This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/7tTd0Y2ZnKb8gxUeaW3ZD-Mb1Mc.roa File: 7tTd0Y2ZnKb8gxUeaW3ZD-Mb1Mc.roa (raw, json) Hash identifier: Es9QZWARbJ6C98H+Xkn9OEO1buIXC30gN6Niopkz94k= Subject key identifier: EE:D4:DD:D1:8D:99:9C:A6:FC:83:15:1E:69:6D:D9:0F:E3:1B:D4:C7 Certificate issuer: /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533 Certificate serial: 019A822E83B1F98F4A874E8385C73D5AC58D Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/7tTd0Y2ZnKb8gxUeaW3ZD-Mb1Mc.roa Signing time: Fri 14 Nov 2025 11:44:37 +0000 ROA not before: Fri 14 Nov 2025 11:44:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210895 IP address blocks: 91.198.166.0/24 maxlen: 24 185.253.7.0/24 maxlen: 24 212.162.154.0/24 maxlen: 24 212.162.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:82:2e:83:b1:f9:8f:4a:87:4e:83:85:c7:3d:5a:c5:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533 Validity Not Before: Nov 14 11:44:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=eed4ddd18d999ca6fc83151e696dd90fe31bd4c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:af:90:a6:a8:77:bb:7c:75:fb:b0:8e:fd:a4: 00:d9:f3:fb:8c:a4:29:74:17:ac:66:56:68:9c:3a: 62:f4:f1:17:d0:a1:bd:72:d1:20:c1:f5:51:b8:d0: 22:94:a9:18:01:8f:b6:22:9e:34:5b:af:dd:87:e5: f3:83:91:86:ed:24:ba:b1:c8:9a:72:dd:d9:0e:07: df:c0:4e:9c:0f:74:22:60:c5:d3:1d:48:55:ae:43: 0b:33:9f:21:42:3f:bc:b0:8f:65:51:c9:98:51:9e: 82:94:d3:9f:ad:3e:df:95:fd:5d:ca:45:3a:63:ce: 68:91:77:6d:a8:27:d8:78:b2:13:35:9c:f6:ff:cf: 2d:d9:74:ec:cb:b4:80:cd:62:b9:c3:15:98:31:57: cf:42:67:94:20:14:73:e9:88:73:36:5b:c5:7f:a9: 48:21:6c:a0:0f:1d:6d:86:b2:0a:94:c9:d4:e8:2e: 97:a8:93:a5:f4:98:63:37:e6:f7:14:c5:0c:49:b8: d8:7c:60:da:0d:69:ec:75:36:d3:cf:57:e5:92:02: ed:d1:41:7c:46:e2:0e:93:96:f0:92:63:fa:4d:3b: 41:27:45:a0:32:de:7d:71:0a:81:05:fb:f8:17:2e: 30:46:cc:d2:de:af:24:79:4c:02:ed:70:79:0b:de: bf:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D4:DD:D1:8D:99:9C:A6:FC:83:15:1E:69:6D:D9:0F:E3:1B:D4:C7 X509v3 Authority Key Identifier: keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/7tTd0Y2ZnKb8gxUeaW3ZD-Mb1Mc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.166.0/24 185.253.7.0/24 212.162.154.0/23 Signature Algorithm: sha256WithRSAEncryption 79:1a:7b:95:78:15:3d:eb:85:b7:aa:3f:de:fe:ec:0a:f0:85: 94:50:c4:98:dd:66:d8:f9:fc:6f:60:45:d1:c8:5e:cf:5b:0a: 04:02:39:b7:69:6a:c5:f2:c3:0d:a8:33:dd:9a:fd:d4:41:73: b1:36:b4:db:de:0a:8f:af:88:f5:48:74:43:c4:f7:ed:2d:3e: b5:b2:34:4b:27:0a:a2:54:3c:3e:e3:94:3a:6c:97:4d:ab:29: 08:bb:f8:1d:6e:30:59:58:7b:60:82:4d:50:55:d9:92:84:6e: 7f:83:bd:28:44:4e:fb:75:3b:be:7d:14:7a:44:e7:48:65:12: 8a:93:cd:1f:19:52:84:8d:d5:3d:a2:f4:e8:16:29:1b:1f:d3: 3d:97:27:bb:a6:91:e1:5b:a4:34:1d:28:a6:9c:43:cf:32:f9: 17:75:32:97:78:b6:d7:83:bb:7f:f0:87:a4:ff:7e:f6:cf:40: 10:4a:a5:c9:87:ee:cb:3d:dc:1c:dc:88:3e:91:0c:75:b3:71: 9f:30:de:d0:05:84:39:68:42:56:36:04:f0:21:55:f4:c5:a8: a1:ca:a1:6a:16:32:f5:60:5a:98:7d:21:2b:cf:79:55:43:e2: c6:33:59:39:fd:83:89:06:11:85:48:a0:d0:03:35:56:03:02: ca:a6:3a:80 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqCLoOx+Y9Kh06Dhcc9WsWNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmY2FkODlkZjFiZjk5YTM2ZjI5MGNjM2VmMGYxZTdiNGQw Mjc1MzMwHhcNMjUxMTE0MTE0NDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWQ0ZGRkMThkOTk5Y2E2ZmM4MzE1MWU2OTZkZDkwZmUzMWJkNGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K+Qpqh3u3x1+7CO/aQA2fP7jKQp dBesZlZonDpi9PEX0KG9ctEgwfVRuNAilKkYAY+2Ip40W6/dh+Xzg5GG7SS6scia ct3ZDgffwE6cD3QiYMXTHUhVrkMLM58hQj+8sI9lUcmYUZ6ClNOfrT7flf1dykU6 Y85okXdtqCfYeLITNZz2/88t2XTsy7SAzWK5wxWYMVfPQmeUIBRz6YhzNlvFf6lI IWygDx1thrIKlMnU6C6XqJOl9JhjN+b3FMUMSbjYfGDaDWnsdTbTz1flkgLt0UF8 RuIOk5bwkmP6TTtBJ0WgMt59cQqBBfv4Fy4wRszS3q8keUwC7XB5C96/BwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFO7U3dGNmZym/IMVHmlt2Q/jG9THMB8GA1UdIwQY MBaAFH/K2J3xv5mjbykMw+8PHntNAnUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjhyWW5mR19tYU52S1F6RDd3OGVlMDBDZFRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85ZjhiMTYtMjg0Zi00NTEyLWIzZGMt MDE1ZDlmMWI0YjUwLzEvN3RUZDBZMlpuS2I4Z3hVZWFXM1pELU1iMU1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85ZjhiMTYtMjg0Zi00NTEyLWIzZGMtMDE1ZDlmMWI0YjUw LzEvZjhyWW5mR19tYU52S1F6RDd3OGVlMDBDZFRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW8amAwQA uf0HAwQB1KKaMA0GCSqGSIb3DQEBCwUAA4IBAQB5GnuVeBU964W3qj/e/uwK8IWU UMSY3WbY+fxvYEXRyF7PWwoEAjm3aWrF8sMNqDPdmv3UQXOxNrTb3gqPr4j1SHRD xPftLT61sjRLJwqiVDw+45Q6bJdNqykIu/gdbjBZWHtggk1QVdmShG5/g70oRE77 dTu+fRR6ROdIZRKKk80fGVKEjdU9ovToFikbH9M9lye7ppHhW6Q0HSimnEPPMvkX dTKXeLbXg7t/8Iek/372z0AQSqXJh+7LPdwc3Ig+kQx1s3GfMN7QBYQ5aEJWNgTw IVX0xaihyqFqFjL1YFqYfSErz3lVQ+LGM1k5/YOJBhGFSKDQAzVWAwLKpjqA -----END CERTIFICATE-----Generated at Sat Dec 6 23:57:52 2025 by rpki-client