This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/R1LtSR--SIXBiaZh4E5Q6En2fhk.roa File: R1LtSR--SIXBiaZh4E5Q6En2fhk.roa (raw, json) Hash identifier: QyJjIQmpOVOlqsTG9jHRUnt61S51UgFdXw/l/jQZvj8= Subject key identifier: 47:52:ED:49:1F:BE:48:85:C1:89:A6:61:E0:4E:50:E8:49:F6:7E:19 Certificate issuer: /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad Certificate serial: 019AC0A0300293C99A269E7F9A0DD4598DF4 Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/R1LtSR--SIXBiaZh4E5Q6En2fhk.roa Signing time: Wed 26 Nov 2025 14:45:14 +0000 ROA not before: Wed 26 Nov 2025 14:45:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25773 IP address blocks: 141.226.100.0/24 maxlen: 24 141.226.110.0/24 maxlen: 24 141.226.252.0/22 maxlen: 24 144.249.128.0/18 maxlen: 24 167.17.128.0/19 maxlen: 24 176.100.161.0/24 maxlen: 24 185.139.240.0/22 maxlen: 24 2a07:1980::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c0:a0:30:02:93:c9:9a:26:9e:7f:9a:0d:d4:59:8d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad Validity Not Before: Nov 26 14:45:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4752ed491fbe4885c189a661e04e50e849f67e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:93:cb:6e:15:ae:7e:d8:dc:ed:b7:eb:1e:e2: 7f:57:92:ec:1a:7f:96:22:30:cf:ce:b2:5a:2d:9e: 9e:7b:9f:96:bd:03:11:a3:e7:da:6f:62:cc:5e:cb: 98:1e:ad:63:6d:e4:0e:de:f5:b6:74:e7:93:ac:06: 14:83:5a:6a:13:97:22:24:fc:df:19:f7:49:a3:c0: 47:40:27:5f:4c:1f:84:7a:a9:64:d4:41:02:d8:b5: 4e:45:bf:cd:7b:82:7c:6f:32:34:b4:81:6e:49:c0: 01:40:d7:32:4f:f0:ee:49:25:0e:74:21:53:a5:0a: db:34:f0:bc:b4:40:8d:22:4c:18:fb:b6:5e:ee:33: 9a:d3:48:f0:9e:c3:71:2f:1e:ec:72:89:57:ba:93: 61:53:5d:eb:49:ee:83:4f:30:98:01:5a:94:26:0d: c8:61:c5:12:9e:b6:f1:cc:18:f8:62:95:30:33:0f: cb:01:d7:7b:6d:e5:54:1c:a4:86:0e:ce:c8:90:d3: 75:0b:c1:34:a3:4e:24:e0:d0:d7:fb:40:b0:22:1c: d3:43:56:36:ad:cf:ef:7b:de:01:4f:74:96:0a:09: c6:98:c1:23:69:fc:88:9f:3f:ba:09:1e:1f:88:36: 13:48:7e:0d:36:76:72:7d:c6:7b:80:0f:4d:02:51: 71:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:52:ED:49:1F:BE:48:85:C1:89:A6:61:E0:4E:50:E8:49:F6:7E:19 X509v3 Authority Key Identifier: keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/R1LtSR--SIXBiaZh4E5Q6En2fhk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.226.100.0/24 141.226.110.0/24 141.226.252.0/22 144.249.128.0/18 167.17.128.0/19 176.100.161.0/24 185.139.240.0/22 IPv6: 2a07:1980::/29 Signature Algorithm: sha256WithRSAEncryption 78:65:29:f9:f1:4e:2c:b0:c5:7f:3b:c1:f5:99:d2:8d:73:9c: ba:ca:21:29:ca:6a:34:d2:2f:32:e6:e7:b2:00:01:d5:1c:44: 22:da:e8:0f:f0:55:52:06:ed:8e:81:0c:5a:2c:7f:b5:48:e9: 28:02:cc:39:71:2e:9e:5a:cf:43:0a:6a:27:4f:dd:6a:cf:51: 07:c0:72:38:2b:36:4a:bc:4e:39:98:18:fc:68:20:38:c2:de: f6:de:9b:05:f0:95:63:00:61:7e:7b:64:4b:9e:6c:fd:a3:37: 7f:0b:94:74:c1:59:10:0f:47:7c:22:14:d7:b5:4c:a0:d0:ff: 5d:22:29:71:3d:eb:6f:af:a5:a3:6a:1d:03:b1:ea:8e:6e:43: 7d:fd:8c:ed:6c:84:2e:ca:79:ac:d9:d9:59:6a:88:52:b7:ec: 61:a7:0d:3f:1a:4d:cb:82:b3:52:bc:ad:c8:ba:27:8a:08:fb: 2b:c0:9a:fb:ef:34:7a:70:2a:cf:c5:33:dc:77:da:c6:55:6f: 9e:0e:5a:87:e4:a8:53:98:5a:1f:3c:52:d5:14:1a:0a:73:6e: 13:51:ac:5b:dd:39:62:c5:f9:06:88:0a:8c:30:0e:57:bd:aa: 89:60:d2:2f:3e:dd:bd:b8:1f:c1:c6:a5:b2:2e:8f:01:ad:dd: ab:8b:c8:9f -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZrAoDACk8maJp5/mg3UWY30MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YmQ5Yjg2NTMxZTU0NGFmYTAzMDlkOGJlMmE3YmE2OTE2 M2Y5YWQwHhcNMjUxMTI2MTQ0NTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzUyZWQ0OTFmYmU0ODg1YzE4OWE2NjFlMDRlNTBlODQ5ZjY3ZTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZPLbhWuftjc7bfrHuJ/V5LsGn+W IjDPzrJaLZ6ee5+WvQMRo+fab2LMXsuYHq1jbeQO3vW2dOeTrAYUg1pqE5ciJPzf GfdJo8BHQCdfTB+Eeqlk1EEC2LVORb/Ne4J8bzI0tIFuScABQNcyT/DuSSUOdCFT pQrbNPC8tECNIkwY+7Ze7jOa00jwnsNxLx7scolXupNhU13rSe6DTzCYAVqUJg3I YcUSnrbxzBj4YpUwMw/LAdd7beVUHKSGDs7IkNN1C8E0o04k4NDX+0CwIhzTQ1Y2 rc/ve94BT3SWCgnGmMEjafyInz+6CR4fiDYTSH4NNnZyfcZ7gA9NAlFxDwIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFEdS7UkfvkiFwYmmYeBOUOhJ9n4ZMB8GA1UdIwQY MBaAFJe9m4ZTHlRK+gMJ2L4qe6aRY/mtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjIt MzQ2MGNjMjY0ODBiLzEvUjFMdFNSLS1TSVhCaWFaaDRFNVE2RW4yZmhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjItMzQ2MGNjMjY0ODBi LzEvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQAjeJkAwQA jeJuAwQCjeL8AwQGkPmAAwQFpxGAAwQAsGShAwQCuYvwMA0EAgACMAcDBQMqBxmA MA0GCSqGSIb3DQEBCwUAA4IBAQB4ZSn58U4ssMV/O8H1mdKNc5y6yiEpymo00i8y 5ueyAAHVHEQi2ugP8FVSBu2OgQxaLH+1SOkoAsw5cS6eWs9DCmonT91qz1EHwHI4 KzZKvE45mBj8aCA4wt723psF8JVjAGF+e2RLnmz9ozd/C5R0wVkQD0d8IhTXtUyg 0P9dIilxPetvr6Wjah0DseqObkN9/YztbIQuynms2dlZaohSt+xhpw0/Gk3LgrNS vK3IuieKCPsrwJr77zR6cCrPxTPcd9rGVW+eDlqH5KhTmFofPFLVFBoKc24TUaxb 3TlixfkGiAqMMA5XvaqJYNIvPt29uB/BxqWyLo8Brd2ri8if -----END CERTIFICATE-----Generated at Sat Dec 6 16:52:24 2025 by rpki-client