This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1-7ZbFTf0ig3lTnPYpV2fdKYfSHQ.roa File: 1-7ZbFTf0ig3lTnPYpV2fdKYfSHQ.roa (raw, json) Hash identifier: 1IcBzx459PWpfTt8koscU5CZkOPuWQLpOGsZkDxt39Q= Subject key identifier: FB:B6:5B:15:37:F4:8A:0D:E5:4E:73:D8:A5:5D:9F:74:A6:1F:48:74 Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe Certificate serial: 019B0C6B2F0C62E9FD6C956494F2A1DCB31D Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1-7ZbFTf0ig3lTnPYpV2fdKYfSHQ.roa Signing time: Thu 11 Dec 2025 07:58:29 +0000 ROA not before: Thu 11 Dec 2025 07:58:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 109.122.240.0/20 maxlen: 24 109.122.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:6b:2f:0c:62:e9:fd:6c:95:64:94:f2:a1:dc:b3:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe Validity Not Before: Dec 11 07:58:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fbb65b1537f48a0de54e73d8a55d9f74a61f4874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c9:fc:2f:6f:5b:42:ca:fd:91:63:d5:5b:f6: b3:72:21:ca:e5:fe:ba:53:e2:9f:a0:8a:fe:27:b5: 4e:ff:c5:88:37:20:8c:27:df:5e:8d:d2:10:4f:02: 86:0d:62:e4:5e:4b:8d:21:c7:5c:7f:a7:f9:3c:28: 4c:a6:2d:ec:23:15:9d:8e:6a:84:da:5b:7c:2f:14: 58:22:cc:70:00:1f:1a:9d:e7:b5:60:f4:ed:d0:dc: f3:32:ea:47:ae:ad:8c:6e:d6:cf:ef:fe:80:3e:6c: 4c:97:3b:a8:cf:94:a0:c0:72:3b:f3:de:65:9c:ac: f5:e2:55:0f:d2:40:6f:57:d6:5e:14:02:3d:84:6d: a0:78:c4:fb:bb:6f:dc:b4:c0:2c:de:d4:0f:46:38: 8e:bb:39:a9:52:e7:41:3e:ce:3b:42:32:77:1b:fe: 84:94:f6:ed:60:63:fc:0a:ba:da:75:23:3b:6b:a8: 4a:35:d9:93:39:ff:e5:dd:27:12:37:75:d7:de:ca: 7d:1d:80:c5:e6:bc:82:36:e0:0c:11:fa:fb:c2:b5: 33:15:88:90:a4:53:aa:87:72:e2:a8:cf:a4:0f:71: 8a:6e:2e:29:dc:3c:19:86:70:98:0e:ce:ac:5b:5b: c8:a0:13:21:99:b8:d0:d2:8b:af:0a:fd:63:26:6c: e1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B6:5B:15:37:F4:8A:0D:E5:4E:73:D8:A5:5D:9F:74:A6:1F:48:74 X509v3 Authority Key Identifier: keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1-7ZbFTf0ig3lTnPYpV2fdKYfSHQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.240.0/20 Signature Algorithm: sha256WithRSAEncryption 96:8d:7e:83:b3:c8:61:82:b1:2a:80:b4:9c:6b:03:c4:f6:c7: 52:58:45:f0:09:b3:47:48:3c:e0:3a:e4:e0:4e:fc:15:4f:a8: d8:53:12:8b:7d:2e:03:88:1a:4e:e5:cd:50:66:31:aa:bc:4c: 71:95:e8:cd:bb:54:17:c0:17:02:cd:7c:0f:48:88:20:39:a0: 26:a2:04:c6:81:f6:4e:d5:98:ee:7f:a9:dc:33:ce:ec:88:85: 82:c4:30:21:c4:b6:81:23:86:41:b3:69:ee:13:3c:e0:c3:37: 3c:26:96:1f:16:ff:eb:c9:3b:c1:16:02:3d:98:6b:16:be:08: e0:56:64:3e:8e:d6:c1:27:8f:f9:f3:14:ca:f1:4e:a9:f2:bb: ea:93:a9:b0:18:d3:1f:c0:f1:5f:d3:d4:89:07:58:74:af:ae: 69:19:5c:e9:67:0b:96:10:fd:cc:bd:4f:a2:cf:64:2a:aa:93: 8c:7e:70:d1:ba:43:5f:3f:36:16:4f:03:b9:cd:54:e2:9f:32: 6b:06:4d:25:30:8a:23:38:33:be:4a:93:17:9f:c0:ad:7a:0e: 71:25:4b:30:49:45:60:14:8a:06:7b:80:62:e0:bb:b1:aa:c0: 65:87:2d:8e:d0:39:7b:38:76:ce:bd:1d:40:aa:26:87:1d:42: 00:bf:60:54 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZsMay8MYun9bJVklPKh3LMdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz MjdlYmUwHhcNMjUxMjExMDc1ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmI2NWIxNTM3ZjQ4YTBkZTU0ZTczZDhhNTVkOWY3NGE2MWY0ODc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8n8L29bQsr9kWPVW/azciHK5f66 U+KfoIr+J7VO/8WINyCMJ99ejdIQTwKGDWLkXkuNIcdcf6f5PChMpi3sIxWdjmqE 2lt8LxRYIsxwAB8anee1YPTt0NzzMupHrq2MbtbP7/6APmxMlzuoz5SgwHI7895l nKz14lUP0kBvV9ZeFAI9hG2geMT7u2/ctMAs3tQPRjiOuzmpUudBPs47QjJ3G/6E lPbtYGP8CrradSM7a6hKNdmTOf/l3ScSN3XX3sp9HYDF5ryCNuAMEfr7wrUzFYiQ pFOqh3LiqM+kD3GKbi4p3DwZhnCYDs6sW1vIoBMhmbjQ0ouvCv1jJmzhlQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPu2WxU39IoN5U5z2KVdn3SmH0h0MB8GA1UdIwQY MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt M2RmYTUxMGQ2YjE2LzEvMS03WmJGVGYwaWczbFRuUFlwVjJmZEtZZlNIUS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTIvYzk2MWEwLTRmNTMtNDIyYS1iN2RkLTNkZmE1MTBkNmIx Ni8xL2JkczRzMFBhTFJHVENlMnFHY2VuaUhBeWZyNC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBG168DAN BgkqhkiG9w0BAQsFAAOCAQEAlo1+g7PIYYKxKoC0nGsDxPbHUlhF8AmzR0g84Drk 4E78FU+o2FMSi30uA4gaTuXNUGYxqrxMcZXozbtUF8AXAs18D0iIIDmgJqIExoH2 TtWY7n+p3DPO7IiFgsQwIcS2gSOGQbNp7hM84MM3PCaWHxb/68k7wRYCPZhrFr4I 4FZkPo7WwSeP+fMUyvFOqfK76pOpsBjTH8DxX9PUiQdYdK+uaRlc6WcLlhD9zL1P os9kKqqTjH5w0bpDXz82Fk8Duc1U4p8yawZNJTCKIzgzvkqTF5/ArXoOcSVLMElF YBSKBnuAYuC7sarAZYctjtA5ezh2zr0dQKomhx1CAL9gVA== -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:44 2025 by rpki-client