This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/SrJeddq77t2qVjJA8sHAqzGCYgQ.roa File: SrJeddq77t2qVjJA8sHAqzGCYgQ.roa (raw, json) Hash identifier: xNhv2STaKwq69UqwZMaKfsYrMSyGjuEjP/QBIIf/pKY= Subject key identifier: 4A:B2:5E:75:DA:BB:EE:DD:AA:56:32:40:F2:C1:C0:AB:31:82:62:04 Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Certificate serial: 019ABA9B8A2B45E0C1FBE8FD88AD136F595A Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/SrJeddq77t2qVjJA8sHAqzGCYgQ.roa Signing time: Tue 25 Nov 2025 10:42:26 +0000 ROA not before: Tue 25 Nov 2025 10:42:26 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 91.195.242.0/23 maxlen: 24 124.198.192.0/19 maxlen: 24 139.66.0.0/16 maxlen: 24 147.204.0.0/16 maxlen: 24 155.56.0.0/16 maxlen: 24 193.16.224.0/22 maxlen: 24 194.39.128.0/21 maxlen: 24 194.39.136.0/22 maxlen: 24 194.45.236.0/23 maxlen: 24 194.55.88.0/22 maxlen: 24 202.89.128.0/20 maxlen: 24 217.77.240.0/20 maxlen: 24 2a00:fe00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:9b:8a:2b:45:e0:c1:fb:e8:fd:88:ad:13:6f:59:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Validity Not Before: Nov 25 10:42:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4ab25e75dabbeeddaa563240f2c1c0ab31826204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b5:30:f2:a1:aa:3e:20:17:62:31:69:7a:35: 1e:fa:32:c4:28:f4:5c:8c:b7:0f:3e:73:0d:f3:06: 79:c2:3d:1f:cd:6c:9d:35:77:d2:20:0f:fb:6f:9d: df:81:b6:a0:99:68:53:2c:4a:f5:71:87:24:82:00: fe:f1:49:81:ea:76:c6:1d:1b:47:57:e4:7c:0e:8b: 3e:01:52:d3:90:fe:32:80:ab:c8:41:ed:36:5f:76: cf:0d:ab:a6:a6:9b:81:a6:22:31:ab:37:17:35:5d: f0:64:e9:ec:eb:a3:4c:c6:4e:a2:02:a4:2a:4b:6d: ad:bf:17:18:9c:27:5f:d5:76:9e:a6:07:42:0e:bc: 2f:7b:f7:5d:73:80:66:96:db:6f:15:a6:1e:6e:4a: 70:29:5a:4d:00:3a:4f:c5:dd:be:b3:02:b0:ff:78: 96:bf:3b:b0:d2:9a:92:a2:f1:96:d6:1f:2e:ee:50: f6:e6:48:ad:78:4f:b4:33:0c:c7:2a:6d:28:8c:e5: db:74:60:f4:7f:bb:28:cf:a4:36:61:c3:17:64:0d: 4c:06:c9:bc:bc:11:36:b3:66:2e:fb:26:7a:48:d1: 63:24:39:71:76:00:63:17:ba:37:54:76:ec:c2:d6: 0c:31:a8:50:ef:2f:72:e2:2b:c9:fc:fb:f8:cd:79: e7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B2:5E:75:DA:BB:EE:DD:AA:56:32:40:F2:C1:C0:AB:31:82:62:04 X509v3 Authority Key Identifier: keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/SrJeddq77t2qVjJA8sHAqzGCYgQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.242.0/23 124.198.192.0/19 139.66.0.0/16 147.204.0.0/16 155.56.0.0/16 193.16.224.0/22 194.39.128.0-194.39.139.255 194.45.236.0/23 194.55.88.0/22 202.89.128.0/20 217.77.240.0/20 IPv6: 2a00:fe00::/32 Signature Algorithm: sha256WithRSAEncryption 00:24:44:fa:7b:24:56:b1:c8:a6:29:c5:cb:44:ae:41:27:af: 72:26:91:a0:d4:60:18:fe:5d:37:27:48:5a:d3:d4:a1:34:97: c9:59:e9:d3:cf:db:b1:14:71:46:70:d0:e5:2e:46:d2:73:4b: f2:47:23:73:7a:d8:1c:9d:fd:ad:28:4a:be:5a:9b:b4:3f:34: d7:54:10:5b:d6:11:34:1d:2b:56:20:00:0f:6f:ce:2a:7b:32: 07:87:63:57:fe:54:d8:b0:f1:fc:0c:49:3c:7f:d8:1b:fe:4f: a9:f9:15:da:44:fd:9b:a6:7e:6f:a6:0d:4b:7d:bf:36:a0:dd: 22:d4:5d:ef:1d:e9:ed:bf:24:70:dd:2a:c7:10:e2:96:86:fd: 25:20:49:a8:58:22:1b:15:2a:5d:ab:39:93:2a:a2:ca:e7:cf: 60:86:8a:7f:19:87:f5:0a:10:b3:59:84:42:e7:61:d9:64:c8: d4:f4:6b:4a:3f:bb:b2:4c:dc:4f:64:01:b7:1e:d0:01:4f:9a: 1d:f0:71:08:bc:6c:d3:88:ca:61:f2:ec:22:ac:ee:69:29:b8: 12:33:8b:ce:71:e5:1d:cb:31:65:fe:a2:0c:c1:f8:b6:d5:b5: d6:dc:2b:1d:37:04:b4:e2:81:bd:0c:f0:00:62:1c:57:47:4e: 79:25:28:44 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgISAZq6m4orReDB++j9iK0Tb1laMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNDY5NjNjYzQ3OWRhZGJlM2M1MjIzNGFiOWZhYmFhODEy MmQyNWIwHhcNMjUxMTI1MTA0MjI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWIyNWU3NWRhYmJlZWRkYWE1NjMyNDBmMmMxYzBhYjMxODI2MjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bUw8qGqPiAXYjFpejUe+jLEKPRc jLcPPnMN8wZ5wj0fzWydNXfSIA/7b53fgbagmWhTLEr1cYckggD+8UmB6nbGHRtH V+R8Dos+AVLTkP4ygKvIQe02X3bPDaumppuBpiIxqzcXNV3wZOns66NMxk6iAqQq S22tvxcYnCdf1XaepgdCDrwve/ddc4BmlttvFaYebkpwKVpNADpPxd2+swKw/3iW vzuw0pqSovGW1h8u7lD25kiteE+0MwzHKm0ojOXbdGD0f7soz6Q2YcMXZA1MBsm8 vBE2s2Yu+yZ6SNFjJDlxdgBjF7o3VHbswtYMMahQ7y9y4ivJ/Pv4zXnnewIDAQAB o4ICWTCCAlUwHQYDVR0OBBYEFEqyXnXau+7dqlYyQPLBwKsxgmIEMB8GA1UdIwQY MBaAFOpGljzEedrb48UiNKufq6qBItJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUt ZWI1YmM3ZDk3YWEwLzEvU3JKZWRkcTc3dDJxVmpKQThzSEFxekdDWWdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUtZWI1YmM3ZDk3YWEw LzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBNBAIAATBHAwQBW8PyAwQF fMbAAwMAi0IDAwCTzAMDAJs4AwQCwRDgMAwDBAfCJ4ADBALCJ4gDBAHCLewDBALC N1gDBATKWYADBATZTfAwDQQCAAIwBwMFACoA/gAwDQYJKoZIhvcNAQELBQADggEB AAAkRPp7JFaxyKYpxctErkEnr3ImkaDUYBj+XTcnSFrT1KE0l8lZ6dPP27EUcUZw 0OUuRtJzS/JHI3N62Byd/a0oSr5am7Q/NNdUEFvWETQdK1YgAA9vzip7MgeHY1f+ VNiw8fwMSTx/2Bv+T6n5FdpE/Zumfm+mDUt9vzag3SLUXe8d6e2/JHDdKscQ4paG /SUgSahYIhsVKl2rOZMqosrnz2CGin8Zh/UKELNZhELnYdlkyNT0a0o/u7JM3E9k Abce0AFPmh3wcQi8bNOIymHy7CKs7mkpuBIzi85x5R3LMWX+ogzB+LbVtdbcKx03 BLTigb0M8ABiHFdHTnklKEQ= -----END CERTIFICATE-----Generated at Sat Dec 6 11:44:26 2025 by rpki-client