This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/h_r7vIjGm8edkF34J6wcZtrTxn4.roa File: h_r7vIjGm8edkF34J6wcZtrTxn4.roa (raw, json) Hash identifier: rFGn8ZOwSWywtOAH7hZ0p2ezF/XGAzi22VSS7WGREaM= Subject key identifier: 87:FA:FB:BC:88:C6:9B:C7:9D:90:5D:F8:27:AC:1C:66:DA:D3:C6:7E Certificate issuer: /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1 Certificate serial: 019AE9F613E59BEE05505B17F57422C5B9BD Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/h_r7vIjGm8edkF34J6wcZtrTxn4.roa Signing time: Thu 04 Dec 2025 15:23:29 +0000 ROA not before: Thu 04 Dec 2025 15:23:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204104 IP address blocks: 91.234.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:f6:13:e5:9b:ee:05:50:5b:17:f5:74:22:c5:b9:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1 Validity Not Before: Dec 4 15:23:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=87fafbbc88c69bc79d905df827ac1c66dad3c67e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9f:f0:05:43:82:c2:ce:73:d6:30:a0:db:c1: f4:14:ae:9b:b8:d3:fd:98:2f:3e:37:07:bb:d8:3f: ca:ab:ca:d2:6b:3a:ed:1f:46:9b:65:7f:88:3d:c7: af:bd:31:4a:5f:53:0d:bc:35:b3:02:f7:7f:13:31: 71:62:ec:90:55:15:f4:ac:9c:c9:ba:5d:2e:2b:d5: 60:c1:f3:14:d5:2e:f9:ee:59:79:0c:3b:df:6e:b9: 27:75:c9:0e:d0:a2:51:c4:30:2e:3a:f7:71:2a:8c: d1:21:27:55:c1:70:35:fa:2e:c0:2c:80:cf:73:77: d4:b2:07:4d:76:0e:ac:5a:c3:0b:8e:91:6b:a4:d2: 21:76:e4:3e:6d:d6:f9:88:d6:eb:72:55:db:f1:b6: 3c:51:cd:66:e2:56:e9:44:51:b3:c8:54:a9:80:75: 9a:f7:c8:03:5f:24:7b:24:8b:cf:8f:d6:9e:7d:62: b2:26:27:0f:00:61:92:d1:f6:6e:95:c1:5c:3e:cf: 8d:a1:15:b9:dd:da:37:66:35:f5:1b:97:f0:71:da: 38:6f:c9:6b:2b:bd:1a:c8:b0:f9:0f:31:ac:4a:45: 59:63:60:e3:35:18:03:0d:ef:cc:d6:5a:1e:4c:85: 47:a6:4b:83:02:e4:8d:c8:11:71:d4:23:cf:74:8d: f4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FA:FB:BC:88:C6:9B:C7:9D:90:5D:F8:27:AC:1C:66:DA:D3:C6:7E X509v3 Authority Key Identifier: keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/h_r7vIjGm8edkF34J6wcZtrTxn4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.39.0/24 Signature Algorithm: sha256WithRSAEncryption 44:9d:46:04:6d:93:8e:35:8d:d1:39:0c:2b:cb:0b:a9:13:f7: 16:00:f7:3d:30:14:4e:94:be:38:46:88:f7:b2:0e:67:d8:77: 23:6b:91:8a:14:da:72:46:2b:39:9c:24:bd:6f:eb:b5:2c:d8: 0a:1b:f8:30:5a:43:98:16:1c:53:7d:2f:82:ba:c3:16:6c:1b: 21:44:60:6f:4a:e3:19:80:29:34:2b:77:73:d9:30:94:e5:75: 90:b5:72:06:8d:58:9a:7b:ea:91:8a:5d:87:47:f8:31:ca:f0: 3e:d0:ad:f0:76:b4:ed:2a:c8:d4:cb:88:4c:9d:3b:6b:0a:d3: 0f:90:b6:da:69:41:25:31:a2:cc:5b:74:98:c2:10:9b:8c:31: 40:39:f9:82:eb:3f:db:21:ab:d1:85:bb:2b:69:6a:2d:7e:e0: 50:8c:23:3e:ff:39:4e:53:df:44:10:9a:18:f4:1e:ed:7b:17: 89:e1:81:17:f0:29:7f:69:4d:e7:63:56:80:a5:2e:a4:b4:67: cc:ff:2b:96:6b:9d:d9:c1:12:aa:c2:3b:dd:5c:3d:f5:f6:60: 72:d6:ee:1b:43:1e:b5:51:78:4c:e8:05:95:91:ca:42:f4:c1: 73:38:3e:9f:91:b3:d4:16:41:c0:69:c8:f8:f5:a6:ea:e0:1e: 6a:62:a5:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrp9hPlm+4FUFsX9XQixbm9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmN2RkMzI3NzljMWE5YjI5N2UyOGNiMDM1ZmQ2NzlhYmIx OTE2ZDEwHhcNMjUxMjA0MTUyMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2ZhZmJiYzg4YzY5YmM3OWQ5MDVkZjgyN2FjMWM2NmRhZDNjNjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJ/wBUOCws5z1jCg28H0FK6buNP9 mC8+Nwe72D/Kq8rSazrtH0abZX+IPcevvTFKX1MNvDWzAvd/EzFxYuyQVRX0rJzJ ul0uK9VgwfMU1S757ll5DDvfbrkndckO0KJRxDAuOvdxKozRISdVwXA1+i7ALIDP c3fUsgdNdg6sWsMLjpFrpNIhduQ+bdb5iNbrclXb8bY8Uc1m4lbpRFGzyFSpgHWa 98gDXyR7JIvPj9aefWKyJicPAGGS0fZulcFcPs+NoRW53do3ZjX1G5fwcdo4b8lr K70ayLD5DzGsSkVZY2DjNRgDDe/M1loeTIVHpkuDAuSNyBFx1CPPdI30OwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIf6+7yIxpvHnZBd+CesHGba08Z+MB8GA1UdIwQY MBaAFA990yd5wamyl+KMsDX9Z5q7GRbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi83MjkyMTAtZDcyMC00ZjM4LWI2YmUt YWNmNjZmNzhiMmI3LzEvaF9yN3ZJakdtOGVka0YzNEo2d2NadHJUeG40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi83MjkyMTAtZDcyMC00ZjM4LWI2YmUtYWNmNjZmNzhiMmI3 LzEvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+onMA0G CSqGSIb3DQEBCwUAA4IBAQBEnUYEbZOONY3ROQwrywupE/cWAPc9MBROlL44Roj3 sg5n2Hcja5GKFNpyRis5nCS9b+u1LNgKG/gwWkOYFhxTfS+CusMWbBshRGBvSuMZ gCk0K3dz2TCU5XWQtXIGjViae+qRil2HR/gxyvA+0K3wdrTtKsjUy4hMnTtrCtMP kLbaaUElMaLMW3SYwhCbjDFAOfmC6z/bIavRhbsraWotfuBQjCM+/zlOU99EEJoY 9B7texeJ4YEX8Cl/aU3nY1aApS6ktGfM/yuWa53ZwRKqwjvdXD319mBy1u4bQx61 UXhM6AWVkcpC9MFzOD6fkbPUFkHAacj49abq4B5qYqWC -----END CERTIFICATE-----Generated at Sat Dec 6 05:37:16 2025 by rpki-client