This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/7DpXnFdsHbigdyiMVLlpMLbaqBk.roa File: 7DpXnFdsHbigdyiMVLlpMLbaqBk.roa (raw, json) Hash identifier: SY5vZz50/sY6PXI2smf9TJ61eKLV+hC2iIUr3RKUJQ8= Subject key identifier: EC:3A:57:9C:57:6C:1D:B8:A0:77:28:8C:54:B9:69:30:B6:DA:A8:19 Certificate issuer: /CN=d2e42a583fa251b432cfc1dca8bd341d50660b95 Certificate serial: 019A5D7F080E1E53CC8484442D789A430D0B Authority key identifier: D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/7DpXnFdsHbigdyiMVLlpMLbaqBk.roa Signing time: Fri 07 Nov 2025 08:46:37 +0000 ROA not before: Fri 07 Nov 2025 08:46:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9121 IP address blocks: 193.105.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5d:7f:08:0e:1e:53:cc:84:84:44:2d:78:9a:43:0d:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2e42a583fa251b432cfc1dca8bd341d50660b95 Validity Not Before: Nov 7 08:46:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ec3a579c576c1db8a077288c54b96930b6daa819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c9:6d:c8:42:9a:c7:d0:f0:8e:4a:ae:5f:c9: 79:2a:d5:2b:9e:e0:f5:a2:a9:32:41:5f:b2:c3:d1: 32:98:01:dd:47:62:96:33:52:eb:63:00:a7:c2:0d: 04:4f:09:e2:77:b7:03:42:dd:df:54:25:0b:b9:fa: cb:15:69:71:6a:05:ff:1f:4c:46:e1:50:87:b4:bc: c4:2c:c4:33:b3:52:4a:a9:ba:fa:2f:a7:61:4f:44: ad:9b:03:f2:60:d9:a4:08:ee:bf:a1:a8:1c:eb:70: fd:4d:55:a1:1a:c1:20:a1:a4:9e:6b:1a:42:05:dd: c7:99:29:df:3b:6f:1e:a2:bf:aa:77:5c:c8:05:de: 00:34:16:8b:76:ec:bd:a3:36:c1:5c:67:2d:a4:3d: f7:3e:40:13:59:d0:5a:2a:03:2b:44:07:9e:fd:53: db:5c:bf:d2:db:0c:98:c6:ea:cb:0e:94:ac:d1:c8: c7:91:27:1a:4f:61:18:3c:e8:ee:3b:e3:01:76:ff: 59:1c:79:d2:da:bf:0a:1d:f3:5b:ee:3c:e8:dd:a3: 9d:45:47:88:2a:40:f1:30:da:0f:7d:f4:2f:be:4f: 52:11:08:05:9e:49:9f:fb:00:fc:bc:46:d2:de:98: 28:84:e1:02:42:b0:12:a0:cd:c9:5d:ff:36:29:7d: 34:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3A:57:9C:57:6C:1D:B8:A0:77:28:8C:54:B9:69:30:B6:DA:A8:19 X509v3 Authority Key Identifier: keyid:D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/7DpXnFdsHbigdyiMVLlpMLbaqBk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.84.0/24 Signature Algorithm: sha256WithRSAEncryption 35:97:4c:05:e7:ea:e1:1f:a7:3c:fe:46:4a:de:0a:e6:10:27: 96:1b:8d:51:de:0d:6f:4b:9c:6e:ce:16:ff:fb:8d:2c:1a:99: db:a4:cf:dc:7a:1c:5b:b9:82:4a:85:a6:d7:2c:ed:0b:b4:c6: 1d:fa:b7:21:4f:6c:af:17:68:50:40:3b:cf:70:ca:59:ce:97: 92:7a:8f:07:fc:cf:1f:45:69:7b:88:c0:9c:e8:30:78:e1:89: 28:83:2e:0b:c3:5b:ad:f9:4b:83:26:18:6b:63:63:3b:0e:0f: 1e:a0:25:7a:7b:7c:ba:27:b8:10:87:a4:ea:05:91:c1:c1:e6: 78:e3:03:4f:7f:4f:f2:99:01:7d:de:9f:5b:91:f5:fa:c7:2b: 88:a6:1c:b1:9c:80:a9:38:b7:c5:81:79:c9:09:d3:1c:ce:74: 75:09:cd:14:88:8b:70:99:51:43:3c:c8:40:04:fb:05:46:7f: db:a3:37:1e:f3:e9:a9:51:53:2d:98:af:47:5b:33:76:0e:24: bd:36:05:cc:f5:b7:c2:26:2c:ca:17:b1:3a:35:0f:a0:9d:c4: c7:9c:da:0f:51:ab:56:34:60:40:8b:31:87:a6:d3:ba:7c:3f: 34:22:27:a4:82:5a:5e:75:2b:10:47:4d:a4:c4:46:f3:41:47: 2b:42:ab:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpdfwgOHlPMhIRELXiaQw0LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZTQyYTU4M2ZhMjUxYjQzMmNmYzFkY2E4YmQzNDFkNTA2 NjBiOTUwHhcNMjUxMTA3MDg0NjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzNhNTc5YzU3NmMxZGI4YTA3NzI4OGM1NGI5NjkzMGI2ZGFhODE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisltyEKax9DwjkquX8l5KtUrnuD1 oqkyQV+yw9EymAHdR2KWM1LrYwCnwg0ETwnid7cDQt3fVCULufrLFWlxagX/H0xG 4VCHtLzELMQzs1JKqbr6L6dhT0StmwPyYNmkCO6/oagc63D9TVWhGsEgoaSeaxpC Bd3HmSnfO28eor+qd1zIBd4ANBaLduy9ozbBXGctpD33PkATWdBaKgMrRAee/VPb XL/S2wyYxurLDpSs0cjHkScaT2EYPOjuO+MBdv9ZHHnS2r8KHfNb7jzo3aOdRUeI KkDxMNoPffQvvk9SEQgFnkmf+wD8vEbS3pgohOECQrASoM3JXf82KX00pwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOw6V5xXbB24oHcojFS5aTC22qgZMB8GA1UdIwQY MBaAFNLkKlg/olG0Ms/B3Ki9NB1QZguVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHVRcVdELWlVYlF5ejhIY3FMMDBIVkJtQzVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8zYWI3ZmMtYmFlZi00YTk2LWJkZDMt ZmRjMWRjZGEyOTYxLzEvN0RwWG5GZHNIYmlnZHlpTVZMbHBNTGJhcUJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8zYWI3ZmMtYmFlZi00YTk2LWJkZDMtZmRjMWRjZGEyOTYx LzEvMHVRcVdELWlVYlF5ejhIY3FMMDBIVkJtQzVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWlUMA0G CSqGSIb3DQEBCwUAA4IBAQA1l0wF5+rhH6c8/kZK3grmECeWG41R3g1vS5xuzhb/ +40sGpnbpM/cehxbuYJKhabXLO0LtMYd+rchT2yvF2hQQDvPcMpZzpeSeo8H/M8f RWl7iMCc6DB44Ykogy4Lw1ut+UuDJhhrY2M7Dg8eoCV6e3y6J7gQh6TqBZHBweZ4 4wNPf0/ymQF93p9bkfX6xyuIphyxnICpOLfFgXnJCdMcznR1Cc0UiItwmVFDPMhA BPsFRn/bozce8+mpUVMtmK9HWzN2DiS9NgXM9bfCJizKF7E6NQ+gncTHnNoPUatW NGBAizGHptO6fD80IiekglpedSsQR02kxEbzQUcrQqtg -----END CERTIFICATE-----Generated at Sat Dec 6 23:30:20 2025 by rpki-client