This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/7Z_vFSZFOZAcCI6hKo-nmV8b53U.roa File: 7Z_vFSZFOZAcCI6hKo-nmV8b53U.roa (raw, json) Hash identifier: kDIBfQiNZDS1Ow4XNY7xNigvTEvgCYxiPJD9eUdOum0= Subject key identifier: ED:9F:EF:15:26:45:39:90:1C:08:8E:A1:2A:8F:A7:99:5F:1B:E7:75 Certificate issuer: /CN=9a6c0b9fb13f4316ed6ca3f86ffc7185c09db3d7 Certificate serial: 019AEF3B906855822F4E274E533486330F39 Authority key identifier: 9A:6C:0B:9F:B1:3F:43:16:ED:6C:A3:F8:6F:FC:71:85:C0:9D:B3:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmwLn7E_QxbtbKP4b_xxhcCds9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/7Z_vFSZFOZAcCI6hKo-nmV8b53U.roa Signing time: Fri 05 Dec 2025 15:57:29 +0000 ROA not before: Fri 05 Dec 2025 15:57:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 393406 IP address blocks: 193.161.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/mmwLn7E_QxbtbKP4b_xxhcCds9c.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/mmwLn7E_QxbtbKP4b_xxhcCds9c.mft rsync://rpki.ripe.net/repository/DEFAULT/mmwLn7E_QxbtbKP4b_xxhcCds9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:3b:90:68:55:82:2f:4e:27:4e:53:34:86:33:0f:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a6c0b9fb13f4316ed6ca3f86ffc7185c09db3d7 Validity Not Before: Dec 5 15:57:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ed9fef15264539901c088ea12a8fa7995f1be775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d9:f6:a7:cd:41:e5:7c:b5:19:e4:6e:9f:07: 98:5d:1b:fd:83:b8:be:97:16:3d:3f:66:bb:3b:65: 5c:a3:b0:13:69:95:53:7f:a6:67:eb:91:7e:82:d3: c3:90:77:7a:ae:10:3b:46:e9:58:d1:96:8a:e0:ea: 38:e0:2b:e2:e6:1c:8b:60:23:9a:ab:dd:0c:ec:89: 28:d0:73:45:44:5f:6d:02:2d:6b:fd:28:eb:4a:7b: 61:58:b6:f0:57:22:8f:b5:08:c3:d3:65:40:a7:0f: 6d:18:d9:5e:5c:d4:f6:56:69:e6:3e:83:3e:da:93: ce:f6:ae:de:2c:cb:85:d2:04:a1:e3:d7:97:35:5a: 89:6a:05:9d:53:61:80:96:73:e6:1a:90:da:a7:03: 71:b4:7e:94:b0:6a:6b:c1:be:aa:19:09:0d:1a:97: 05:67:09:e6:38:25:20:46:60:94:24:cd:e6:76:73: 01:06:d5:1d:ed:7b:5a:65:2c:37:03:6a:00:2a:1f: 1f:6f:d0:61:46:10:7e:88:8a:1d:79:09:de:be:f7: 2b:ca:a0:e3:24:5e:79:0d:fa:62:fe:10:e2:ea:66: 12:f6:c9:f2:04:23:97:37:71:e8:db:04:b8:e9:e6: 2f:06:5b:6f:3f:0f:35:54:fe:a8:c4:56:dc:4a:cd: 79:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9F:EF:15:26:45:39:90:1C:08:8E:A1:2A:8F:A7:99:5F:1B:E7:75 X509v3 Authority Key Identifier: keyid:9A:6C:0B:9F:B1:3F:43:16:ED:6C:A3:F8:6F:FC:71:85:C0:9D:B3:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmwLn7E_QxbtbKP4b_xxhcCds9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/7Z_vFSZFOZAcCI6hKo-nmV8b53U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/mmwLn7E_QxbtbKP4b_xxhcCds9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.161.193.0/24 Signature Algorithm: sha256WithRSAEncryption 67:ff:43:bc:c8:32:39:3e:70:a4:ae:40:b3:ac:46:f9:a5:4b: 3a:d4:b3:a3:89:d4:8c:80:42:e1:be:76:33:e3:92:1f:0c:67: d7:c6:33:59:26:79:90:cd:0b:45:1b:9e:4f:95:b1:f4:e6:84: dd:b8:ac:0a:89:0d:e2:04:6b:59:97:2d:bc:1b:5f:9a:3d:78: 93:cc:30:a4:3b:ba:e5:11:59:36:36:a9:99:99:34:33:81:2e: 85:f0:7e:65:71:b5:e5:c1:ce:2e:98:24:46:e6:fb:12:dd:e9: 8b:68:55:61:0e:8c:3c:b4:78:02:08:cb:1a:13:f4:4b:cd:58: 21:84:42:a5:53:02:dc:2f:1c:35:9f:04:1d:26:30:b3:bc:81: 96:bc:9f:4b:f3:0e:ca:fc:95:7b:4f:7a:71:ce:8f:2a:df:2f: 48:af:1b:b8:b9:a1:db:e0:7c:e0:0f:40:20:9a:49:46:67:4e: 05:77:ca:a7:39:77:2d:32:c2:0b:b6:7e:9b:4f:a2:fc:ea:77: 1d:a8:be:a1:79:8c:f0:0d:1d:b3:f1:ed:ff:d6:fe:92:26:00: c3:62:94:98:f6:28:b1:83:24:26:6b:ee:d2:1c:4a:93:d1:02: 77:bf:4e:fa:90:a6:62:44:93:56:fe:65:19:a4:d6:5b:7f:d6: 38:f1:77:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrvO5BoVYIvTidOUzSGMw85MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNmMwYjlmYjEzZjQzMTZlZDZjYTNmODZmZmM3MTg1YzA5 ZGIzZDcwHhcNMjUxMjA1MTU1NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDlmZWYxNTI2NDUzOTkwMWMwODhlYTEyYThmYTc5OTVmMWJlNzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtn2p81B5Xy1GeRunweYXRv9g7i+ lxY9P2a7O2Vco7ATaZVTf6Zn65F+gtPDkHd6rhA7RulY0ZaK4Oo44Cvi5hyLYCOa q90M7Iko0HNFRF9tAi1r/SjrSnthWLbwVyKPtQjD02VApw9tGNleXNT2VmnmPoM+ 2pPO9q7eLMuF0gSh49eXNVqJagWdU2GAlnPmGpDapwNxtH6UsGprwb6qGQkNGpcF ZwnmOCUgRmCUJM3mdnMBBtUd7XtaZSw3A2oAKh8fb9BhRhB+iIodeQnevvcryqDj JF55Dfpi/hDi6mYS9snyBCOXN3Ho2wS46eYvBltvPw81VP6oxFbcSs15gQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO2f7xUmRTmQHAiOoSqPp5lfG+d1MB8GA1UdIwQY MBaAFJpsC5+xP0MW7Wyj+G/8cYXAnbPXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW13TG43RV9ReGJ0YktQNGJfeHhoY0NkczljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81MGEyMzktZDViYy00MmZlLTk1YTUt MWFjMDhlOGE4Y2I0LzEvN1pfdkZTWkZPWkFjQ0k2aEtvLW5tVjhiNTNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi81MGEyMzktZDViYy00MmZlLTk1YTUtMWFjMDhlOGE4Y2I0 LzEvbW13TG43RV9ReGJ0YktQNGJfeHhoY0NkczljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaHBMA0G CSqGSIb3DQEBCwUAA4IBAQBn/0O8yDI5PnCkrkCzrEb5pUs61LOjidSMgELhvnYz 45IfDGfXxjNZJnmQzQtFG55PlbH05oTduKwKiQ3iBGtZly28G1+aPXiTzDCkO7rl EVk2NqmZmTQzgS6F8H5lcbXlwc4umCRG5vsS3emLaFVhDow8tHgCCMsaE/RLzVgh hEKlUwLcLxw1nwQdJjCzvIGWvJ9L8w7K/JV7T3pxzo8q3y9Irxu4uaHb4HzgD0Ag mklGZ04Fd8qnOXctMsILtn6bT6L86ncdqL6heYzwDR2z8e3/1v6SJgDDYpSY9iix gyQma+7SHEqT0QJ3v076kKZiRJNW/mUZpNZbf9Y48Xev -----END CERTIFICATE-----Generated at Sat Dec 6 15:41:20 2025 by rpki-client