This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/7o3vxSrk5UbrcfgRk2TAxg-dtps.roa File: 7o3vxSrk5UbrcfgRk2TAxg-dtps.roa (raw, json) Hash identifier: dy+fmG0utkAvZ1QPO8d1zh3vc57HqgFc/AN4Uuvr8do= Subject key identifier: EE:8D:EF:C5:2A:E4:E5:46:EB:71:F8:11:93:64:C0:C6:0F:9D:B6:9B Certificate issuer: /CN=90b8a15466c3ff1e915d780a10b0baa9ad694860 Certificate serial: 019A785AFB225D303D97CD06E98B03C9FD17 Authority key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/7o3vxSrk5UbrcfgRk2TAxg-dtps.roa Signing time: Wed 12 Nov 2025 13:56:59 +0000 ROA not before: Wed 12 Nov 2025 13:56:59 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15874 IP address blocks: 37.130.0.0/18 maxlen: 24 37.130.49.0/24 maxlen: 24 37.130.55.0/24 maxlen: 24 46.174.232.0/22 maxlen: 22 46.174.238.0/24 maxlen: 24 91.231.24.0/24 maxlen: 24 91.231.26.0/24 maxlen: 24 185.237.56.0/22 maxlen: 24 2a0c:1680::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:5a:fb:22:5d:30:3d:97:cd:06:e9:8b:03:c9:fd:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860 Validity Not Before: Nov 12 13:56:59 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ee8defc52ae4e546eb71f8119364c0c60f9db69b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:94:3b:07:2d:ad:e7:57:d3:72:f5:ae:06:9a: bf:da:75:41:1b:d3:1f:d1:9a:8b:66:65:82:59:26: 46:46:a5:58:ad:cd:f0:ba:e1:c0:11:60:02:cc:59: 85:7b:fb:f1:5d:05:9a:8a:8d:a4:f9:5e:14:de:ac: 5f:10:26:76:89:6e:0d:ce:10:cf:ca:4b:cb:ae:d5: 04:0e:26:de:2e:56:e7:07:ab:bb:bf:29:78:cc:f7: 35:2d:75:60:b1:9c:fd:3a:e8:cb:38:e1:48:24:10: 75:5e:33:72:b7:55:33:b1:d2:d5:0b:6a:ab:0c:41: b0:1a:d5:cd:a2:b6:52:99:45:9e:e1:db:60:8e:9e: 26:47:ab:34:16:3a:9c:b5:db:64:61:77:74:05:d0: 3f:ca:05:75:8d:a3:a0:2d:25:71:88:25:f5:be:04: c8:da:62:cb:34:29:d0:10:a0:2a:b1:50:5b:58:73: 0a:f8:7d:cc:d8:a3:cf:09:03:07:2c:06:cc:03:3e: ff:2e:22:d2:22:f5:15:e8:f0:bd:86:01:2f:4e:c1: cb:12:76:ce:f1:35:a2:1b:32:8e:19:a5:b5:50:89: ce:df:85:a3:30:e8:33:ab:98:05:f0:29:bd:a8:ec: f4:82:9d:52:ed:87:8e:2b:3c:90:72:32:80:a3:51: 7d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8D:EF:C5:2A:E4:E5:46:EB:71:F8:11:93:64:C0:C6:0F:9D:B6:9B X509v3 Authority Key Identifier: keyid:90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/7o3vxSrk5UbrcfgRk2TAxg-dtps.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.130.0.0/18 46.174.232.0/22 46.174.238.0/24 91.231.24.0/24 91.231.26.0/24 185.237.56.0/22 IPv6: 2a0c:1680::/29 Signature Algorithm: sha256WithRSAEncryption 5a:6a:54:67:1a:60:6d:29:30:28:89:9a:20:fd:35:dd:42:b9: 2f:bd:85:9e:8e:04:9d:77:cf:a9:80:d1:3b:bc:19:f4:92:de: a9:0a:d0:ef:d6:af:8b:ad:09:92:a4:71:26:69:e3:5b:2f:e4: a8:3e:d8:16:5f:5e:d1:d5:58:15:40:77:41:e7:9a:32:4c:4f: e0:2a:64:db:00:b4:05:9f:06:d1:54:47:06:fd:6e:05:2d:ee: 8c:5a:3d:0b:9a:f6:db:fa:d4:bd:91:89:e0:6f:87:39:2d:dc: cc:59:fd:b6:09:87:df:e8:f4:0f:bd:d2:f1:7f:cc:ea:d3:85: b9:b4:42:be:e9:9c:11:e7:4c:24:a6:4d:c3:b6:7d:e2:e4:a3: 72:2e:a6:6b:2c:f5:af:21:52:4d:c5:49:57:e8:d7:2b:de:64: 5f:96:45:5b:09:df:90:ad:e1:f1:92:3f:ff:7a:ad:9c:e4:72: af:8f:16:cc:ca:81:c6:56:da:96:16:2a:67:fc:35:4c:56:37: 31:d3:18:a5:f7:4d:78:c1:2e:7f:34:9e:d6:7f:57:2f:31:71: 4c:f6:3f:25:00:c6:76:e5:6f:fb:84:0a:9c:2d:aa:08:0b:c0: 95:67:72:ec:f0:ac:1c:a5:06:05:a3:d9:0e:5f:1d:76:c2:3f: 06:c2:51:d5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZp4WvsiXTA9l80G6YsDyf0XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYjhhMTU0NjZjM2ZmMWU5MTVkNzgwYTEwYjBiYWE5YWQ2 OTQ4NjAwHhcNMjUxMTEyMTM1NjU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZThkZWZjNTJhZTRlNTQ2ZWI3MWY4MTE5MzY0YzBjNjBmOWRiNjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5Q7By2t51fTcvWuBpq/2nVBG9Mf 0ZqLZmWCWSZGRqVYrc3wuuHAEWACzFmFe/vxXQWaio2k+V4U3qxfECZ2iW4NzhDP ykvLrtUEDibeLlbnB6u7vyl4zPc1LXVgsZz9OujLOOFIJBB1XjNyt1UzsdLVC2qr DEGwGtXNorZSmUWe4dtgjp4mR6s0FjqctdtkYXd0BdA/ygV1jaOgLSVxiCX1vgTI 2mLLNCnQEKAqsVBbWHMK+H3M2KPPCQMHLAbMAz7/LiLSIvUV6PC9hgEvTsHLEnbO 8TWiGzKOGaW1UInO34WjMOgzq5gF8Cm9qOz0gp1S7YeOKzyQcjKAo1F9AwIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFO6N78Uq5OVG63H4EZNkwMYPnbabMB8GA1UdIwQY MBaAFJC4oVRmw/8ekV14ChCwuqmtaUhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0xpaFZHYkRfeDZSWFhnS0VMQzZxYTFwU0dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMmRmNDQtMzhiMi00ZDEyLTgzNDct NzhlOTk3ODY5OTUyLzEvN28zdnhTcms1VWJyY2ZnUmsyVEF4Zy1kdHBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9hMmRmNDQtMzhiMi00ZDEyLTgzNDctNzhlOTk3ODY5OTUy LzEva0xpaFZHYkRfeDZSWFhnS0VMQzZxYTFwU0dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQGJYIAAwQC Lq7oAwQALq7uAwQAW+cYAwQAW+caAwQCue04MA0EAgACMAcDBQMqDBaAMA0GCSqG SIb3DQEBCwUAA4IBAQBaalRnGmBtKTAoiZog/TXdQrkvvYWejgSdd8+pgNE7vBn0 kt6pCtDv1q+LrQmSpHEmaeNbL+SoPtgWX17R1VgVQHdB55oyTE/gKmTbALQFnwbR VEcG/W4FLe6MWj0Lmvbb+tS9kYngb4c5LdzMWf22CYff6PQPvdLxf8zq04W5tEK+ 6ZwR50wkpk3Dtn3i5KNyLqZrLPWvIVJNxUlX6Ncr3mRflkVbCd+QreHxkj//eq2c 5HKvjxbMyoHGVtqWFipn/DVMVjcx0xil9014wS5/NJ7Wf1cvMXFM9j8lAMZ25W/7 hAqcLaoIC8CVZ3Ls8KwcpQYFo9kOXx12wj8GwlHV -----END CERTIFICATE-----Generated at Sat Dec 6 16:36:14 2025 by rpki-client