This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/JjIv6vXWhdzf21PIjnos0xy00H4.roa File: JjIv6vXWhdzf21PIjnos0xy00H4.roa (raw, json) Hash identifier: /yPiFGeiARG4XRkJXA7oDcKrQ5VIv6i96C/DHV4Kp9w= Subject key identifier: 26:32:2F:EA:F5:D6:85:DC:DF:DB:53:C8:8E:7A:2C:D3:1C:B4:D0:7E Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878 Certificate serial: 019AB8A69187FE35B138DECB376D2C65F321 Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/JjIv6vXWhdzf21PIjnos0xy00H4.roa Signing time: Tue 25 Nov 2025 01:35:15 +0000 ROA not before: Tue 25 Nov 2025 01:35:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 3399 IP address blocks: 194.32.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b8:a6:91:87:fe:35:b1:38:de:cb:37:6d:2c:65:f3:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878 Validity Not Before: Nov 25 01:35:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=26322feaf5d685dcdfdb53c88e7a2cd31cb4d07e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:63:60:d5:6e:f9:46:da:8b:83:55:40:83:be: 0f:8d:82:28:90:6c:93:72:dd:a5:9e:b3:57:20:14: 9d:b1:55:d0:ed:c0:14:42:40:c8:b3:36:22:fc:f0: 72:38:9f:df:7a:55:80:76:af:13:7d:e0:2b:09:af: d3:59:5f:1f:56:0d:47:d3:ee:09:97:de:c4:dd:8d: 2e:11:a0:1e:09:39:79:ca:7a:9a:11:68:02:12:06: 86:34:99:b4:00:7d:59:09:f6:5d:53:01:e0:42:78: 07:4a:75:7a:7c:88:fc:60:13:fd:bb:61:29:9d:57: 78:ff:fd:9a:4a:65:b1:c0:e6:a2:45:92:d3:11:c6: 4c:f4:f8:0b:c5:92:a0:28:01:14:99:54:b7:1b:3a: 22:9e:16:2f:f4:0a:b1:07:4b:cd:d4:0f:ce:65:86: 05:fb:66:3a:73:ea:56:dc:e9:c8:41:01:4d:36:bf: 96:50:89:b7:39:ca:a1:19:41:65:da:fe:3a:28:35: 08:7c:5a:78:1c:51:e1:19:bc:a5:10:f4:d9:fc:b9: 11:ff:57:52:82:fd:eb:cc:c9:56:8b:d9:b6:dd:e1: 51:f1:34:f7:dc:23:cc:e2:47:71:8f:a3:bd:2a:9d: 40:04:f2:54:06:a1:90:05:84:b5:d7:3c:3a:cf:20: 49:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:32:2F:EA:F5:D6:85:DC:DF:DB:53:C8:8E:7A:2C:D3:1C:B4:D0:7E X509v3 Authority Key Identifier: keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/JjIv6vXWhdzf21PIjnos0xy00H4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.32.144.0/23 Signature Algorithm: sha256WithRSAEncryption 07:80:d1:da:e9:af:7e:a5:1c:a8:41:99:8a:fe:3e:5a:9f:27: bb:f5:3e:d6:ed:a7:50:bc:a9:c2:de:21:6b:12:0a:0f:4d:a2: a9:e0:76:d7:36:3c:e6:3a:90:a8:b4:6d:5a:7c:97:75:d5:8c: 6b:bb:4b:b1:d7:49:4f:f7:af:38:e8:a9:a8:2a:b2:c6:5b:a7: a5:d2:4c:cd:f4:39:5e:76:26:ee:0b:a6:04:18:68:59:25:49: fe:9b:5f:04:6d:0b:30:2d:12:17:c3:8b:ca:12:a3:98:02:e1: 61:60:98:c1:d6:5c:33:8c:79:8e:3b:3c:34:e2:1c:93:50:e8: 95:87:12:0e:dc:2d:3e:04:63:5d:8d:32:c4:55:26:22:34:97: 71:87:48:82:2f:e6:fe:be:08:4d:62:ac:0d:6d:44:7d:d5:0a: 6e:1a:c3:68:7a:c0:4e:72:41:48:e5:df:c7:70:74:75:25:7f: 8b:5a:64:e7:66:b4:63:38:5f:ee:13:b8:fd:4d:69:02:88:41: b5:b6:a8:5a:54:10:60:86:e0:b9:99:02:a7:c7:e9:19:2c:7b: f2:60:23:6a:52:d0:5d:ac:f5:2d:bb:f2:d5:a7:9b:cb:69:ad: cb:a4:4b:c2:ea:04:be:f5:f0:59:4f:6b:70:ec:8d:73:d7:6b: 97:9a:bc:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq4ppGH/jWxON7LN20sZfMhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZmQzZjg5MzM1ZGNmODI4NjY2YjI4ZmFkOGFlOTkzYmQ0 NDg4NzgwHhcNMjUxMTI1MDEzNTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjMyMmZlYWY1ZDY4NWRjZGZkYjUzYzg4ZTdhMmNkMzFjYjRkMDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mNg1W75RtqLg1VAg74PjYIokGyT ct2lnrNXIBSdsVXQ7cAUQkDIszYi/PByOJ/felWAdq8TfeArCa/TWV8fVg1H0+4J l97E3Y0uEaAeCTl5ynqaEWgCEgaGNJm0AH1ZCfZdUwHgQngHSnV6fIj8YBP9u2Ep nVd4//2aSmWxwOaiRZLTEcZM9PgLxZKgKAEUmVS3GzoinhYv9AqxB0vN1A/OZYYF +2Y6c+pW3OnIQQFNNr+WUIm3OcqhGUFl2v46KDUIfFp4HFHhGbylEPTZ/LkR/1dS gv3rzMlWi9m23eFR8TT33CPM4kdxj6O9Kp1ABPJUBqGQBYS11zw6zyBJwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCYyL+r11oXc39tTyI56LNMctNB+MB8GA1UdIwQY MBaAFKf9P4kzXc+Chmayj62K6ZO9RIh4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcF8wX2lUTmR6NEtHWnJLUHJZcnBrNzFFaUhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8zODhmZDgtYzgxZi00ZTcxLWFmNTIt YzBiMWFkNDM1Yjk1LzEvSmpJdjZ2WFdoZHpmMjFQSWpub3MweHkwMEg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8zODhmZDgtYzgxZi00ZTcxLWFmNTItYzBiMWFkNDM1Yjk1 LzEvcF8wX2lUTmR6NEtHWnJLUHJZcnBrNzFFaUhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwiCQMA0G CSqGSIb3DQEBCwUAA4IBAQAHgNHa6a9+pRyoQZmK/j5anye79T7W7adQvKnC3iFr EgoPTaKp4HbXNjzmOpCotG1afJd11Yxru0ux10lP96846KmoKrLGW6el0kzN9Dle dibuC6YEGGhZJUn+m18EbQswLRIXw4vKEqOYAuFhYJjB1lwzjHmOOzw04hyTUOiV hxIO3C0+BGNdjTLEVSYiNJdxh0iCL+b+vghNYqwNbUR91QpuGsNoesBOckFI5d/H cHR1JX+LWmTnZrRjOF/uE7j9TWkCiEG1tqhaVBBghuC5mQKnx+kZLHvyYCNqUtBd rPUtu/LVp5vLaa3LpEvC6gS+9fBZT2tw7I1z12uXmrzS -----END CERTIFICATE-----Generated at Sat Dec 6 12:53:19 2025 by rpki-client