This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/e9TfqWRofyD675IhahYJlsYvNF4.roa File: e9TfqWRofyD675IhahYJlsYvNF4.roa (raw, json) Hash identifier: 0ikrXobtlg5G9MIAvXgvEZuXnt9mYx+QHzanlYlPOWs= Subject key identifier: 7B:D4:DF:A9:64:68:7F:20:FA:EF:92:21:6A:16:09:96:C6:2F:34:5E Certificate issuer: /CN=edfe3f6f6d98714e01f08c73b2644368774e8660 Certificate serial: 019B1C1E59C1760985E302F3148A1F0DC70A Authority key identifier: ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/e9TfqWRofyD675IhahYJlsYvNF4.roa Signing time: Sun 14 Dec 2025 09:08:29 +0000 ROA not before: Sun 14 Dec 2025 09:08:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51738 IP address blocks: 195.162.64.0/23 maxlen: 23 195.162.64.0/24 maxlen: 24 195.162.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.mft rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:1e:59:c1:76:09:85:e3:02:f3:14:8a:1f:0d:c7:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edfe3f6f6d98714e01f08c73b2644368774e8660 Validity Not Before: Dec 14 09:08:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7bd4dfa964687f20faef92216a160996c62f345e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:65:46:1d:87:05:e1:be:84:4c:45:c7:64:19: b6:de:cc:23:e0:a2:4b:fa:72:1a:03:35:6d:ce:57: 2f:05:d7:d5:30:22:11:a2:a0:15:ee:7a:87:12:88: 39:64:8f:e8:10:36:e0:cb:07:1e:5d:2d:88:20:42: 98:a7:1c:e9:58:6d:83:0d:9a:2e:81:9f:21:3e:1f: b9:86:81:7a:c1:a0:c3:39:56:c5:df:27:52:e1:00: 32:e6:d8:8f:0e:ac:f5:e5:4c:9c:51:a3:a5:32:5c: 2a:46:4e:83:0c:61:39:38:cc:c5:5d:f9:fc:a6:52: b2:6a:8c:1f:84:6e:58:8b:f9:c1:e0:b9:06:f6:74: 3e:f5:6c:74:e3:af:c3:b9:63:00:03:bf:56:b6:ba: 65:c0:53:ba:48:d9:f5:5a:e0:16:99:a7:d8:bd:8c: c7:3e:2c:e7:09:0b:6d:85:84:74:69:14:9c:a9:e7: e6:93:1c:ed:f8:b8:99:d6:9b:0b:3b:c4:24:22:18: f4:0d:d5:3a:6c:c1:e0:47:51:27:0c:7c:ae:8f:7e: 74:8d:84:6a:ac:ea:94:4d:03:4c:21:12:b6:04:13: e0:7f:33:1b:cb:f7:a5:6d:66:2d:de:9a:c0:f5:f0: 15:46:96:76:35:09:00:f7:8b:a8:26:05:db:95:5d: 8f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D4:DF:A9:64:68:7F:20:FA:EF:92:21:6A:16:09:96:C6:2F:34:5E X509v3 Authority Key Identifier: keyid:ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/e9TfqWRofyD675IhahYJlsYvNF4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.162.64.0/23 Signature Algorithm: sha256WithRSAEncryption a8:d9:5c:8d:d2:5f:79:cf:34:be:69:81:84:c7:96:1e:b1:b3: 7e:af:de:38:99:57:72:d8:27:75:ec:80:05:ee:d4:b7:ac:47: 2a:f0:74:07:a6:f2:4e:f2:17:d1:ec:e6:3a:cd:9d:21:ca:e5: 36:c8:c2:c7:0a:be:01:9d:f3:cb:83:d9:ef:b3:5b:be:0c:11: 70:4a:7e:43:a4:31:80:87:68:7b:0e:8a:a1:32:c8:df:7e:0d: 07:e1:30:0a:ec:ab:72:51:e4:fb:85:fd:0f:76:74:d6:53:09: 91:72:ee:72:ee:5b:81:fe:3c:e2:86:da:4e:4c:23:4d:da:86: 57:a7:9e:b6:e7:dc:98:cd:b2:78:a5:81:e7:66:5f:d6:c6:1d: c1:b4:6a:82:b9:aa:69:ae:a4:e0:70:cc:78:ea:63:40:70:7a: 11:b2:da:52:7d:e9:37:63:49:63:bc:ea:cf:c0:20:d3:83:9f: ed:7d:60:bf:d6:cf:34:d5:a5:cb:01:60:9d:6a:4d:97:15:b0: 47:10:d2:af:ba:2d:36:b5:4c:ee:2c:bf:50:f1:54:2e:99:48: 49:be:13:6c:65:bd:50:b2:22:6c:f2:32:7a:7b:82:e5:68:dc: 1f:fa:3c:e9:76:31:84:33:8b:fd:8d:02:55:d8:54:59:b4:46: 61:51:7c:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZscHlnBdgmF4wLzFIofDccKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZmUzZjZmNmQ5ODcxNGUwMWYwOGM3M2IyNjQ0MzY4Nzc0 ZTg2NjAwHhcNMjUxMjE0MDkwODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmQ0ZGZhOTY0Njg3ZjIwZmFlZjkyMjE2YTE2MDk5NmM2MmYzNDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmVGHYcF4b6ETEXHZBm23swj4KJL +nIaAzVtzlcvBdfVMCIRoqAV7nqHEog5ZI/oEDbgywceXS2IIEKYpxzpWG2DDZou gZ8hPh+5hoF6waDDOVbF3ydS4QAy5tiPDqz15UycUaOlMlwqRk6DDGE5OMzFXfn8 plKyaowfhG5Yi/nB4LkG9nQ+9Wx046/DuWMAA79WtrplwFO6SNn1WuAWmafYvYzH PiznCQtthYR0aRScqefmkxzt+LiZ1psLO8QkIhj0DdU6bMHgR1EnDHyuj350jYRq rOqUTQNMIRK2BBPgfzMby/elbWYt3prA9fAVRpZ2NQkA94uoJgXblV2P9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHvU36lkaH8g+u+SIWoWCZbGLzReMB8GA1UdIwQY MBaAFO3+P29tmHFOAfCMc7JkQ2h3ToZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2Y0X2IyMlljVTRCOEl4enNtUkRhSGRPaG1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xODUzNjItYzhkOS00NTZmLTllMmMt ZWI0YTk2YzM4YzZmLzEvZTlUZnFXUm9meUQ2NzVJaGFoWUpsc1l2TkY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8xODUzNjItYzhkOS00NTZmLTllMmMtZWI0YTk2YzM4YzZm LzEvN2Y0X2IyMlljVTRCOEl4enNtUkRhSGRPaG1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw6JAMA0G CSqGSIb3DQEBCwUAA4IBAQCo2VyN0l95zzS+aYGEx5YesbN+r944mVdy2Cd17IAF 7tS3rEcq8HQHpvJO8hfR7OY6zZ0hyuU2yMLHCr4BnfPLg9nvs1u+DBFwSn5DpDGA h2h7DoqhMsjffg0H4TAK7KtyUeT7hf0PdnTWUwmRcu5y7luB/jzihtpOTCNN2oZX p56259yYzbJ4pYHnZl/Wxh3BtGqCuapprqTgcMx46mNAcHoRstpSfek3Y0ljvOrP wCDTg5/tfWC/1s801aXLAWCdak2XFbBHENKvui02tUzuLL9Q8VQumUhJvhNsZb1Q siJs8jJ6e4LlaNwf+jzpdjGEM4v9jQJV2FRZtEZhUXwY -----END CERTIFICATE-----Generated at Wed Dec 17 18:07:11 2025 by rpki-client