This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/7u1Blyj85lQdSI7b3-WT3ZmaHdg.roa File: 7u1Blyj85lQdSI7b3-WT3ZmaHdg.roa (raw, json) Hash identifier: xMh27Cx8ipxByZZtvbx9Tmr6gp45CwYoP9Q+q3hAIIU= Subject key identifier: EE:ED:41:97:28:FC:E6:54:1D:48:8E:DB:DF:E5:93:DD:99:9A:1D:D8 Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Certificate serial: 019B08A1A4C44F2105296081BC8AD83B755A Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/7u1Blyj85lQdSI7b3-WT3ZmaHdg.roa Signing time: Wed 10 Dec 2025 14:19:29 +0000 ROA not before: Wed 10 Dec 2025 14:19:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44559 IP address blocks: 92.118.88.0/24 maxlen: 24 92.118.89.0/24 maxlen: 24 92.118.90.0/24 maxlen: 24 92.118.91.0/24 maxlen: 24 92.119.200.0/24 maxlen: 24 92.119.201.0/24 maxlen: 24 92.119.202.0/24 maxlen: 24 92.119.203.0/24 maxlen: 24 171.22.180.0/24 maxlen: 24 171.22.181.0/24 maxlen: 24 176.125.242.0/24 maxlen: 24 176.125.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:a1:a4:c4:4f:21:05:29:60:81:bc:8a:d8:3b:75:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Validity Not Before: Dec 10 14:19:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=eeed419728fce6541d488edbdfe593dd999a1dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ea:c1:e6:49:fd:17:e1:58:5f:d9:d7:89:d0: da:d6:54:0e:52:52:f4:e6:a4:82:ef:e9:f9:49:6a: bc:19:68:3c:cf:c7:18:94:e1:ec:cb:8e:ba:25:39: 06:d4:e8:62:29:15:ef:10:b5:fc:82:a6:fa:aa:13: c3:49:56:86:71:36:f2:b3:e8:e5:f3:5a:e1:5b:7e: d8:f9:3e:b6:c5:09:dc:0f:c2:a1:ab:a5:6f:59:e2: b8:2b:68:b4:de:b8:4d:b2:8d:c9:e2:9a:8d:12:6c: 4d:c7:7a:cc:a9:ba:8a:db:4c:c7:ab:3f:94:d3:87: 84:6e:ed:0c:72:fc:82:85:8a:84:38:fd:15:25:2b: 9a:c8:86:4c:86:33:7f:ec:33:f9:07:cc:e4:56:9e: a9:e4:49:1c:3c:b7:6d:dc:52:22:b5:6d:dc:0f:7a: 2e:f7:b2:91:a6:b0:e9:09:e7:cb:7d:dd:1b:ca:4e: 03:77:0f:8e:24:84:49:03:8f:75:95:00:3b:16:3f: f8:be:d2:e6:ff:72:3c:e2:fa:d3:8b:8d:93:25:34: cd:d4:fc:b6:c4:39:0c:6c:c7:ed:0e:ac:67:93:87: 08:b4:5f:dd:08:49:dc:05:ab:c1:b9:76:6a:dd:2f: de:ad:80:2a:5e:34:71:97:28:55:bd:58:1c:b2:53: 82:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:ED:41:97:28:FC:E6:54:1D:48:8E:DB:DF:E5:93:DD:99:9A:1D:D8 X509v3 Authority Key Identifier: keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/7u1Blyj85lQdSI7b3-WT3ZmaHdg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.88.0/22 92.119.200.0/22 171.22.180.0/23 176.125.242.0/23 Signature Algorithm: sha256WithRSAEncryption 41:c7:4a:b9:c2:b0:98:47:a1:16:f0:c5:07:94:df:fe:5f:f5: 29:20:bd:dc:d6:18:87:c8:73:81:b2:31:3e:77:1b:f9:1b:98: a3:ee:90:2b:75:bb:5f:93:40:b7:4f:96:39:b7:be:3f:c0:cc: da:a5:d5:ad:5c:2e:0d:eb:98:48:7a:4c:71:67:16:48:e0:a4: 83:30:1f:e5:c3:06:d4:fb:b7:e8:b0:36:de:7d:77:63:7f:51: 42:86:07:87:8f:a8:d3:f5:da:3d:9d:a7:6c:e6:84:7c:69:c6: 9a:95:18:d3:70:35:14:f4:96:63:1f:c5:30:e8:6c:5e:cf:66: 93:da:7d:84:5a:bd:be:1b:9f:aa:d0:f6:b5:b8:ea:45:17:86: 09:94:40:34:f6:43:e6:0d:b8:ee:79:00:8e:8e:53:a8:ea:16: 52:b7:ff:79:a4:1a:06:e4:92:17:67:6c:74:cc:22:6d:95:9d: ef:80:7a:0b:f6:b4:d1:68:e4:18:b1:a8:a7:35:9d:c5:83:b4: 84:e6:9e:b3:4f:e7:44:41:79:70:39:03:e3:55:65:86:d3:be: b9:8f:ac:ce:73:94:1b:65:fb:33:e5:14:9c:fc:93:e6:ba:60: ff:8d:00:ca:d9:39:b9:21:45:f8:be:a4:66:57:e2:01:84:f2: dd:5c:90:e2 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZsIoaTETyEFKWCBvIrYO3VaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm MWM3ZTgwHhcNMjUxMjEwMTQxOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWVkNDE5NzI4ZmNlNjU0MWQ0ODhlZGJkZmU1OTNkZDk5OWExZGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+rB5kn9F+FYX9nXidDa1lQOUlL0 5qSC7+n5SWq8GWg8z8cYlOHsy466JTkG1OhiKRXvELX8gqb6qhPDSVaGcTbys+jl 81rhW37Y+T62xQncD8Khq6VvWeK4K2i03rhNso3J4pqNEmxNx3rMqbqK20zHqz+U 04eEbu0McvyChYqEOP0VJSuayIZMhjN/7DP5B8zkVp6p5EkcPLdt3FIitW3cD3ou 97KRprDpCefLfd0byk4Ddw+OJIRJA491lQA7Fj/4vtLm/3I84vrTi42TJTTN1Py2 xDkMbMftDqxnk4cItF/dCEncBavBuXZq3S/erYAqXjRxlyhVvVgcslOCWwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFO7tQZco/OZUHUiO29/lk92Zmh3YMB8GA1UdIwQY MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt ZWU3NDY1NzU0ZmY2LzEvN3UxQmx5ajg1bFFkU0k3YjMtV1QzWm1hSGRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2 LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCXHZYAwQC XHfIAwQBqxa0AwQBsH3yMA0GCSqGSIb3DQEBCwUAA4IBAQBBx0q5wrCYR6EW8MUH lN/+X/UpIL3c1hiHyHOBsjE+dxv5G5ij7pArdbtfk0C3T5Y5t74/wMzapdWtXC4N 65hIekxxZxZI4KSDMB/lwwbU+7fosDbefXdjf1FChgeHj6jT9do9nads5oR8acaa lRjTcDUU9JZjH8Uw6Gxez2aT2n2EWr2+G5+q0Pa1uOpFF4YJlEA09kPmDbjueQCO jlOo6hZSt/95pBoG5JIXZ2x0zCJtlZ3vgHoL9rTRaOQYsainNZ3Fg7SE5p6zT+dE QXlwOQPjVWWG0765j6zOc5QbZfsz5RSc/JPmumD/jQDK2Tm5IUX4vqRmV+IBhPLd XJDi -----END CERTIFICATE-----Generated at Fri Dec 19 08:34:26 2025 by rpki-client