This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/7h80oAq6-0uqLzdtJS4s8qdwpCY.roa File: 7h80oAq6-0uqLzdtJS4s8qdwpCY.roa (raw, json) Hash identifier: eJDBrOUplTi27if7n3bxsCBNe2iqZverEfnOiGp+TQg= Subject key identifier: EE:1F:34:A0:0A:BA:FB:4B:AA:2F:37:6D:25:2E:2C:F2:A7:70:A4:26 Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6 Certificate serial: 019B21EC4076A058B84EE09E50D57E8B2D09 Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/7h80oAq6-0uqLzdtJS4s8qdwpCY.roa Signing time: Mon 15 Dec 2025 12:11:29 +0000 ROA not before: Mon 15 Dec 2025 12:11:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 193.8.236.0/23 maxlen: 23 193.8.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ec:40:76:a0:58:b8:4e:e0:9e:50:d5:7e:8b:2d:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6 Validity Not Before: Dec 15 12:11:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ee1f34a00abafb4baa2f376d252e2cf2a770a426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:0e:f4:ae:c5:c8:5f:0d:4f:78:01:86:67: cb:7d:23:e0:87:06:c0:fc:07:b7:d1:4d:9f:39:c5: 9e:8e:7b:bc:e5:4a:ca:6b:4f:32:47:72:d6:77:fa: b0:8e:6d:bf:47:1e:15:38:60:7a:a2:d2:a5:42:bf: dc:c2:ee:9b:98:20:7d:32:42:09:b3:53:c2:9b:a8: 1f:3f:18:5d:69:3c:c0:4c:91:8f:7a:b7:de:9d:ae: 89:52:a4:67:0a:0f:6e:13:90:5c:9b:20:aa:44:83: d1:3e:fe:d1:1e:a6:1a:3d:aa:7f:02:8e:43:a7:ba: 18:82:23:81:d7:3f:ce:94:90:bb:64:62:0d:64:aa: 04:09:58:55:dd:e1:6a:0b:e2:23:a5:50:2d:c2:f1: ae:8f:2d:94:d0:8a:54:0d:4a:7f:52:2b:08:43:92: 16:36:37:64:b9:e5:7d:e0:d2:a9:10:83:68:cd:d0: d3:72:5b:ff:ec:68:c0:3f:42:1e:a9:7d:1e:80:ab: fd:5e:ea:8f:ac:b3:bc:60:39:ed:f4:a9:f4:e7:ea: 9d:b9:2b:8f:77:70:7e:d0:14:f7:87:74:2f:77:a8: 48:9d:81:fd:19:c7:1f:a6:93:70:f3:bc:9f:6d:a4: 49:e6:c6:56:16:c7:63:08:ea:c2:5e:a5:10:44:56: 52:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:1F:34:A0:0A:BA:FB:4B:AA:2F:37:6D:25:2E:2C:F2:A7:70:A4:26 X509v3 Authority Key Identifier: keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/7h80oAq6-0uqLzdtJS4s8qdwpCY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.8.236.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:86:d8:d7:16:7c:b9:60:7d:56:96:91:1e:a6:9b:de:b8:07: eb:3e:e7:15:f6:de:c7:47:9f:9b:89:3f:1a:79:0b:cd:b7:cc: 86:50:0b:1c:aa:62:4f:6f:88:6a:95:12:7b:6b:bd:4f:03:16: 1e:64:14:d1:0f:09:14:91:cc:c2:09:d6:cc:56:36:8d:79:5b: 69:9c:5b:e3:3f:00:84:83:e5:fd:72:98:14:e2:42:39:93:3b: 3c:51:64:ac:1f:ff:1a:b9:2c:38:f9:8c:94:20:b4:ab:d9:9e: 4e:84:2c:8e:61:80:89:30:ad:a1:37:7f:7e:1a:d9:c4:5a:d2: 2b:6a:f2:ee:14:87:4f:c8:56:61:b4:53:7b:4d:45:9d:d6:bd: 71:d3:0d:79:9b:8a:ef:6d:55:c1:46:9e:72:08:5f:08:68:ac: 45:24:b7:df:0e:b4:2b:1c:db:93:b9:64:08:3b:40:c2:00:a9: b1:21:bb:14:a0:50:b3:11:39:bd:f3:8d:43:f5:92:d6:45:a1: 7b:4a:96:3b:94:ab:e3:af:95:5c:27:4f:8f:d4:8c:c7:52:4c: 50:77:6e:d2:2d:bd:f6:14:6f:5f:47:ca:22:c4:b9:a3:b5:3d: 01:0b:88:82:ac:13:07:21:45:2a:ce:6c:01:e9:a5:a9:34:02: a0:9a:30:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsh7EB2oFi4TuCeUNV+iy0JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMWYyMTNiOGM3OTJiN2UwMTNmYTUwNDFmNWI4OTk3MWU2 ZjYyZDYwHhcNMjUxMjE1MTIxMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTFmMzRhMDBhYmFmYjRiYWEyZjM3NmQyNTJlMmNmMmE3NzBhNDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB4O9K7FyF8NT3gBhmfLfSPghwbA /Ae30U2fOcWejnu85UrKa08yR3LWd/qwjm2/Rx4VOGB6otKlQr/cwu6bmCB9MkIJ s1PCm6gfPxhdaTzATJGPerfena6JUqRnCg9uE5BcmyCqRIPRPv7RHqYaPap/Ao5D p7oYgiOB1z/OlJC7ZGINZKoECVhV3eFqC+IjpVAtwvGujy2U0IpUDUp/UisIQ5IW NjdkueV94NKpEINozdDTclv/7GjAP0IeqX0egKv9XuqPrLO8YDnt9Kn05+qduSuP d3B+0BT3h3Qvd6hInYH9GccfppNw87yfbaRJ5sZWFsdjCOrCXqUQRFZSnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO4fNKAKuvtLqi83bSUuLPKncKQmMB8GA1UdIwQY MBaAFF8fITuMeSt+AT+lBB9biZceb2LWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHg4aE80eDVLMzRCUDZVRUgxdUpseDV2WXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zMmY4ZDMtNzMyOC00NWYwLWEwMDct NDAyMjM4NjM4ZWEzLzEvN2g4MG9BcTYtMHVxTHpkdEpTNHM4cWR3cENZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zMmY4ZDMtNzMyOC00NWYwLWEwMDctNDAyMjM4NjM4ZWEz LzEvWHg4aE80eDVLMzRCUDZVRUgxdUpseDV2WXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwQjsMA0G CSqGSIb3DQEBCwUAA4IBAQCahtjXFny5YH1WlpEeppveuAfrPucV9t7HR5+biT8a eQvNt8yGUAscqmJPb4hqlRJ7a71PAxYeZBTRDwkUkczCCdbMVjaNeVtpnFvjPwCE g+X9cpgU4kI5kzs8UWSsH/8auSw4+YyUILSr2Z5OhCyOYYCJMK2hN39+GtnEWtIr avLuFIdPyFZhtFN7TUWd1r1x0w15m4rvbVXBRp5yCF8IaKxFJLffDrQrHNuTuWQI O0DCAKmxIbsUoFCzETm9841D9ZLWRaF7SpY7lKvjr5VcJ0+P1IzHUkxQd27SLb32 FG9fR8oixLmjtT0BC4iCrBMHIUUqzmwB6aWpNAKgmjC2 -----END CERTIFICATE-----Generated at Mon Dec 15 17:21:44 2025 by rpki-client