6c:a6:90:e1:16:e3:56:9b: 2b:46:c2:b3:08:70:e4:8c:df:6d:82:f0:15:63:9e:f7:a5:61: 9c:bc:ec:21:f2:c7:cf:b9:ca:72:6f:2c:4d:3f:a0:21:c1:bf: f9:38:c1:75:5d:68:c9:94:07:25:f1:65:b1:58:19:ed:3e:63: b6:6e:f8:25:69:83:8a:2d:e6:ab:c1:81:f5:11:2d:26:70:3f: 50:a4:5b:59 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZqgxoKyqvCqwDuqDESMpxWCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNTg4OTViZWVmODdiNTUwMzAwNzkxMTJkNGFiMTdkOTNj OThhMjAwHhcNMjUxMTIwMTAxOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmI0OGEyZDdlYzU3YmIyMzFlMWFlYThkZjgxMTI0NjhiYTU3Y2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYTQM+z4vIwUnk4L8GCRW9hSIRn/ eC7Ndw4ExRxrZ7tQuM6WBtgn658OZb2as48aa1AUZZWGERoMftOH28hulswOMKkc 0X8WcAKM/98m2qEGJRwZd3Ff9UNuoVM74AkPyFn25piF5MIzZ3RxXv2NAOU3hL20 cat76sx/cbwULZ8FECIC0eZ1dUmriFSPOvalha1YZQ0wGMEPNfGgK6h5Cwn0VlwF u4JU4dUJGkMYTuCcxIYBTOW+f7fEeG0RhteNL6b2ptwuo+nNsW7yN0kNdunwNuR9 7rXfnMG6YP7n+u7CQkqO5o6oYioqcfP2L4ZkkyZ/kMvn2eVMbJUb9DbLYwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPu0ii1+xXuyMeGuqN+BEkaLpXzJMB8GA1UdIwQY MBaAFCtYiVvu+HtVAwB5ES1KsX2TyYogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzFpSlctNzRlMVVEQUhrUkxVcXhmWlBKaWlBLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iNjJhOTUtYjQzZC00ZjFmLThlZjQt OWEzMjFmZmMyZWVmLzEvMS03U0tMWDdGZTdJeDRhNm8zNEVTUm91bGZNay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDAvYjYyYTk1LWI0M2QtNGYxZi04ZWY0LTlhMzIxZmZjMmVl Zi8xL0sxaUpXLTc0ZTFVREFIa1JMVXF4ZlpQSmlpQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAEp67jAN BgkqhkiG9w0BAQsFAAOCAQEAZjb3tcTkjHhX0rALN+c02gcy/pFxxIKRGBF93vY+ cS8Nh23CnQjNIa8z0IhXEAPXPOndkin6s664aOJX8ESDC8zUH5E6xMd7KGrJv1xn ZquNxOORY9lv7bokpp44wqsIAjyoT4KTFoVJmoLC5dGCuunxXNlgf10QA8DD4fkI mZZ6RADnLH4yVBPn3viWo0YTaQ76xN0DxBBDIpqGvvPexI+rmAwbN1uPFdgFl2ym kOEW41abK0bCswhw5IzfbYLwFWOe96VhnLzsIfLHz7nKcm8sTT+gIcG/+TjBdV1o yZQHJfFlsVgZ7T5jtm74JWmDii3mq8GB9REtJnA/UKRbWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:47:46 2025 by rpki-client