This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/Sl7vs7epJo1jh-smoHIDy3MLe90.roa File: Sl7vs7epJo1jh-smoHIDy3MLe90.roa (raw, json) Hash identifier: +DnNPnPqq4n8ubPLxyevCl394y1niM+tRJ57hRES2xk= Subject key identifier: 4A:5E:EF:B3:B7:A9:26:8D:63:87:EB:26:A0:72:03:CB:73:0B:7B:DD Certificate issuer: /CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65 Certificate serial: 019A76747F7985F50EE6248233EB71FC76F7 Authority key identifier: 0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/Sl7vs7epJo1jh-smoHIDy3MLe90.roa Signing time: Wed 12 Nov 2025 05:05:37 +0000 ROA not before: Wed 12 Nov 2025 05:05:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205431 IP address blocks: 176.12.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:76:74:7f:79:85:f5:0e:e6:24:82:33:eb:71:fc:76:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65 Validity Not Before: Nov 12 05:05:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4a5eefb3b7a9268d6387eb26a07203cb730b7bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:69:8a:1d:3d:ec:51:e8:47:1d:26:e6:c7:9d: 8f:1d:d2:68:45:87:2a:48:1c:b3:9e:f5:7a:4d:22: 2f:0b:84:34:fe:91:44:80:b7:b4:ed:17:f6:5f:10: 38:ed:bf:c0:6e:d5:4a:21:08:d8:9f:9f:a7:ee:9f: bf:b7:43:72:0c:74:5d:f4:3d:38:00:e9:47:75:30: 62:0a:d4:0e:b4:6b:13:b4:00:49:be:72:61:ff:09: 46:4e:85:d6:b2:8e:f5:f8:b8:d0:ea:ae:41:51:33: 4a:e2:30:37:30:cf:1d:07:18:3e:82:b4:7d:d5:60: 34:0c:94:78:ac:12:ca:03:fb:d8:86:49:cd:37:92: 18:9c:db:01:25:9e:b3:6b:68:5c:d5:13:3c:04:e1: ec:9e:53:a7:ce:6a:bc:15:2f:32:ec:8a:ce:08:65: 7c:4f:e1:14:1f:06:5f:f9:e2:32:24:2e:14:9a:a2: a5:2e:b7:a3:5e:12:a8:95:ed:2e:27:b1:6d:e4:3d: ee:73:58:0a:bb:2d:40:96:24:cc:73:98:8f:bc:90: 5a:89:56:73:f6:52:4c:8c:36:12:ff:4e:ba:db:7f: ad:fa:ea:e0:c1:a1:00:3d:36:c8:c4:73:2b:f4:48: 56:85:37:ce:c9:cd:59:6b:c1:12:18:74:55:73:87: 25:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:5E:EF:B3:B7:A9:26:8D:63:87:EB:26:A0:72:03:CB:73:0B:7B:DD X509v3 Authority Key Identifier: keyid:0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/Sl7vs7epJo1jh-smoHIDy3MLe90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.12.72.0/21 Signature Algorithm: sha256WithRSAEncryption 10:87:06:43:97:57:52:ad:d4:71:ba:53:f9:e4:d7:71:b5:7d: de:13:92:6d:ca:3d:36:00:86:3d:32:4c:0d:f2:32:54:61:21: 06:48:fb:58:9e:c3:e5:51:a2:16:cc:1b:0c:d6:fb:74:7f:1c: 30:cf:5e:a2:c6:56:e2:6b:c8:0d:bd:d9:8d:ae:54:0f:71:ed: 63:f2:1a:62:6b:f3:28:d3:61:4e:1f:16:64:6e:25:69:28:c0: 90:43:4b:2a:f6:b1:3c:f7:04:f1:6a:e3:2a:e5:cc:67:4b:6b: a1:7a:42:21:3f:43:66:5c:6f:cd:e5:6f:68:9d:d5:c7:17:4a: 9d:f9:57:2e:ec:e7:f1:e5:d2:39:73:27:57:68:ae:22:2e:17: 78:92:56:71:e5:2a:4d:42:95:97:62:2f:22:04:b4:f6:b9:c4: 48:6e:3f:05:1e:93:a0:c8:85:59:9f:3d:a3:45:7c:6c:cb:f9: ca:e5:4f:46:11:81:65:7b:0c:73:a6:eb:d2:c6:fe:3d:0f:74: b5:71:21:0b:80:5d:9c:a8:e1:1a:b3:d2:8f:c2:e5:14:04:c9: 31:7f:88:b2:dc:f3:0a:36:4d:18:ef:93:a5:e5:3a:97:86:1f: 1d:fc:57:88:7e:06:d5:f7:ad:fd:ec:bc:c8:3f:e8:8d:3d:90: cf:82:cf:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp2dH95hfUO5iSCM+tx/Hb3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNDFhNWEyYTE4MzM5NjI5Y2MxMzAzZTZkZWM4YmI2MDVk ZGNhNjUwHhcNMjUxMTEyMDUwNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTVlZWZiM2I3YTkyNjhkNjM4N2ViMjZhMDcyMDNjYjczMGI3YmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWmKHT3sUehHHSbmx52PHdJoRYcq SByznvV6TSIvC4Q0/pFEgLe07Rf2XxA47b/AbtVKIQjYn5+n7p+/t0NyDHRd9D04 AOlHdTBiCtQOtGsTtABJvnJh/wlGToXWso71+LjQ6q5BUTNK4jA3MM8dBxg+grR9 1WA0DJR4rBLKA/vYhknNN5IYnNsBJZ6za2hc1RM8BOHsnlOnzmq8FS8y7IrOCGV8 T+EUHwZf+eIyJC4UmqKlLrejXhKole0uJ7Ft5D3uc1gKuy1AliTMc5iPvJBaiVZz 9lJMjDYS/06623+t+urgwaEAPTbIxHMr9EhWhTfOyc1Za8ESGHRVc4clOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEpe77O3qSaNY4frJqByA8tzC3vdMB8GA1UdIwQY MBaAFApBpaKhgzlinMEwPm3si7YF3cplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2tHbG9xR0RPV0tjd1RBLWJleUx0Z1hkeW1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kNDNjMmMtNzRlOS00N2Q0LWJmNjIt ODBmN2ZkNmVhOWM5LzEvU2w3dnM3ZXBKbzFqaC1zbW9ISUR5M01MZTkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9kNDNjMmMtNzRlOS00N2Q0LWJmNjItODBmN2ZkNmVhOWM5 LzEvQ2tHbG9xR0RPV0tjd1RBLWJleUx0Z1hkeW1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsAxIMA0G CSqGSIb3DQEBCwUAA4IBAQAQhwZDl1dSrdRxulP55NdxtX3eE5Jtyj02AIY9MkwN 8jJUYSEGSPtYnsPlUaIWzBsM1vt0fxwwz16ixlbia8gNvdmNrlQPce1j8hpia/Mo 02FOHxZkbiVpKMCQQ0sq9rE89wTxauMq5cxnS2uhekIhP0NmXG/N5W9ondXHF0qd +Vcu7Ofx5dI5cydXaK4iLhd4klZx5SpNQpWXYi8iBLT2ucRIbj8FHpOgyIVZnz2j RXxsy/nK5U9GEYFlewxzpuvSxv49D3S1cSELgF2cqOEas9KPwuUUBMkxf4iy3PMK Nk0Y75Ol5TqXhh8d/FeIfgbV96397LzIP+iNPZDPgs8m -----END CERTIFICATE-----Generated at Sat Dec 6 11:45:43 2025 by rpki-client