This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fEF7y4xATm-EyDEy_h8NEI-1szI.roa File: fEF7y4xATm-EyDEy_h8NEI-1szI.roa (raw, json) Hash identifier: gnP6Ob8fTge1LMvbYi4C84JE5PimaTfiLSrq7x3Y6AA= Subject key identifier: 7C:41:7B:CB:8C:40:4E:6F:84:C8:31:32:FE:1F:0D:10:8F:B5:B3:32 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019A6E982CBAAE730D325ED460FDD9FE875D Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fEF7y4xATm-EyDEy_h8NEI-1szI.roa Signing time: Mon 10 Nov 2025 16:27:37 +0000 ROA not before: Mon 10 Nov 2025 16:27:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216261 IP address blocks: 146.158.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6e:98:2c:ba:ae:73:0d:32:5e:d4:60:fd:d9:fe:87:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Nov 10 16:27:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7c417bcb8c404e6f84c83132fe1f0d108fb5b332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:36:52:4b:dd:00:72:2f:50:be:05:74:0a:bc: 0f:e9:6c:14:11:4d:b6:c8:29:74:8b:49:67:b0:d5: 84:b3:4f:cc:91:d1:d3:6a:a7:71:d6:46:11:49:4f: b2:cc:2b:84:5d:f4:b5:68:be:ab:b3:4f:29:af:83: 52:fd:4a:ea:b7:56:be:8f:fb:13:72:c2:33:7c:ac: 27:f6:77:11:b4:f1:d3:07:b0:8b:f1:ab:c2:a7:69: 01:fb:57:61:56:b2:5e:1a:34:d6:68:c0:61:56:42: 07:10:41:08:55:55:b4:0a:46:de:4f:c3:82:4a:4a: 35:13:53:32:89:61:c0:b4:81:18:0f:13:48:32:1e: 37:6b:6c:0d:83:af:1a:3a:7a:49:8e:36:3b:19:d9: bb:6b:f9:bb:40:a6:cc:a2:48:5b:bd:22:ba:f1:2f: 7f:80:86:1e:3b:13:f5:61:ac:46:46:ef:17:ed:be: 14:ba:ed:9d:ce:e0:46:50:41:48:95:3e:35:6b:87: b7:2c:f5:39:6c:46:d5:8c:f9:34:56:e6:b7:80:21: 53:64:3d:cd:66:73:1b:0b:3e:00:ab:05:44:0e:ae: e6:8c:37:87:70:81:77:aa:aa:6a:29:2e:21:cc:d6: e3:17:a2:da:84:4a:d9:c8:1e:37:37:42:d8:50:30: 5c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:41:7B:CB:8C:40:4E:6F:84:C8:31:32:FE:1F:0D:10:8F:B5:B3:32 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fEF7y4xATm-EyDEy_h8NEI-1szI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.158.94.0/24 Signature Algorithm: sha256WithRSAEncryption a5:13:61:8d:5b:8e:f2:f7:ab:a0:38:ff:6c:9f:3c:2e:1c:39: c1:41:8e:ab:f9:67:61:e7:f8:3a:ac:02:58:bd:da:68:27:65: 72:54:33:08:03:db:59:6e:df:26:b2:47:f2:8d:39:73:cc:22: fb:aa:58:6f:03:1d:6c:63:2b:b2:b4:c7:43:63:42:24:89:b4: e5:26:b8:7b:72:6d:fc:b4:41:4d:e2:0a:62:0f:61:ab:28:9d: e3:7e:32:22:2f:e6:ff:97:b2:87:f3:0e:6f:fc:07:6d:b6:a2: ef:00:c9:91:14:f5:67:4e:4a:c3:d3:84:6c:4a:8f:4e:a3:59: a6:a0:66:59:1e:15:21:5e:7e:c7:ff:d2:8c:32:bf:6b:af:f9: 36:30:18:d6:56:0e:c6:11:20:23:6f:95:07:54:79:7b:42:9e: bd:a2:44:94:02:db:ff:3f:85:01:d7:88:c9:de:ee:ca:c3:05: cf:b2:25:52:e8:b0:d6:5d:e3:be:92:19:2e:f5:60:43:07:2f: 1f:93:10:00:1e:c6:36:36:65:4f:47:0e:c7:e2:f5:bf:5e:4e: d1:37:e3:81:5a:9b:be:5d:da:69:54:e5:df:24:4e:9b:33:19: bd:cb:2e:a9:63:0e:c3:bb:f8:66:fd:bb:7f:86:5b:43:40:78: b8:2b:3f:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpumCy6rnMNMl7UYP3Z/oddMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjUxMTEwMTYyNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzQxN2JjYjhjNDA0ZTZmODRjODMxMzJmZTFmMGQxMDhmYjViMzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTZSS90Aci9QvgV0CrwP6WwUEU22 yCl0i0lnsNWEs0/MkdHTaqdx1kYRSU+yzCuEXfS1aL6rs08pr4NS/Urqt1a+j/sT csIzfKwn9ncRtPHTB7CL8avCp2kB+1dhVrJeGjTWaMBhVkIHEEEIVVW0CkbeT8OC Sko1E1MyiWHAtIEYDxNIMh43a2wNg68aOnpJjjY7Gdm7a/m7QKbMokhbvSK68S9/ gIYeOxP1YaxGRu8X7b4Uuu2dzuBGUEFIlT41a4e3LPU5bEbVjPk0Vua3gCFTZD3N ZnMbCz4AqwVEDq7mjDeHcIF3qqpqKS4hzNbjF6LahErZyB43N0LYUDBcOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHxBe8uMQE5vhMgxMv4fDRCPtbMyMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvZkVGN3k0eEFUbS1FeURFeV9oOE5FSS0xc3pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkp5eMA0G CSqGSIb3DQEBCwUAA4IBAQClE2GNW47y96ugOP9snzwuHDnBQY6r+Wdh5/g6rAJY vdpoJ2VyVDMIA9tZbt8mskfyjTlzzCL7qlhvAx1sYyuytMdDY0IkibTlJrh7cm38 tEFN4gpiD2GrKJ3jfjIiL+b/l7KH8w5v/AdttqLvAMmRFPVnTkrD04RsSo9Oo1mm oGZZHhUhXn7H/9KMMr9rr/k2MBjWVg7GESAjb5UHVHl7Qp69okSUAtv/P4UB14jJ 3u7KwwXPsiVS6LDWXeO+khku9WBDBy8fkxAAHsY2NmVPRw7H4vW/Xk7RN+OBWpu+ XdppVOXfJE6bMxm9yy6pYw7Du/hm/bt/hltDQHi4Kz/U -----END CERTIFICATE-----Generated at Sat Dec 6 12:53:05 2025 by rpki-client